Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32342d3234203d3e20323635323239.roa
File:                     3136382e302e35322e302f32342d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          NGx6QA7TEwDoPg9s6JG9f67+CSnezSuyTPd7dIypBZs=
Subject key identifier:   13:DD:2A:4A:48:93:81:94:E3:AC:1F:A8:4F:74:2B:93:6C:C6:46:E7
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       1CFE1B90F5FCCD226611E420CE4147137F65B051
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32342d3234203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:54 +0000
ROA not before:           Mon 09 Oct 2023 23:46:54 +0000
ROA not after:            Mon 07 Oct 2024 23:51:54 +0000
asID:                     265229
IP address blocks:        168.0.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fe:1b:90:f5:fc:cd:22:66:11:e4:20:ce:41:47:13:7f:65:b0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:54 2023 GMT
            Not After : Oct  7 23:51:54 2024 GMT
        Subject: CN=13DD2A4A48938194E3AC1FA84F742B936CC646E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:0e:b2:9a:00:ed:28:2f:d0:f1:95:13:b0:
                    30:c5:2d:c6:dc:83:a3:46:15:07:df:b2:eb:2f:f8:
                    87:5b:5d:9d:af:2b:8f:6b:7d:de:7c:c9:ca:bc:b0:
                    19:0f:86:75:5d:fd:70:2c:d2:f5:7c:8e:fc:0f:31:
                    2d:0b:c4:61:16:08:f9:20:00:54:09:f7:8e:bc:66:
                    9d:b1:6a:f5:96:6e:30:5a:f7:ba:7f:15:47:cc:c7:
                    a7:b8:e6:e1:89:cc:df:d7:5b:2a:f4:09:ea:3f:6d:
                    60:8d:86:56:da:62:f4:78:39:2f:28:d6:6d:05:36:
                    29:ab:c1:7e:b6:30:04:3a:2c:a4:a1:28:b3:01:9d:
                    a2:4f:4c:0f:aa:50:18:79:a1:7c:c1:03:5c:d7:f5:
                    e4:d0:4c:7b:c4:d0:ae:fb:16:0c:ec:07:35:2d:9b:
                    ac:52:0b:32:9b:e1:f5:3f:e6:69:60:17:ad:ba:a7:
                    00:a4:2d:5e:52:41:73:9c:5f:f5:c3:0c:a4:52:99:
                    3d:98:04:9d:70:86:16:e4:93:e7:50:0a:28:16:20:
                    7d:4c:29:5d:ca:4b:97:a4:a5:24:aa:c5:9c:4b:e0:
                    e9:81:b1:56:02:ba:5f:a1:71:0a:ef:8c:fe:ad:41:
                    39:60:cb:b7:5e:e9:91:75:b4:c5:5e:31:8c:7f:7c:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:2A:4A:48:93:81:94:E3:AC:1F:A8:4F:74:2B:93:6C:C6:46:E7
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32342d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:51:d6:ec:b3:be:b5:86:5f:51:d7:c2:88:e5:6f:81:c6:
         69:75:d5:00:e3:59:06:ab:e0:3d:4e:e7:ff:14:8a:2a:91:a0:
         6d:43:b7:0d:7a:ed:2a:b3:a4:2f:ca:22:0b:b5:4a:25:25:21:
         41:6c:d2:89:2d:21:a7:5f:e3:41:2a:bb:63:6a:5e:8e:10:97:
         e0:d5:89:a5:7d:ed:5e:6e:9a:c3:d7:32:23:7c:1e:0e:a5:f1:
         d1:3a:39:74:03:95:8c:06:58:ab:81:01:dd:ad:3c:a4:20:fe:
         9a:e4:68:7a:e4:00:92:9c:96:36:cf:4b:8a:0d:b7:cd:be:d0:
         a7:72:3e:ce:29:e7:8b:ca:84:c7:f0:3e:16:6d:da:50:86:94:
         64:bb:b8:3b:00:2c:51:96:17:13:86:0b:59:1c:2d:98:1e:91:
         2c:76:52:eb:98:7c:39:aa:8a:cf:dc:80:03:b2:db:d1:60:ae:
         ca:fb:a2:03:01:d7:85:37:b0:83:be:c4:12:21:1a:3e:e6:39:
         67:17:ae:dc:0a:bc:ef:aa:10:3a:2c:d6:cd:5e:2d:d7:45:03:
         89:83:0a:83:af:22:a2:b8:39:ac:59:7c:e0:54:99:13:16:d0:
         4e:e3:17:37:2c:2b:f7:45:9a:a7:73:6e:68:8a:8e:e0:18:68:
         f6:b4:ac:ea
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUHP4bkPX8zSJmEeQgzkFHE39lsFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcx
Qjg4QTlDOTAeFw0yMzEwMDkyMzQ2NTRaFw0yNDEwMDcyMzUxNTRaMDMxMTAvBgNV
BAMTKDEzREQyQTRBNDg5MzgxOTRFM0FDMUZBODRGNzQyQjkzNkNDNjQ2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Bg6ymgDtKC/Q8ZUTsDDFLcbc
g6NGFQffsusv+IdbXZ2vK49rfd58ycq8sBkPhnVd/XAs0vV8jvwPMS0LxGEWCPkg
AFQJ9468Zp2xavWWbjBa97p/FUfMx6e45uGJzN/XWyr0Ceo/bWCNhlbaYvR4OS8o
1m0FNimrwX62MAQ6LKShKLMBnaJPTA+qUBh5oXzBA1zX9eTQTHvE0K77FgzsBzUt
m6xSCzKb4fU/5mlgF626pwCkLV5SQXOcX/XDDKRSmT2YBJ1whhbkk+dQCigWIH1M
KV3KS5ekpSSqxZxL4OmBsVYCul+hcQrvjP6tQTlgy7de6ZF1tMVeMYx/fLS3AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUE90qSkiTgZTjrB+oT3Qrk2zGRucwHwYDVR0j
BBgwFoAUD5shypQZ2v32Y/+sXYFYlxuIqckwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRV
LzAvMEY5QjIxQ0E5NDE5REFGREY2NjNGRkFDNUQ4MTU4OTcxQjg4QTlDOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRjlCMjFDQTk0MTlEQUZERjY2
M0ZGQUM1RDgxNTg5NzFCODhBOUM5LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
QTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRVLzAvMzEz
NjM4MmUzMDJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTMyMzIz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKgANDANBgkqhkiG9w0BAQsFAAOCAQEArIxR1uyzvrWGX1HX
wojlb4HGaXXVAONZBqvgPU7n/xSKKpGgbUO3DXrtKrOkL8oiC7VKJSUhQWzSiS0h
p1/jQSq7Y2pejhCX4NWJpX3tXm6aw9cyI3weDqXx0To5dAOVjAZYq4EB3a08pCD+
muRoeuQAkpyWNs9Lig23zb7Qp3I+zinni8qEx/A+Fm3aUIaUZLu4OwAsUZYXE4YL
WRwtmB6RLHZS65h8OaqKz9yAA7Lb0WCuyvuiAwHXhTewg77EEiEaPuY5Zxeu3Aq8
76oQOizWzV4t10UDiYMKg68iorg5rFl84FSZExbQTuMXNywr90Wap3NuaIqO4Bho
9rSs6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org