Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa
File:                     3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa (raw, json)
Hash identifier:          rsqJDDKBphRI9PSsLnV4t9hsav7x3UZ6oZGq3hgQN+o=
Subject key identifier:   92:64:DF:93:23:52:3A:73:4A:BA:DC:1C:80:05:1C:3F:8E:B6:17:54
Certificate issuer:       /CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
Certificate serial:       058EAFCE6903D93A5D15C60D2356E1A01CFF9F28
Authority key identifier: 3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa
Signing time:             Mon 05 Feb 2024 19:47:22 +0000
ROA not before:           Mon 05 Feb 2024 19:42:22 +0000
ROA not after:            Mon 03 Feb 2025 19:47:22 +0000
asID:                     265358
IP address blocks:        168.181.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:af:ce:69:03:d9:3a:5d:15:c6:0d:23:56:e1:a0:1c:ff:9f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D017F8EE6C2E955FAEE4098A99B535F4616DE0F
        Validity
            Not Before: Feb  5 19:42:22 2024 GMT
            Not After : Feb  3 19:47:22 2025 GMT
        Subject: CN=9264DF9323523A734ABADC1C80051C3F8EB61754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:bb:ab:83:f0:8a:57:36:24:4a:64:3f:6f:
                    6b:78:6f:7b:de:b0:8c:c1:da:d8:d8:a8:b9:47:fb:
                    6e:9d:d7:77:4c:23:f0:0f:f2:80:ab:df:83:76:01:
                    6d:1e:5d:5f:0c:1b:1f:3e:f2:b1:07:fe:83:8d:83:
                    16:6f:66:95:7a:d5:e3:70:b2:77:e7:ea:eb:35:4e:
                    5d:e0:7d:2a:28:89:59:08:b9:a1:ba:9a:61:51:73:
                    6f:b1:f1:a8:ba:35:67:aa:19:79:39:d2:5c:11:5c:
                    02:13:77:ee:e7:ee:7d:0a:ac:05:2d:3f:95:76:e4:
                    a4:dc:64:b9:27:51:7a:bb:fc:99:5c:a1:b9:5a:e7:
                    4e:cb:66:f3:13:85:1a:4d:6b:c0:f6:68:86:4b:3f:
                    ba:e8:6b:60:68:fd:91:a9:f8:84:35:8f:fa:03:6d:
                    99:be:bb:39:9f:84:6b:22:dc:82:49:a1:a9:a5:06:
                    46:e4:4c:fc:ed:47:5d:b3:4e:e3:24:8e:56:98:e5:
                    c7:18:62:61:20:e7:7a:4b:5d:39:70:cd:93:d4:0c:
                    d6:2a:fe:a5:ee:95:9d:45:f6:85:18:a6:88:33:6d:
                    21:c3:bd:48:08:57:ef:e9:d3:8a:99:a1:e5:61:72:
                    24:b4:51:43:58:53:26:64:36:86:a2:4c:c5:7c:ff:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:DF:93:23:52:3A:73:4A:BA:DC:1C:80:05:1C:3F:8E:B6:17:54
            X509v3 Authority Key Identifier:
                keyid:3D:01:7F:8E:E6:C2:E9:55:FA:EE:40:98:A9:9B:53:5F:46:16:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D017F8EE6C2E955FAEE4098A99B535F4616DE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/0/3136382e3138312e3234332e302f32342d3234203d3e20323635333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:d4:85:e6:82:ac:f7:5f:bb:a8:e8:2c:7c:2c:34:d9:1a:
