Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa
File:                     3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa (raw, json)
Hash identifier:          kROA7nkpcIK2q8+qFEab7nyY4f+hLBazpTYpTYEcoms=
Subject key identifier:   EE:2F:61:E9:FD:20:F6:B8:95:10:F4:C2:4C:9B:7E:90:E9:FE:2C:A7
Certificate issuer:       /CN=488250699EA593A12DBCA068B1EB47DFCD0FAC3E
Certificate serial:       32648AB4C2C1DE84BAB1B203BCD55A8516FBC6D3
Authority key identifier: 48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa
Signing time:             Wed 14 Feb 2024 02:01:27 +0000
ROA not before:           Wed 14 Feb 2024 01:56:27 +0000
ROA not after:            Wed 12 Feb 2025 02:01:27 +0000
asID:                     265378
IP address blocks:        168.194.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:8a:b4:c2:c1:de:84:ba:b1:b2:03:bc:d5:5a:85:16:fb:c6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488250699EA593A12DBCA068B1EB47DFCD0FAC3E
        Validity
            Not Before: Feb 14 01:56:27 2024 GMT
            Not After : Feb 12 02:01:27 2025 GMT
        Subject: CN=EE2F61E9FD20F6B89510F4C24C9B7E90E9FE2CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:3b:20:d0:ee:04:80:bb:4f:18:f0:dd:73:
                    82:34:fd:b9:66:c9:a6:e6:70:3b:8b:1c:10:fc:23:
                    e8:7b:d5:85:34:1b:94:08:bd:56:0f:8d:98:af:e0:
                    1c:7d:04:51:fc:b8:85:ea:da:c1:cb:84:99:0a:3f:
                    7f:89:b9:1f:14:7c:82:a1:ec:ad:cf:d1:5f:82:38:
                    56:9b:75:32:47:f4:81:f5:d7:a2:2c:01:ba:b8:46:
                    6d:b7:0f:78:fc:c2:32:9a:56:61:5d:a5:04:d6:29:
                    2a:85:76:ba:4e:a3:96:ac:1b:ad:97:0e:e6:de:35:
                    2c:b4:ca:8a:a7:8b:78:51:cd:9f:c9:6e:94:6a:ab:
                    fc:5a:19:ad:1e:c2:62:ae:be:dd:72:06:f2:a6:d5:
                    d0:7b:a4:a3:4a:2f:92:e9:34:7e:3c:99:99:96:1a:
                    be:5b:1b:97:2c:06:18:15:6a:59:8f:98:74:2f:54:
                    ef:e9:fc:35:dd:d6:ab:b6:d4:98:07:73:ad:c7:a0:
                    74:80:b3:30:ef:f4:b3:dc:6b:f9:2c:94:48:51:dc:
                    ff:46:00:3c:f4:38:bb:3d:e8:11:f7:bc:11:dc:86:
                    e2:9d:a0:75:6f:64:55:2c:50:b1:9d:ae:cf:cf:c4:
                    09:09:83:d9:ee:cd:d2:08:7f:96:7a:f9:f7:ab:15:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2F:61:E9:FD:20:F6:B8:95:10:F4:C2:4C:9B:7E:90:E9:FE:2C:A7
            X509v3 Authority Key Identifier:
                keyid:48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:27:a4:ae:a0:02:20:b2:31:cc:d9:c8:3d:90:29:f0:c5:1a:
