Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230362e302f32332d3233203d3e20323635313734.roa
File:                     3136372e3234392e3230362e302f32332d3233203d3e20323635313734.roa (raw, json)
Hash identifier:          dhzEtl9C6p17adsnmZin6Bm9uC57vf3JRKF7hWHS54k=
Subject key identifier:   D2:E0:C3:DD:07:2D:6B:BA:25:7D:BD:BC:4F:0C:1D:D3:3D:5A:FA:B6
Certificate issuer:       /CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
Certificate serial:       3849905B643EA25A1335A2EBC853A877FB0FED7E
Authority key identifier: BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230362e302f32332d3233203d3e20323635313734.roa
Signing time:             Wed 08 Mar 2023 12:03:18 +0000
ROA not before:           Wed 08 Mar 2023 11:58:18 +0000
ROA not after:            Wed 06 Mar 2024 12:03:18 +0000
asID:                     265174
IP address blocks:        167.249.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:90:5b:64:3e:a2:5a:13:35:a2:eb:c8:53:a8:77:fb:0f:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Validity
            Not Before: Mar  8 11:58:18 2023 GMT
            Not After : Mar  6 12:03:18 2024 GMT
        Subject: CN=D2E0C3DD072D6BBA257DBDBC4F0C1DD33D5AFAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:fa:b7:8a:4a:ae:08:7c:ac:8c:f4:34:dc:
                    14:8f:72:70:9b:8b:3c:db:bf:3a:3f:c7:12:84:44:
                    84:be:d2:45:76:e0:5b:36:6e:1e:85:05:bb:fc:5e:
                    2e:d1:0f:e9:f2:6e:28:65:29:6b:97:b3:c5:74:c9:
                    ea:d4:63:65:8c:9b:39:9c:59:e9:40:bd:53:00:f0:
                    76:81:75:e6:2a:eb:82:de:13:49:a5:d6:2e:e1:f4:
                    ab:64:0a:88:95:48:cd:be:9f:26:b3:5b:9c:97:f5:
                    00:50:6d:49:c7:b9:c5:2e:40:19:0d:8b:80:33:f1:
                    21:52:2d:81:31:2e:9b:47:5f:5f:b6:4b:00:71:14:
                    d2:80:37:23:4c:41:a1:24:f1:3d:8a:c8:34:b3:89:
                    08:64:be:fc:b8:49:22:40:29:01:b5:56:a6:c7:86:
                    b5:d0:12:43:94:74:d0:e9:04:e3:5e:25:cf:15:b8:
                    48:8d:50:07:5e:5c:07:37:17:04:7e:51:a6:73:0e:
                    e6:3c:85:81:cd:12:f9:d3:a1:d9:91:46:6c:e1:52:
                    dc:87:40:a9:ad:90:27:ae:0a:ad:0a:b1:2e:bd:9e:
                    74:ba:69:f8:ef:86:25:94:46:4a:38:7b:00:2d:fc:
                    51:5d:a1:8b:f7:94:1d:7b:a4:a5:91:77:8f:fe:3c:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:C3:DD:07:2D:6B:BA:25:7D:BD:BC:4F:0C:1D:D3:3D:5A:FA:B6
            X509v3 Authority Key Identifier:
                keyid:BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230362e302f32332d3233203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:84:9d:82:a8:81:c2:4d:e5:96:21:6e:6b:9a:2e:33:01:f9:
