Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235352e302f32342d3234203d3e20323639313934.roa
File:                     3136382e3138312e3235352e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          GfyiXUl1LCph5KprGOzcty+7uDD44UZnSmNoRwYNQ80=
Subject key identifier:   9E:21:70:7D:8D:EB:1D:A4:94:1F:90:8F:81:73:14:64:E7:07:46:9C
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       76E99429CB4EC72B11BE9F10FF81F5D9101EEB9E
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235352e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 19 Aug 2023 21:02:52 +0000
ROA not before:           Sat 19 Aug 2023 20:57:52 +0000
ROA not after:            Sat 17 Aug 2024 21:02:52 +0000
asID:                     269194
IP address blocks:        168.181.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e9:94:29:cb:4e:c7:2b:11:be:9f:10:ff:81:f5:d9:10:1e:eb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Aug 19 20:57:52 2023 GMT
            Not After : Aug 17 21:02:52 2024 GMT
        Subject: CN=9E21707D8DEB1DA4941F908F81731464E707469C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:2f:54:88:00:8a:c8:92:40:38:fa:8b:50:
                    7e:62:9c:77:b6:e5:69:3a:28:0d:9a:fe:89:9b:6a:
                    63:3f:04:cd:c6:5d:75:f6:5f:6d:be:4a:00:a9:14:
                    58:60:a7:89:63:7b:b8:c0:69:50:96:5b:32:4a:52:
                    eb:3a:89:20:4a:32:2c:5b:33:80:b5:7d:c6:6a:86:
                    2c:97:11:1e:29:6b:6a:94:11:9e:8e:20:70:d1:38:
                    b6:77:69:b2:f0:f8:44:94:e4:be:31:f4:31:7a:c0:
                    1f:c9:00:27:86:16:b9:d2:05:85:32:88:f5:09:3a:
                    85:2e:c3:05:9e:9c:9e:19:f4:2b:c8:b3:25:a6:7f:
                    dc:af:72:12:13:20:e3:7a:00:09:9f:d3:d8:d0:49:
                    25:15:1d:cc:65:5b:4d:73:0d:24:10:43:22:2a:85:
                    ef:e1:2a:fa:0c:5a:84:26:90:df:e6:4d:5b:3b:32:
                    f0:63:40:62:06:4e:ed:f7:ff:58:83:ab:39:9c:6c:
                    26:88:16:7b:40:8c:61:a8:e8:13:4f:7e:29:68:c7:
                    42:eb:70:bf:6b:46:61:5f:1f:10:7e:e9:f5:0e:fc:
                    fa:9d:38:38:1a:7f:c9:3d:34:89:89:35:12:c1:fd:
                    45:c5:2f:a2:34:3b:51:61:00:2f:48:61:cf:a5:42:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:70:7D:8D:EB:1D:A4:94:1F:90:8F:81:73:14:64:E7:07:46:9C
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235352e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:62:1b:b4:66:4f:0c:70:37:19:98:c4:df:71:b8:47:0b:fb:
         5d:03:19:a2:7d:8d:dd:c0:af:0b:a5:12:97:30:95:2c:e3:65:
         c7:4a:04:2c:41:a5:39:f2:c9:73:05:75:0d:75:9f:d1:71:f2:
         42:a7:d2:65:46:29:ac:08:d2:a4:17:77:bf:86:16:89:0e:d9:
         ae:6b:a2:77:2e:d3:68:86:22:0d:97:39:a6:00:fe:e7:ef:70:
         31:f0:66:e8:27:65:ab:08:da:e4:94:e4:1d:e6:c4:80:e6:57:
         a9:27:da:4e:20:43:1a:d4:ea:34:ce:f4:1a:80:e1:24:da:09:
         da:5a:4a:bd:8c:d5:ae:8d:f1:b7:c6:de:d2:b5:7f:39:f6:77:
         f7:09:5f:24:d9:45:60:5d:20:a6:cb:b5:89:9a:c0:ad:fd:09:
         cf:9e:fd:ae:f2:54:03:a3:1e:30:18:f5:ef:bc:ad:60:e5:81:
         3c:07:ca:8d:0a:5d:85:b1:3d:98:9c:4e:8f:4c:79:e8:bc:aa:
         7f:5f:7e:21:05:4e:7a:7a:07:c2:2f:41:c1:e9:ed:cf:af:f3:
         4b:e5:65:0b:2a:0d:4e:29:28:b6:67:67:ba:b2:ff:24:3e:5f:
         71:d3:da:e4:d1:f4:4b:6c:c4:1b:0d:4a:1c:98:c3:d8:40:dd:
         43:6e:0f:58
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdumUKctOxysRvp8Q/4H12RAe654wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA4MTkyMDU3NTJaFw0yNDA4MTcyMTAyNTJaMDMxMTAvBgNV
BAMTKDlFMjE3MDdEOERFQjFEQTQ5NDFGOTA4RjgxNzMxNDY0RTcwNzQ2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAS9UiACKyJJAOPqLUH5inHe2
5Wk6KA2a/ombamM/BM3GXXX2X22+SgCpFFhgp4lje7jAaVCWWzJKUus6iSBKMixb
M4C1fcZqhiyXER4pa2qUEZ6OIHDROLZ3abLw+ESU5L4x9DF6wB/JACeGFrnSBYUy
iPUJOoUuwwWenJ4Z9CvIsyWmf9yvchITION6AAmf09jQSSUVHcxlW01zDSQQQyIq
he/hKvoMWoQmkN/mTVs7MvBjQGIGTu33/1iDqzmcbCaIFntAjGGo6BNPfilox0Lr
cL9rRmFfHxB+6fUO/PqdODgaf8k9NImJNRLB/UXFL6I0O1FhAC9IYc+lQmf1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUniFwfY3rHaSUH5CPgXMUZOcHRpwwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzEzNjM4MmUzMTM4MzEyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKi1/zANBgkqhkiG9w0BAQsFAAOCAQEAxmIb
tGZPDHA3GZjE33G4Rwv7XQMZon2N3cCvC6USlzCVLONlx0oELEGlOfLJcwV1DXWf
0XHyQqfSZUYprAjSpBd3v4YWiQ7Zrmuidy7TaIYiDZc5pgD+5+9wMfBm6Cdlqwja
5JTkHebEgOZXqSfaTiBDGtTqNM70GoDhJNoJ2lpKvYzVro3xt8be0rV/OfZ39wlf
JNlFYF0gpsu1iZrArf0Jz579rvJUA6MeMBj177ytYOWBPAfKjQpdhbE9mJxOj0x5
6Lyqf19+IQVOenoHwi9Bwentz6/zS+VlCyoNTikotmdnurL/JD5fcdPa5NH0S2zE
Gw1KHJjD2EDdQ24PWA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:34 2025 by rpki-client