Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32332d3233203d3e20323634343634.roa
File:                     3133322e3235352e38302e302f32332d3233203d3e20323634343634.roa (raw, json)
Hash identifier:          uBtPIbxfXKuBXJTXteEDHSRD14VEJEN9GIL8/MpU7TU=
Subject key identifier:   CD:D9:DB:A9:C1:F4:4F:6E:84:C1:0D:79:9D:00:EF:E4:2E:59:15:66
Certificate issuer:       /CN=16B2D87F847363ECEB5D3E4C7BB0C96EB8749685
Certificate serial:       7D8A1C636ABA1233D7592D1BEA3291F28FB3FDF0
Authority key identifier: 16:B2:D8:7F:84:73:63:EC:EB:5D:3E:4C:7B:B0:C9:6E:B8:74:96:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32332d3233203d3e20323634343634.roa
Signing time:             Sat 16 Jul 2022 19:16:38 +0000
ROA not before:           Sat 16 Jul 2022 19:11:38 +0000
ROA not after:            Sun 16 Jul 2023 19:16:38 +0000
asID:                     264464
IP address blocks:        132.255.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8a:1c:63:6a:ba:12:33:d7:59:2d:1b:ea:32:91:f2:8f:b3:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B2D87F847363ECEB5D3E4C7BB0C96EB8749685
        Validity
            Not Before: Jul 16 19:11:38 2022 GMT
            Not After : Jul 16 19:16:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:90:d0:c5:d6:61:7f:44:bc:92:e3:b2:b9:
                    c3:ef:76:d3:53:c3:01:76:7c:06:2e:45:a4:7f:3a:
                    1a:71:89:d9:06:b3:89:0b:32:98:da:08:56:1e:a5:
                    90:b7:25:4a:9a:19:65:b4:f6:54:aa:02:fe:52:15:
                    30:a5:46:5c:e6:a4:bc:c6:3d:ec:fb:00:39:33:51:
                    42:aa:0e:9e:25:0e:14:34:eb:84:16:1c:65:dd:c7:
                    c4:85:9c:c4:7e:bb:c7:4e:07:54:0d:a8:1c:b9:63:
                    b9:20:30:60:1a:79:f4:f2:5c:02:d2:47:f5:26:43:
                    f0:fa:fc:a2:29:4d:42:13:59:33:2d:a8:f1:a3:85:
                    3e:af:06:f0:b9:d1:eb:cd:a1:f5:49:9e:5d:07:24:
                    9c:41:bf:dc:be:0d:99:6a:aa:d8:64:d1:96:6b:1a:
                    90:da:ca:2e:be:91:7b:69:08:b9:65:c7:cc:60:b0:
                    03:17:3a:64:d1:00:6c:6b:fa:da:47:03:66:51:45:
                    51:d9:0b:b2:6a:8c:eb:a5:24:96:22:d1:8d:c7:d2:
                    d3:b4:9f:7e:2a:85:cc:1f:e8:aa:dd:6a:db:39:06:
                    6f:aa:b2:3a:30:86:02:a3:5f:63:21:72:73:0a:d0:
                    cb:12:6e:c4:82:3e:dc:02:19:63:da:43:12:f5:61:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:DB:A9:C1:F4:4F:6E:84:C1:0D:79:9D:00:EF:E4:2E:59:15:66
            X509v3 Authority Key Identifier:
                keyid:16:B2:D8:7F:84:73:63:EC:EB:5D:3E:4C:7B:B0:C9:6E:B8:74:96:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16B2D87F847363ECEB5D3E4C7BB0C96EB8749685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32332d3233203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:61:d2:ad:25:a9:64:2c:a7:ac:94:6d:b4:ee:53:8d:73:c9:
         bc:de:0f:f9:81:fd:74:78:76:d4:1d:ff:3a:e1:17:cc:f6:91:
         67:9b:cb:63:9d:fe:cf:78:69:25:7d:e4:62:d0:f7:2b:ed:d8:
         f6:e5:c3:66:ce:c3:ce:8e:d6:44:06:18:82:84:46:b1:c6:3e:
         90:8c:83:69:9e:3a:94:49:47:d0:16:3f:15:6c:b8:a1:a5:a0:
