Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          y38pV2dvd1B3L1xy6Wv7QApM/nkpUyzXEds8Rbkdj98=
Subject key identifier:   59:43:FE:02:FB:82:AD:D2:8F:29:B3:FE:25:BE:7D:C4:CD:26:06:81
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       3C37DD1E659B8ED9587DFBF41DBB50ED96069230
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 31 Jan 2024 14:31:15 +0000
ROA not before:           Wed 31 Jan 2024 14:26:15 +0000
ROA not after:            Wed 29 Jan 2025 14:31:15 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:37:dd:1e:65:9b:8e:d9:58:7d:fb:f4:1d:bb:50:ed:96:06:92:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:15 2024 GMT
            Not After : Jan 29 14:31:15 2025 GMT
        Subject: CN=5943FE02FB82ADD28F29B3FE25BE7DC4CD260681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:f9:2a:cd:3d:bd:b0:eb:f1:a5:ff:23:fa:
                    f7:6f:94:04:2d:4e:60:fb:de:63:18:11:54:f7:b9:
                    ef:0c:e0:91:86:ce:44:db:d2:3b:b1:2d:60:db:b8:
                    3f:84:9e:5d:8d:96:84:0b:6a:ee:4e:7f:0c:c8:fd:
                    dd:3c:e0:1f:6c:5f:94:7a:84:ec:81:0f:99:94:e5:
                    14:b4:0f:17:d2:5b:03:8b:6d:3b:16:e8:46:3b:5f:
                    3d:2c:41:4f:b0:8a:ca:d3:4a:32:3d:73:f4:1b:72:
                    8c:ca:6e:89:3e:9e:ce:26:2b:96:fb:59:0e:cd:6d:
                    06:0a:a9:3d:96:5b:54:9f:06:c0:05:fb:73:5c:83:
                    c7:9e:8d:4b:d9:84:d1:b0:55:68:5b:df:50:3f:a3:
                    45:86:f6:7a:1e:69:1f:5d:a2:b4:3d:10:b5:5f:5b:
                    eb:18:66:4c:80:10:fb:0d:b6:2c:08:50:7e:5c:0e:
                    34:31:70:f8:53:5a:ef:2c:fc:97:55:3f:7b:48:ac:
                    ae:ab:b0:ed:55:48:63:a8:7d:6b:48:7b:29:53:20:
                    54:6a:5d:09:e1:ca:c5:1e:15:a7:42:3e:6d:f0:5d:
                    37:b6:18:15:cf:8e:19:f0:69:32:23:dd:30:36:e8:
                    0e:0b:f4:b8:88:9c:38:23:f5:76:12:7c:38:ac:be:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:FE:02:FB:82:AD:D2:8F:29:B3:FE:25:BE:7D:C4:CD:26:06:81
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:41:83:43:d6:af:92:fb:95:ef:a7:89:8f:fd:7b:de:9b:15:
         18:60:ca:d3:29:82:72:7f:fc:94:6e:b2:8b:fc:c2:39:53:12:
         39:8b:2e:a0:51:67:d7:c7:3d:6e:d8:62:0a:33:ea:5f:54:c5:
         59:84:89:15:a1:ef:a5:9a:e0:7e:64:e4:71:c1:e7:30:a0:df:
         27:9b:91:b6:26:61:86:37:e0:20:00:4c:fb:40:0d:46:04:66:
         7d:53:ed:7f:0e:0e:d5:4c:63:17:43:68:a8:89:ce:c9:bd:2b:
         03:80:cc:13:f8:dd:6e:99:15:d3:ee:68:71:0b:22:8f:f5:b5:
         5d:ea:31:82:19:4a:6d:03:e1:1f:28:5c:f8:6e:fb:e4:93:78:
         81:38:de:cd:47:94:ba:0f:69:8c:ed:d8:33:82:41:ac:d9:4e:
         af:d3:77:d5:ca:a6:1b:d6:87:01:63:f5:f4:ad:95:39:71:4e:
         ac:5c:c0:1c:56:96:ee:bd:80:e5:b2:50:b4:e4:57:58:97:8b:
         5e:45:17:c3:7c:29:fa:32:d7:ec:9a:7c:4b:b2:1d:a8:ae:c7:
         22:d8:3c:a5:13:36:58:6c:07:b6:1e:15:05:07:0a:07:64:a3:
         bc:43:1f:cf:5d:7c:58:9a:77:f2:c0:02:ca:e8:b4:ed:16:fd:
         e0:8f:11:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPDfdHmWbjtlYffv0HbtQ7ZYGkjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yNDAxMzExNDI2MTVaFw0yNTAxMjkxNDMxMTVaMDMxMTAvBgNV
BAMTKDU5NDNGRTAyRkI4MkFERDI4RjI5QjNGRTI1QkU3REM0Q0QyNjA2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFfkqzT29sOvxpf8j+vdvlAQt
TmD73mMYEVT3ue8M4JGGzkTb0juxLWDbuD+Enl2NloQLau5OfwzI/d084B9sX5R6
hOyBD5mU5RS0DxfSWwOLbTsW6EY7Xz0sQU+wisrTSjI9c/QbcozKbok+ns4mK5b7
WQ7NbQYKqT2WW1SfBsAF+3Ncg8eejUvZhNGwVWhb31A/o0WG9noeaR9dorQ9ELVf
W+sYZkyAEPsNtiwIUH5cDjQxcPhTWu8s/JdVP3tIrK6rsO1VSGOofWtIeylTIFRq
XQnhysUeFadCPm3wXTe2GBXPjhnwaTIj3TA26A4L9LiInDgj9XYSfDisvvo/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWUP+AvuCrdKPKbP+Jb59xM0mBoEwHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNjM4MmUzMjMyMzcyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo4ywwDQYJKoZIhvcNAQELBQADggEBAIRBg0PW
r5L7le+niY/9e96bFRhgytMpgnJ//JRusov8wjlTEjmLLqBRZ9fHPW7YYgoz6l9U
xVmEiRWh76Wa4H5k5HHB5zCg3yebkbYmYYY34CAATPtADUYEZn1T7X8ODtVMYxdD
aKiJzsm9KwOAzBP43W6ZFdPuaHELIo/1tV3qMYIZSm0D4R8oXPhu++STeIE43s1H
lLoPaYzt2DOCQazZTq/Td9XKphvWhwFj9fStlTlxTqxcwBxWlu69gOWyULTkV1iX
i15FF8N8Kfoy1+yafEuyHaiuxyLYPKUTNlhsB7YeFQUHCgdko7xDH89dfFiad/LA
AsrotO0W/eCPEfA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org