Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa (raw, json)
Hash identifier:          FEq8hXWRKKlCR+aQn4go4SBcHAoJvuqpMK8U9MPrpCw=
Subject key identifier:   3C:24:7A:78:CA:E4:94:FD:13:91:EA:E4:EA:96:87:91:CC:DA:FE:16
Certificate issuer:       /CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
Certificate serial:       57044B058E5EDF031CA24F25AC1CD893C2683DC9
Authority key identifier: B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
Signing time:             Tue 12 Mar 2024 18:03:00 +0000
ROA not before:           Tue 12 Mar 2024 17:58:00 +0000
ROA not after:            Tue 11 Mar 2025 18:03:00 +0000
asID:                     264879
IP address blocks:        168.227.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:4b:05:8e:5e:df:03:1c:a2:4f:25:ac:1c:d8:93:c2:68:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228
        Validity
            Not Before: Mar 12 17:58:00 2024 GMT
            Not After : Mar 11 18:03:00 2025 GMT
        Subject: CN=3C247A78CAE494FD1391EAE4EA968791CCDAFE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:86:bf:e5:bd:85:07:6c:52:92:46:f6:9f:
                    32:34:2b:84:d1:5b:86:b6:fc:4e:5e:ef:37:20:6a:
                    b0:d5:05:b1:4b:31:8c:9a:5c:8e:48:28:c0:f3:0e:
                    70:a7:53:b4:08:1a:51:de:55:ae:b6:27:86:bc:d5:
                    76:7a:e5:71:77:71:4c:1f:d1:49:be:6c:05:a6:3d:
                    31:e2:50:52:34:1e:a3:2d:a8:a2:3a:bb:0e:fe:a3:
                    50:ff:13:49:31:b8:e6:60:7f:ba:67:c2:6e:a8:86:
                    15:01:08:d5:4d:da:c5:43:8f:57:1b:af:9e:92:aa:
                    3f:55:38:cb:35:d4:84:0f:89:56:2a:d6:f9:19:db:
                    1c:29:8c:39:4e:57:a4:89:91:88:1d:9f:13:2a:aa:
                    d6:68:8b:19:d8:19:94:fa:ce:f6:5e:3e:29:82:ca:
                    3e:5c:4d:05:8e:eb:47:5f:8f:b6:b7:d4:1e:e5:11:
                    c4:eb:a9:54:cf:7f:2a:54:dc:ee:1b:67:41:b6:3f:
                    9f:54:59:ea:1d:26:37:1d:48:5d:68:29:44:2a:f8:
                    76:ab:99:32:1e:98:0a:ad:10:1a:5a:bd:40:ae:94:
                    ae:ba:ec:b8:dc:bb:8c:fa:51:b0:ff:b3:2c:7e:f8:
                    b3:36:39:35:43:36:1b:bd:47:17:f3:59:c8:b9:a0:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:7A:78:CA:E4:94:FD:13:91:EA:E4:EA:96:87:91:CC:DA:FE:16
            X509v3 Authority Key Identifier:
                keyid:B5:54:1D:2F:C4:F0:FE:E0:33:E6:8E:EC:7D:7F:F7:D4:BD:34:92:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5541D2FC4F0FEE033E68EEC7D7FF7D4BD349228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:69:7c:54:2c:78:d8:25:d0:0f:42:a8:ae:ec:3e:53:72:
         16:94:35:b8:de:8b:f4:12:7d:e0:fb:ac:17:a8:08:61:f1:94:
         23:ec:37:fb:60:47:08:8e:47:e4:62:24:df:36:6c:29:37:99:
         3d:2b:d8:f9:36:d1:92:1a:d7:5b:4c:ce:dd:57:fc:47:59:95:
         04:3b:e7:6d:db:4b:2c:e3:e0:c0:42:be:a3:3c:21:2b:3c:4c:
         73:bb:e0:dc:b6:dc:8b:cf:a9:fe:76:54:34:71:59:15:ea:97:
         4d:f8:a9:39:c3:85:6a:ca:99:09:f0:4a:8a:0c:fc:17:97:11:
         c4:dc:f5:fc:8a:0a:47:92:8c:dd:a9:cb:cf:09:bd:cd:53:88:
         64:31:ca:5a:3e:e4:39:5d:e3:9b:bb:62:f2:a3:0c:a7:f0:64:
         52:d6:65:6b:6d:26:e5:d6:31:42:68:f9:7c:0b:9c:43:7c:72:
         f3:96:80:d0:83:74:22:19:42:34:38:3d:46:c7:5d:2b:3f:5c:
         17:db:f9:f2:63:32:51:83:86:01:a7:cb:49:ff:27:ea:cb:45:
         0d:c2:df:32:85:ba:3a:b8:46:4c:c9:ba:a2:39:8e:c7:6c:7a:
         ef:9b:41:b5:7e:92:75:e9:25:2d:51:73:9b:93:4e:3a:a9:f6:
         b6:d4:60:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVwRLBY5e3wMcok8lrBzYk8JoPckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU1NDFEMkZDNEYwRkVFMDMzRTY4RUVDN0Q3RkY3RDRC
RDM0OTIyODAeFw0yNDAzMTIxNzU4MDBaFw0yNTAzMTExODAzMDBaMDMxMTAvBgNV
BAMTKDNDMjQ3QTc4Q0FFNDk0RkQxMzkxRUFFNEVBOTY4NzkxQ0NEQUZFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldIa/5b2FB2xSkkb2nzI0K4TR
W4a2/E5e7zcgarDVBbFLMYyaXI5IKMDzDnCnU7QIGlHeVa62J4a81XZ65XF3cUwf
0Um+bAWmPTHiUFI0HqMtqKI6uw7+o1D/E0kxuOZgf7pnwm6ohhUBCNVN2sVDj1cb
r56Sqj9VOMs11IQPiVYq1vkZ2xwpjDlOV6SJkYgdnxMqqtZoixnYGZT6zvZePimC
yj5cTQWO60dfj7a31B7lEcTrqVTPfypU3O4bZ0G2P59UWeodJjcdSF1oKUQq+Har
mTIemAqtEBpavUCulK667Ljcu4z6UbD/syx++LM2OTVDNhu9RxfzWci5oMSdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPCR6eMrklP0Tkerk6paHkcza/hYwHwYDVR0j
BBgwFoAUtVQdL8Tw/uAz5o7sfX/31L00kigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMC9CNTU0MUQyRkM0RjBGRUUwMzNFNjhFRUM3RDdGRjdENEJEMzQ5MjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1NTQxRDJGQzRGMEZFRTAz
M0U2OEVFQzdEN0ZGN0Q0QkQzNDkyMjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM4MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjfDANBgkqhkiG9w0BAQsFAAOCAQEAvEtp
fFQseNgl0A9CqK7sPlNyFpQ1uN6L9BJ94PusF6gIYfGUI+w3+2BHCI5H5GIk3zZs
KTeZPSvY+TbRkhrXW0zO3Vf8R1mVBDvnbdtLLOPgwEK+ozwhKzxMc7vg3Lbci8+p
/nZUNHFZFeqXTfipOcOFasqZCfBKigz8F5cRxNz1/IoKR5KM3anLzwm9zVOIZDHK
Wj7kOV3jm7ti8qMMp/BkUtZla20m5dYxQmj5fAucQ3xy85aA0IN0IhlCNDg9Rsdd
Kz9cF9v58mMyUYOGAafLSf8n6stFDcLfMoW6OrhGTMm6ojmOx2x675tBtX6Sdekl
LVFzm5NOOqn2ttRgxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org