Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3232203d3e203631353739.roa
File:                     3136382e39302e3234302e302f32322d3232203d3e203631353739.roa (raw, json)
Hash identifier:          IfBo1fnwPTnjaIZvWcMZEtFkigkppeHTIa94gW+UfgU=
Subject key identifier:   9B:71:00:A0:C6:C5:AB:EC:5F:3E:BF:CB:62:2A:F8:9E:31:62:BE:DB
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       36517E144ED120F3156F132AAFC929AAFE5E3620
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3232203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:38 +0000
ROA not before:           Tue 06 Feb 2024 11:56:38 +0000
ROA not after:            Tue 04 Feb 2025 12:01:38 +0000
asID:                     61579
IP address blocks:        168.90.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:7e:14:4e:d1:20:f3:15:6f:13:2a:af:c9:29:aa:fe:5e:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:38 2024 GMT
            Not After : Feb  4 12:01:38 2025 GMT
        Subject: CN=9B7100A0C6C5ABEC5F3EBFCB622AF89E3162BEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:53:b8:8b:bd:f7:be:a7:5e:8c:5e:e4:e8:
                    54:78:ef:3e:be:76:83:30:36:70:79:9e:e1:79:f2:
                    42:e9:4d:0c:48:36:d8:61:95:05:58:e6:7a:60:09:
                    10:1f:3a:8a:94:87:87:7f:1d:43:11:6d:5b:81:74:
                    41:f5:aa:2c:1a:d9:66:45:93:f7:32:4f:b2:2e:b6:
                    8d:7c:50:3c:75:57:53:83:f8:b8:30:e9:a9:94:15:
                    90:7c:7d:0a:ed:82:ee:07:b3:03:46:02:d4:0e:af:
                    b7:94:6f:a9:26:36:fb:dd:cd:7e:be:a4:02:5f:52:
                    4d:40:12:d4:98:03:a3:2d:31:9e:9f:c2:8d:ac:f8:
                    8d:51:b0:e7:3d:1b:b5:43:5e:d3:1b:b4:57:54:c8:
                    6f:22:74:57:ee:3b:6f:df:29:70:70:3f:8f:25:2d:
                    77:07:d3:a7:8b:be:4e:28:e8:b7:25:dd:c1:a7:bc:
                    e4:ec:f3:23:f5:dd:e2:53:03:39:38:dc:27:95:3e:
                    71:62:c3:bc:67:82:b7:22:b8:1e:2f:ed:50:ad:95:
                    40:18:a4:b2:19:17:c8:9c:b6:48:04:02:00:d0:6c:
                    43:a4:ce:9c:20:f2:a8:c3:23:ae:7b:5a:61:94:00:
                    d1:c3:3a:09:b5:a6:06:15:97:05:0a:62:a7:de:85:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:71:00:A0:C6:C5:AB:EC:5F:3E:BF:CB:62:2A:F8:9E:31:62:BE:DB
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3232203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:91:2e:a6:ae:fa:94:83:f7:0a:28:70:4b:6f:c6:fb:fe:0d:
         79:a6:86:fb:93:6a:f1:58:72:cb:4c:2f:06:9a:c7:b0:77:a2:
         a4:8d:7a:08:25:2b:e6:6c:f5:20:4a:bc:ce:29:0c:a9:7d:b8:
         55:a6:65:48:de:c4:aa:6d:a3:ec:bb:90:3a:45:5f:1f:e0:67:
         ba:89:99:9d:30:90:bb:77:a2:b6:cb:b5:61:4a:a2:62:8e:4e:
         5d:6a:5f:47:e2:ec:eb:a8:cc:bb:52:87:b5:09:fc:54:f1:25:
         c0:04:85:d6:8a:34:66:19:c0:59:44:6d:cc:af:be:c7:04:ae:
         1c:8a:95:3d:c4:72:c5:2f:b8:44:be:53:92:41:bd:fc:c9:97:
         9f:b2:94:93:38:8a:02:b4:ab:ec:bf:6d:29:9d:bc:b8:d7:4c:
         ff:e7:8a:84:da:3d:82:b2:33:d9:5c:a4:10:24:98:29:bc:e0:
         3c:27:94:fe:01:a3:43:99:cd:da:28:3d:17:c2:8b:93:79:35:
         9a:28:79:20:e8:0f:4d:12:3e:db:a3:a6:a1:ec:20:de:52:fe:
         84:fd:cf:bf:e0:58:a3:05:9c:f4:c8:44:5e:f0:0e:54:e8:70:
         b4:19:04:80:4e:d2:f3:a3:90:9d:14:7e:14:5f:df:26:de:e9:
         5d:2d:d4:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNlF+FE7RIPMVbxMqr8kpqv5eNiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2RTkyRUVCMTEyQTFENTIzQTI4MTc0MDFCNkVCM0NF
MDlBRkZGQzAeFw0yNDAyMDYxMTU2MzhaFw0yNTAyMDQxMjAxMzhaMDMxMTAvBgNV
BAMTKDlCNzEwMEEwQzZDNUFCRUM1RjNFQkZDQjYyMkFGODlFMzE2MkJFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxlO4i733vqdejF7k6FR47z6+
doMwNnB5nuF58kLpTQxINthhlQVY5npgCRAfOoqUh4d/HUMRbVuBdEH1qiwa2WZF
k/cyT7Iuto18UDx1V1OD+Lgw6amUFZB8fQrtgu4HswNGAtQOr7eUb6kmNvvdzX6+
pAJfUk1AEtSYA6MtMZ6fwo2s+I1RsOc9G7VDXtMbtFdUyG8idFfuO2/fKXBwP48l
LXcH06eLvk4o6Lcl3cGnvOTs8yP13eJTAzk43CeVPnFiw7xngrciuB4v7VCtlUAY
pLIZF8ictkgEAgDQbEOkzpwg8qjDI657WmGUANHDOgm1pgYVlwUKYqfehTj9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm3EAoMbFq+xfPr/LYir4njFivtswHwYDVR0j
BBgwFoAUoW6S7rESodUjooF0AbbrPOCa//wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFLQmk4a3N1dEpvOWR6c0tWemFNd1FQR2g2b05KeUZMZFgxMmlBNjdV
bnMvMC9BMTZFOTJFRUIxMTJBMUQ1MjNBMjgxNzQwMUI2RUIzQ0UwOUFGRkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExNkU5MkVFQjExMkExRDUy
M0EyODE3NDAxQjZFQjNDRTA5QUZGRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxS0JpOGtzdXRKbzlkenNLVnphTXdRUEdoNm9OSnlGTGRYMTJpQTY3VW5zLzAv
MzEzNjM4MmUzOTMwMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqFrwMA0GCSqGSIb3DQEBCwUAA4IBAQAgkS6mrvqU
g/cKKHBLb8b7/g15pob7k2rxWHLLTC8Gmsewd6KkjXoIJSvmbPUgSrzOKQypfbhV
pmVI3sSqbaPsu5A6RV8f4Ge6iZmdMJC7d6K2y7VhSqJijk5dal9H4uzrqMy7Uoe1
CfxU8SXABIXWijRmGcBZRG3Mr77HBK4cipU9xHLFL7hEvlOSQb38yZefspSTOIoC
tKvsv20pnby410z/54qE2j2CsjPZXKQQJJgpvOA8J5T+AaNDmc3aKD0XwouTeTWa
KHkg6A9NEj7bo6ah7CDeUv6E/c+/4FijBZz0yERe8A5U6HC0GQSATtLzo5CdFH4U
X98m3uldLdTY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org