Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          8fEWJdddNs6YQ17xSEwZRrm2SP8SIMsNdCoxCL4E2lU=
Subject key identifier:   1B:6E:DB:B2:89:A1:18:A7:2D:A0:CA:35:91:51:CA:92:09:BF:CF:1D
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       42952897D9E74AD203B4A06DEFBDA9C122D08F79
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa
Signing time:             Mon 12 Feb 2024 15:12:59 +0000
ROA not before:           Mon 12 Feb 2024 15:07:59 +0000
ROA not after:            Mon 10 Feb 2025 15:12:59 +0000
asID:                     265477
IP address blocks:        168.197.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:28:97:d9:e7:4a:d2:03:b4:a0:6d:ef:bd:a9:c1:22:d0:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Feb 12 15:07:59 2024 GMT
            Not After : Feb 10 15:12:59 2025 GMT
        Subject: CN=1B6EDBB289A118A72DA0CA359151CA9209BFCF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:fd:82:e3:15:28:31:00:b6:47:c1:0f:28:
                    37:8d:44:af:4b:a3:c7:4d:1d:80:d5:e5:42:fc:6f:
                    f5:93:da:ed:78:9d:8d:42:8f:7f:c8:d8:d3:09:10:
                    e8:ab:0b:6c:4a:03:cb:f6:7f:a7:8c:99:2e:56:2e:
                    27:fe:44:e0:d7:dc:b9:bd:58:0c:2e:83:7b:2c:13:
                    57:3c:6d:d6:6c:05:d0:3d:0d:9d:cf:f6:57:35:9d:
                    aa:55:51:71:0f:aa:69:02:84:be:74:f2:1c:9e:54:
                    3b:df:b3:7f:6c:77:cd:5a:d5:af:00:de:fe:83:42:
                    a9:58:fe:e5:78:ce:cb:c4:16:c8:3d:0d:a7:ab:c6:
                    fe:5c:bf:45:05:21:ff:99:e2:21:bd:ac:c2:f4:96:
                    09:f5:2f:a3:8e:f1:93:94:33:4d:35:11:5d:61:d6:
                    ed:bf:e9:46:e1:1c:a0:25:c4:a5:d4:b4:16:5d:1f:
                    7d:c9:a4:90:78:bd:88:49:c8:9a:0a:c3:23:5a:c0:
                    a2:98:72:49:6e:1e:4f:64:0e:31:40:b5:b3:fb:46:
                    af:5a:be:59:fa:4f:e7:ab:7d:8b:37:96:71:53:dd:
                    d7:c6:a2:bb:52:b9:6c:0e:53:b9:64:f7:81:dc:91:
                    0e:44:f9:1b:63:59:68:aa:f6:35:50:6c:f3:e7:ac:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6E:DB:B2:89:A1:18:A7:2D:A0:CA:35:91:51:CA:92:09:BF:CF:1D
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:60:79:dc:86:ed:73:68:5e:b2:c1:8c:21:3b:db:3d:29:
         e4:b4:31:3a:bf:2f:19:26:f9:29:62:86:bb:89:98:7f:33:b3:
         38:1d:14:98:f9:f9:67:ca:8f:07:7c:40:0a:1b:67:22:53:be:
         c4:4a:e8:26:96:9d:92:ee:30:90:5b:c7:8f:cc:b3:2b:f1:49:
         33:d1:45:35:9f:61:f2:be:04:d3:2d:4e:e6:4c:be:60:bd:b6:
         6d:26:4f:7a:9a:2c:02:a7:ac:59:4f:4e:1c:64:0a:4f:c4:23:
         b0:ca:88:48:98:de:72:97:d8:c2:78:62:e3:6c:84:2a:4d:0c:
         46:37:06:7f:4c:ac:6d:d0:e3:c6:1b:05:92:37:84:bd:a1:c4:
         d3:cd:51:c4:70:40:2d:a2:cf:7d:bc:32:85:ed:df:07:7e:ee:
         b9:7e:07:07:a8:f2:0f:ba:08:13:08:29:e0:e6:8a:de:5e:bf:
         0a:a0:3f:40:4c:d3:a3:c4:17:c8:86:ba:fc:b8:bc:e5:5c:8a:
         73:07:ef:1c:fb:79:85:cf:ef:a4:3e:d3:9e:98:45:cd:6a:50:
         39:95:78:1f:a2:4b:ea:12:e2:be:5f:62:e4:98:27:a5:b8:f0:
         d2:74:16:1f:67:3e:9e:15:57:9e:58:6d:7d:ef:0d:ad:23:c9:
         56:10:71:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQpUol9nnStIDtKBt772pwSLQj3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5RTAzRTMyNURCNTBFNTEyOUJFMUU5QTVEMkUwQTE5
ODQ0RUY4NDAeFw0yNDAyMTIxNTA3NTlaFw0yNTAyMTAxNTEyNTlaMDMxMTAvBgNV
BAMTKDFCNkVEQkIyODlBMTE4QTcyREEwQ0EzNTkxNTFDQTkyMDlCRkNGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnv2C4xUoMQC2R8EPKDeNRK9L
o8dNHYDV5UL8b/WT2u14nY1Cj3/I2NMJEOirC2xKA8v2f6eMmS5WLif+RODX3Lm9
WAwug3ssE1c8bdZsBdA9DZ3P9lc1napVUXEPqmkChL508hyeVDvfs39sd81a1a8A
3v6DQqlY/uV4zsvEFsg9Daerxv5cv0UFIf+Z4iG9rML0lgn1L6OO8ZOUM001EV1h
1u2/6UbhHKAlxKXUtBZdH33JpJB4vYhJyJoKwyNawKKYckluHk9kDjFAtbP7Rq9a
vln6T+erfYs3lnFT3dfGortSuWwOU7lk94HckQ5E+RtjWWiq9jVQbPPnrEkBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUG27bsomhGKctoMo1kVHKkgm/zx0wHwYDVR0j
BBgwFoAUzJ4D4yXbUOUSm+HppdLgoZhE74QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMC9DQzlFMDNFMzI1REI1MEU1MTI5QkUxRTlBNUQyRTBBMTk4NDRFRjg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDOUUwM0UzMjVEQjUwRTUx
MjlCRTFFOUE1RDJFMEExOTg0NEVGODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFaDANBgkqhkiG9w0BAQsFAAOCAQEAP/dg
edyG7XNoXrLBjCE72z0p5LQxOr8vGSb5KWKGu4mYfzOzOB0UmPn5Z8qPB3xAChtn
IlO+xEroJpadku4wkFvHj8yzK/FJM9FFNZ9h8r4E0y1O5ky+YL22bSZPeposAqes
WU9OHGQKT8QjsMqISJjecpfYwnhi42yEKk0MRjcGf0ysbdDjxhsFkjeEvaHE081R
xHBALaLPfbwyhe3fB37uuX4HB6jyD7oIEwgp4OaK3l6/CqA/QEzTo8QXyIa6/Li8
5VyKcwfvHPt5hc/vpD7TnphFzWpQOZV4H6JL6hLivl9i5Jgnpbjw0nQWH2c+nhVX
nlhtfe8NrSPJVhBxiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org