Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa
File:                     3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa (raw, json)
Hash identifier:          JHGr5hkKo2TcnqS/SdTtmFn7c+24tE7LhZcujnu4cLY=
Subject key identifier:   AA:A6:62:62:4E:21:DF:CE:61:01:FB:17:ED:35:03:E0:18:C9:A7:4D
Certificate issuer:       /CN=2BBCF2A0D185734F83F19232C290BC973C03F390
Certificate serial:       22ED912A5A69CCF4560C4BFF45F388E54FE652FB
Authority key identifier: 2B:BC:F2:A0:D1:85:73:4F:83:F1:92:32:C2:90:BC:97:3C:03:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BBCF2A0D185734F83F19232C290BC973C03F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa
Signing time:             Tue 26 Mar 2024 19:58:32 +0000
ROA not before:           Tue 26 Mar 2024 19:53:32 +0000
ROA not after:            Tue 25 Mar 2025 19:58:32 +0000
asID:                     265975
IP address blocks:        164.163.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ed:91:2a:5a:69:cc:f4:56:0c:4b:ff:45:f3:88:e5:4f:e6:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BBCF2A0D185734F83F19232C290BC973C03F390
        Validity
            Not Before: Mar 26 19:53:32 2024 GMT
            Not After : Mar 25 19:58:32 2025 GMT
        Subject: CN=AAA662624E21DFCE6101FB17ED3503E018C9A74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:6f:78:de:08:bf:a8:33:23:e1:07:4f:03:
                    de:b0:12:26:2a:c5:59:46:98:c4:87:1f:17:0c:68:
                    08:69:22:63:eb:75:2c:8a:7d:46:24:9f:4c:0d:a9:
                    87:ca:bb:99:02:7c:04:38:e5:0a:88:87:79:64:b7:
                    a6:72:71:d0:ef:be:6d:bd:66:0c:82:06:f0:b3:31:
                    fb:6b:bc:67:11:4c:58:f4:25:97:d0:34:24:bb:07:
                    a2:45:57:6a:b6:5b:22:17:b4:9d:e4:c9:02:18:37:
                    d3:b7:55:51:01:06:12:05:0c:90:ef:fc:f3:69:68:
                    fb:4b:74:d3:c4:87:81:87:cc:02:8c:1b:29:ea:cd:
                    0e:c2:1f:c7:96:68:36:62:29:b0:6d:b3:66:7f:0b:
                    02:f4:c8:f7:4b:55:3f:04:1a:ce:ac:47:20:ac:5b:
                    ee:fc:a4:cb:73:0b:41:30:d7:96:04:02:57:f8:2e:
                    4d:47:fc:96:fa:a7:b9:6e:b3:be:40:ef:1a:f8:4d:
                    8d:aa:39:1f:06:01:50:0f:67:5a:97:f2:a5:2f:2e:
                    e7:fe:e8:ba:d4:df:40:86:a9:f4:67:c4:24:29:08:
                    44:76:cf:49:0a:e8:a7:a9:7f:22:f8:73:72:86:bf:
                    5e:7d:75:13:74:b8:33:97:f4:e3:73:ce:cb:2a:fe:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:62:62:4E:21:DF:CE:61:01:FB:17:ED:35:03:E0:18:C9:A7:4D
            X509v3 Authority Key Identifier:
                keyid:2B:BC:F2:A0:D1:85:73:4F:83:F1:92:32:C2:90:BC:97:3C:03:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2BBCF2A0D185734F83F19232C290BC973C03F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BBCF2A0D185734F83F19232C290BC973C03F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3332203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:05:dc:97:3f:de:08:19:82:3d:80:d0:71:97:62:ad:9e:
         d4:b1:cb:e8:42:2d:ed:48:88:56:bf:86:30:0b:65:ad:04:78:
         66:c3:4d:c2:3f:2b:4c:5e:5a:1f:a3:72:28:c7:34:c9:27:47:
         bf:62:a0:d7:f9:d5:43:6a:1e:84:e0:86:ad:47:18:c9:03:53:
         05:cb:59:0c:b7:d8:d5:9d:40:bc:86:d5:20:6f:fd:65:69:c1:
         f7:a3:8e:bf:47:21:8a:7e:e0:2f:80:82:d7:5c:f6:3c:c8:5d:
         eb:78:0e:6c:6f:b8:03:b0:f1:33:be:e6:93:36:c5:8d:1c:30:
         dc:ff:41:34:39:32:ff:ae:58:9f:f3:08:94:6a:ad:a0:3c:ef:
         d4:3a:e5:4c:14:23:7d:d9:3e:0d:93:e1:4e:8d:09:b9:7d:d5:
         73:3a:95:c7:e3:41:5e:fe:ad:d6:13:8d:22:e1:f0:71:1b:9b:
         ff:f5:28:03:4e:c3:b5:c0:58:8b:69:bc:aa:d7:9a:d8:47:43:
         6c:46:94:20:a1:9d:08:9e:0d:08:02:a1:41:1f:5b:a2:43:dd:
         7a:71:a9:ae:ce:9d:c4:48:33:e9:1c:b0:a2:42:32:c0:9d:29:
         24:cd:7e:24:7f:7c:e7:e0:0e:27:33:d1:fb:02:52:d3:a8:5f:
         69:2a:65:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIu2RKlppzPRWDEv/RfOI5U/mUvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCQ0YyQTBEMTg1NzM0RjgzRjE5MjMyQzI5MEJDOTcz
QzAzRjM5MDAeFw0yNDAzMjYxOTUzMzJaFw0yNTAzMjUxOTU4MzJaMDMxMTAvBgNV
BAMTKEFBQTY2MjYyNEUyMURGQ0U2MTAxRkIxN0VEMzUwM0UwMThDOUE3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Nm943gi/qDMj4QdPA96wEiYq
xVlGmMSHHxcMaAhpImPrdSyKfUYkn0wNqYfKu5kCfAQ45QqIh3lkt6ZycdDvvm29
ZgyCBvCzMftrvGcRTFj0JZfQNCS7B6JFV2q2WyIXtJ3kyQIYN9O3VVEBBhIFDJDv
/PNpaPtLdNPEh4GHzAKMGynqzQ7CH8eWaDZiKbBts2Z/CwL0yPdLVT8EGs6sRyCs
W+78pMtzC0Ew15YEAlf4Lk1H/Jb6p7lus75A7xr4TY2qOR8GAVAPZ1qX8qUvLuf+
6LrU30CGqfRnxCQpCER2z0kK6KepfyL4c3KGv159dRN0uDOX9ONzzssq/i23AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqqZiYk4h385hAfsX7TUD4BjJp00wHwYDVR0j
BBgwFoAUK7zyoNGFc0+D8ZIywpC8lzwD85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BWclVpaFphTHh4Z1FpMWNaOEM5c0Nja1JyYXdqVW0xUXRBN3NZNjJw
ZkYvMC8yQkJDRjJBMEQxODU3MzRGODNGMTkyMzJDMjkwQkM5NzNDMDNGMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCQkNGMkEwRDE4NTczNEY4
M0YxOTIzMkMyOTBCQzk3M0MwM0YzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwVnJVaWhaYUx4eGdRaTFjWjhDOXNDY2tScmF3alVtMVF0QTdzWTYycGZGLzAv
MzEzNjM0MmUzMTM2MzMyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzOTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKko0QwDQYJKoZIhvcNAQELBQADggEBAH9YBdyX
P94IGYI9gNBxl2KtntSxy+hCLe1IiFa/hjALZa0EeGbDTcI/K0xeWh+jcijHNMkn
R79ioNf51UNqHoTghq1HGMkDUwXLWQy32NWdQLyG1SBv/WVpwfejjr9HIYp+4C+A
gtdc9jzIXet4DmxvuAOw8TO+5pM2xY0cMNz/QTQ5Mv+uWJ/zCJRqraA879Q65UwU
I33ZPg2T4U6NCbl91XM6lcfjQV7+rdYTjSLh8HEbm//1KANOw7XAWItpvKrXmthH
Q2xGlCChnQieDQgCoUEfW6JD3Xpxqa7OncRIM+kcsKJCMsCdKSTNfiR/fOfgDicz
0fsCUtOoX2kqZU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org