Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139352e302f32342d3234203d3e20323635393730.roa
File:                     3136342e3136332e3139352e302f32342d3234203d3e20323635393730.roa (raw, json)
Hash identifier:          iFmJS5J7X0JbNrDLxxJ/viN6m7P/HqUZedwfCoM4f8E=
Subject key identifier:   0E:2D:D6:51:A3:B7:0D:F2:0B:D4:60:15:DA:4A:65:EB:EA:D6:05:EF
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       7FA8F6B461B892CED789F07F828AF0CA05CA729C
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139352e302f32342d3234203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:56:03 +0000
ROA not before:           Tue 11 Jan 2022 10:51:03 +0000
ROA not after:            Tue 10 Jan 2023 10:56:03 +0000
asID:                     265970
IP address blocks:        164.163.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a8:f6:b4:61:b8:92:ce:d7:89:f0:7f:82:8a:f0:ca:05:ca:72:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:51:03 2022 GMT
            Not After : Jan 10 10:56:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:c4:61:76:6a:ea:0d:4b:41:be:0d:d2:34:
                    41:58:a2:a9:5e:d2:69:e4:bb:83:2b:c6:d1:18:2b:
                    77:9d:65:c0:af:8b:4b:3e:27:89:8d:be:e4:e2:47:
                    13:ff:4f:6b:6b:bb:9f:99:b0:8b:75:b9:fa:1c:50:
                    09:86:a2:77:17:45:82:35:4b:31:1f:34:66:f1:f2:
                    3c:69:27:21:c8:39:be:0a:ed:12:1c:79:11:ca:65:
                    01:7f:9e:87:38:ee:a2:ba:6c:bb:33:d4:0f:6e:2c:
                    e4:1c:da:5e:83:1d:56:f6:ed:2b:e2:85:6d:cd:21:
                    3e:76:b4:33:d1:6f:9b:68:f9:4c:ba:ea:29:2b:65:
                    67:92:f7:d8:dc:4f:21:7b:3d:e5:7b:2d:74:ee:3a:
                    85:91:7b:61:ac:4e:69:40:18:0c:ab:80:71:9a:ea:
                    b4:b0:9d:9b:13:91:56:0e:1d:35:18:42:08:3e:77:
                    47:85:67:f5:80:0f:e4:80:9d:2f:87:ff:50:ed:bf:
                    30:98:a6:d7:47:0c:82:db:e2:42:d3:e5:27:cd:10:
                    17:f9:4b:d0:b7:c8:c8:9d:1a:c2:da:ae:fd:55:c3:
                    f8:97:1d:c4:0d:cb:7c:b4:dd:03:b9:cb:cf:41:c8:
                    90:30:9c:36:2b:c7:55:7a:e8:17:c5:04:91:0a:fa:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:D6:51:A3:B7:0D:F2:0B:D4:60:15:DA:4A:65:EB:EA:D6:05:EF
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139352e302f32342d3234203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:79:f0:c2:f5:db:d4:29:9f:71:ba:5d:b0:49:f5:37:93:
         ab:45:f2:6f:45:b4:6a:22:df:ca:97:b9:91:85:70:00:c1:26:
         69:2b:91:d0:24:f9:71:35:66:5f:a5:eb:dd:fa:24:01:af:ab:
         71:83:a9:18:b3:b7:5e:e6:0b:ed:71:30:1e:c1:df:68:5e:36:
         15:83:f4:7e:eb:05:1d:d2:62:47:70:72:fd:56:54:ab:b2:0f:
         6e:da:fa:c3:ab:75:50:c7:4a:3b:4b:f5:7a:28:d4:71:f2:22:
         b2:67:f7:7e:0c:77:ba:a6:7b:bf:c5:64:90:aa:29:86:9b:99:
         d8:07:a9:35:6e:fc:88:d7:7f:61:4b:9e:27:dd:4c:c7:ed:a1:
         70:7d:cd:71:e2:f6:31:d3:f6:9f:fb:88:8c:30:dd:a2:36:0a:
         65:0e:fc:02:59:89:9d:70:b4:27:f2:2b:0b:e3:a2:26:8e:27:
         16:fc:97:8c:78:1a:dc:3a:a4:4b:26:cc:a5:a2:d6:5f:9c:f5:
         d2:44:3e:44:8d:85:93:97:64:ab:e3:47:fb:de:8d:f9:e0:1b:
         b5:36:c9:99:6b:85:b0:14:e4:a7:fd:64:41:8f:17:cf:8d:45:
         c4:57:d8:c2:5a:2b:fa:64:5f:32:e7:0a:21:17:d1:b5:39:32:
         c7:6e:07:07
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUf6j2tGG4ks7XifB/gorwygXKcpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYyRjE1M0E5MzAxOTY5RERBNzg3NUM2RjkxMTBCOUM1
MjczNTc2RTAeFw0yMjAxMTExMDUxMDNaFw0yMzAxMTAxMDU2MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FEM0M0NjE3NjZBRUEwRDRC
NDFCRTBERDIzNDQxNThBMkE5NUVEMjY5RTRCQjgzMkJDNkQxMTgyQjc3OUQ2NUMw
QUY4QjRCM0UyNzg5OERCRUU0RTI0NzEzRkY0RjZCNkJCQjlGOTlCMDhCNzVCOUZB
MUM1MDA5ODZBMjc3MTc0NTgyMzU0QjMxMUYzNDY2RjFGMjNDNjkyNzIxQzgzOUJF
MEFFRDEyMUM3OTExQ0E2NTAxN0Y5RTg3MzhFRUEyQkE2Q0JCMzNENDBGNkUyQ0U0
MUNEQTVFODMxRDU2RjZFRDJCRTI4NTZEQ0QyMTNFNzZCNDMzRDE2RjlCNjhGOTRD
QkFFQTI5MkI2NTY3OTJGN0Q4REM0RjIxN0IzREU1N0IyRDc0RUUzQTg1OTE3QjYx
QUM0RTY5NDAxODBDQUI4MDcxOUFFQUI0QjA5RDlCMTM5MTU2MEUxRDM1MTg0MjA4
M0U3NzQ3ODU2N0Y1ODAwRkU0ODA5RDJGODdGRjUwRURCRjMwOThBNkQ3NDcwQzgy
REJFMjQyRDNFNTI3Q0QxMDE3Rjk0QkQwQjdDOEM4OUQxQUMyREFBRUZENTVDM0Y4
OTcxREM0MERDQjdDQjRERDAzQjlDQkNGNDFDODkwMzA5QzM2MkJDNzU1N0FFODE3
QzUwNDkxMEFGQTExOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAytPEYXZq6g1LQb4N0jRBWKKpXtJp5LuDK8bRGCt3nWXAr4tLPieJ
jb7k4kcT/09ra7ufmbCLdbn6HFAJhqJ3F0WCNUsxHzRm8fI8aSchyDm+Cu0SHHkR
ymUBf56HOO6iumy7M9QPbizkHNpegx1W9u0r4oVtzSE+drQz0W+baPlMuuopK2Vn
kvfY3E8hez3ley107jqFkXthrE5pQBgMq4Bxmuq0sJ2bE5FWDh01GEIIPndHhWf1
gA/kgJ0vh/9Q7b8wmKbXRwyC2+JC0+UnzRAX+UvQt8jInRrC2q79VcP4lx3EDct8
tN0DucvPQciQMJw2K8dVeugXxQSRCvoRkwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FA4t1lGjtw3yC9RgFdpKZevq1gXvMB8GA1UdIwQYMBaAFG8vFTqTAZad2nh1xvkR
C5xSc1duMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hjTVp4aEhDQ1JKRTRY
Tjk3UHJIZHNvUEFyYVpBYXNWS1dhbVpOOUFqRlFMLzAvNkYyRjE1M0E5MzAxOTY5
RERBNzg3NUM2RjkxMTBCOUM1MjczNTc2RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82RjJGMTUzQTkzMDE5NjlEREE3ODc1QzZGOTExMEI5QzUyNzM1
NzZFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IY01aeGhIQ0NSSkU0WE45N1By
SGRzb1BBcmFaQWFzVktXYW1aTjlBakZRTC8wLzMxMzYzNDJlMzEzNjMzMmUzMTM5
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzOTM3MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACko8MwDQYJKoZIhvcNAQELBQADggEBAGC1efDC9dvUKZ9xul2wSfU3k6tF8m9F
tGoi38qXuZGFcADBJmkrkdAk+XE1Zl+l6936JAGvq3GDqRizt17mC+1xMB7B32he
NhWD9H7rBR3SYkdwcv1WVKuyD27a+sOrdVDHSjtL9Xoo1HHyIrJn934Md7qme7/F
ZJCqKYabmdgHqTVu/IjXf2FLnifdTMftoXB9zXHi9jHT9p/7iIww3aI2CmUO/AJZ
iZ1wtCfyKwvjoiaOJxb8l4x4Gtw6pEsmzKWi1l+c9dJEPkSNhZOXZKvjR/vejfng
G7U2yZlrhbAU5Kf9ZEGPF8+NRcRX2MJaK/pkXzLnCiEX0bU5MsduBwc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org