Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa
File:                     3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier:          gBzRj5sObGWxKV1CXZMuXxgsZesEGfisGtTcq1MNW34=
Subject key identifier:   88:70:D3:A6:5C:51:F9:42:8F:1C:DE:E7:49:C6:B8:D7:D0:A7:13:7C
Certificate issuer:       /CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Certificate serial:       7AE078BE8CD2AF8D41A9052D2203463408F1CEBD
Authority key identifier: 7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa
Signing time:             Tue 12 Mar 2024 17:38:36 +0000
ROA not before:           Tue 12 Mar 2024 17:33:36 +0000
ROA not after:            Tue 11 Mar 2025 17:38:36 +0000
asID:                     264386
IP address blocks:        168.197.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:78:be:8c:d2:af:8d:41:a9:05:2d:22:03:46:34:08:f1:ce:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAEA8972637476DBD3EB95073B9755AF312D410
        Validity
            Not Before: Mar 12 17:33:36 2024 GMT
            Not After : Mar 11 17:38:36 2025 GMT
        Subject: CN=8870D3A65C51F9428F1CDEE749C6B8D7D0A7137C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:23:09:d2:d6:be:d4:73:fd:25:c2:7a:e9:
                    27:17:ae:b3:0c:cf:51:c7:b2:7f:2a:cd:30:65:ef:
                    91:62:ff:5f:3f:18:d6:e5:a1:14:f6:e1:87:5a:b3:
                    30:5a:04:b8:c0:9a:77:b5:fb:b4:8a:92:aa:7b:ba:
                    ea:70:1a:c9:80:90:af:c0:82:35:9e:f4:a8:74:b6:
                    8a:15:e9:25:eb:be:16:01:2e:52:28:e1:c1:98:1d:
                    ed:81:f5:d8:82:d1:0c:77:ff:b6:a8:7e:a9:4f:bb:
                    63:42:a0:da:08:33:6a:3f:07:e2:55:34:81:ba:bb:
                    b8:15:cb:47:77:c4:cd:19:9f:1d:64:9a:14:a8:e0:
                    d4:54:cd:0b:59:b7:79:e4:1d:8f:52:ea:5f:02:a5:
                    5b:de:38:81:96:21:fc:6f:5d:7f:3b:55:6d:f2:a9:
                    73:38:18:e6:09:49:81:f9:ad:58:b1:72:82:cb:eb:
                    dd:3e:1e:e4:c1:ee:d2:15:5d:85:6a:10:f3:de:f2:
                    b4:f6:d1:c2:d4:3b:d4:be:4d:6e:d5:c5:d5:68:8e:
                    c9:bb:43:2b:55:63:4c:14:1a:c4:81:5d:19:96:5e:
                    88:c5:f5:19:18:70:11:83:d9:cb:22:df:34:9d:2f:
                    15:9f:a1:9e:cd:d6:52:e5:42:3b:89:9c:6d:f2:2b:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:D3:A6:5C:51:F9:42:8F:1C:DE:E7:49:C6:B8:D7:D0:A7:13:7C
            X509v3 Authority Key Identifier:
                keyid:7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/7CAEA8972637476DBD3EB95073B9755AF312D410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:1a:19:3b:b8:0f:f0:24:80:32:a2:05:43:39:5a:f9:46:b5:
         43:44:f4:f2:2a:36:07:70:7d:21:6e:f8:b9:6d:42:24:08:55:
         76:fe:13:2d:db:fd:74:34:ab:41:bc:a9:57:4a:bf:6a:10:12:
         4a:3e:83:e0:3c:05:58:f0:14:b8:4d:f6:72:e3:8c:71:f1:de:
         62:2a:aa:21:74:f5:36:06:5c:92:bf:f4:ad:3f:25:58:2a:57:
         aa:a7:a2:86:3d:e9:b7:1a:68:92:28:54:db:bf:81:8e:cf:3f:
         41:d7:a8:09:81:81:0d:8c:2e:49:2d:5a:2a:d2:a8:6b:48:c9:
         c1:c8:5c:12:70:52:29:99:11:9e:4c:22:cb:16:ca:1e:11:e6:
         f0:a8:7c:64:1b:6e:f7:52:63:8e:99:3f:f5:c0:d2:c7:95:54:
         a1:c9:1b:40:a2:be:d5:b2:5f:37:a0:d8:52:02:6a:2b:2d:44:
         6f:82:14:3b:92:05:0c:64:31:27:6c:e8:d2:2d:a0:6a:05:43:
         ce:e7:03:51:9b:3b:e1:95:8c:2b:13:56:3d:9e:79:52:e6:52:
         f4:2c:4d:81:af:b2:bb:a8:8f:6c:02:05:df:a4:0e:f6:59:85:
         39:9b:89:14:dd:e3:dd:be:e1:25:e4:6a:30:54:1e:fa:e5:98:
         77:5f:ff:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeuB4vozSr41BqQUtIgNGNAjxzr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRUE4OTcyNjM3NDc2REJEM0VCOTUwNzNCOTc1NUFG
MzEyRDQxMDAeFw0yNDAzMTIxNzMzMzZaFw0yNTAzMTExNzM4MzZaMDMxMTAvBgNV
BAMTKDg4NzBEM0E2NUM1MUY5NDI4RjFDREVFNzQ5QzZCOEQ3RDBBNzEzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmiMJ0ta+1HP9JcJ66ScXrrMM
z1HHsn8qzTBl75Fi/18/GNbloRT24YdaszBaBLjAmne1+7SKkqp7uupwGsmAkK/A
gjWe9Kh0tooV6SXrvhYBLlIo4cGYHe2B9diC0Qx3/7aofqlPu2NCoNoIM2o/B+JV
NIG6u7gVy0d3xM0Znx1kmhSo4NRUzQtZt3nkHY9S6l8CpVveOIGWIfxvXX87VW3y
qXM4GOYJSYH5rVixcoLL690+HuTB7tIVXYVqEPPe8rT20cLUO9S+TW7VxdVojsm7
QytVY0wUGsSBXRmWXojF9RkYcBGD2csi3zSdLxWfoZ7N1lLlQjuJnG3yKzNrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiHDTplxR+UKPHN7nSca419CnE3wwHwYDVR0j
BBgwFoAUfK6olyY3R229PrlQc7l1WvMS1BAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC83Q0FFQTg5NzI2Mzc0NzZEQkQzRUI5NTA3M0I5NzU1QUYzMTJENDEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDQUVBODk3MjYzNzQ3NkRC
RDNFQjk1MDczQjk3NTVBRjMxMkQ0MTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxVAwDQYJKoZIhvcNAQELBQADggEBAIkaGTu4
D/AkgDKiBUM5WvlGtUNE9PIqNgdwfSFu+LltQiQIVXb+Ey3b/XQ0q0G8qVdKv2oQ
Eko+g+A8BVjwFLhN9nLjjHHx3mIqqiF09TYGXJK/9K0/JVgqV6qnooY96bcaaJIo
VNu/gY7PP0HXqAmBgQ2MLkktWirSqGtIycHIXBJwUimZEZ5MIssWyh4R5vCofGQb
bvdSY46ZP/XA0seVVKHJG0CivtWyXzeg2FICaistRG+CFDuSBQxkMSds6NItoGoF
Q87nA1GbO+GVjCsTVj2eeVLmUvQsTYGvsruoj2wCBd+kDvZZhTmbiRTd492+4SXk
ajBUHvrlmHdf/xM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org