Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa
File:                     3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa (raw, json)
Hash identifier:          KU3q4ow8iMwNRbukMtG7KZKLD3ooGwJYLCmCi7KjJus=
Subject key identifier:   D2:71:1D:17:1D:A6:CB:B3:C8:4E:15:86:B1:30:77:98:6F:19:CB:ED
Certificate issuer:       /CN=B3354BD7E050337656367BDB511F6A3F55FEB98F
Certificate serial:       18EFF0127CCC04873592B6FC29D7D5DDC6501113
Authority key identifier: B3:35:4B:D7:E0:50:33:76:56:36:7B:DB:51:1F:6A:3F:55:FE:B9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa
Signing time:             Sat 20 May 2023 12:29:00 +0000
ROA not before:           Sat 20 May 2023 12:24:00 +0000
ROA not after:            Sat 18 May 2024 12:29:00 +0000
asID:                     265302
IP address blocks:        168.121.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ef:f0:12:7c:cc:04:87:35:92:b6:fc:29:d7:d5:dd:c6:50:11:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3354BD7E050337656367BDB511F6A3F55FEB98F
        Validity
            Not Before: May 20 12:24:00 2023 GMT
            Not After : May 18 12:29:00 2024 GMT
        Subject: CN=D2711D171DA6CBB3C84E1586B13077986F19CBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:0c:94:8f:aa:4c:41:ea:75:ce:0b:a0:2e:
                    fc:67:56:bf:ab:47:89:0f:98:c3:00:60:19:56:74:
                    1e:d6:da:bc:65:ef:ff:41:32:b4:99:0f:81:79:03:
                    e3:07:33:c2:76:4e:6a:f8:02:c2:a1:5a:a5:bc:3f:
                    e3:b4:0b:c5:fd:c0:3e:f1:b6:fc:22:d0:ba:75:d9:
                    dc:0f:be:98:54:85:a4:83:48:ee:c7:3b:56:1a:f4:
                    e3:a0:19:ca:ee:4a:51:dd:4e:da:4f:e2:ce:74:05:
                    10:d7:b9:02:df:65:99:0d:35:b4:c4:e7:73:15:43:
                    98:97:d9:ba:6d:64:4e:ad:10:2b:21:37:e5:6c:1b:
                    26:67:51:78:4f:71:3b:70:6d:89:0f:c3:c2:ad:eb:
                    83:cc:4f:78:dc:31:91:6f:40:c7:37:58:06:9c:93:
                    9f:7f:a6:3a:4d:39:89:a8:96:75:bb:43:71:d9:fe:
                    f8:45:bf:8c:29:4b:2c:15:05:2b:7b:1b:a0:81:53:
                    5f:c3:f5:0e:3b:22:19:a2:70:65:53:c4:0d:52:79:
                    db:1e:1d:19:a9:04:9f:27:97:03:11:8d:74:3d:7a:
                    c4:f2:45:bc:81:58:83:d5:c3:82:c0:8e:67:d1:45:
                    19:1c:2f:6d:d9:99:31:d4:7b:2d:b5:8b:cd:16:17:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:71:1D:17:1D:A6:CB:B3:C8:4E:15:86:B1:30:77:98:6F:19:CB:ED
            X509v3 Authority Key Identifier:
                keyid:B3:35:4B:D7:E0:50:33:76:56:36:7B:DB:51:1F:6A:3F:55:FE:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:6b:f4:50:86:01:41:f2:a3:e6:db:69:7a:d9:c4:aa:2a:
