Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier:          nKUmGjVIteIH5LZ5Fg8vZpywlUEwgUevkXYuvuxRZVk=
Subject key identifier:   11:4D:A7:8E:26:52:86:AF:58:52:7C:1D:52:3F:B9:A3:B8:24:8D:60
Certificate issuer:       /CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
Certificate serial:       4E876E9821E990C24E313AEFA8AF646E590E2325
Authority key identifier: F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time:             Thu 04 Apr 2024 00:44:08 +0000
ROA not before:           Thu 04 Apr 2024 00:39:08 +0000
ROA not after:            Thu 03 Apr 2025 00:44:08 +0000
asID:                     52898
IP address blocks:        168.227.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:87:6e:98:21:e9:90:c2:4e:31:3a:ef:a8:af:64:6e:59:0e:23:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04C5BE56636FECD8FEB78C2DCA56474B81F818B
        Validity
            Not Before: Apr  4 00:39:08 2024 GMT
            Not After : Apr  3 00:44:08 2025 GMT
        Subject: CN=114DA78E265286AF58527C1D523FB9A3B8248D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:2c:b4:2c:ff:e3:d1:a7:9a:bb:2b:a6:c6:
                    e3:37:72:72:22:b0:c9:d8:37:a8:69:03:36:bf:d5:
                    51:a1:41:92:2f:71:1e:3b:24:20:36:97:06:45:c8:
                    f3:a0:03:16:8e:fa:21:0c:65:64:2f:74:ee:de:54:
                    e5:bc:43:f4:46:c2:64:a1:11:94:73:3b:a4:1b:a2:
                    2e:ab:de:5a:fe:9e:4b:03:5e:be:cd:93:51:26:ed:
                    f8:59:d1:be:e3:98:11:3f:6d:76:fc:7d:0c:7b:1e:
                    a1:6a:e6:a7:3c:68:3f:84:c8:39:38:25:ee:2b:63:
                    a1:ee:ea:e4:8f:27:77:30:fc:98:d4:4f:31:4a:1b:
                    c4:d0:9a:c8:df:e2:ce:0e:d5:30:50:85:16:58:9e:
                    0c:66:0c:86:06:f9:1e:a7:2b:bd:7b:f5:99:8a:8e:
                    cb:8e:49:87:38:7c:1b:0e:d2:a0:5d:1e:ab:ff:14:
                    dd:a7:d4:2f:1e:17:85:d9:0d:61:68:36:e7:2b:6d:
                    5c:b7:26:27:a1:5c:da:fb:d4:31:45:13:ea:59:34:
                    d2:dc:dc:f4:8f:73:6a:67:f7:49:c2:93:09:67:6f:
                    24:e2:ad:b3:ed:4a:ea:9c:d3:15:e8:e9:0d:b8:1e:
                    f2:8c:1b:ce:5a:e9:b9:ca:13:12:00:71:f1:1e:cb:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:A7:8E:26:52:86:AF:58:52:7C:1D:52:3F:B9:A3:B8:24:8D:60
            X509v3 Authority Key Identifier:
                keyid:F0:4C:5B:E5:66:36:FE:CD:8F:EB:78:C2:DC:A5:64:74:B8:1F:81:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F04C5BE56636FECD8FEB78C2DCA56474B81F818B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/2/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:d9:88:ac:0d:f8:60:b2:19:27:20:4c:a5:ab:fc:6a:96:
         0e:25:e3:f8:9b:5b:48:15:dc:f2:39:3b:c4:36:1c:d7:df:7c:
         d5:91:93:69:e8:60:a2:9d:65:a5:77:a1:50:0b:3b:92:9d:0c:
         fc:8f:55:d9:c5:2e:b8:15:47:5b:14:b9:b9:80:17:4e:9b:30:
         d2:db:3f:f7:27:17:d1:1e:8d:fa:07:59:d9:99:85:67:c9:1a:
         7d:c1:74:5f:7c:70:2a:ce:d3:54:2a:c4:82:7e:b4:81:1a:97:
         f0:67:b6:3d:8e:49:e3:8a:67:ef:d2:61:72:f2:f0:46:6b:f4:
         17:07:c2:f6:fd:38:07:0c:96:7b:a5:06:f1:07:4a:16:ba:f0:
         79:55:71:91:9e:93:96:fd:71:e3:47:a0:8f:68:e6:41:fd:9b:
         5f:79:69:36:cc:f1:cd:af:96:b4:1f:27:f5:f9:29:3e:9c:86:
         ad:7d:6a:26:cf:d0:5c:e6:36:b1:06:08:ee:ca:5a:28:0d:d0:
         0e:3e:d6:f1:7a:35:09:9d:28:40:8b:a1:c2:0e:71:ee:04:7c:
         c5:93:79:7d:ae:de:8d:cd:e6:4f:8e:fa:ca:0a:c8:13:99:f9:
         0c:4f:ea:07:07:1e:47:25:71:0f:8e:67:7f:db:c5:9a:4c:98:
         9a:21:e6:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTodumCHpkMJOMTrvqK9kblkOIyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0QzVCRTU2NjM2RkVDRDhGRUI3OEMyRENBNTY0NzRC
ODFGODE4QjAeFw0yNDA0MDQwMDM5MDhaFw0yNTA0MDMwMDQ0MDhaMDMxMTAvBgNV
BAMTKDExNERBNzhFMjY1Mjg2QUY1ODUyN0MxRDUyM0ZCOUEzQjgyNDhENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNViy0LP/j0aeauyumxuM3cnIi
sMnYN6hpAza/1VGhQZIvcR47JCA2lwZFyPOgAxaO+iEMZWQvdO7eVOW8Q/RGwmSh
EZRzO6Qboi6r3lr+nksDXr7Nk1Em7fhZ0b7jmBE/bXb8fQx7HqFq5qc8aD+EyDk4
Je4rY6Hu6uSPJ3cw/JjUTzFKG8TQmsjf4s4O1TBQhRZYngxmDIYG+R6nK7179ZmK
jsuOSYc4fBsO0qBdHqv/FN2n1C8eF4XZDWFoNucrbVy3JiehXNr71DFFE+pZNNLc
3PSPc2pn90nCkwlnbyTirbPtSuqc0xXo6Q24HvKMG85a6bnKExIAcfEey/95AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEU2njiZShq9YUnwdUj+5o7gkjWAwHwYDVR0j
BBgwFoAU8Exb5WY2/s2P63jC3KVkdLgfgYswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4
cTQvMi9GMDRDNUJFNTY2MzZGRUNEOEZFQjc4QzJEQ0E1NjQ3NEI4MUY4MThCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwNEM1QkU1NjYzNkZFQ0Q4
RkVCNzhDMkRDQTU2NDc0QjgxRjgxOEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhbmhHWGNHYmU3bXpIU2RYUzFaMWY0cGhjU0NFelBSSFJvc1dRcWVleHE0LzIv
MzEzNjM4MmUzMjMyMzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo45wwDQYJKoZIhvcNAQELBQADggEBABVv2Yis
DfhgshknIEylq/xqlg4l4/ibW0gV3PI5O8Q2HNfffNWRk2noYKKdZaV3oVALO5Kd
DPyPVdnFLrgVR1sUubmAF06bMNLbP/cnF9EejfoHWdmZhWfJGn3BdF98cCrO01Qq
xIJ+tIEal/Bntj2OSeOKZ+/SYXLy8EZr9BcHwvb9OAcMlnulBvEHSha68HlVcZGe
k5b9ceNHoI9o5kH9m195aTbM8c2vlrQfJ/X5KT6chq19aibP0FzmNrEGCO7KWigN
0A4+1vF6NQmdKECLocIOce4EfMWTeX2u3o3N5k+O+soKyBOZ+QxP6gcHHkclcQ+O
Z3/bxZpMmJoh5h0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org