         45:b6:6e:1f:f9:fa:df:45:f8:b1:b5:28:48:32:30:83:af:35:
         7e:5b:d1:eb:60:ef:64:a9:86:19:ab:9e:19:e7:85:bd:19:42:
         94:5d:a3:d4:e3:6b:75:10:72:92:d4:be:d6:06:3b:a4:7d:70:
         b3:de:a6:ee:32:9f:00:83:64:56:f1:70:3d:5a:16:3a:4c:71:
         47:27:7a:4e:c8:cc:e3:10:8b:3b:02:ba:fb:28:f3:b6:2b:6d:
         f5:e3:0a:00:39:a8:04:c6:b5:83:94:83:10:d4:c4:d9:65:68:
         c7:03:bb:df:d6:6e:0a:82:ba:da:c9:79:e1:81:04:74:fe:17:
         c0:6d:26:1b:77:d3:cf:33:b4:8d:c8:de:f1:3b:42:32:13:c6:
         d4:7c:d6:88:40:08:dd:09:6d:be:5d:5e:d1:52:2b:55:e3:64:
         4a:ba:e7:b6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfYocY2q6EjPXWS0b6jKR8o+z/fAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCMkQ4N0Y4NDczNjNFQ0VCNUQzRTRDN0JCMEM5NkVC
ODc0OTY4NTAeFw0yMjA3MTYxOTExMzhaFw0yMzA3MTYxOTE2MzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUU5QTkwRDBDNUQ2NjE3RjQ0
QkM5MkUzQjJCOUMzRUY3NkQzNTNDMzAxNzY3QzA2MkU0NUE0N0YzQTFBNzE4OUQ5
MDZCMzg5MEIzMjk4REEwODU2MUVBNTkwQjcyNTRBOUExOTY1QjRGNjU0QUEwMkZF
NTIxNTMwQTU0NjVDRTZBNEJDQzYzREVDRkIwMDM5MzM1MTQyQUEwRTlFMjUwRTE0
MzRFQjg0MTYxQzY1RERDN0M0ODU5Q0M0N0VCQkM3NEUwNzU0MERBODFDQjk2M0I5
MjAzMDYwMUE3OUY0RjI1QzAyRDI0N0Y1MjY0M0YwRkFGQ0EyMjk0RDQyMTM1OTMz
MkRBOEYxQTM4NTNFQUYwNkYwQjlEMUVCQ0RBMUY1NDk5RTVEMDcyNDlDNDFCRkRD
QkUwRDk5NkFBQUQ4NjREMTk2NkIxQTkwREFDQTJFQkU5MTdCNjkwOEI5NjVDN0ND
NjBCMDAzMTczQTY0RDEwMDZDNkJGQURBNDcwMzY2NTE0NTUxRDkwQkIyNkE4Q0VC
QTUyNDk2MjJEMThEQzdEMkQzQjQ5RjdFMkE4NUNDMUZFOEFBREQ2QURCMzkwNjZG
QUFCMjNBMzA4NjAyQTM1RjYzMjE3MjczMEFEMENCMTI2RUM0ODIzRURDMDIxOTYz
REE0MzEyRjU2MTA5RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnpqQ0MXWYX9EvJLjsrnD73bTU8MBdnwGLkWkfzoacYnZBrOJCzKY
2ghWHqWQtyVKmhlltPZUqgL+UhUwpUZc5qS8xj3s+wA5M1FCqg6eJQ4UNOuEFhxl
3cfEhZzEfrvHTgdUDagcuWO5IDBgGnn08lwC0kf1JkPw+vyiKU1CE1kzLajxo4U+
rwbwudHrzaH1SZ5dByScQb/cvg2ZaqrYZNGWaxqQ2souvpF7aQi5ZcfMYLADFzpk
0QBsa/raRwNmUUVR2QuyaozrpSSWItGNx9LTtJ9+KoXMH+iq3WrbOQZvqrI6MIYC
o19jIXJzCtDLEm7Egj7cAhlj2kMS9WEJ8wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FM3Z26nB9E9uhMENeZ0A7+QuWRVmMB8GA1UdIwQYMBaAFBay2H+Ec2Ps610+THuw
yW64dJaFMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RtQll0R0Y4S2hES3JK
d3Y5OXF6RUhjd1V5OVRxNml5Q2tEYmJ0MVpoNExtLzAvMTZCMkQ4N0Y4NDczNjNF
Q0VCNUQzRTRDN0JCMEM5NkVCODc0OTY4NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNkIyRDg3Rjg0NzM2M0VDRUI1RDNFNEM3QkIwQzk2RUI4NzQ5
Njg1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EbUJZdEdGOEtoREtySnd2OTlx
ekVIY3dVeTlUcTZpeUNrRGJidDFaaDRMbS8wLzMxMzMzMjJlMzIzNTM1MmUzODMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0MzQzNjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
hP9QMA0GCSqGSIb3DQEBCwUAA4IBAQCSYdKtJalkLKeslG207lONc8m83g/5gf10
eHbUHf864RfM9pFnm8tjnf7PeGklfeRi0Pcr7dj25cNmzsPOjtZEBhiChEaxxj6Q
jINpnjqUSUfQFj8VbLihpaBFtm4f+frfRfixtShIMjCDrzV+W9HrYO9kqYYZq54Z
54W9GUKUXaPU42t1EHKS1L7WBjukfXCz3qbuMp8Ag2RW8XA9WhY6THFHJ3pOyMzj
EIs7Arr7KPO2K2314woAOagExrWDlIMQ1MTZZWjHA7vf1m4KgrrayXnhgQR0/hfA
bSYbd9PPM7SNyN7xO0IyE8bUfNaIQAjdCW2+XV7RUitV42RKuue2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org