Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3233203d3e20323632343933.roa
File:                     3136382e3132312e3134382e302f32322d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          jd7gWmIt3u5p7m+/cbzGPAVRQy1LrmH2LwctlkEUYGs=
Subject key identifier:   AF:B8:E1:E2:56:D5:97:EF:14:92:14:52:57:9D:4A:FE:6B:EA:A7:52
Certificate issuer:       /CN=7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3
Certificate serial:       12CA6C774B39275D96A407DE2709A05114BFB1C1
Authority key identifier: 7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3233203d3e20323632343933.roa
Signing time:             Tue 16 May 2023 16:35:08 +0000
ROA not before:           Tue 16 May 2023 16:30:08 +0000
ROA not after:            Tue 14 May 2024 16:35:08 +0000
asID:                     262493
IP address blocks:        168.121.148.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ca:6c:77:4b:39:27:5d:96:a4:07:de:27:09:a0:51:14:bf:b1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3
        Validity
            Not Before: May 16 16:30:08 2023 GMT
            Not After : May 14 16:35:08 2024 GMT
        Subject: CN=AFB8E1E256D597EF14921452579D4AFE6BEAA752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:31:1d:69:89:12:9d:6d:c9:a2:90:76:cf:
                    da:fa:ca:ed:c2:a1:1b:5b:56:2c:48:3b:71:11:ab:
                    7d:9c:9e:3b:5c:a7:9a:76:ca:62:09:d8:e7:b9:de:
                    90:fa:83:9c:a0:bb:fb:60:ee:57:d5:af:f3:77:39:
                    d9:1c:f1:83:6e:ea:93:a6:93:8a:5a:9c:56:65:f8:
                    f5:50:eb:f0:a0:13:64:20:50:10:6a:d1:0d:f3:56:
                    cf:ef:7f:bf:3d:2c:2e:4b:f9:c9:4d:c7:c3:ff:91:
                    05:46:8a:58:ee:a5:a5:82:4e:33:e2:4f:fc:e9:06:
                    38:a8:cc:58:af:68:bb:89:e4:52:8f:33:6a:d3:80:
                    50:93:73:cd:5d:8a:7d:a1:c2:97:0b:81:7a:21:f2:
                    c4:0b:10:7c:d4:74:04:b4:38:b2:4e:29:eb:b5:f1:
                    10:f3:77:29:7b:c6:b2:2c:f8:13:92:00:14:1a:e9:
                    bd:41:75:2e:a4:5a:0b:e0:01:b6:69:df:c5:70:d0:
                    af:9a:ee:91:dd:96:48:92:ed:c1:b1:77:16:a9:95:
                    17:6f:b0:e4:a9:6a:13:0c:e3:ad:a8:d3:1e:c0:1d:
                    2b:b3:21:37:36:cd:5a:c8:2b:46:dc:54:9f:be:f8:
                    4c:30:06:54:34:4d:3a:cc:d7:98:11:f5:c8:b1:ec:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B8:E1:E2:56:D5:97:EF:14:92:14:52:57:9D:4A:FE:6B:EA:A7:52
            X509v3 Authority Key Identifier:
                keyid:7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3136382e3132312e3134382e302f32322d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:19:31:1b:e8:53:75:13:61:32:94:89:30:06:b6:32:39:e4:
         cc:28:45:80:ac:e8:db:d6:f1:b8:ca:85:7c:d0:e6:e9:87:af:
         c4:78:f0:b9:dc:62:d4:41:96:53:3d:58:2b:bd:d1:a9:1c:bd:
         0f:98:23:92:07:7e:37:42:c6:5c:f2:8f:c7:eb:21:ac:41:78:
         f9:99:9d:3b:f7:c2:0e:bf:fa:80:6d:f4:71:9c:0d:be:ce:e5:
         54:cd:10:9f:fd:f3:aa:30:8e:bb:15:22:72:ec:e5:1b:8b:0d:
         f2:55:b1:22:b1:64:b1:9f:df:2a:41:dc:3e:b6:bb:1d:dc:b7:
         25:a7:7f:bb:f5:49:57:e2:0a:ed:ec:85:cb:84:b6:a9:63:00:
         54:9e:72:19:70:d7:8d:56:68:b5:82:4a:be:bd:30:9b:80:e1:
         67:9a:fd:e2:a9:10:6b:cd:34:55:2e:57:99:43:6d:df:d9:65:
         8c:84:48:7a:2d:e3:30:d7:56:28:30:8c:78:f9:9b:03:f1:cd:
         85:07:d5:56:e4:d3:04:d8:34:fd:12:55:f2:c5:23:e3:c8:6e:
         8d:3e:02:94:b3:29:ce:4b:90:b9:ae:8a:a8:58:0c:ec:67:f1:
         1c:31:76:23:c8:78:a5:a3:b1:e1:b6:9a:88:2e:bb:00:a0:f1:
         58:10:b2:bd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEspsd0s5J12WpAfeJwmgURS/scEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QzRDZCQzRFMkU5QTUzMkJBNzgzMkFBQjk2NUE3MUYz
MkI4ODZCMzAeFw0yMzA1MTYxNjMwMDhaFw0yNDA1MTQxNjM1MDhaMDMxMTAvBgNV
BAMTKEFGQjhFMUUyNTZENTk3RUYxNDkyMTQ1MjU3OUQ0QUZFNkJFQUE3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/TEdaYkSnW3JopB2z9r6yu3C
oRtbVixIO3ERq32cnjtcp5p2ymIJ2Oe53pD6g5ygu/tg7lfVr/N3Odkc8YNu6pOm
k4panFZl+PVQ6/CgE2QgUBBq0Q3zVs/vf789LC5L+clNx8P/kQVGiljupaWCTjPi
T/zpBjiozFivaLuJ5FKPM2rTgFCTc81din2hwpcLgXoh8sQLEHzUdAS0OLJOKeu1
8RDzdyl7xrIs+BOSABQa6b1BdS6kWgvgAbZp38Vw0K+a7pHdlkiS7cGxdxaplRdv
sOSpahMM462o0x7AHSuzITc2zVrIK0bcVJ+++EwwBlQ0TTrM15gR9cix7DG/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr7jh4lbVl+8UkhRSV51K/mvqp1IwHwYDVR0j
BBgwFoAUfT1rxOLppTK6eDKquWWnHzK4hrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC83RDNENkJDNEUyRTlBNTMyQkE3ODMyQUFCOTY1QTcxRjMyQjg4NkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdEM0Q2QkM0RTJFOUE1MzJC
QTc4MzJBQUI5NjVBNzFGMzJCODg2QjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5lDANBgkqhkiG9w0BAQsFAAOCAQEAmBkx
G+hTdRNhMpSJMAa2MjnkzChFgKzo29bxuMqFfNDm6YevxHjwudxi1EGWUz1YK73R
qRy9D5gjkgd+N0LGXPKPx+shrEF4+ZmdO/fCDr/6gG30cZwNvs7lVM0Qn/3zqjCO
uxUicuzlG4sN8lWxIrFksZ/fKkHcPra7Hdy3Jad/u/VJV+IK7eyFy4S2qWMAVJ5y
GXDXjVZotYJKvr0wm4DhZ5r94qkQa800VS5XmUNt39lljIRIei3jMNdWKDCMePmb
A/HNhQfVVuTTBNg0/RJV8sUj48hujT4ClLMpzkuQua6KqFgM7GfxHDF2I8h4paOx
4baaiC67AKDxWBCyvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org