Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
File:                     3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa (raw, json)
Hash identifier:          IVqW2az/mEOF5kDRoPxiEweSURlaFoGZRB3MFaZEyJY=
Subject key identifier:   F5:EB:A1:6C:F8:15:98:CD:C5:85:D8:CF:99:86:B1:FB:32:04:3F:F8
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       0F8E0F900FC31CAFC0320E6FAEC22B3123DF0F2C
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa
Signing time:             Fri 03 May 2024 21:06:26 +0000
ROA not before:           Fri 03 May 2024 21:01:26 +0000
ROA not after:            Fri 02 May 2025 21:06:26 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8e:0f:90:0f:c3:1c:af:c0:32:0e:6f:ae:c2:2b:31:23:df:0f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:01:26 2024 GMT
            Not After : May  2 21:06:26 2025 GMT
        Subject: CN=F5EBA16CF81598CDC585D8CF9986B1FB32043FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:a8:96:3d:16:c0:6b:5c:13:1f:35:4b:f3:
                    04:b9:8e:16:fc:61:94:eb:8b:25:f1:7f:61:1e:df:
                    b9:38:37:2d:2e:e8:82:5e:a3:a7:3b:e3:08:95:81:
                    88:d9:67:42:63:49:f5:4b:1b:78:69:5f:3c:34:dc:
                    21:cd:7b:c1:b2:7f:a7:7f:29:39:af:8f:12:ce:a0:
                    5c:f4:75:d7:9e:f4:b6:e7:60:9b:8d:42:e0:b8:22:
                    55:d4:73:24:3c:a3:e0:fe:6e:b9:a1:e0:d0:62:49:
                    c0:b6:89:1f:25:68:d4:30:0e:e3:ec:79:a4:93:eb:
                    7d:7a:e3:d1:d6:a9:06:85:08:48:39:21:e5:6e:8e:
                    70:0b:29:cb:7e:0e:44:d8:42:0f:c3:ce:f3:9c:60:
                    a6:24:cf:24:bf:e4:32:ff:cd:a8:24:0f:32:94:7a:
                    cf:19:02:47:b9:70:95:21:e0:18:42:57:34:2e:eb:
                    cd:40:0e:5d:97:ba:d4:c4:60:f0:64:b5:5b:ba:ac:
                    f0:c6:db:a3:38:30:d1:80:7f:81:99:83:a9:3a:1c:
                    dd:62:3e:30:3e:10:f3:c6:e2:20:fd:ab:9c:e3:3c:
                    09:00:b9:6c:68:4d:4c:f4:3f:a8:6e:c5:c1:a2:dc:
                    f7:44:59:a7:57:63:f2:8e:aa:f4:2a:a7:43:f1:c9:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:A1:6C:F8:15:98:CD:C5:85:D8:CF:99:86:B1:FB:32:04:3F:F8
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3234203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:ea:ae:64:18:cc:7e:c8:b4:99:5b:1d:f0:ee:01:e3:09:
         8a:a4:88:19:e4:d0:fd:a0:4e:39:70:f6:a7:79:8e:fc:72:b6:
         3d:a2:f9:7e:a3:47:7a:a8:4b:a9:f6:9f:42:31:95:e1:46:08:
         ef:76:c7:b0:11:6d:9e:0d:2d:fc:ca:f6:16:49:fe:20:a7:51:
         95:31:df:ff:b4:6c:36:88:ac:60:77:c8:64:73:28:26:da:55:
         1f:5b:a7:ea:af:96:be:2c:c8:ea:24:4c:4c:a1:99:0b:0f:3f:
         00:ee:0a:de:6a:52:fb:ef:67:4a:d5:40:83:eb:f6:03:58:55:
         43:7c:36:53:96:18:7a:7e:a7:55:56:21:ac:45:ff:6d:8f:86:
         11:c6:43:5c:c4:0f:37:97:95:11:ed:7a:5d:86:d9:2d:82:26:
         78:e3:66:f9:69:01:c4:1f:6f:80:00:cf:ce:02:7a:4a:73:73:
         3d:1b:3e:19:ee:4e:dd:b5:b2:57:ab:0d:1f:11:44:08:19:e7:
         e4:ae:7d:f9:91:84:b5:3c:8a:e9:07:91:a2:51:9d:0f:91:2a:
         8e:b6:35:d5:f8:de:3b:24:38:80:af:14:6f:f4:6e:f8:f8:24:
         cd:89:93:97:73:12:96:52:9d:77:ce:a6:5b:35:b9:f4:79:bd:
         ae:d2:85:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD44PkA/DHK/AMg5vrsIrMSPfDywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGN0Y4RkRCM0E1RENERUE1MTI2M0ZFMEM2QTI3MkI1
MUYyODAxODAeFw0yNDA1MDMyMTAxMjZaFw0yNTA1MDIyMTA2MjZaMDMxMTAvBgNV
BAMTKEY1RUJBMTZDRjgxNTk4Q0RDNTg1RDhDRjk5ODZCMUZCMzIwNDNGRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hKiWPRbAa1wTHzVL8wS5jhb8
YZTriyXxf2Ee37k4Ny0u6IJeo6c74wiVgYjZZ0JjSfVLG3hpXzw03CHNe8Gyf6d/
KTmvjxLOoFz0ddee9LbnYJuNQuC4IlXUcyQ8o+D+brmh4NBiScC2iR8laNQwDuPs
eaST631649HWqQaFCEg5IeVujnALKct+DkTYQg/DzvOcYKYkzyS/5DL/zagkDzKU
es8ZAke5cJUh4BhCVzQu681ADl2XutTEYPBktVu6rPDG26M4MNGAf4GZg6k6HN1i
PjA+EPPG4iD9q5zjPAkAuWxoTUz0P6huxcGi3PdEWadXY/KOqvQqp0Pxyf+JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9euhbPgVmM3FhdjPmYax+zIEP/gwHwYDVR0j
BBgwFoAUm/f4/bOl3N6lEmP+DGonK1HygBgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjRhZkNMeGtxSHc0c2pOaXNtVE1MNU01dTdUOXVMR0JZbkRtU0w1YTdx
WGYvMC85QkY3RjhGREIzQTVEQ0RFQTUxMjYzRkUwQzZBMjcyQjUxRjI4MDE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRjdGOEZEQjNBNURDREVB
NTEyNjNGRTBDNkEyNzJCNTFGMjgwMTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0YWZDTHhrcUh3NHNqTmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAv
MzEzNjM0MmUzMTM2MzMyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSj1DANBgkqhkiG9w0BAQsFAAOCAQEASyzq
rmQYzH7ItJlbHfDuAeMJiqSIGeTQ/aBOOXD2p3mO/HK2PaL5fqNHeqhLqfafQjGV
4UYI73bHsBFtng0t/Mr2Fkn+IKdRlTHf/7RsNoisYHfIZHMoJtpVH1un6q+WvizI
6iRMTKGZCw8/AO4K3mpS++9nStVAg+v2A1hVQ3w2U5YYen6nVVYhrEX/bY+GEcZD
XMQPN5eVEe16XYbZLYImeONm+WkBxB9vgADPzgJ6SnNzPRs+Ge5O3bWyV6sNHxFE
CBnn5K59+ZGEtTyK6QeRolGdD5EqjrY11fjeOyQ4gK8Ub/Ru+PgkzYmTl3MSllKd
d86mWzW59Hm9rtKFYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org