Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa
File:                     3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa (raw, json)
Hash identifier:          49S/5GxuLTCod1RKnRr8z/DpllgitFYPZZf9gfAxbzI=
Subject key identifier:   58:45:05:2D:9F:9B:70:A3:BB:DE:AD:94:DD:FD:C5:3A:8E:B4:F8:36
Certificate issuer:       /CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
Certificate serial:       675B54448524EDE2CB9B30E1CE05E058539528CD
Authority key identifier: C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa
Signing time:             Tue 15 Aug 2023 20:00:27 +0000
ROA not before:           Tue 15 Aug 2023 19:55:27 +0000
ROA not after:            Tue 13 Aug 2024 20:00:27 +0000
asID:                     263592
IP address blocks:        168.121.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5b:54:44:85:24:ed:e2:cb:9b:30:e1:ce:05:e0:58:53:95:28:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
        Validity
            Not Before: Aug 15 19:55:27 2023 GMT
            Not After : Aug 13 20:00:27 2024 GMT
        Subject: CN=5845052D9F9B70A3BBDEAD94DDFDC53A8EB4F836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:b3:36:d1:7e:a0:13:2b:c6:13:4d:ca:68:
                    57:c0:7c:17:5c:da:a9:e5:5a:7f:7d:26:58:c3:32:
                    43:d2:0b:1e:c1:b0:97:bc:0d:26:35:58:ef:a3:19:
                    42:4c:1c:c5:5c:87:89:7c:ce:0f:46:7b:25:b3:cc:
                    88:3e:c4:4e:80:5f:39:e9:35:36:0b:58:2e:f6:84:
                    c2:0a:e8:87:a8:bb:6a:32:41:62:7d:0b:7b:a0:ab:
                    ef:3a:78:05:bd:90:dc:09:e6:34:d3:e2:83:1e:30:
                    83:37:f3:1f:cc:9e:e3:21:6f:8f:cc:c9:75:9e:b2:
                    a6:d7:44:65:9f:85:8b:2e:e8:bc:15:6a:d1:3c:0a:
                    3e:c8:7c:5d:81:93:e2:89:93:9e:8e:1c:00:3d:8a:
                    35:35:4f:44:f9:3d:de:89:3b:a3:38:9e:9a:33:2e:
                    fe:38:1d:07:61:6b:ef:4c:ef:1a:fa:f6:57:48:16:
                    6f:a7:70:39:1c:97:48:51:b3:c8:e4:41:2e:b6:e9:
                    ea:5c:ac:37:67:31:65:0e:59:e7:71:57:cb:d5:f1:
                    b3:ab:19:ea:78:e3:74:8a:04:9f:d9:97:3a:a9:3c:
                    b5:d7:6d:51:e5:e5:d3:0d:ef:8d:27:ca:57:5a:74:
                    01:98:85:31:35:f5:aa:f3:0a:a3:1a:18:12:92:98:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:05:2D:9F:9B:70:A3:BB:DE:AD:94:DD:FD:C5:3A:8E:B4:F8:36
            X509v3 Authority Key Identifier:
                keyid:C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:39:64:ea:46:02:c2:b1:90:a5:5e:a7:7d:43:34:bf:71:
         63:69:64:e3:66:0d:95:32:f2:d3:41:22:1c:28:ba:6f:11:b5:
         ab:b3:19:48:8d:af:68:56:2c:aa:74:2f:50:44:12:23:40:84:
         a5:db:e8:a1:cd:48:12:f2:4f:53:fc:1d:f3:10:e9:5b:0e:ea:
         6f:c6:42:ea:67:92:60:f7:62:1f:d1:dc:cc:e9:01:a5:e5:73:
         23:78:b7:d3:3c:d9:c3:38:88:00:63:eb:59:bd:24:8e:6d:70:
         09:aa:74:8b:45:92:ba:95:98:c6:01:63:a2:58:29:f3:30:be:
         38:b9:aa:9a:07:00:28:72:2e:ec:00:72:5d:dd:f1:41:19:95:
         d8:7b:e9:48:a5:39:08:d8:d7:63:e2:17:cf:f3:70:4a:97:d3:
         4d:72:79:9c:ab:60:94:4b:8f:ae:e8:d7:53:6d:b3:7e:13:bf:
         cb:0c:72:c1:47:d1:82:6a:a8:20:f9:45:df:99:e4:e0:69:37:
         b7:88:85:01:da:ca:8d:3c:62:a4:72:50:d2:65:2c:38:a3:97:
         df:1b:69:86:c5:e6:ab:8f:05:97:f1:2a:b0:1e:76:46:42:2b:
         9a:2d:6d:aa:89:44:81:c1:0f:db:d8:e4:a2:ba:5e:1c:c4:c0:
         6b:73:55:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ1tURIUk7eLLmzDhzgXgWFOVKM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgzMzZFRURGMDI0QkY3Qzg1Njk4ODM4QkJEMjJCMUE1
RTExMzZCODAeFw0yMzA4MTUxOTU1MjdaFw0yNDA4MTMyMDAwMjdaMDMxMTAvBgNV
BAMTKDU4NDUwNTJEOUY5QjcwQTNCQkRFQUQ5NERERkRDNTNBOEVCNEY4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidbM20X6gEyvGE03KaFfAfBdc
2qnlWn99JljDMkPSCx7BsJe8DSY1WO+jGUJMHMVch4l8zg9GeyWzzIg+xE6AXznp
NTYLWC72hMIK6Ieou2oyQWJ9C3ugq+86eAW9kNwJ5jTT4oMeMIM38x/MnuMhb4/M
yXWesqbXRGWfhYsu6LwVatE8Cj7IfF2Bk+KJk56OHAA9ijU1T0T5Pd6JO6M4npoz
Lv44HQdha+9M7xr69ldIFm+ncDkcl0hRs8jkQS626epcrDdnMWUOWedxV8vV8bOr
Gep443SKBJ/ZlzqpPLXXbVHl5dMN740nyldadAGYhTE19arzCqMaGBKSmEAJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWEUFLZ+bcKO73q2U3f3FOo60+DYwHwYDVR0j
BBgwFoAUyDNu7fAkv3yFaYg4u9IrGl4RNrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHV0VlNVN285YjdXNVdwVmFpMmphYmVGTGkxc0RLMzVzTjNLTldhVXc3
ZWYvMC9DODMzNkVFREYwMjRCRjdDODU2OTg4MzhCQkQyMkIxQTVFMTEzNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4MzM2RUVERjAyNEJGN0M4
NTY5ODgzOEJCRDIyQjFBNUUxMTM2QjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1dFZTVTdvOWI3VzVXcFZhaTJqYWJlRkxpMXNESzM1c04zS05XYVV3N2VmLzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5eDANBgkqhkiG9w0BAQsFAAOCAQEAhZw5
ZOpGAsKxkKVep31DNL9xY2lk42YNlTLy00EiHCi6bxG1q7MZSI2vaFYsqnQvUEQS
I0CEpdvooc1IEvJPU/wd8xDpWw7qb8ZC6meSYPdiH9HczOkBpeVzI3i30zzZwziI
AGPrWb0kjm1wCap0i0WSupWYxgFjolgp8zC+OLmqmgcAKHIu7AByXd3xQRmV2Hvp
SKU5CNjXY+IXz/NwSpfTTXJ5nKtglEuPrujXU22zfhO/ywxywUfRgmqoIPlF35nk
4Gk3t4iFAdrKjTxipHJQ0mUsOKOX3xtphsXmq48Fl/EqsB52RkIrmi1tqolEgcEP
29jkorpeHMTAa3NVtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org