Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa
File:                     3136382e3139352e342e302f32322d3232203d3e20323635343036.roa (raw, json)
Hash identifier:          JVjhfJb1XeC8BZ6JKTKZs0fAwKYNvXy+XZV5VdhsZ4o=
Subject key identifier:   D4:82:68:8E:FB:7F:60:E0:E0:C3:17:29:A6:5F:CF:32:75:B9:95:55
Certificate issuer:       /CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Certificate serial:       5B7A5569874428D00C261F1F4CC618658BC20DD2
Authority key identifier: 09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa
Signing time:             Tue 02 Jan 2024 15:47:35 +0000
ROA not before:           Tue 02 Jan 2024 15:42:35 +0000
ROA not after:            Tue 31 Dec 2024 15:47:35 +0000
asID:                     265406
IP address blocks:        168.195.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:55:69:87:44:28:d0:0c:26:1f:1f:4c:c6:18:65:8b:c2:0d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
        Validity
            Not Before: Jan  2 15:42:35 2024 GMT
            Not After : Dec 31 15:47:35 2024 GMT
        Subject: CN=D482688EFB7F60E0E0C31729A65FCF3275B99555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:be:9d:82:80:71:05:94:1d:a7:5a:fd:ce:
                    91:21:02:78:ef:76:00:ce:16:14:36:6d:2e:d8:b8:
                    f8:6b:a7:63:df:40:ce:12:bd:24:4c:aa:5c:fd:c6:
                    f2:5c:3b:a1:9e:3b:a2:c4:3d:d7:87:a8:33:fb:e7:
                    8b:04:e4:b4:6f:25:44:ed:03:a0:88:8d:48:d6:4b:
                    b1:09:b7:a1:15:63:c8:94:8f:6c:bf:69:d4:d0:1f:
                    8f:e8:85:86:87:97:6c:bc:77:ca:84:37:82:a6:a7:
                    6e:59:c3:fe:78:26:87:dc:13:97:a5:74:37:2a:6c:
                    f1:75:3e:cf:fe:49:90:36:0c:24:94:56:bb:f0:65:
                    84:d8:ad:56:d6:bf:05:82:e6:16:19:02:71:2e:5b:
                    c7:1f:39:f5:d0:e5:21:98:aa:5b:d1:a2:e4:06:ce:
                    70:d3:84:ee:3d:9f:db:84:b6:fa:c0:50:fe:a8:d9:
                    05:37:68:ff:11:f6:41:5e:4e:0c:bf:b7:25:86:8b:
                    54:ea:07:44:bc:b4:70:36:fe:49:f1:61:91:26:e9:
                    28:e5:75:e3:f6:ed:c9:a1:00:38:c6:b5:65:a3:68:
                    91:e2:83:34:5d:78:f9:75:f0:73:c4:17:32:1f:f6:
                    ab:f2:eb:9f:1f:31:37:a6:69:6b:14:20:91:53:81:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:68:8E:FB:7F:60:E0:E0:C3:17:29:A6:5F:CF:32:75:B9:95:55
            X509v3 Authority Key Identifier:
                keyid:09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:57:c9:e4:cd:6f:68:27:e3:12:85:63:e4:82:7d:9c:a0:9c:
         7c:72:d8:a1:da:ec:c2:79:e4:d0:87:a3:86:ac:de:c2:88:b9:
