Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa
File:                     3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (raw, json)
Hash identifier:          IkAAVw+ijhrSotxpmtzTU0j0qHq78gC7wNX3hBdqNks=
Subject key identifier:   8B:3D:E8:CD:17:21:38:2E:9D:5B:A7:68:58:06:E7:96:C7:61:77:EF
Certificate issuer:       /CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Certificate serial:       4A2DB3B2BCB05303F6A07559C2929E888AF04E4A
Authority key identifier: 66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa
Signing time:             Tue 30 Jan 2024 20:36:48 +0000
ROA not before:           Tue 30 Jan 2024 20:31:48 +0000
ROA not after:            Tue 28 Jan 2025 20:36:48 +0000
asID:                     52771
IP address blocks:        168.228.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:b3:b2:bc:b0:53:03:f6:a0:75:59:c2:92:9e:88:8a:f0:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
        Validity
            Not Before: Jan 30 20:31:48 2024 GMT
            Not After : Jan 28 20:36:48 2025 GMT
        Subject: CN=8B3DE8CD1721382E9D5BA7685806E796C76177EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:70:4f:d3:1f:75:31:e6:89:43:8e:3b:2d:
                    b0:dc:06:08:8f:b2:c1:5d:fe:9c:f3:3e:16:f9:72:
                    e5:48:a0:c3:28:ea:03:69:fe:7e:4f:9c:2d:74:30:
                    e0:e2:0b:2c:76:a5:4d:0e:1b:82:82:b3:c8:3b:b9:
                    98:8d:a1:a1:66:f2:5a:24:7b:ac:ad:ce:af:f0:8c:
                    45:94:b3:d1:50:72:8e:6d:7f:6a:cf:ba:b8:20:00:
                    d9:f5:c5:cb:73:5c:92:b3:89:f7:f4:d7:b3:88:18:
                    43:54:2c:d1:20:ed:94:5f:d9:75:06:3c:5b:c5:d5:
                    bc:93:49:e3:f9:4e:4c:35:9c:d5:1b:45:1a:7e:81:
                    f2:f4:2a:18:d1:46:b8:e5:5d:97:ba:c3:df:ca:2d:
                    fc:1d:ec:5f:88:11:ad:32:e6:18:22:fb:4b:6c:b5:
                    18:1c:e2:c1:ed:dd:38:5a:63:27:34:06:60:82:d0:
                    b2:85:87:77:22:d0:e7:71:5f:2f:e1:14:1a:a0:c3:
                    d5:37:23:6a:b3:35:24:73:91:f0:77:41:49:e4:dd:
                    42:9a:66:f4:39:54:e3:3b:e7:b8:f1:89:bc:75:6a:
                    33:5e:5c:45:58:44:d6:c2:c7:ad:41:44:41:3d:3a:
                    88:fa:c9:6e:e2:59:46:a6:63:53:c6:9a:be:13:e2:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:E8:CD:17:21:38:2E:9D:5B:A7:68:58:06:E7:96:C7:61:77:EF
            X509v3 Authority Key Identifier:
                keyid:66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3136382e3232382e39322e302f32322d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:e6:19:41:e1:5d:99:c8:84:b8:d3:f1:21:41:d3:d9:a4:
         2d:1a:d8:ba:f8:34:67:68:96:66:5d:4f:c3:91:43:bb:fc:73:
         88:ab:19:a4:31:88:41:de:0b:a3:97:a0:05:f2:67:85:f6:9c:
         b4:41:9e:a9:14:fc:fa:46:67:c6:08:6f:0d:16:48:80:de:38:
         2b:1b:c1:a3:02:65:9a:df:3c:43:ee:7c:07:a8:7b:b8:50:d0:
         01:1d:83:45:32:63:c9:2b:f8:47:ff:4e:c3:4c:fd:23:15:51:
         bc:2c:e4:d2:5e:9e:23:bc:ac:02:52:60:d1:8d:3c:9e:33:c9:
         b6:c0:fa:e1:78:b0:4f:18:9a:6e:5d:76:89:96:7b:08:72:99:
         e0:6f:23:21:6b:91:2f:58:2d:be:d8:51:d4:ca:89:d1:0e:76:
         5d:83:f7:51:ca:97:b7:7f:41:1e:53:13:64:ed:30:be:d9:d5:
         8d:d4:27:6f:24:04:d4:79:c0:03:4f:0c:51:b7:67:76:79:f6:
         67:be:32:55:03:ff:88:f7:b2:0b:0f:4a:42:a0:99:c5:97:02:
         a0:aa:ab:0d:8a:5c:96:a4:0b:fc:62:35:dc:f9:b3:b1:98:a3:
         b2:5e:8d:d8:b4:6b:50:aa:61:84:3b:04:be:dd:2c:76:15:a7:
         65:3f:70:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSi2zsrywUwP2oHVZwpKeiIrwTkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY5NDAxNEVGREU3MjZDQThEMjQwQkIxQTRCQjIzREI3
RjBGM0YyMTAeFw0yNDAxMzAyMDMxNDhaFw0yNTAxMjgyMDM2NDhaMDMxMTAvBgNV
BAMTKDhCM0RFOENEMTcyMTM4MkU5RDVCQTc2ODU4MDZFNzk2Qzc2MTc3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56nBP0x91MeaJQ447LbDcBgiP
ssFd/pzzPhb5cuVIoMMo6gNp/n5PnC10MODiCyx2pU0OG4KCs8g7uZiNoaFm8lok
e6ytzq/wjEWUs9FQco5tf2rPurggANn1xctzXJKziff017OIGENULNEg7ZRf2XUG
PFvF1byTSeP5Tkw1nNUbRRp+gfL0KhjRRrjlXZe6w9/KLfwd7F+IEa0y5hgi+0ts
tRgc4sHt3ThaYyc0BmCC0LKFh3ci0OdxXy/hFBqgw9U3I2qzNSRzkfB3QUnk3UKa
ZvQ5VOM757jxibx1ajNeXEVYRNbCx61BREE9Ooj6yW7iWUamY1PGmr4T4lmZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiz3ozRchOC6dW6doWAbnlsdhd+8wHwYDVR0j
BBgwFoAUZpQBTv3nJsqNJAuxpLsj238PPyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlTRDgxcjI3d1py
NGkvMC82Njk0MDE0RUZERTcyNkNBOEQyNDBCQjFBNEJCMjNEQjdGMEYzRjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2OTQwMTRFRkRFNzI2Q0E4
RDI0MEJCMUE0QkIyM0RCN0YwRjNGMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtRmYzRXRQSmp3cVlZWUR6Mm82REhUd1VLWDF0RnY5U0Q4MXIyN3dacjRpLzAv
MzEzNjM4MmUzMjMyMzgyZTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqORcMA0GCSqGSIb3DQEBCwUAA4IBAQBQPOYZQeFd
mciEuNPxIUHT2aQtGti6+DRnaJZmXU/DkUO7/HOIqxmkMYhB3gujl6AF8meF9py0
QZ6pFPz6RmfGCG8NFkiA3jgrG8GjAmWa3zxD7nwHqHu4UNABHYNFMmPJK/hH/07D
TP0jFVG8LOTSXp4jvKwCUmDRjTyeM8m2wPrheLBPGJpuXXaJlnsIcpngbyMha5Ev
WC2+2FHUyonRDnZdg/dRype3f0EeUxNk7TC+2dWN1CdvJATUecADTwxRt2d2efZn
vjJVA/+I97ILD0pCoJnFlwKgqqsNilyWpAv8YjXc+bOxmKOyXo3YtGtQqmGEOwS+
3Sx2FadlP3By
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org