Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier:          C0YauVvq7zMJJqZ+pil+toLiCxN5OaiecVgnSt/B3ak=
Subject key identifier:   05:F6:1D:59:3F:2D:54:DE:42:A5:E4:74:3B:8E:95:53:EC:8B:70:33
Certificate issuer:       /CN=A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC
Certificate serial:       6E25CAE426B7D977E8B7E625892CFBDC65E50F3F
Authority key identifier: A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time:             Thu 18 Jan 2024 13:12:56 +0000
ROA not before:           Thu 18 Jan 2024 13:07:56 +0000
ROA not after:            Thu 16 Jan 2025 13:12:56 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:25:ca:e4:26:b7:d9:77:e8:b7:e6:25:89:2c:fb:dc:65:e5:0f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC
        Validity
            Not Before: Jan 18 13:07:56 2024 GMT
            Not After : Jan 16 13:12:56 2025 GMT
        Subject: CN=05F61D593F2D54DE42A5E4743B8E9553EC8B7033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:2a:63:97:27:15:1f:ef:b8:e4:2f:49:b1:
                    4c:78:7f:1d:12:e7:f2:2d:36:1f:f2:5a:80:78:1b:
                    39:65:03:f4:42:2f:2d:1d:b0:e1:fb:73:6b:2d:26:
                    12:1f:e3:35:e7:d6:76:ce:dd:17:f9:31:4d:f3:7e:
                    f7:06:2e:05:66:3c:df:5c:1f:7f:d9:0f:54:21:92:
                    f7:67:5d:5a:a4:a3:aa:6a:c5:e5:54:5a:a6:ca:9e:
                    af:79:23:6e:a9:23:8f:74:06:83:d6:35:d2:96:db:
                    08:55:7e:b4:12:26:79:49:4d:4c:62:67:ec:86:a3:
                    18:8d:e8:80:1c:3e:e3:30:6e:f4:62:6f:72:59:24:
                    ee:6b:bc:bd:4a:8d:2e:91:02:5a:c8:91:12:f4:e1:
                    03:f1:ba:65:83:d6:4b:45:c4:3d:e3:98:f8:16:87:
                    fa:39:03:09:27:f7:f7:01:df:3b:8e:44:50:63:5f:
                    a0:d2:d3:cc:61:fa:5f:2f:12:2a:a2:d0:ef:15:1a:
                    04:01:50:95:f9:9d:9a:c2:df:57:0f:f8:f8:ba:cf:
                    ec:66:f4:3f:df:e9:47:fd:10:70:ec:8a:5d:45:3a:
                    a1:b6:1c:b5:04:ef:a3:65:c9:59:72:fc:e4:00:25:
                    77:3e:3e:31:74:e9:30:28:24:ff:a7:d2:76:aa:cd:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:1D:59:3F:2D:54:DE:42:A5:E4:74:3B:8E:95:53:EC:8B:70:33
            X509v3 Authority Key Identifier:
                keyid:A4:A2:14:7C:82:6A:A0:9B:EB:65:79:77:5A:08:DA:C3:E4:E9:DB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A2147C826AA09BEB6579775A08DAC3E4E9DBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:12:3a:b5:9f:10:50:0d:31:86:3f:b9:ba:8e:d6:cc:ae:
         bb:f7:95:7d:f3:a5:fb:8b:0f:cf:c5:05:9e:3e:63:dd:f4:0c:
         57:98:08:b7:9f:36:26:32:25:ad:e6:1f:16:58:66:f8:75:c9:
         41:79:bd:33:0b:30:a1:20:a4:41:ba:8d:2d:54:84:33:5a:d1:
         2d:b4:2f:12:55:98:f0:48:7f:4e:d1:4d:9b:11:f9:40:8c:30:
         6a:74:0d:a3:c7:71:50:68:96:8b:ec:b6:ad:ce:b1:71:fb:b4:
         93:13:09:c1:21:46:ac:a9:2c:f2:76:be:e4:99:af:3a:52:6a:
         ea:b7:62:1b:fc:bb:20:24:06:0c:2e:1a:5f:5e:c6:e4:e6:4a:
         50:5d:48:89:64:87:fe:d7:dd:a1:c9:01:73:f9:04:be:8a:a3:
         01:84:e1:17:32:60:13:2d:d7:54:cd:b4:83:97:44:77:ce:82:
         2d:07:c4:1d:2a:25:81:bf:0c:90:09:83:87:e1:e1:b1:8d:df:
         71:ee:cb:c4:db:bf:ce:cb:18:7c:e3:9a:9a:01:d6:0e:cb:1c:
         b9:81:49:47:a9:3e:37:b6:aa:65:bd:88:fb:cb:a6:b2:20:50:
         16:94:70:b7:99:a0:0d:21:de:2c:52:1d:fe:54:dd:00:db:a9:
         c4:37:0a:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbiXK5Ca32Xfot+YliSz73GXlDz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBMjE0N0M4MjZBQTA5QkVCNjU3OTc3NUEwOERBQzNF
NEU5REJEQzAeFw0yNDAxMTgxMzA3NTZaFw0yNTAxMTYxMzEyNTZaMDMxMTAvBgNV
BAMTKDA1RjYxRDU5M0YyRDU0REU0MkE1RTQ3NDNCOEU5NTUzRUM4QjcwMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbPypjlycVH++45C9JsUx4fx0S
5/ItNh/yWoB4GzllA/RCLy0dsOH7c2stJhIf4zXn1nbO3Rf5MU3zfvcGLgVmPN9c
H3/ZD1QhkvdnXVqko6pqxeVUWqbKnq95I26pI490BoPWNdKW2whVfrQSJnlJTUxi
Z+yGoxiN6IAcPuMwbvRib3JZJO5rvL1KjS6RAlrIkRL04QPxumWD1ktFxD3jmPgW
h/o5Awkn9/cB3zuORFBjX6DS08xh+l8vEiqi0O8VGgQBUJX5nZrC31cP+Pi6z+xm
9D/f6Uf9EHDsil1FOqG2HLUE76NlyVly/OQAJXc+PjF06TAoJP+n0naqzQLZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBfYdWT8tVN5CpeR0O46VU+yLcDMwHwYDVR0j
BBgwFoAUpKIUfIJqoJvrZXl3Wgjaw+Tp29wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4
cTQvMS9BNEEyMTQ3QzgyNkFBMDlCRUI2NTc5Nzc1QTA4REFDM0U0RTlEQkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0QTIxNDdDODI2QUEwOUJF
QjY1Nzk3NzVBMDhEQUMzRTRFOURCREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhbmhHWGNHYmU3bXpIU2RYUzFaMWY0cGhjU0NFelBSSFJvc1dRcWVleHE0LzEv
MzEzNjM4MmUzMjMyMzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo45wwDQYJKoZIhvcNAQELBQADggEBABuGEjq1
nxBQDTGGP7m6jtbMrrv3lX3zpfuLD8/FBZ4+Y930DFeYCLefNiYyJa3mHxZYZvh1
yUF5vTMLMKEgpEG6jS1UhDNa0S20LxJVmPBIf07RTZsR+UCMMGp0DaPHcVBolovs
tq3OsXH7tJMTCcEhRqypLPJ2vuSZrzpSauq3Yhv8uyAkBgwuGl9exuTmSlBdSIlk
h/7X3aHJAXP5BL6KowGE4RcyYBMt11TNtIOXRHfOgi0HxB0qJYG/DJAJg4fh4bGN
33Huy8Tbv87LGHzjmpoB1g7LHLmBSUepPje2qmW9iPvLprIgUBaUcLeZoA0h3ixS
Hf5U3QDbqcQ3CrA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org