         4b:33:26:b7:1c:e6:2f:17:93:85:0a:b7:30:16:6c:dc:3c:fd:
         14:6f:05:2d:dd:b0:3b:f4:42:83:5f:1d:3e:a8:d2:c5:7c:c9:
         1b:5b:dc:4f:52:1d:cb:2b:c9:88:7f:e6:ee:93:48:55:e8:a2:
         cf:d7:1b:2a:da:0c:8e:36:ef:3c:6f:6a:81:50:4a:9a:d9:ad:
         d9:6f:29:8f:65:c2:59:f2:17:57:f5:44:92:68:ea:04:f1:ca:
         29:44:d8:c5:b6:c9:8a:f6:7f:37:3d:5e:ec:03:15:1b:9f:31:
         26:7c:07:06:71:55:66:b4:dc:14:21:8c:36:1f:3d:4e:b3:eb:
         76:ee:36:2b:e8:9e:35:66:ab:f2:4a:8b:b0:49:01:b2:29:21:
         93:1d:fe:ef:67:72:01:a0:26:0b:70:4b:2c:69:2d:2a:86:d2:
         9c:88:32:2d:3f:24:53:32:79:f9:fc:c6:bb:c2:07:42:85:99:
         d5:28:66:6a:07:e5:02:a7:32:54:73:71:fe:44:fe:d9:f7:30:
         f0:7f:64:9c:7d:c4:13:b6:9c:5e:3a:c8:c5:18:c7:f4:8c:65:
         dc:82:ac:19:ba:ae:e0:b2:cd:c1:ce:38:2c:87:2b:cc:95:2c:
         e3:4e:d5:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMmSKtMLB3oS6sbIDvNVahRb7xtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4MjUwNjk5RUE1OTNBMTJEQkNBMDY4QjFFQjQ3REZD
RDBGQUMzRTAeFw0yNDAyMTQwMTU2MjdaFw0yNTAyMTIwMjAxMjdaMDMxMTAvBgNV
BAMTKEVFMkY2MUU5RkQyMEY2Qjg5NTEwRjRDMjRDOUI3RTkwRTlGRTJDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyDsg0O4EgLtPGPDdc4I0/blm
yabmcDuLHBD8I+h71YU0G5QIvVYPjZiv4Bx9BFH8uIXq2sHLhJkKP3+JuR8UfIKh
7K3P0V+COFabdTJH9IH116IsAbq4Rm23D3j8wjKaVmFdpQTWKSqFdrpOo5asG62X
DubeNSy0yoqni3hRzZ/JbpRqq/xaGa0ewmKuvt1yBvKm1dB7pKNKL5LpNH48mZmW
Gr5bG5csBhgValmPmHQvVO/p/DXd1qu21JgHc63HoHSAszDv9LPca/kslEhR3P9G
ADz0OLs96BH3vBHchuKdoHVvZFUsULGdrs/PxAkJg9nuzdIIf5Z6+ferFSMRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7i9h6f0g9riVEPTCTJt+kOn+LKcwHwYDVR0j
BBgwFoAUSIJQaZ6lk6EtvKBosetH380PrD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5xUnFzeFE2WFVvUmNnZHJvMkJZN0JqTUpCRHVIYlFySlNjWkF3dlUz
NlUvMC80ODgyNTA2OTlFQTU5M0ExMkRCQ0EwNjhCMUVCNDdERkNEMEZBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4ODI1MDY5OUVBNTkzQTEy
REJDQTA2OEIxRUI0N0RGQ0QwRkFDM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlucVJxc3hRNlhVb1JjZ2RybzJCWTdCak1KQkR1SGJRckpTY1pBd3ZVMzZVLzAv
MzEzNjM4MmUzMTM5MzQyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowiwwDQYJKoZIhvcNAQELBQADggEBAJInpK6g
AiCyMczZyD2QKfDFGkszJrcc5i8Xk4UKtzAWbNw8/RRvBS3dsDv0QoNfHT6o0sV8
yRtb3E9SHcsryYh/5u6TSFXoos/XGyraDI427zxvaoFQSprZrdlvKY9lwlnyF1f1
RJJo6gTxyilE2MW2yYr2fzc9XuwDFRufMSZ8BwZxVWa03BQhjDYfPU6z63buNivo
njVmq/JKi7BJAbIpIZMd/u9ncgGgJgtwSyxpLSqG0pyIMi0/JFMyefn8xrvCB0KF
mdUoZmoH5QKnMlRzcf5E/tn3MPB/ZJx9xBO2nF46yMUYx/SMZdyCrBm6ruCyzcHO
OCyHK8yVLONO1Zg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org