Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa
File:                     3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          bduSEm085o1OCPPmqqlq6jhFuhnUhmlbR2XZod4TnCY=
Subject key identifier:   6A:14:9F:54:5F:45:17:6C:EE:69:90:F9:2B:7A:B3:2F:3D:CA:21:94
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       150BC33224DF021D27E81DC3215FD161C6DB4EBF
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:30 +0000
ROA not before:           Mon 08 Apr 2024 20:00:30 +0000
ROA not after:            Mon 07 Apr 2025 20:05:30 +0000
asID:                     28220
IP address blocks:        168.227.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0b:c3:32:24:df:02:1d:27:e8:1d:c3:21:5f:d1:61:c6:db:4e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:30 2024 GMT
            Not After : Apr  7 20:05:30 2025 GMT
        Subject: CN=6A149F545F45176CEE6990F92B7AB32F3DCA2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:40:ca:e3:f2:03:20:b4:f9:02:12:d2:c5:
                    dc:96:c0:e8:5f:5a:0a:50:03:cb:2e:33:12:a1:9b:
                    e0:a0:73:ef:b0:23:79:0a:a2:d7:1e:2d:05:e6:c9:
                    11:d5:c8:07:5a:2d:9d:a0:08:45:be:21:ad:31:ee:
                    fb:87:99:5d:ef:c1:8d:24:e5:86:ac:7f:b2:f0:90:
                    c3:89:fb:bc:6e:63:0b:3a:bf:b4:ec:0b:49:0c:7d:
                    e6:29:72:b8:99:30:57:a6:e7:41:0a:12:f2:47:0a:
                    ea:da:34:04:1f:7b:23:d7:ae:c9:a9:ea:24:ed:d4:
                    26:47:be:6b:f1:f4:df:41:74:c2:03:79:14:3a:5e:
                    75:3b:e8:16:48:f2:04:08:58:e5:47:97:33:13:44:
                    fc:67:d4:77:6e:65:21:9d:7a:92:73:37:58:8f:fb:
                    80:84:ae:84:cb:96:9b:4d:83:01:17:cf:01:6f:9a:
                    93:f4:e0:bb:26:14:1d:5a:c5:2f:78:bb:5e:c9:e2:
                    41:34:b5:43:52:be:a1:8e:5d:41:cc:fc:f0:f2:d3:
                    64:4e:57:2d:dc:85:c9:99:4b:c9:34:53:06:f7:c4:
                    d6:f5:e3:c3:e4:97:9a:4a:79:8e:63:24:dc:a5:95:
                    97:c2:88:a6:a8:72:42:ae:f6:60:f4:89:b5:eb:72:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:14:9F:54:5F:45:17:6C:EE:69:90:F9:2B:7A:B3:2F:3D:CA:21:94
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:3f:9e:73:63:3f:37:4d:6c:50:f2:6b:e2:8e:27:17:83:
         95:7b:21:69:ed:a6:ed:a6:28:ba:6f:68:7f:f9:03:4e:ce:c9:
         d6:e1:ba:61:ff:dd:b1:73:75:f4:22:c1:e7:69:20:15:d4:35:
         b6:bd:68:0d:d2:a7:e4:22:62:1f:4b:b9:c3:a7:d1:43:72:c2:
         d1:8f:55:67:f8:52:3e:45:61:7e:1e:57:47:f7:94:5b:dc:bf:
         ab:6c:54:7c:d8:9d:d5:33:f9:6c:47:39:93:9f:c2:63:94:f3:
         0b:00:07:f6:2b:7f:5c:ec:d1:9f:59:20:6f:8e:f5:63:34:b5:
         7c:2c:63:dc:ad:c0:c0:e4:08:00:47:1d:5e:08:6b:f4:c3:67:
         35:a4:a6:ec:92:24:e9:d5:c7:63:f2:45:06:b7:c1:ea:f0:d8:
         d7:94:d0:52:81:ef:a8:16:75:6a:05:c5:72:81:2c:57:81:c3:
         a7:73:90:56:80:06:08:2f:4d:e7:32:3b:6e:d2:b0:31:a3:01:
         24:cc:ef:5d:00:0d:e3:9f:86:25:78:e9:ec:4b:23:d9:5f:2b:
         22:5a:dc:46:09:8f:31:c8:2c:e8:85:f8:17:93:b3:79:49:b3:
         a2:5b:24:0a:3f:00:e9:44:9d:ef:d5:8a:7f:a9:3a:aa:a8:54:
         0b:97:b5:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFQvDMiTfAh0n6B3DIV/RYcbbTr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMzBaFw0yNTA0MDcyMDA1MzBaMDMxMTAvBgNV
BAMTKDZBMTQ5RjU0NUY0NTE3NkNFRTY5OTBGOTJCN0FCMzJGM0RDQTIxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo/EDK4/IDILT5AhLSxdyWwOhf
WgpQA8suMxKhm+Cgc++wI3kKotceLQXmyRHVyAdaLZ2gCEW+Ia0x7vuHmV3vwY0k
5Yasf7LwkMOJ+7xuYws6v7TsC0kMfeYpcriZMFem50EKEvJHCuraNAQfeyPXrsmp
6iTt1CZHvmvx9N9BdMIDeRQ6XnU76BZI8gQIWOVHlzMTRPxn1HduZSGdepJzN1iP
+4CEroTLlptNgwEXzwFvmpP04LsmFB1axS94u17J4kE0tUNSvqGOXUHM/PDy02RO
Vy3chcmZS8k0Uwb3xNb148Pkl5pKeY5jJNyllZfCiKaockKu9mD0ibXrckrHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUahSfVF9FF2zuaZD5K3qzLz3KIZQwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo42wwDQYJKoZIhvcNAQELBQADggEBAD4HP55z
Yz83TWxQ8mvijicXg5V7IWntpu2mKLpvaH/5A07OydbhumH/3bFzdfQiwedpIBXU
Nba9aA3Sp+QiYh9LucOn0UNywtGPVWf4Uj5FYX4eV0f3lFvcv6tsVHzYndUz+WxH
OZOfwmOU8wsAB/Yrf1zs0Z9ZIG+O9WM0tXwsY9ytwMDkCABHHV4Ia/TDZzWkpuyS
JOnVx2PyRQa3werw2NeU0FKB76gWdWoFxXKBLFeBw6dzkFaABggvTecyO27SsDGj
ASTM710ADeOfhiV46exLI9lfKyJa3EYJjzHILOiF+BeTs3lJs6JbJAo/AOlEne/V
in+pOqqoVAuXtUk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org