Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32332d3233203d3e203631353739.roa
File:                     3136382e39302e3234302e302f32332d3233203d3e203631353739.roa (raw, json)
Hash identifier:          xvfWW3KnSBu/FpojAy7InIGWa3s1L1C3EakKHxHkhU0=
Subject key identifier:   44:9C:C6:B4:41:4B:12:3E:9D:E3:FD:0E:C0:F7:48:C1:8A:03:4D:8B
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       59F9C0FE32008E83A365E44AEA6D7DDF7F25F092
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32332d3233203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:39 +0000
ROA not before:           Tue 06 Feb 2024 11:56:39 +0000
ROA not after:            Tue 04 Feb 2025 12:01:39 +0000
asID:                     61579
IP address blocks:        168.90.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:c0:fe:32:00:8e:83:a3:65:e4:4a:ea:6d:7d:df:7f:25:f0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:39 2024 GMT
            Not After : Feb  4 12:01:39 2025 GMT
        Subject: CN=449CC6B4414B123E9DE3FD0EC0F748C18A034D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:41:72:b4:77:1f:a5:bb:11:bd:56:ca:0c:
                    5c:dd:b5:a2:a5:95:16:8e:fd:a2:7e:1b:ce:be:07:
                    03:69:35:6c:2e:dc:2c:6b:7d:7f:dc:6b:bd:e6:fa:
                    7c:44:c5:77:3f:79:39:b4:6c:1d:e1:1c:44:be:e8:
                    a8:af:ab:2b:ee:87:79:5f:8f:72:61:d6:f6:fe:6e:
                    5d:00:15:cc:0d:12:1e:ff:85:76:08:56:48:ac:3f:
                    41:87:45:37:b7:bf:e1:5f:f0:37:25:11:b2:4a:76:
                    82:2d:e1:51:08:dc:94:f5:01:c5:8a:74:e7:ce:2e:
                    10:9b:43:6e:72:58:17:37:da:c4:d9:89:1e:97:15:
                    24:15:92:df:47:d2:3c:7e:02:8e:a6:72:83:ca:14:
                    ea:0f:94:f6:52:21:05:cd:73:3e:e9:42:bb:ef:96:
                    ac:65:ec:6e:36:2b:01:ee:08:23:d6:db:18:36:0b:
                    a3:0b:4e:c4:c9:65:b6:a8:52:c4:c9:47:78:53:16:
                    e5:8f:6a:ba:17:ce:8d:78:f2:7b:db:17:fb:71:47:
                    bf:a9:21:31:05:7a:22:6b:59:56:36:97:c5:45:e8:
                    59:7e:1d:25:40:fb:eb:79:0a:d2:6f:65:ba:b8:c6:
                    8a:6d:8f:58:24:05:6f:22:b6:4e:fa:3b:a5:49:55:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:C6:B4:41:4B:12:3E:9D:E3:FD:0E:C0:F7:48:C1:8A:03:4D:8B
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32332d3233203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:a1:46:c2:2e:fb:35:87:ba:a2:5b:d0:4d:68:6b:7f:9e:
         2c:8c:fc:f0:f8:e4:89:12:9f:84:50:d0:d9:a9:50:72:f5:79:
         84:e5:97:55:31:79:f2:49:80:a4:35:8e:5d:25:a1:99:81:ae:
         80:22:80:1e:79:23:bc:3c:02:cd:2e:58:ff:db:19:f1:07:39:
         e1:4d:0c:73:a4:d9:e4:42:f5:48:94:28:c1:79:84:e3:9c:e4:
         b3:e2:ca:f6:54:07:b7:65:76:94:9e:47:1d:27:f5:38:92:a0:
         37:db:b8:21:fd:79:13:ec:75:4d:b4:9e:b4:7e:a0:04:fe:89:
         07:66:17:e0:8f:e4:a8:9c:34:f5:a4:8b:c6:fd:bb:c0:06:07:
         e6:c0:75:58:d3:43:d8:25:59:1a:d1:2d:27:89:6c:8e:d5:9f:
         7b:c4:56:65:93:7b:8f:b5:ea:59:af:96:ea:94:03:4b:e9:23:
         c1:f6:42:80:a2:f6:e9:d9:33:61:74:81:e1:fe:c6:4c:e7:ee:
         a8:e6:a0:f2:64:07:f1:67:3d:cf:16:65:bf:a2:53:cd:b0:bf:
         98:10:9d:d0:9b:d0:f6:58:f0:be:a4:af:7a:d1:b2:7c:2f:b7:
         cb:8e:01:e8:b4:c5:16:f5:39:2a:32:23:b2:d6:36:99:c0:57:
         fc:e1:7b:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWfnA/jIAjoOjZeRK6m19338l8JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2RTkyRUVCMTEyQTFENTIzQTI4MTc0MDFCNkVCM0NF
MDlBRkZGQzAeFw0yNDAyMDYxMTU2MzlaFw0yNTAyMDQxMjAxMzlaMDMxMTAvBgNV
BAMTKDQ0OUNDNkI0NDE0QjEyM0U5REUzRkQwRUMwRjc0OEMxOEEwMzREOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh0FytHcfpbsRvVbKDFzdtaKl
lRaO/aJ+G86+BwNpNWwu3CxrfX/ca73m+nxExXc/eTm0bB3hHES+6Kivqyvuh3lf
j3Jh1vb+bl0AFcwNEh7/hXYIVkisP0GHRTe3v+Ff8DclEbJKdoIt4VEI3JT1AcWK
dOfOLhCbQ25yWBc32sTZiR6XFSQVkt9H0jx+Ao6mcoPKFOoPlPZSIQXNcz7pQrvv
lqxl7G42KwHuCCPW2xg2C6MLTsTJZbaoUsTJR3hTFuWParoXzo148nvbF/txR7+p
ITEFeiJrWVY2l8VF6Fl+HSVA++t5CtJvZbq4xoptj1gkBW8itk76O6VJVTQFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURJzGtEFLEj6d4/0OwPdIwYoDTYswHwYDVR0j
BBgwFoAUoW6S7rESodUjooF0AbbrPOCa//wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFLQmk4a3N1dEpvOWR6c0tWemFNd1FQR2g2b05KeUZMZFgxMmlBNjdV
bnMvMC9BMTZFOTJFRUIxMTJBMUQ1MjNBMjgxNzQwMUI2RUIzQ0UwOUFGRkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExNkU5MkVFQjExMkExRDUy
M0EyODE3NDAxQjZFQjNDRTA5QUZGRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxS0JpOGtzdXRKbzlkenNLVnphTXdRUEdoNm9OSnlGTGRYMTJpQTY3VW5zLzAv
MzEzNjM4MmUzOTMwMmUzMjM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqFrwMA0GCSqGSIb3DQEBCwUAA4IBAQCgPKFGwi77
NYe6olvQTWhrf54sjPzw+OSJEp+EUNDZqVBy9XmE5ZdVMXnySYCkNY5dJaGZga6A
IoAeeSO8PALNLlj/2xnxBznhTQxzpNnkQvVIlCjBeYTjnOSz4sr2VAe3ZXaUnkcd
J/U4kqA327gh/XkT7HVNtJ60fqAE/okHZhfgj+SonDT1pIvG/bvABgfmwHVY00PY
JVka0S0niWyO1Z97xFZlk3uPtepZr5bqlANL6SPB9kKAovbp2TNhdIHh/sZM5+6o
5qDyZAfxZz3PFmW/olPNsL+YEJ3Qm9D2WPC+pK960bJ8L7fLjgHotMUW9TkqMiOy
1jaZwFf84Xtj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org