Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa
File:                     3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa (raw, json)
Hash identifier:          YiqJoX4W/Uu+LJT650cs4o3403KTGxvYXLhW0thPKvw=
Subject key identifier:   94:24:6A:BC:E9:54:A6:53:59:87:B7:0E:33:C1:3F:57:09:AD:0A:38
Certificate issuer:       /CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
Certificate serial:       4AD3CC8718196BAB74F51B4A5F41E1B4CA0A5F9F
Authority key identifier: FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa
Signing time:             Mon 01 Jul 2024 02:22:24 +0000
ROA not before:           Mon 01 Jul 2024 02:17:24 +0000
ROA not after:            Mon 30 Jun 2025 02:22:24 +0000
asID:                     264910
IP address blocks:        168.227.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d3:cc:87:18:19:6b:ab:74:f5:1b:4a:5f:41:e1:b4:ca:0a:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
        Validity
            Not Before: Jul  1 02:17:24 2024 GMT
            Not After : Jun 30 02:22:24 2025 GMT
        Subject: CN=94246ABCE954A6535987B70E33C13F5709AD0A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:26:ac:1d:17:fc:2e:d1:01:cf:18:a5:ce:
                    ed:34:06:49:07:ba:ce:1e:f4:c5:d8:e3:e2:39:d0:
                    09:71:95:0d:19:93:28:05:a5:5b:98:46:24:b1:3d:
                    71:be:10:2b:4b:0a:00:16:6b:6f:b1:86:21:62:f1:
                    73:ac:72:04:33:ad:fa:cf:4b:bd:0e:e1:c3:1b:9d:
                    09:fc:10:e2:e8:f9:75:ad:ab:a0:8e:f8:39:53:b3:
                    7e:39:c1:49:b7:6a:88:65:4f:35:9d:df:75:61:9d:
                    2e:97:b1:2c:be:49:51:9c:c6:83:bd:46:8e:84:ef:
                    1d:35:c5:89:ac:a6:98:f5:81:40:02:5c:48:a7:8c:
                    7f:00:ec:75:d3:32:67:50:c5:0b:2e:ed:22:5f:d3:
                    7e:95:3a:cb:90:5c:42:33:a9:c4:e9:06:cf:d7:cd:
                    8a:af:d7:a6:0c:4e:92:d6:01:34:6d:db:0e:a4:45:
                    af:7c:1c:23:dd:15:59:29:58:b0:4b:a5:d1:25:a8:
                    7e:12:f9:49:73:98:b9:8c:89:60:f6:ca:e7:c8:1c:
                    fa:b2:28:c4:e2:ca:88:c5:e4:e6:8c:fa:80:55:40:
                    8b:08:9f:5e:de:8b:79:1e:77:26:88:c4:ee:fe:a2:
                    ea:26:51:d2:e1:a2:e1:b8:54:5f:a5:9d:c1:f7:cb:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:24:6A:BC:E9:54:A6:53:59:87:B7:0E:33:C1:3F:57:09:AD:0A:38
            X509v3 Authority Key Identifier:
                keyid:FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:a8:d4:a4:9f:a9:38:0b:91:d9:18:e0:e5:f4:07:de:93:
