Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131352e302f32342d3234203d3e20323635313837.roa
File:                     3136382e39302e3131352e302f32342d3234203d3e20323635313837.roa (raw, json)
Hash identifier:          +1xtjT6SBLsRC0UA668jY64RjnV49d3K6bu9VKq5vr4=
Subject key identifier:   D2:2C:D3:DC:45:AB:0B:12:A0:BB:53:7A:8D:F4:44:DD:3E:C9:02:9E
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       153E32AE2C47D13E190ACBC0336D6CFD8ABBFEB6
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131352e302f32342d3234203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 01:00:00 +0000
ROA not before:           Fri 28 Jul 2023 00:55:00 +0000
ROA not after:            Fri 26 Jul 2024 01:00:00 +0000
asID:                     265187
IP address blocks:        168.90.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:32:ae:2c:47:d1:3e:19:0a:cb:c0:33:6d:6c:fd:8a:bb:fe:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 00:55:00 2023 GMT
            Not After : Jul 26 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5c:c1:ac:94:b8:31:d1:78:bd:cc:f0:58:1a:
                    78:39:32:95:c7:53:8a:6a:01:b3:c4:e1:6c:09:d8:
                    71:a0:69:db:39:0c:ae:7b:12:63:42:0a:d7:54:90:
                    51:64:72:be:83:14:e7:dc:ea:ac:92:d0:74:34:ea:
                    27:30:a7:e9:46:f7:d8:ac:ed:56:64:78:27:42:81:
                    f4:c8:a2:35:10:ea:ec:af:5f:e9:eb:a0:da:74:10:
                    f2:50:63:80:06:fe:3b:d7:99:1b:e0:c3:a8:00:4d:
                    23:e7:27:15:70:69:d0:db:ec:14:ac:bb:bd:a8:72:
                    4b:f3:6f:47:f0:6c:ba:7e:0c:bd:22:4c:ec:68:2d:
                    4e:7d:58:19:4c:d1:ad:f0:dd:34:ca:ee:04:6f:91:
                    f1:a2:77:07:6a:7b:ff:7c:08:8f:dc:20:61:73:e8:
                    c7:31:19:84:eb:92:89:80:8f:55:4a:14:04:e6:f5:
                    78:69:76:0f:ca:5e:c1:ab:28:19:7f:e8:57:0d:f4:
                    63:dc:e0:cf:df:05:62:d8:25:32:ff:56:96:a9:be:
                    e2:e4:3b:ed:c4:fe:7d:2e:0f:86:8f:78:01:b2:e0:
                    4a:ff:96:10:3b:e9:a2:91:0b:26:74:a0:73:47:5c:
                    9f:27:8c:1f:b3:51:cb:91:96:5e:fb:e3:74:b5:67:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2C:D3:DC:45:AB:0B:12:A0:BB:53:7A:8D:F4:44:DD:3E:C9:02:9E
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/3136382e39302e3131352e302f32342d3234203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:45:71:8e:dc:cd:5b:9e:ea:f8:7f:be:d6:c1:36:93:7d:
         90:c8:51:53:d2:41:37:6d:ed:3c:0e:78:c4:d3:27:c6:d5:e6:
         b7:4d:bb:52:e8:35:f9:47:59:34:5d:84:76:94:3e:44:75:57:
         b3:7b:dc:22:15:6a:d1:ba:8a:ed:ac:b4:01:03:c5:86:0d:6e:
         f0:71:f6:9e:c0:18:48:35:f2:f2:8b:88:de:01:01:c5:8a:95:
         76:2f:84:35:61:c6:88:c9:26:3d:34:9c:6b:4d:a4:00:b9:74:
         ae:1a:24:4b:a8:76:1d:70:68:ce:a1:c7:b5:b7:65:6c:ae:67:
         bd:38:b9:ac:92:16:16:46:09:ea:99:7c:68:d1:1c:e0:83:71:
