Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          ZcFRfVA7VgyZNB28gQppXvx1XEzz6pBv5MRZpsmXcOs=
Subject key identifier:   14:49:24:42:A8:6E:B5:F8:8C:90:02:B8:25:FC:CC:B2:95:F7:63:84
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       19DBC7F587E4D8E5A2789DED37EC1631AF1A6DE5
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa
Signing time:             Tue 06 Feb 2024 11:31:18 +0000
ROA not before:           Tue 06 Feb 2024 11:26:18 +0000
ROA not after:            Tue 04 Feb 2025 11:31:18 +0000
asID:                     262509
IP address blocks:        168.121.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:db:c7:f5:87:e4:d8:e5:a2:78:9d:ed:37:ec:16:31:af:1a:6d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Feb  6 11:26:18 2024 GMT
            Not After : Feb  4 11:31:18 2025 GMT
        Subject: CN=14492442A86EB5F88C9002B825FCCCB295F76384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ce:5a:18:2e:5d:f9:e3:da:74:8e:c7:19:5f:
                    88:b5:4e:ed:fb:60:5f:a7:78:a4:dd:1f:f8:53:79:
                    2a:4e:1d:4c:6e:88:85:68:79:8b:93:5e:4d:18:fd:
                    8e:7e:0e:f9:d1:14:12:9f:18:45:61:c4:4a:8e:06:
                    68:67:9f:7f:e7:05:41:55:29:a3:5e:20:4a:26:cc:
                    0a:4d:f1:3c:fa:24:23:65:6d:4f:ae:a7:74:c8:2b:
                    71:68:92:63:ac:b2:ba:53:e3:2b:a3:68:79:ca:17:
                    37:1b:fe:55:b4:94:0a:8a:3c:0e:da:48:ed:ae:49:
                    5b:56:8e:c0:02:77:ef:9b:e2:5f:03:ea:9b:6d:a6:
                    14:c6:27:57:36:75:c5:b7:b7:f9:5d:ee:db:5f:f4:
                    95:47:82:31:2a:87:70:69:4f:ed:33:cb:57:78:70:
                    05:f1:be:a1:65:26:ca:7a:89:c8:33:d5:91:8a:09:
                    d7:8f:02:62:51:91:f5:4f:c1:65:3f:2e:91:0c:48:
                    6b:6d:af:9a:99:61:53:0a:16:19:91:98:52:2d:2f:
                    47:6b:cb:66:63:a0:db:7e:42:02:d4:60:1f:5b:03:
                    bb:4e:c5:45:00:86:1e:e5:e2:19:6d:5b:7c:cb:d9:
                    42:5d:6a:aa:59:e4:9b:ce:9c:62:87:59:24:80:36:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:49:24:42:A8:6E:B5:F8:8C:90:02:B8:25:FC:CC:B2:95:F7:63:84
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:2c:07:7b:3f:6f:c8:c6:da:2c:8e:aa:12:9a:6e:20:0e:
         cc:8b:44:1c:bd:f0:bc:41:d2:d2:1d:e9:65:9c:dd:23:6e:23:
         ae:53:dc:48:45:ec:13:f0:ad:6c:eb:bb:ad:a8:5a:11:44:61:
         4a:fa:58:d3:fe:8f:28:c0:ed:ea:09:af:0b:51:d2:b1:18:e4:
         81:1b:47:c3:60:b0:3a:34:43:8b:94:bc:04:70:22:2c:8e:a0:
         aa:65:d0:62:10:2b:06:08:21:27:c4:bc:18:05:56:bf:99:93:
         e7:3c:8f:7f:34:98:74:4e:d0:60:dd:9e:1f:b4:3c:31:0a:5d:
         24:1d:c5:0c:d3:db:5d:e9:52:17:1f:94:e2:ad:a6:01:d8:58:
         89:16:de:15:c8:04:6a:0d:e9:0e:1f:c0:14:0c:8d:e3:e6:8b:
         57:1d:10:9d:06:fe:24:aa:e8:df:85:39:8b:e5:ed:38:38:3b:
         15:15:b6:b5:ae:a3:37:ff:e5:53:5b:82:4f:23:0e:de:60:f8:
         50:ba:99:d4:f9:79:49:4b:c4:91:e8:88:56:b9:b6:7c:d3:74:
         f3:db:1e:32:b4:75:a0:0f:e4:33:93:9e:93:cf:c5:53:44:fb:
         44:bd:87:9b:f6:3b:c4:43:41:92:45:8a:ad:99:f8:0c:eb:01:
         c3:32:fa:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGdvH9Yfk2OWieJ3tN+wWMa8abeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yNDAyMDYxMTI2MThaFw0yNTAyMDQxMTMxMThaMDMxMTAvBgNV
BAMTKDE0NDkyNDQyQTg2RUI1Rjg4QzkwMDJCODI1RkNDQ0IyOTVGNzYzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8zloYLl3549p0jscZX4i1Tu37
YF+neKTdH/hTeSpOHUxuiIVoeYuTXk0Y/Y5+DvnRFBKfGEVhxEqOBmhnn3/nBUFV
KaNeIEomzApN8Tz6JCNlbU+up3TIK3FokmOssrpT4yujaHnKFzcb/lW0lAqKPA7a
SO2uSVtWjsACd++b4l8D6pttphTGJ1c2dcW3t/ld7ttf9JVHgjEqh3BpT+0zy1d4
cAXxvqFlJsp6icgz1ZGKCdePAmJRkfVPwWU/LpEMSGttr5qZYVMKFhmRmFItL0dr
y2ZjoNt+QgLUYB9bA7tOxUUAhh7l4hltW3zL2UJdaqpZ5JvOnGKHWSSANqRzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFEkkQqhutfiMkAK4JfzMspX3Y4QwHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNjM4MmUzMTMyMzEyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeTQwDQYJKoZIhvcNAQELBQADggEBAFCiLAd7
P2/IxtosjqoSmm4gDsyLRBy98LxB0tId6WWc3SNuI65T3EhF7BPwrWzru62oWhFE
YUr6WNP+jyjA7eoJrwtR0rEY5IEbR8NgsDo0Q4uUvARwIiyOoKpl0GIQKwYIISfE
vBgFVr+Zk+c8j380mHRO0GDdnh+0PDEKXSQdxQzT213pUhcflOKtpgHYWIkW3hXI
BGoN6Q4fwBQMjePmi1cdEJ0G/iSq6N+FOYvl7Tg4OxUVtrWuozf/5VNbgk8jDt5g
+FC6mdT5eUlLxJHoiFa5tnzTdPPbHjK0daAP5DOTnpPPxVNE+0S9h5v2O8RDQZJF
iq2Z+AzrAcMy+uQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org