Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e2033333536.roa
File:                     3136382e3139352e3131322e302f32322d3232203d3e2033333536.roa (raw, json)
Hash identifier:          fptjfM2zd8Uq1wdkTO2vzX9H6rx/1dUhV2K2T4D6KwM=
Subject key identifier:   E0:2D:31:A0:6B:63:94:2F:35:64:DB:C8:D0:5B:F9:14:16:C1:EC:00
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       73D0283DB2F23AAB09323C4AF2B9464948B7CAD5
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e2033333536.roa
Signing time:             Mon 19 Dec 2022 16:48:46 +0000
ROA not before:           Mon 19 Dec 2022 16:43:46 +0000
ROA not after:            Mon 18 Dec 2023 16:48:46 +0000
asID:                     3356
IP address blocks:        168.195.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:28:3d:b2:f2:3a:ab:09:32:3c:4a:f2:b9:46:49:48:b7:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 16:43:46 2022 GMT
            Not After : Dec 18 16:48:46 2023 GMT
        Subject: CN=E02D31A06B63942F3564DBC8D05BF91416C1EC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:95:f3:db:2f:17:d9:46:b8:1b:47:da:86:
                    28:ce:4f:8a:c1:b6:54:3a:3d:fe:bf:57:cb:a8:e5:
                    e3:cc:fb:c9:be:33:ff:80:e9:d8:90:db:7f:25:4b:
                    1e:77:f8:ef:e2:cb:76:dc:80:b9:6c:57:8f:0e:d2:
                    34:98:1b:b9:15:99:e7:d8:d4:a4:09:34:3d:9e:ea:
                    2b:38:16:5e:ef:26:f0:68:6a:ad:c3:8e:74:4e:e1:
                    d8:ab:ee:fd:12:8a:3f:13:10:10:0b:e2:bc:af:05:
                    b0:11:11:e5:40:af:c2:8f:57:9d:69:0b:51:13:8c:
                    b5:1c:96:41:48:84:41:37:9a:dc:00:e7:7e:04:da:
                    9c:81:9a:9c:11:65:cd:04:d0:85:78:39:e3:6c:a0:
                    8b:9c:6a:07:23:26:de:7e:51:4e:64:16:c6:28:24:
                    28:70:f7:5f:a9:fd:87:f9:88:42:39:b6:20:a2:37:
                    0c:f5:b3:ad:21:00:43:46:c5:c9:d5:04:cb:75:ac:
                    ac:25:7c:8f:53:17:a4:bc:4a:2e:e3:92:54:f2:de:
                    bc:15:dd:11:4c:52:2a:28:37:6b:72:fc:90:18:11:
                    e5:1e:e7:33:86:0d:1a:0a:9e:6e:e5:f6:5f:f3:04:
                    96:ae:13:84:b7:4e:2d:ff:42:11:ee:b6:8d:40:90:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:31:A0:6B:63:94:2F:35:64:DB:C8:D0:5B:F9:14:16:C1:EC:00
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:06:14:a9:74:f9:ef:82:5a:bf:9a:c3:26:70:36:0a:a3:68:
         f8:32:d6:eb:a3:31:c1:29:13:e3:6d:2e:9d:b3:20:29:ad:58:
         a4:00:7b:15:a9:6b:1e:f4:94:5a:93:fb:42:fa:fe:34:22:c8:
         94:3b:e9:4b:dd:87:ce:7f:47:be:e9:e1:f3:1f:db:94:e9:63:
         33:34:2f:9d:03:b2:85:48:e7:6b:67:19:22:ba:08:89:e2:16:
         fb:d7:24:e7:a4:69:7f:60:2b:67:42:39:20:00:88:9d:5a:8e:
         fb:cb:2e:05:ec:b7:79:6d:28:54:4b:57:43:7e:d9:be:47:ab:
         e1:32:f3:9c:d8:40:2c:53:88:60:0e:d3:30:b1:0b:10:01:af:
         9b:c2:6c:5d:03:07:b0:de:fa:79:e7:e4:72:ca:0f:43:9a:18:
         a4:db:39:9d:54:0e:d1:f9:ef:a5:58:dd:e1:83:30:3a:1f:14:
         72:98:66:4f:aa:ea:92:b0:af:1a:89:8a:19:34:08:dd:4d:55:
         33:d2:67:13:0c:a4:0a:a5:61:e9:70:f8:91:ea:7b:ee:65:79:
         e6:5e:f3:9d:1c:62:07:40:d8:b8:98:ac:28:76:ef:88:93:12:
         b7:1c:6a:67:d2:1b:a2:c5:8a:f3:23:8b:02:6e:8b:f9:de:32:
         33:b4:7e:2c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc9AoPbLyOqsJMjxK8rlGSUi3ytUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NEI0RUZGQUIyRkY2MkEyNTE4RjI4RkEzQUY5MDZG
RjgwQzI3NzAeFw0yMjEyMTkxNjQzNDZaFw0yMzEyMTgxNjQ4NDZaMDMxMTAvBgNV
BAMTKEUwMkQzMUEwNkI2Mzk0MkYzNTY0REJDOEQwNUJGOTE0MTZDMUVDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaX5Xz2y8X2Ua4G0fahijOT4rB
tlQ6Pf6/V8uo5ePM+8m+M/+A6diQ238lSx53+O/iy3bcgLlsV48O0jSYG7kVmefY
1KQJND2e6is4Fl7vJvBoaq3DjnRO4dir7v0Sij8TEBAL4ryvBbAREeVAr8KPV51p
C1ETjLUclkFIhEE3mtwA534E2pyBmpwRZc0E0IV4OeNsoIucagcjJt5+UU5kFsYo
JChw91+p/Yf5iEI5tiCiNwz1s60hAENGxcnVBMt1rKwlfI9TF6S8Si7jklTy3rwV
3RFMUiooN2ty/JAYEeUe5zOGDRoKnm7l9l/zBJauE4S3Ti3/QhHuto1AkD9JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4C0xoGtjlC81ZNvI0Fv5FBbB7AAwHwYDVR0j
BBgwFoAUJES07/qy/2KiUY8o+jr5Bv+AwncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMS8yNDQ0QjRFRkZBQjJGRjYyQTI1MThGMjhGQTNBRjkwNkZGODBDMjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDRCNEVGRkFCMkZGNjJB
MjUxOEYyOEZBM0FGOTA2RkY4MEMyNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzEv
MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMz
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMNwMA0GCSqGSIb3DQEBCwUAA4IBAQBUBhSpdPnv
glq/msMmcDYKo2j4MtbrozHBKRPjbS6dsyAprVikAHsVqWse9JRak/tC+v40IsiU
O+lL3YfOf0e+6eHzH9uU6WMzNC+dA7KFSOdrZxkiugiJ4hb71yTnpGl/YCtnQjkg
AIidWo77yy4F7Ld5bShUS1dDftm+R6vhMvOc2EAsU4hgDtMwsQsQAa+bwmxdAwew
3vp55+Ryyg9Dmhik2zmdVA7R+e+lWN3hgzA6HxRymGZPquqSsK8aiYoZNAjdTVUz
0mcTDKQKpWHpcPiR6nvuZXnmXvOdHGIHQNi4mKwodu+IkxK3HGpn0huixYrzI4sC
bov53jIztH4s
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org