Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
File:                     3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (raw, json)
Hash identifier:          cZQEk19ED8nBpPcMEiTzmHH48XuCB+j97yNNVdES3W4=
Subject key identifier:   A0:E5:D7:32:A9:79:EF:5E:2F:50:9E:9D:60:DF:6E:9F:AD:A9:57:E4
Certificate issuer:       /CN=6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9
Certificate serial:       218E87D9F80F84001731ECAB80338719F2831D46
Authority key identifier: 65:82:E4:C6:A5:C5:A7:EC:00:B3:D0:4A:B9:ED:76:42:00:81:A1:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
Signing time:             Sat 16 Dec 2023 15:04:09 +0000
ROA not before:           Sat 16 Dec 2023 14:59:09 +0000
ROA not after:            Sat 14 Dec 2024 15:04:09 +0000
asID:                     265440
IP address blocks:        168.194.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:87:d9:f8:0f:84:00:17:31:ec:ab:80:33:87:19:f2:83:1d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9
        Validity
            Not Before: Dec 16 14:59:09 2023 GMT
            Not After : Dec 14 15:04:09 2024 GMT
        Subject: CN=A0E5D732A979EF5E2F509E9D60DF6E9FADA957E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:e6:51:d6:58:a8:2b:b3:a8:d0:f2:9e:98:
                    d9:2e:ed:83:05:72:d5:5c:02:e0:9d:a9:04:01:83:
                    7d:e3:00:24:a9:d2:01:04:f4:70:4b:1a:79:41:f6:
                    7f:d7:6b:75:07:5a:97:7b:6a:20:b6:08:dc:24:65:
                    70:c8:5b:30:06:20:8b:4e:6b:ea:4a:71:23:5c:08:
                    48:a4:b7:0e:74:f5:e0:54:ed:70:38:34:5a:5b:0d:
                    2d:c4:b1:ac:1b:f5:17:6a:e2:8d:1f:83:96:f9:e5:
                    39:8e:f9:e5:d0:7e:83:c2:e5:d5:84:15:e6:97:ef:
                    95:d8:b3:9c:eb:86:d7:3a:fc:96:6d:14:4a:89:4a:
                    60:10:01:ae:88:6f:d7:4f:8e:19:ba:50:02:ae:4e:
                    00:34:c8:66:99:b8:28:d3:1a:8e:e7:80:aa:c4:f6:
                    07:b7:af:33:44:7e:57:2d:a5:77:36:3e:09:b0:d7:
                    1e:47:ff:d0:f6:ea:1f:f1:0c:44:ae:e7:62:e4:53:
                    43:7b:2a:4d:b8:17:27:e2:06:11:d3:49:cd:2f:fd:
                    ab:6e:f3:06:b3:f9:6c:db:2c:1f:a2:c3:20:60:9b:
                    62:f4:92:2e:d3:fc:06:f2:c2:d8:1b:57:a0:c4:78:
                    aa:20:d0:c6:35:7c:6e:97:be:99:72:c5:0f:e4:a3:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E5:D7:32:A9:79:EF:5E:2F:50:9E:9D:60:DF:6E:9F:AD:A9:57:E4
            X509v3 Authority Key Identifier:
                keyid:65:82:E4:C6:A5:C5:A7:EC:00:B3:D0:4A:B9:ED:76:42:00:81:A1:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:58:db:e7:89:60:51:6e:ad:0f:24:00:9f:37:38:0f:f0:5b:
         cf:66:aa:27:b9:37:7f:95:37:1a:1a:99:f2:3d:2f:60:f3:90:
         1d:85:3f:73:12:b7:8c:21:89:9b:9d:dd:6e:11:5c:6b:23:11:
         b2:29:de:c0:ec:7d:ae:d7:74:d8:be:cc:d8:e9:ed:76:ed:f7:
         e5:da:b6:a8:e7:3e:12:64:c0:c1:3e:ef:0b:ff:92:01:35:ab:
         97:a1:f2:9f:2a:db:70:60:47:5b:0c:9b:c8:66:54:06:0a:44:
         65:38:53:37:30:3c:4b:af:38:97:eb:be:00:66:9a:9b:e9:9d:
         dd:a0:ba:70:87:db:53:7d:11:41:f2:ed:65:c7:89:17:66:e4:
         d7:cf:fb:62:01:81:91:40:f8:11:21:60:b5:61:ac:7e:04:01:
         b2:38:36:82:62:0e:70:75:aa:da:30:15:e1:2b:9b:2e:6a:b4:
         3a:b3:3d:06:3f:cf:39:c9:0f:02:83:2c:21:b4:78:a5:22:0d:
         c4:56:a8:ad:00:c3:ab:96:8b:5a:df:51:45:06:5d:3a:f4:0e:
         83:65:8b:c3:10:b7:5f:af:b7:e3:3c:c7:ef:0f:07:7e:6e:26:
         37:02:46:48:96:3b:9f:88:82:8b:79:37:12:3b:41:da:3d:79:
         1d:5a:f5:6c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIY6H2fgPhAAXMeyrgDOHGfKDHUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4MkU0QzZBNUM1QTdFQzAwQjNEMDRBQjlFRDc2NDIw
MDgxQTFBOTAeFw0yMzEyMTYxNDU5MDlaFw0yNDEyMTQxNTA0MDlaMDMxMTAvBgNV
BAMTKEEwRTVENzMyQTk3OUVGNUUyRjUwOUU5RDYwREY2RTlGQURBOTU3RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPuZR1lioK7Oo0PKemNku7YMF
ctVcAuCdqQQBg33jACSp0gEE9HBLGnlB9n/Xa3UHWpd7aiC2CNwkZXDIWzAGIItO
a+pKcSNcCEiktw509eBU7XA4NFpbDS3Esawb9Rdq4o0fg5b55TmO+eXQfoPC5dWE
FeaX75XYs5zrhtc6/JZtFEqJSmAQAa6Ib9dPjhm6UAKuTgA0yGaZuCjTGo7ngKrE
9ge3rzNEflctpXc2Pgmw1x5H/9D26h/xDESu52LkU0N7Kk24FyfiBhHTSc0v/atu
8waz+WzbLB+iwyBgm2L0ki7T/AbywtgbV6DEeKog0MY1fG6XvplyxQ/ko8ABAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoOXXMql5714vUJ6dYN9un62pV+QwHwYDVR0j
BBgwFoAUZYLkxqXFp+wAs9BKue12QgCBoakwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlO
elYvMS82NTgyRTRDNkE1QzVBN0VDMDBCM0QwNEFCOUVENzY0MjAwODFBMUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1ODJFNEM2QTVDNUE3RUMw
MEIzRDA0QUI5RUQ3NjQyMDA4MUExQTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZXNjIxWmMzU3U1VXV1eGJTeU1NOUFBcDl2cTZyNHN5aW51dXExQWV5TnpWLzEv
MzEzNjM4MmUzMTM5MzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCyDANBgkqhkiG9w0BAQsFAAOCAQEAiVjb
54lgUW6tDyQAnzc4D/Bbz2aqJ7k3f5U3GhqZ8j0vYPOQHYU/cxK3jCGJm53dbhFc
ayMRsinewOx9rtd02L7M2Ontdu335dq2qOc+EmTAwT7vC/+SATWrl6HynyrbcGBH
WwybyGZUBgpEZThTNzA8S684l+u+AGaam+md3aC6cIfbU30RQfLtZceJF2bk18/7
YgGBkUD4ESFgtWGsfgQBsjg2gmIOcHWq2jAV4SubLmq0OrM9Bj/POckPAoMsIbR4
pSINxFaorQDDq5aLWt9RRQZdOvQOg2WLwxC3X6+34zzH7w8Hfm4mNwJGSJY7n4iC
i3k3EjtB2j15HVr1bA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org