         84:a5:0b:7e:be:76:94:9c:f4:c9:cf:90:4a:7f:8b:b4:83:4c:
         1b:a4:db:f8:36:29:ab:7b:90:7e:fa:9e:0b:92:4c:48:30:9a:
         e3:e0:8d:b9:b0:17:6f:c8:a6:8e:88:36:3d:c1:91:46:39:f9:
         d9:7d:5c:f7:80:14:fd:75:19:7b:fd:fe:3c:de:6e:26:0e:d3:
         c5:2b:67:46:92:5c:24:cd:a8:92:19:10:a5:b1:4a:91:16:26:
         b6:6f:44:e2:bb:a5:ec:fa:8c:b9:16:b2:37:9d:80:b5:eb:8f:
         09:cd:fb:75:66:23:4a:56:a1:7d:e2:53:3c:d5:ef:4d:29:6c:
         78:fc:77:01:61:80:cd:59:b6:02:0e:88:1f:e8:e3:92:ff:13:
         60:f5:b0:35:31:6a:24:18:8e:d4:13:96:55:13:36:70:70:5f:
         97:c6:03:ca:9b:13:42:a0:aa:cd:11:ce:c0:49:ee:fc:2c:ff:
         91:2e:c8:36:28:8f:53:f7:4c:dd:c0:bb:e2:ea:82:18:eb:90:
         ac:c6:21:66:e5:5b:99:50:3b:8c:1f:42:13:48:74:08:95:c2:
         fd:12:ce:e5:b4:89:87:6f:e0:1c:ca:bc:af:43:3c:02:b2:b0:
         e4:bd:e6:91
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUStPMhxgZa6t09RtKX0HhtMoKX58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQxRUM5MDcyQkY1MTRCOEY3QkU5QThFMkMxRjk2RDA4
QkVGRjU4MzAeFw0yNDA3MDEwMjE3MjRaFw0yNTA2MzAwMjIyMjRaMDMxMTAvBgNV
BAMTKDk0MjQ2QUJDRTk1NEE2NTM1OTg3QjcwRTMzQzEzRjU3MDlBRDBBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrSasHRf8LtEBzxilzu00BkkH
us4e9MXY4+I50AlxlQ0ZkygFpVuYRiSxPXG+ECtLCgAWa2+xhiFi8XOscgQzrfrP
S70O4cMbnQn8EOLo+XWtq6CO+DlTs345wUm3aohlTzWd33VhnS6XsSy+SVGcxoO9
Ro6E7x01xYmsppj1gUACXEinjH8A7HXTMmdQxQsu7SJf036VOsuQXEIzqcTpBs/X
zYqv16YMTpLWATRt2w6kRa98HCPdFVkpWLBLpdElqH4S+UlzmLmMiWD2yufIHPqy
KMTiyojF5OaM+oBVQIsIn17ei3kedyaIxO7+ouomUdLhouG4VF+lncH3y3BnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlCRqvOlUplNZh7cOM8E/VwmtCjgwHwYDVR0j
BBgwFoAU/R7JByv1FLj3vpqOLB+W0Ivv9YMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Npbks5blhMNjlmTjlrQkhZV3NFVFhRVkFrd3BwY2RESkFwZkY1ZXhL
dFEvMC9GRDFFQzkwNzJCRjUxNEI4RjdCRTlBOEUyQzFGOTZEMDhCRUZGNTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMUVDOTA3MkJGNTE0QjhG
N0JFOUE4RTJDMUY5NkQwOEJFRkY1ODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNjaW5LOW5YTDY5Zk45a0JIWVdzRVRYUVZBa3dwcGNkREpBcGZGNWV4S3RRLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjdDANBgkqhkiG9w0BAQsFAAOCAQEAnWOo
1KSfqTgLkdkY4OX0B96ThKULfr52lJz0yc+QSn+LtINMG6Tb+DYpq3uQfvqeC5JM
SDCa4+CNubAXb8imjog2PcGRRjn52X1c94AU/XUZe/3+PN5uJg7TxStnRpJcJM2o
khkQpbFKkRYmtm9E4rul7PqMuRayN52AteuPCc37dWYjSlahfeJTPNXvTSlsePx3
AWGAzVm2Ag6IH+jjkv8TYPWwNTFqJBiO1BOWVRM2cHBfl8YDypsTQqCqzRHOwEnu
/Cz/kS7INiiPU/dM3cC74uqCGOuQrMYhZuVbmVA7jB9CE0h0CJXC/RLO5bSJh2/g
HMq8r0M8ArKw5L3mkQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:14 2025 by rpki-client