Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa (raw, json)
Hash identifier:          01vSswxqZ5w+2FURW3w0aOjvvnVp4REfp6H+4KqaDSI=
Subject key identifier:   8F:62:FB:19:72:F2:04:D5:60:15:F2:0A:6F:FA:E0:F5:18:22:6E:EF
Certificate issuer:       /CN=07F1FCBDB492E328D675670C0CD8C133C236145B
Certificate serial:       5E38B8BF0194705EFD821724384A3D725DD9E3AD
Authority key identifier: 07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa
Signing time:             Fri 07 Jun 2024 20:54:07 +0000
ROA not before:           Fri 07 Jun 2024 20:49:07 +0000
ROA not after:            Fri 06 Jun 2025 20:54:07 +0000
asID:                     265282
IP address blocks:        168.90.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:38:b8:bf:01:94:70:5e:fd:82:17:24:38:4a:3d:72:5d:d9:e3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07F1FCBDB492E328D675670C0CD8C133C236145B
        Validity
            Not Before: Jun  7 20:49:07 2024 GMT
            Not After : Jun  6 20:54:07 2025 GMT
        Subject: CN=8F62FB1972F204D56015F20A6FFAE0F518226EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:8a:90:88:6f:26:08:a9:19:82:2b:5c:85:
                    15:04:04:05:b6:c1:8a:14:26:ea:b7:17:49:25:9d:
                    c5:ee:42:b6:98:01:13:6d:22:2e:6d:0a:c5:14:82:
                    bb:b5:69:21:37:a8:02:b4:3a:58:96:88:8c:bc:e0:
                    49:e3:1e:15:e7:6f:b2:8f:cd:83:9b:18:26:99:d5:
                    f0:4c:9d:1a:22:ac:3a:27:38:58:4e:16:80:33:18:
                    eb:5c:80:c1:e1:f8:4d:f2:f0:bc:24:03:5d:58:30:
                    bd:1d:d7:1a:bf:7a:d7:7b:a2:c6:15:93:90:66:ef:
                    42:bf:dd:4a:c5:77:0d:7e:c0:a7:89:f7:05:27:fd:
                    d4:4a:c9:78:48:8e:71:90:ad:87:cc:77:67:91:a0:
                    25:d2:52:a2:25:4e:cb:76:35:7d:d5:87:1b:80:ce:
                    cf:c0:51:30:8f:81:f0:f3:c8:ad:71:e7:f5:d4:d2:
                    71:72:4d:2e:b6:6e:63:24:cd:a4:7c:8f:9b:ad:e4:
                    6d:66:ed:a6:e7:3e:8d:d3:fa:92:ff:5e:f4:bd:b3:
                    98:b6:53:fa:d2:63:f8:ef:26:7e:ed:fa:e5:9f:23:
                    38:d2:b4:03:99:35:35:1a:82:b5:31:d7:db:05:79:
                    32:37:b5:46:21:ed:b1:3d:91:37:cb:ab:6d:99:12:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:62:FB:19:72:F2:04:D5:60:15:F2:0A:6F:FA:E0:F5:18:22:6E:EF
            X509v3 Authority Key Identifier:
                keyid:07:F1:FC:BD:B4:92:E3:28:D6:75:67:0C:0C:D8:C1:33:C2:36:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/07F1FCBDB492E328D675670C0CD8C133C236145B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F1FCBDB492E328D675670C0CD8C133C236145B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/2/3136382e39302e3230382e302f32322d3232203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:bf:1e:85:41:c3:92:1b:e9:54:ad:40:38:d1:64:5d:7e:
         f4:b1:d5:f9:13:f6:14:e9:d8:80:96:50:f5:a8:17:d1:00:31:
         27:dc:5a:e2:42:32:a4:5f:70:24:6a:ca:57:b2:9d:8d:5c:a3:
         d1:64:47:99:c4:9a:0e:44:a3:02:01:75:4f:0e:bf:86:0a:f3:
         2c:ec:bb:1a:36:c6:e5:49:72:7e:85:c4:38:7c:1b:d0:1c:1c:
         02:a7:7a:16:45:80:d1:56:99:87:fd:fb:d4:e4:a9:5e:5a:73:
         c9:f6:5d:bf:9c:0a:30:12:a6:7f:d4:b2:b0:d1:59:bc:34:60:
         3d:10:62:ed:6e:68:f8:d7:87:e3:bf:7d:2b:57:81:6a:09:87:
         e1:50:eb:a6:61:22:4c:d6:b4:17:14:14:e3:88:a8:a0:83:39:
         38:fb:94:40:42:74:db:b6:98:e6:c4:91:9e:5e:b3:1e:60:ac:
         8c:51:6e:83:16:27:1b:66:a9:05:f5:71:42:68:3a:e0:0f:b0:
         33:0b:f3:5f:26:2c:cd:af:da:ea:ee:a3:f6:38:f2:45:7a:02:
         8c:b4:dd:63:03:39:ea:57:b2:60:d1:2b:ed:c4:a3:7a:d3:f1:
         e2:64:5e:e4:9b:86:74:6b:5e:15:e3:25:48:0d:aa:6e:c1:3d:
         d3:a1:83:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXji4vwGUcF79ghckOEo9cl3Z460wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdGMUZDQkRCNDkyRTMyOEQ2NzU2NzBDMENEOEMxMzND
MjM2MTQ1QjAeFw0yNDA2MDcyMDQ5MDdaFw0yNTA2MDYyMDU0MDdaMDMxMTAvBgNV
BAMTKDhGNjJGQjE5NzJGMjA0RDU2MDE1RjIwQTZGRkFFMEY1MTgyMjZFRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe4qQiG8mCKkZgitchRUEBAW2
wYoUJuq3F0klncXuQraYARNtIi5tCsUUgru1aSE3qAK0OliWiIy84EnjHhXnb7KP
zYObGCaZ1fBMnRoirDonOFhOFoAzGOtcgMHh+E3y8LwkA11YML0d1xq/etd7osYV
k5Bm70K/3UrFdw1+wKeJ9wUn/dRKyXhIjnGQrYfMd2eRoCXSUqIlTst2NX3VhxuA
zs/AUTCPgfDzyK1x5/XU0nFyTS62bmMkzaR8j5ut5G1m7abnPo3T+pL/XvS9s5i2
U/rSY/jvJn7t+uWfIzjStAOZNTUagrUx19sFeTI3tUYh7bE9kTfLq22ZEqOrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj2L7GXLyBNVgFfIKb/rg9Rgibu8wHwYDVR0j
BBgwFoAUB/H8vbSS4yjWdWcMDNjBM8I2FFswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF
Tk4vMi8wN0YxRkNCREI0OTJFMzI4RDY3NTY3MEMwQ0Q4QzEzM0MyMzYxNDVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3RjFGQ0JEQjQ5MkUzMjhE
Njc1NjcwQzBDRDhDMTMzQzIzNjE0NUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzIv
MzEzNjM4MmUzOTMwMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWtAwDQYJKoZIhvcNAQELBQADggEBACs7vx6F
QcOSG+lUrUA40WRdfvSx1fkT9hTp2ICWUPWoF9EAMSfcWuJCMqRfcCRqyleynY1c
o9FkR5nEmg5EowIBdU8Ov4YK8yzsuxo2xuVJcn6FxDh8G9AcHAKnehZFgNFWmYf9
+9TkqV5ac8n2Xb+cCjASpn/UsrDRWbw0YD0QYu1uaPjXh+O/fStXgWoJh+FQ66Zh
IkzWtBcUFOOIqKCDOTj7lEBCdNu2mObEkZ5esx5grIxRboMWJxtmqQX1cUJoOuAP
sDML818mLM2v2uruo/Y48kV6Aoy03WMDOepXsmDRK+3Eo3rT8eJkXuSbhnRrXhXj
JUgNqm7BPdOhgzg=
-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org