         f9:a2:17:dd:49:25:74:d1:87:0d:cc:46:02:a5:82:21:4a:f3:
         8d:b9:7b:c6:d8:52:aa:05:41:76:29:a4:59:e8:f2:19:f2:9b:
         ef:1a:f1:37:78:f0:17:7e:ce:48:ca:14:5d:5f:df:a8:ff:a0:
         c7:22:32:e7:26:4a:64:f5:34:30:40:67:0e:0e:ad:e1:a0:0a:
         8a:11:04:26:c0:a4:65:04:cb:f6:a9:c5:78:ff:f4:90:de:1f:
         e3:8e:ca:04:11:5a:09:60:d9:9e:1c:af:73:3c:1b:cc:8b:92:
         af:94:15:75:b8:65:06:32:fa:d0:60:3b:2c:a1:20:ff:19:f5:
         3b:21:e3:05:17:f8:1b:98:88:6b:51:dc:fa:02:09:75:98:f0:
         d0:2b:ab:27:a7:96:53:27:35:82:e3:c7:9a:8a:9d:f8:d2:3a:
         97:b7:6f:90:19:82:c3:34:56:d6:dc:65:89:69:c8:b9:dc:e3:
         88:fe:e2:7a:6f:b0:74:ea:ac:1e:d6:11:99:61:04:c4:eb:2b:
         0b:ee:64:ff:13:c0:d7:e7:25:19:4b:42:53:27:6b:fb:df:84:
         b7:97:78:5d:2c:2e:34:d3:33:5f:d7:fd:49:c5:4a:c0:1e:b6:
         4c:fe:1f:a3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOEmQW2Q+oloTNaLryFOod/sP7X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRjgzNzNCNjg3MEREMzk3MjcyNEZBREI0QjI0MERD
RTk5RTkwQzAeFw0yMzAzMDgxMTU4MThaFw0yNDAzMDYxMjAzMThaMDMxMTAvBgNV
BAMTKEQyRTBDM0REMDcyRDZCQkEyNTdEQkRCQzRGMEMxREQzM0Q1QUZBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0vq3ikquCHysjPQ03BSPcnCb
izzbvzo/xxKERIS+0kV24Fs2bh6FBbv8Xi7RD+nybihlKWuXs8V0yerUY2WMmzmc
WelAvVMA8HaBdeYq64LeE0ml1i7h9KtkCoiVSM2+nyazW5yX9QBQbUnHucUuQBkN
i4Az8SFSLYExLptHX1+2SwBxFNKANyNMQaEk8T2KyDSziQhkvvy4SSJAKQG1VqbH
hrXQEkOUdNDpBONeJc8VuEiNUAdeXAc3FwR+UaZzDuY8hYHNEvnTodmRRmzhUtyH
QKmtkCeuCq0KsS69nnS6afjvhiWURko4ewAt/FFdoYv3lB17pKWRd4/+PEFBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0uDD3Qcta7olfb28Twwd0z1a+rYwHwYDVR0j
BBgwFoAUur+Dc7aHDdOXJyT620skDc6Z6QwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFOSnZzOFNiTVFIekRHWWloZUptWUtYRmpnV3BRZlRrZFFaMndyOFBK
VzQvMC9CQUJGODM3M0I2ODcwREQzOTcyNzI0RkFEQjRCMjQwRENFOTlFOTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBQkY4MzczQjY4NzBERDM5
NzI3MjRGQURCNEIyNDBEQ0U5OUU5MEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhTkp2czhTYk1RSHpER1lpaGVKbVlLWEZqZ1dwUWZUa2RRWjJ3cjhQSlc0LzAv
MzEzNjM3MmUzMjM0MzkyZTMyMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMxMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaf5zjANBgkqhkiG9w0BAQsFAAOCAQEANoSd
gqiBwk3lliFua5ouMwH5+aIX3UkldNGHDcxGAqWCIUrzjbl7xthSqgVBdimkWejy
GfKb7xrxN3jwF37OSMoUXV/fqP+gxyIy5yZKZPU0MEBnDg6t4aAKihEEJsCkZQTL
9qnFeP/0kN4f447KBBFaCWDZnhyvczwbzIuSr5QVdbhlBjL60GA7LKEg/xn1OyHj
BRf4G5iIa1Hc+gIJdZjw0CurJ6eWUyc1guPHmoqd+NI6l7dvkBmCwzRW1txliWnI
udzjiP7iem+wdOqsHtYRmWEExOsrC+5k/xPA1+clGUtCUydr+9+Et5d4XSwuNNMz
X9f9ScVKwB62TP4fow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org