Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
File:                     3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          UyGWLEDCVoIuwt+fxEyxXqGHKICdiCyULTV8uYAMnOk=
Subject key identifier:   80:6F:59:7A:A1:9C:6B:12:53:C6:F7:55:1F:9F:EA:A0:DE:85:B7:6B
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       4C51C86FA0755E1E32BC29251B5307ABDB0CD6D8
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        192.12.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:c8:6f:a0:75:5e:1e:32:bc:29:25:1b:53:07:ab:db:0c:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=806F597AA19C6B1253C6F7551F9FEAA0DE85B76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:96:fa:28:c4:56:59:f9:a3:98:b8:3a:2e:
                    30:06:eb:8e:6d:03:8d:f5:41:15:27:60:25:b1:bf:
                    f3:8d:fe:d2:a3:d1:53:7e:c8:8d:82:91:f0:4d:c6:
                    89:57:44:91:f7:a6:fd:ec:38:46:03:f5:9e:f0:3c:
                    53:ab:e3:26:60:a9:dc:7d:03:4f:82:e2:82:65:c9:
                    cf:f2:96:c1:06:21:ea:85:09:1e:d1:03:2a:f6:8a:
                    e1:ba:cd:dd:9c:60:32:c5:50:26:9e:5a:01:16:18:
                    1c:b6:d6:94:d2:83:f7:33:ed:55:27:c2:1c:d5:b8:
                    36:92:ac:73:d0:fd:d2:da:ac:d4:b9:cc:0c:e2:55:
                    1f:fc:ee:6f:b1:89:5a:74:f2:2c:f8:ce:aa:90:b8:
                    c5:24:1d:17:26:18:7e:23:61:c6:f6:c8:f6:7e:e6:
                    94:3f:54:26:64:82:73:50:a5:54:ef:f2:1c:ac:96:
                    4f:ba:bd:81:f9:28:85:63:72:ff:d2:33:78:00:ba:
                    0e:82:88:6d:cc:18:ab:26:a6:68:51:1a:31:72:8a:
                    f9:fd:9e:b5:da:97:2f:aa:27:b3:91:ff:38:93:54:
                    86:c3:cd:c1:bc:9b:f5:82:37:b1:f9:60:46:91:10:
                    9a:cc:86:c5:40:b5:6e:15:87:2a:8b:12:d1:81:5b:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:59:7A:A1:9C:6B:12:53:C6:F7:55:1F:9F:EA:A0:DE:85:B7:6B
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:39:c5:15:44:1f:98:4c:ad:1a:d6:8e:d1:22:f5:d5:36:fb:
         90:01:e2:ce:07:01:e5:3a:90:7b:30:dd:86:4a:cc:6a:42:d7:
         7d:fc:43:e5:35:2c:d4:07:c9:8c:e5:40:88:76:7d:61:ac:b2:
         55:6e:57:0e:e7:10:1d:b8:9f:6d:b8:5c:9e:cb:f9:62:b5:b7:
         21:d4:bd:d2:0e:fa:d7:c2:59:24:b6:4c:62:a6:ac:64:56:15:
         76:da:3a:33:b9:b0:55:38:af:2a:d3:13:4a:30:24:dc:84:db:
         9d:dd:b5:f9:14:ad:36:36:f0:25:1c:d2:71:32:c1:09:a3:e5:
         9a:88:ee:7b:ea:4e:82:37:87:61:be:08:69:3d:ff:9a:aa:37:
         51:55:e7:b3:54:7e:7a:4e:28:44:9e:cd:8a:53:85:2e:34:95:
         5c:fd:d6:60:d4:f8:f9:ab:f9:27:9f:5d:b4:4f:20:29:ff:31:
         81:63:0e:61:49:4c:35:11:f1:12:a4:1f:87:85:bd:70:fc:4e:
         c0:df:59:8c:d9:89:5a:b1:e5:d8:48:65:cf:07:61:58:f9:70:
         4a:b3:28:29:e5:d2:ad:86:36:87:b7:fd:b1:02:57:81:03:55:
         70:46:06:f8:e7:9c:d8:7e:a5:1d:42:3a:56:62:7f:d9:9b:bb:
         ad:5b:d7:32
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTFHIb6B1Xh4yvCklG1MHq9sM1tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExOEMwQ0QyRDNEQkY3RDZFNTY0MTUzNTlENEVENUJC
RkI5QjlCMDAeFw0yNDA0MDQwMTU4MDZaFw0yNTA0MDMwMjAzMDZaMDMxMTAvBgNV
BAMTKDgwNkY1OTdBQTE5QzZCMTI1M0M2Rjc1NTFGOUZFQUEwREU4NUI3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNpb6KMRWWfmjmLg6LjAG645t
A431QRUnYCWxv/ON/tKj0VN+yI2CkfBNxolXRJH3pv3sOEYD9Z7wPFOr4yZgqdx9
A0+C4oJlyc/ylsEGIeqFCR7RAyr2iuG6zd2cYDLFUCaeWgEWGBy21pTSg/cz7VUn
whzVuDaSrHPQ/dLarNS5zAziVR/87m+xiVp08iz4zqqQuMUkHRcmGH4jYcb2yPZ+
5pQ/VCZkgnNQpVTv8hyslk+6vYH5KIVjcv/SM3gAug6CiG3MGKsmpmhRGjFyivn9
nrXaly+qJ7OR/ziTVIbDzcG8m/WCN7H5YEaREJrMhsVAtW4VhyqLEtGBW+oRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgG9ZeqGcaxJTxvdVH5/qoN6Ft2swHwYDVR0j
BBgwFoAU8RjAzS09v31uVkFTWdTtW7+5ubAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMS9GMTE4QzBDRDJEM0RCRjdENkU1NjQxNTM1OUQ0RUQ1QkJGQjlCOUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMThDMENEMkQzREJGN0Q2
RTU2NDE1MzU5RDRFRDVCQkZCOUI5QjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzEv
MzEzOTMyMmUzMTMyMmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCwAxwMA0GCSqGSIb3DQEBCwUAA4IBAQA1OcUVRB+Y
TK0a1o7RIvXVNvuQAeLOBwHlOpB7MN2GSsxqQtd9/EPlNSzUB8mM5UCIdn1hrLJV
blcO5xAduJ9tuFyey/litbch1L3SDvrXwlkktkxipqxkVhV22jozubBVOK8q0xNK
MCTchNud3bX5FK02NvAlHNJxMsEJo+WaiO576k6CN4dhvghpPf+aqjdRVeezVH56
TihEns2KU4UuNJVc/dZg1Pj5q/knn120TyAp/zGBYw5hSUw1EfESpB+Hhb1w/E7A
31mM2YlaseXYSGXPB2FY+XBKsygp5dKthjaHt/2xAleBA1VwRgb455zYfqUdQjpW
Yn/Zm7utW9cy
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org