Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33392e302f32342d3234203d3e20323638313932.roa
File:                     3136382e3138312e33392e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          Zsn8eIAZcyiEGNpNGor0l2f/3jZ6ErpeBD6Zydd5y8c=
Subject key identifier:   E4:79:AD:44:61:C3:39:69:B9:74:76:68:22:7D:87:0C:16:3C:96:3F
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       1EF9804A48A336D027762E51054922067101EC83
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33392e302f32342d3234203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:15 +0000
ROA not before:           Sun 27 Nov 2022 05:18:15 +0000
ROA not after:            Sun 26 Nov 2023 05:23:15 +0000
asID:                     268192
IP address blocks:        168.181.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f9:80:4a:48:a3:36:d0:27:76:2e:51:05:49:22:06:71:01:ec:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:15 2022 GMT
            Not After : Nov 26 05:23:15 2023 GMT
        Subject: CN=E479AD4461C33969B9747668227D870C163C963F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:6f:94:67:25:10:4a:57:f8:d4:c7:e7:05:
                    81:be:7a:34:5a:fb:53:30:ec:d0:4b:16:9c:5e:39:
                    e3:a9:fb:1b:b5:d0:3e:5a:a2:47:15:eb:ab:62:b2:
                    20:77:79:6a:03:82:b1:66:7f:16:a5:84:07:31:96:
                    a4:8f:83:c6:a4:df:3b:af:28:2a:00:27:02:1e:e4:
                    83:9b:fa:2e:2e:4a:70:20:8c:2a:b4:1a:64:35:57:
                    bc:70:bb:83:28:69:8e:6c:7c:dc:a7:3b:2a:94:c8:
                    57:db:9d:2d:cc:8f:09:60:8f:2d:2c:27:2b:55:2f:
                    e8:c9:26:aa:3c:b4:64:0b:b4:2b:8f:ac:48:c2:a2:
                    3a:33:ce:78:3c:03:47:32:23:0f:1b:6c:7c:8f:2e:
                    b8:78:9b:f6:66:dc:e5:9b:44:60:bb:e2:98:a0:af:
                    ee:78:ce:03:92:99:c5:e5:6a:d4:34:b8:38:d5:51:
                    6d:d6:bf:1d:3f:fe:ea:bf:49:2b:e8:b7:a0:01:33:
                    b7:2e:4a:bb:72:62:c8:1a:c5:a5:83:99:44:cd:1d:
                    b9:55:64:24:53:9f:7f:9e:20:fc:e8:b5:b0:14:11:
                    f8:84:fb:24:bb:b0:52:b1:bc:7d:1f:b3:b9:6f:ee:
                    0e:13:98:f9:fc:30:53:ee:60:33:06:11:0d:d2:f2:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:AD:44:61:C3:39:69:B9:74:76:68:22:7D:87:0C:16:3C:96:3F
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33392e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:00:ce:fb:bb:6e:b4:fc:75:f0:65:00:4c:ed:f3:dc:49:73:
         2b:ae:1d:4c:ff:a6:1b:f2:2b:60:b5:2c:cf:ba:d5:53:5a:ea:
         00:1a:1b:56:9c:98:14:df:bb:36:c5:20:52:05:e2:ba:14:a3:
         e0:22:01:df:46:06:3b:af:82:51:21:30:71:b1:ac:03:a3:ac:
         bc:0a:a0:c3:fd:52:f6:85:c3:cd:13:88:cb:ea:a7:5b:52:db:
         88:b6:a2:2b:f7:da:f0:21:8c:be:f0:40:b2:1a:8f:a5:5d:9f:
         d1:eb:5b:8b:21:b4:1a:bf:db:49:c9:7e:56:e5:9e:be:cd:91:
         12:8c:cb:78:e9:89:21:ed:ff:07:71:56:be:82:4a:de:8e:db:
         32:45:bb:3c:49:58:57:98:0e:63:79:86:8c:47:b1:f9:35:02:
         9a:07:0b:61:77:aa:5c:2b:0f:b5:f7:1e:af:5b:32:0e:18:9f:
         15:c3:21:f8:c0:e3:31:16:55:91:36:70:9c:48:83:bd:68:33:
         4e:8d:bc:12:a5:1d:e6:a2:ca:3d:05:79:b6:d8:0d:27:c0:45:
         3b:48:56:fc:c5:4a:db:f5:c0:83:5c:4c:0c:e8:99:2e:89:48:
         ec:a6:4b:f6:94:c5:af:02:ec:f0:bb:21:b1:ad:48:43:a2:5c:
         b0:48:a7:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHvmASkijNtAndi5RBUkiBnEB7IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE5NkREMzU1NUEzQjE1QUI2NjJGMzJGMDM2QTAxNUNB
QzdDNzlBMTAeFw0yMjExMjcwNTE4MTVaFw0yMzExMjYwNTIzMTVaMDMxMTAvBgNV
BAMTKEU0NzlBRDQ0NjFDMzM5NjlCOTc0NzY2ODIyN0Q4NzBDMTYzQzk2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi02+UZyUQSlf41MfnBYG+ejRa
+1Mw7NBLFpxeOeOp+xu10D5aokcV66tisiB3eWoDgrFmfxalhAcxlqSPg8ak3zuv
KCoAJwIe5IOb+i4uSnAgjCq0GmQ1V7xwu4MoaY5sfNynOyqUyFfbnS3Mjwlgjy0s
JytVL+jJJqo8tGQLtCuPrEjCojozzng8A0cyIw8bbHyPLrh4m/Zm3OWbRGC74pig
r+54zgOSmcXlatQ0uDjVUW3Wvx0//uq/SSvot6ABM7cuSrtyYsgaxaWDmUTNHblV
ZCRTn3+eIPzotbAUEfiE+yS7sFKxvH0fs7lv7g4TmPn8MFPuYDMGEQ3S8kwjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5HmtRGHDOWm5dHZoIn2HDBY8lj8wHwYDVR0j
BBgwFoAUkZbdNVWjsVq2YvMvA2oBXKx8eaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMC85MTk2REQzNTU1QTNCMTVBQjY2MkYzMkYwMzZBMDE1Q0FDN0M3OUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxOTZERDM1NTVBM0IxNUFC
NjYyRjMyRjAzNkEwMTVDQUM3Qzc5QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzAv
MzEzNjM4MmUzMTM4MzEyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACotScwDQYJKoZIhvcNAQELBQADggEBAJcAzvu7
brT8dfBlAEzt89xJcyuuHUz/phvyK2C1LM+61VNa6gAaG1acmBTfuzbFIFIF4roU
o+AiAd9GBjuvglEhMHGxrAOjrLwKoMP9UvaFw80TiMvqp1tS24i2oiv32vAhjL7w
QLIaj6Vdn9HrW4shtBq/20nJflblnr7NkRKMy3jpiSHt/wdxVr6CSt6O2zJFuzxJ
WFeYDmN5hoxHsfk1ApoHC2F3qlwrD7X3Hq9bMg4YnxXDIfjA4zEWVZE2cJxIg71o
M06NvBKlHeaiyj0FebbYDSfARTtIVvzFStv1wINcTAzomS6JSOymS/aUxa8C7PC7
IbGtSEOiXLBIp7o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net