Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa
File:                     3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa (raw, json)
Hash identifier:          B4dSwXE48M7a4aulxaXhgm50320QHVZripLTD/2TrMk=
Subject key identifier:   61:25:52:76:E5:0E:05:1C:E0:79:D4:48:26:1A:44:63:F0:93:EA:3E
Certificate issuer:       /CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
Certificate serial:       74D0EF42BDD21A9C33D2A7619A99D0FB39B81668
Authority key identifier: 86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa
Signing time:             Sat 24 Sep 2022 20:57:02 +0000
ROA not before:           Sat 24 Sep 2022 20:52:02 +0000
ROA not after:            Sat 23 Sep 2023 20:57:02 +0000
asID:                     264508
IP address blocks:        167.249.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:ef:42:bd:d2:1a:9c:33:d2:a7:61:9a:99:d0:fb:39:b8:16:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862D64BA1F2E38D183BAB30E4E49393D5BE74D8F
        Validity
            Not Before: Sep 24 20:52:02 2022 GMT
            Not After : Sep 23 20:57:02 2023 GMT
        Subject: CN=61255276E50E051CE079D448261A4463F093EA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:3d:75:51:9e:d2:40:b5:ba:a7:b6:f8:bb:
                    f8:6f:80:f3:e8:48:46:c4:89:82:66:60:4f:e8:00:
                    93:4e:2a:6c:24:d6:3c:95:d2:f8:f8:3b:2c:ab:fd:
                    b1:a6:12:cc:26:a8:ff:4e:b7:9b:fe:8e:6a:dc:8f:
                    74:8b:12:28:58:52:91:df:e2:d9:73:5e:c4:0e:04:
                    af:e1:13:b7:88:b1:88:b3:94:36:95:6b:81:36:bf:
                    c3:c6:c6:e4:76:98:4a:d9:63:ba:a5:f9:04:36:49:
                    81:f4:e7:1a:83:87:20:ba:8f:77:14:bc:c2:47:b4:
                    2c:4d:fd:b9:c8:52:5d:c1:fd:97:44:78:68:e8:9b:
                    a6:01:6f:32:2a:f3:1c:88:b2:e4:f2:6a:24:2b:bd:
                    31:c1:66:d6:ea:71:81:12:3e:e4:1e:58:de:a1:27:
                    e2:ec:f7:d1:d0:8d:0e:64:5c:51:c4:f9:63:74:c2:
                    8a:2f:c7:3b:7b:a6:ec:96:ba:25:a6:d4:6d:c8:be:
                    48:59:33:29:04:fa:d0:bf:58:f7:f5:ce:fb:ad:58:
                    85:d9:4e:0b:f8:f4:b6:f1:0c:4d:43:89:e2:b2:b5:
                    22:31:c1:87:08:e4:c5:31:91:7a:0c:46:58:72:6f:
                    48:4b:f9:25:4c:3b:65:1b:17:b0:c3:6f:ae:1c:5d:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:52:76:E5:0E:05:1C:E0:79:D4:48:26:1A:44:63:F0:93:EA:3E
            X509v3 Authority Key Identifier:
                keyid:86:2D:64:BA:1F:2E:38:D1:83:BA:B3:0E:4E:49:39:3D:5B:E7:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862D64BA1F2E38D183BAB30E4E49393D5BE74D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:19:93:5d:fa:d2:71:52:ad:51:2c:7c:ad:0a:84:b8:29:05:
         24:73:f4:ef:77:f6:7f:10:af:61:a8:ed:8e:87:50:da:62:c2:
         17:a3:7e:6c:e9:5d:e8:cd:48:03:31:ea:4a:1c:f9:0a:ce:d2:
         8a:89:92:e6:01:14:54:07:31:af:c6:db:d0:a2:ba:dd:01:58:
         3b:ea:b4:62:61:42:83:80:09:e7:b6:b5:56:76:49:e6:ea:a5:
         dc:e1:74:e4:77:30:a9:72:0e:d4:26:c0:5b:14:12:dd:61:f2:
         1e:34:fe:af:51:a6:22:9f:28:84:59:6f:e7:eb:ac:4f:5f:45:
         7b:79:d2:e0:6a:bd:17:ff:a5:2e:bd:1f:47:2c:3b:24:47:23:
         42:7e:01:70:43:2f:7c:ad:80:a6:3c:ec:86:58:d4:f2:98:65:
         cf:07:f5:d6:ad:be:eb:84:5e:38:c8:37:52:0d:6c:33:13:db:
         e4:88:ff:fd:52:c3:4b:7f:a2:a9:f3:cf:d1:b7:b1:71:81:68:
         59:9d:2c:92:85:0f:07:ea:3c:73:57:83:0b:13:8f:39:df:0a:
         74:7a:8f:09:f3:de:66:a8:97:5f:c0:6a:31:11:ba:a3:21:85:
         5c:44:42:3a:79:cd:c0:40:ef:20:3f:0d:6c:69:18:9e:7a:23:
         98:b8:bf:45
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdNDvQr3SGpwz0qdhmpnQ+zm4FmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyRDY0QkExRjJFMzhEMTgzQkFCMzBFNEU0OTM5M0Q1
QkU3NEQ4RjAeFw0yMjA5MjQyMDUyMDJaFw0yMzA5MjMyMDU3MDJaMDMxMTAvBgNV
BAMTKDYxMjU1Mjc2RTUwRTA1MUNFMDc5RDQ0ODI2MUE0NDYzRjA5M0VBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6D11UZ7SQLW6p7b4u/hvgPPo
SEbEiYJmYE/oAJNOKmwk1jyV0vj4Oyyr/bGmEswmqP9Ot5v+jmrcj3SLEihYUpHf
4tlzXsQOBK/hE7eIsYizlDaVa4E2v8PGxuR2mErZY7ql+QQ2SYH05xqDhyC6j3cU
vMJHtCxN/bnIUl3B/ZdEeGjom6YBbzIq8xyIsuTyaiQrvTHBZtbqcYESPuQeWN6h
J+Ls99HQjQ5kXFHE+WN0woovxzt7puyWuiWm1G3IvkhZMykE+tC/WPf1zvutWIXZ
Tgv49LbxDE1DieKytSIxwYcI5MUxkXoMRlhyb0hL+SVMO2UbF7DDb64cXSfrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUYSVSduUOBRzgedRIJhpEY/CT6j4wHwYDVR0j
BBgwFoAUhi1kuh8uONGDurMOTkk5PVvnTY8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9TZEdDejFBNEZqZ0p3MWdRNzU5MkdBMjViS29XU1AyY1Z0S0VCalhzZHR3
LzAvODYyRDY0QkExRjJFMzhEMTgzQkFCMzBFNEU0OTM5M0Q1QkU3NEQ4Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84NjJENjRCQTFGMkUzOEQxODNC
QUIzMEU0RTQ5MzkzRDVCRTc0RDhGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
ZEdDejFBNEZqZ0p3MWdRNzU5MkdBMjViS29XU1AyY1Z0S0VCalhzZHR3LzAvMzEz
NjM3MmUzMjM0MzkyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
NTMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKn+UAwDQYJKoZIhvcNAQELBQADggEBAAMZk1360nFS
rVEsfK0KhLgpBSRz9O939n8Qr2Go7Y6HUNpiwhejfmzpXejNSAMx6koc+QrO0oqJ
kuYBFFQHMa/G29Ciut0BWDvqtGJhQoOACee2tVZ2SebqpdzhdOR3MKlyDtQmwFsU
Et1h8h40/q9RpiKfKIRZb+frrE9fRXt50uBqvRf/pS69H0csOyRHI0J+AXBDL3yt
gKY87IZY1PKYZc8H9datvuuEXjjIN1INbDMT2+SI//1Sw0t/oqnzz9G3sXGBaFmd
LJKFDwfqPHNXgwsTjznfCnR6jwnz3maol1/AajERuqMhhVxEQjp5zcBA7yA/DWxp
GJ56I5i4v0U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org