         5a:a6:74:bf:58:36:34:fb:22:98:97:d4:93:4e:c1:6f:79:3f:
         a3:96:09:8f:56:95:4e:00:f6:ba:df:4c:d3:07:52:fc:a6:06:
         e1:33:83:b3:f9:db:e4:74:d3:a5:41:00:dc:ef:42:5f:f8:dc:
         d7:75:98:a2:da:da:65:57:67:84:e5:5f:b9:e2:05:ec:24:e4:
         cc:99:0b:b8:ef:e3:f9:01:15:df:2a:73:00:2f:a1:c3:37:82:
         02:59:f9:1e:d6:0d:79:3a:84:9a:39:eb:be:d9:81:26:49:c6:
         09:bc:f9:5a:e7:9e:0a:f7:e9:28:ba:1b:76:72:7e:51:2e:4c:
         b7:cc:df:24:a5:fb:6f:75:50:47:3f:d3:bf:6b:01:23:a3:b9:
         2b:a9:9b:38:ec:72:66:b9:2a:7b:e5:4c:34:a1:f0:d8:44:0b:
         b7:1d:d2:3b:21:23:ef:46:2b:a0:f8:3d:b6:e5:74:d5:77:99:
         d7:70:5c:ec:d4:94:bc:d8:1b:e7:ab:bf:76:2f:b4:de:68:4d:
         49:6f:42:5a:91:11:98:02:c4:da:1e:e7:63:0f:d2:bf:72:c8:
         97:51:39:0f:e1:b1:81:c8:87:77:ce:e9:9c:c2:b9:13:39:d5:
         22:64:51:3b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBY6vzmkD2TpdFcYNI1bhoBz/nygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwMTdGOEVFNkMyRTk1NUZBRUU0MDk4QTk5QjUzNUY0
NjE2REUwRjAeFw0yNDAyMDUxOTQyMjJaFw0yNTAyMDMxOTQ3MjJaMDMxMTAvBgNV
BAMTKDkyNjRERjkzMjM1MjNBNzM0QUJBREMxQzgwMDUxQzNGOEVCNjE3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nrurg/CKVzYkSmQ/b2t4b3ve
sIzB2tjYqLlH+26d13dMI/AP8oCr34N2AW0eXV8MGx8+8rEH/oONgxZvZpV61eNw
snfn6us1Tl3gfSooiVkIuaG6mmFRc2+x8ai6NWeqGXk50lwRXAITd+7n7n0KrAUt
P5V25KTcZLknUXq7/Jlcobla507LZvMThRpNa8D2aIZLP7roa2Bo/ZGp+IQ1j/oD
bZm+uzmfhGsi3IJJoamlBkbkTPztR12zTuMkjlaY5ccYYmEg53pLXTlwzZPUDNYq
/qXulZ1F9oUYpogzbSHDvUgIV+/p04qZoeVhciS0UUNYUyZkNoaiTMV8/zJ3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkmTfkyNSOnNKutwcgAUcP462F1QwHwYDVR0j
BBgwFoAUPQF/jubC6VX67kCYqZtTX0YW3g8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRENzYUN5RGF3MndDbmpudmtvUzhjd2NXRlc2czI0MTY4Z1Y1aTRxRWlE
Z1ovMC8zRDAxN0Y4RUU2QzJFOTU1RkFFRTQwOThBOTlCNTM1RjQ2MTZERTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNEMDE3RjhFRTZDMkU5NTVG
QUVFNDA5OEE5OUI1MzVGNDYxNkRFMEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDc2FDeURhdzJ3Q25qbnZrb1M4Y3djV0ZXNnMyNDE2OGdWNWk0cUVpRGdaLzAv
MzEzNjM4MmUzMTM4MzEyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKi18zANBgkqhkiG9w0BAQsFAAOCAQEAFLDU
heaCrPdfu6joLHwsNNkaWqZ0v1g2NPsimJfUk07Bb3k/o5YJj1aVTgD2ut9M0wdS
/KYG4TODs/nb5HTTpUEA3O9CX/jc13WYotraZVdnhOVfueIF7CTkzJkLuO/j+QEV
3ypzAC+hwzeCAln5HtYNeTqEmjnrvtmBJknGCbz5WueeCvfpKLobdnJ+US5Mt8zf
JKX7b3VQRz/Tv2sBI6O5K6mbOOxyZrkqe+VMNKHw2EQLtx3SOyEj70YroPg9tuV0
1XeZ13Bc7NSUvNgb56u/di+03mhNSW9CWpERmALE2h7nYw/Sv3LIl1E5D+GxgciH
d87pnMK5EznVImRROw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org