         5e:9e:23:b3:7a:1f:1b:70:91:b9:a8:e4:51:d5:36:77:d9:05:
         82:1a:c5:a4:31:0e:bb:f7:c4:e3:e5:42:0b:3d:a4:9a:ad:85:
         4b:d1:07:b0:18:58:77:cd:9d:e2:34:10:b1:7c:44:0e:88:b8:
         1b:99:12:a8:ee:8e:cf:c0:85:8d:b9:4f:98:9c:4a:2e:27:2d:
         c8:65:73:36:86:69:be:8b:d7:07:8e:f0:01:d5:b7:bf:7e:0f:
         1b:e0:ac:e1:ee:49:73:79:6e:56:ea:00:8c:8c:85:0f:9a:2f:
         18:f4:f3:9b:7f:4f:eb:1d:59:c7:f1:47:3d:54:8c:84:43:a2:
         de:f4:72:8b:a2:19:40:d0:93:8a:6b:70:17:0f:62:6e:71:0e:
         f6:ef:9e:66:00:2b:82:d5:25:48:13:05:b0:e2:55:4e:c8:cf:
         cc:d8:65:3b:96:00:68:8d:1a:8e:2b:00:14:81:83:97:73:c5:
         6f:55:36:81:b1:55:04:27:c7:44:8e:e1:4b:b3:ab:ab:2e:df:
         c9:35:85:8f:a8:3b:b7:72:05:dd:28:68:1e:65:0e:0b:4e:c9:
         84:46:99:b5:8b:72:91:ff:9e:2d:80:4b:48:b9:7b:9f:18:23:
         36:63:47:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGO/wEnzMBIc1krb8KdfV3cZQERMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMzNTRCRDdFMDUwMzM3NjU2MzY3QkRCNTExRjZBM0Y1
NUZFQjk4RjAeFw0yMzA1MjAxMjI0MDBaFw0yNDA1MTgxMjI5MDBaMDMxMTAvBgNV
BAMTKEQyNzExRDE3MURBNkNCQjNDODRFMTU4NkIxMzA3Nzk4NkYxOUNCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNwyUj6pMQep1zgugLvxnVr+r
R4kPmMMAYBlWdB7W2rxl7/9BMrSZD4F5A+MHM8J2Tmr4AsKhWqW8P+O0C8X9wD7x
tvwi0Lp12dwPvphUhaSDSO7HO1Ya9OOgGcruSlHdTtpP4s50BRDXuQLfZZkNNbTE
53MVQ5iX2bptZE6tECshN+VsGyZnUXhPcTtwbYkPw8Kt64PMT3jcMZFvQMc3WAac
k59/pjpNOYmolnW7Q3HZ/vhFv4wpSywVBSt7G6CBU1/D9Q47IhmicGVTxA1Sedse
HRmpBJ8nlwMRjXQ9esTyRbyBWIPVw4LAjmfRRRkcL23ZmTHUey21i80WFw5NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0nEdFx2my7PIThWGsTB3mG8Zy+0wHwYDVR0j
BBgwFoAUszVL1+BQM3ZWNnvbUR9qP1X+uY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZ6VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRv
ZXMvMC9CMzM1NEJEN0UwNTAzMzc2NTYzNjdCREI1MTFGNkEzRjU1RkVCOThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzMzU0QkQ3RTA1MDMzNzY1
NjM2N0JEQjUxMUY2QTNGNTVGRUI5OEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2elRvNG5Qdjk5elplbUNIYlZpcmR1TFdjZnk2ZGZjbjJTdkRxdzh0b2VzLzAv
MzEzNjM4MmUzMTMyMzEyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeUgwDQYJKoZIhvcNAQELBQADggEBAEAOa/RQ
hgFB8qPm22l62cSqKl6eI7N6Hxtwkbmo5FHVNnfZBYIaxaQxDrv3xOPlQgs9pJqt
hUvRB7AYWHfNneI0ELF8RA6IuBuZEqjujs/AhY25T5icSi4nLchlczaGab6L1weO
8AHVt79+DxvgrOHuSXN5blbqAIyMhQ+aLxj085t/T+sdWcfxRz1UjIRDot70coui
GUDQk4prcBcPYm5xDvbvnmYAK4LVJUgTBbDiVU7Iz8zYZTuWAGiNGo4rABSBg5dz
xW9VNoGxVQQnx0SO4Uuzq6su38k1hY+oO7dyBd0oaB5lDgtOyYRGmbWLcpH/ni2A
S0i5e58YIzZjR8I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org