         44:39:b4:bb:bd:c4:12:bf:19:b3:d9:53:58:7f:e2:8a:f3:3c:
         25:25:3e:99:57:bd:61:75:74:06:95:ae:0a:e6:e1:40:2b:ce:
         a3:d2:89:bf:16:23:9d:3b:14:e5:94:b6:2b:d7:6f:45:77:8e:
         c2:51:47:ae:3f:72:b1:33:09:1d:73:bb:14:23:af:bb:fa:31:
         a5:67:5f:f7:95:db:1e:ba:62:00:56:c7:4b:4f:2c:fe:72:9e:
         11:f5:e9:0c:db:96:29:0c:5b:71:5e:e9:f9:ed:8d:a6:d7:0f:
         d3:cd:8c:e2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFT4yrixH0T4ZCsvAM21s/Yq7/rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNzUzNzAyMjFFMjYxODFGMzlGQjQwN0U2MzA2NERF
QjIwRTZFRTAeFw0yMzA3MjgwMDU1MDBaFw0yNDA3MjYwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDg1Q0MxQUM5NEI4MzFEMTc4
QkRDQ0YwNTgxQTc4MzkzMjk1Qzc1MzhBNkEwMUIzQzRFMTZDMDlEODcxQTA2OURC
MzkwQ0FFN0IxMjYzNDIwQUQ3NTQ5MDUxNjQ3MkJFODMxNEU3RENFQUFDOTJEMDc0
MzRFQTI3MzBBN0U5NDZGN0Q4QUNFRDU2NjQ3ODI3NDI4MUY0QzhBMjM1MTBFQUVD
QUY1RkU5RUJBMERBNzQxMEYyNTA2MzgwMDZGRTNCRDc5OTFCRTBDM0E4MDA0RDIz
RTcyNzE1NzA2OUQwREJFQzE0QUNCQkJEQTg3MjRCRjM2RjQ3RjA2Q0JBN0UwQ0JE
MjI0Q0VDNjgyRDRFN0Q1ODE5NENEMUFERjBERDM0Q0FFRTA0NkY5MUYxQTI3NzA3
NkE3QkZGN0MwODhGREMyMDYxNzNFOEM3MzExOTg0RUI5Mjg5ODA4RjU1NEExNDA0
RTZGNTc4Njk3NjBGQ0E1RUMxQUIyODE5N0ZFODU3MERGNDYzRENFMENGREYwNTYy
RDgyNTMyRkY1Njk2QTlCRUUyRTQzQkVEQzRGRTdEMkUwRjg2OEY3ODAxQjJFMDRB
RkY5NjEwM0JFOUEyOTEwQjI2NzRBMDczNDc1QzlGMjc4QzFGQjM1MUNCOTE5NjVF
RkJFMzc0QjU2NzYxMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2FzBrJS4MdF4vczwWBp4OTKVx1OKagGzxOFsCdhxoGnbOQyuexJj
QgrXVJBRZHK+gxTn3OqsktB0NOonMKfpRvfYrO1WZHgnQoH0yKI1EOrsr1/p66Da
dBDyUGOABv4715kb4MOoAE0j5ycVcGnQ2+wUrLu9qHJL829H8Gy6fgy9IkzsaC1O
fVgZTNGt8N00yu4Eb5HxoncHanv/fAiP3CBhc+jHMRmE65KJgI9VShQE5vV4aXYP
yl7BqygZf+hXDfRj3ODP3wVi2CUy/1aWqb7i5DvtxP59Lg+Gj3gBsuBK/5YQO+mi
kQsmdKBzR1yfJ4wfs1HLkZZe++N0tWdhCQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNIs09xFqwsSoLtTeo30RN0+yQKeMB8GA1UdIwQYMBaAFIEXU3AiHiYYHzn7QH5j
Bk3rIObuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3RkhRN2JZMzdWeFZK
bzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAvODExNzUzNzAyMjFFMjYx
ODFGMzlGQjQwN0U2MzA2NERFQjIwRTZFRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTE3NTM3MDIyMUUyNjE4MUYzOUZCNDA3RTYzMDY0REVCMjBF
NkVFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN0ZIUTdiWTM3VnhWSm8zZEVW
anBQYXB4cGJ6SGtNTGdRS1R6bkdiUWF4Yi8wLzMxMzYzODJlMzkzMDJlMzEzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzEzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qFpzMA0GCSqGSIb3DQEBCwUAA4IBAQCqrUVxjtzNW57q+H++1sE2k32QyFFT0kE3
be08DnjE0yfG1ea3TbtS6DX5R1k0XYR2lD5EdVeze9wiFWrRuortrLQBA8WGDW7w
cfaewBhINfLyi4jeAQHFipV2L4Q1YcaIySY9NJxrTaQAuXSuGiRLqHYdcGjOoce1
t2Vsrme9OLmskhYWRgnqmXxo0Rzgg3FEObS7vcQSvxmz2VNYf+KK8zwlJT6ZV71h
dXQGla4K5uFAK86j0om/FiOdOxTllLYr129Fd47CUUeuP3KxMwkdc7sUI6+7+jGl
Z1/3ldseumIAVsdLTyz+cp4R9ekM25YpDFtxXun57Y2m1w/TzYzi
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org