         c5:fb:07:34:e1:e9:f2:1d:0e:0f:82:03:d3:da:b4:4b:b3:42:
         8b:82:0f:ea:d0:0b:94:3b:99:ea:a2:10:be:f9:be:6e:b1:ea:
         b3:0d:b7:56:28:3e:0e:12:6a:39:c8:2a:4b:5c:49:d4:39:c4:
         dc:bc:fa:19:c1:aa:a3:42:07:a6:eb:d4:4a:3e:8b:ca:3e:a2:
         79:68:86:d9:0b:c1:74:16:30:c0:e1:bd:9c:0d:7e:0a:9c:3a:
         72:b9:5c:97:2d:10:5c:fd:e0:7b:7c:67:87:61:e9:02:c3:af:
         12:11:3c:3b:82:ae:a4:3d:88:ff:c8:60:a6:46:b8:bf:7b:d2:
         28:64:82:ca:3e:83:d8:ac:ea:0a:5d:03:34:54:15:b4:79:17:
         f5:22:2c:95:f4:e8:d1:67:6c:5f:5e:f8:58:a4:e5:c8:4f:8e:
         ee:61:1b:6c:c4:07:3a:1a:c0:c9:91:4c:d1:94:7e:8e:ad:b6:
         41:10:a9:5e:c3:4a:fe:2f:47:1f:de:d2:bc:0e:7a:a7:9c:b0:
         9d:a8:0b:1b:a8:9f:63:e9:18:fd:2e:93:e2:28:a4:94:d1:79:
         fc:8b:c5:ff
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW3pVaYdEKNAMJh8fTMYYZYvCDdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0NkFCQzBFNEY4NUNFMEZDMDRGNEQwNTEyRjkwNTk3
QjcyNDg1OTAeFw0yNDAxMDIxNTQyMzVaFw0yNDEyMzExNTQ3MzVaMDMxMTAvBgNV
BAMTKEQ0ODI2ODhFRkI3RjYwRTBFMEMzMTcyOUE2NUZDRjMyNzVCOTk1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEr6dgoBxBZQdp1r9zpEhAnjv
dgDOFhQ2bS7YuPhrp2PfQM4SvSRMqlz9xvJcO6GeO6LEPdeHqDP754sE5LRvJUTt
A6CIjUjWS7EJt6EVY8iUj2y/adTQH4/ohYaHl2y8d8qEN4Kmp25Zw/54JofcE5el
dDcqbPF1Ps/+SZA2DCSUVrvwZYTYrVbWvwWC5hYZAnEuW8cfOfXQ5SGYqlvRouQG
znDThO49n9uEtvrAUP6o2QU3aP8R9kFeTgy/tyWGi1TqB0S8tHA2/knxYZEm6Sjl
deP27cmhADjGtWWjaJHigzRdePl18HPEFzIf9qvy658fMTemaWsUIJFTgf5XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1IJojvt/YODgwxcppl/PMnW5lVUwHwYDVR0j
BBgwFoAUCUarwOT4XOD8BPTQUS+QWXtySFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlM5U1JNWDRNZ1F0R1hzaGVKV05ydloySldGdks0TEpxUVZCV3JHYzJO
N1QvMS8wOTQ2QUJDMEU0Rjg1Q0UwRkMwNEY0RDA1MTJGOTA1OTdCNzI0ODU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA5NDZBQkMwRTRGODVDRTBG
QzA0RjREMDUxMkY5MDU5N0I3MjQ4NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTOVNSTVg0TWdRdEdYc2hlSldOcnZaMkpXRnZLNExKcVFWQldyR2MyTjdULzEv
MzEzNjM4MmUzMTM5MzUyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1
MzQzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMMEMA0GCSqGSIb3DQEBCwUAA4IBAQCBV8nkzW9o
J+MShWPkgn2coJx8ctih2uzCeeTQh6OGrN7CiLnF+wc04enyHQ4PggPT2rRLs0KL
gg/q0AuUO5nqohC++b5useqzDbdWKD4OEmo5yCpLXEnUOcTcvPoZwaqjQgem69RK
PovKPqJ5aIbZC8F0FjDA4b2cDX4KnDpyuVyXLRBc/eB7fGeHYekCw68SETw7gq6k
PYj/yGCmRri/e9IoZILKPoPYrOoKXQM0VBW0eRf1IiyV9OjRZ2xfXvhYpOXIT47u
YRtsxAc6GsDJkUzRlH6OrbZBEKlew0r+L0cf3tK8DnqnnLCdqAsbqJ9j6Rj9LpPi
KKSU0Xn8i8X/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org