Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
File:                     3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          uauvFI0Kcb6QSZMtv2KXNXugxWpxQ42ADvfD3RHNJTc=
Subject key identifier:   23:9C:80:C8:C4:4A:F9:8B:12:6F:7B:BC:14:75:8F:D2:2A:28:8D:A4
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       1A3618FAF70BC076F3374D9454DAE0C13013DA2E
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:08 +0000
ROA not before:           Thu 04 Apr 2024 16:01:08 +0000
ROA not after:            Thu 03 Apr 2025 16:06:08 +0000
asID:                     28667
IP address blocks:        168.196.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:36:18:fa:f7:0b:c0:76:f3:37:4d:94:54:da:e0:c1:30:13:da:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:08 2024 GMT
            Not After : Apr  3 16:06:08 2025 GMT
        Subject: CN=239C80C8C44AF98B126F7BBC14758FD22A288DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:8b:99:4d:e4:e2:b4:fa:82:3d:aa:aa:75:
                    05:ff:dd:ad:d3:04:be:fe:94:6d:f2:75:66:09:0d:
                    55:64:82:d5:0a:fd:60:93:39:f8:d5:2a:b2:f4:16:
                    bc:90:b8:0b:04:68:7e:35:54:22:5b:2f:1c:a9:e3:
                    38:e8:fe:6e:4c:ac:7a:af:ca:3f:6e:fe:90:f0:68:
                    eb:2c:af:6d:fb:24:7e:de:e8:0e:c5:00:c8:df:e1:
                    ca:f5:ed:ed:c3:9c:6c:0d:65:63:f6:5a:c8:d5:aa:
                    9d:63:40:5e:df:57:15:91:f4:51:49:5f:29:bf:61:
                    f9:ef:2d:e5:33:c8:87:43:ba:a3:fc:b5:21:af:38:
                    30:bc:69:2b:75:6c:80:c4:40:6f:e0:fc:b9:fa:f2:
                    4b:31:0c:98:44:a5:75:68:c0:59:7c:4c:3c:c2:71:
                    6f:5f:5b:39:90:f7:8a:5a:8a:b5:c4:88:4a:9a:0d:
                    8f:f6:1d:c3:a7:fc:02:29:9c:36:28:67:2d:bd:55:
                    f2:05:9d:bf:76:8f:10:97:13:fd:54:d8:a6:fe:cd:
                    76:60:af:6c:98:78:01:bd:6e:df:d5:10:84:54:b2:
                    12:ef:75:6b:01:7b:fd:a3:cc:28:b8:0b:cd:8b:1b:
                    80:f5:a6:68:66:d0:11:6c:93:c6:fb:69:1e:e9:9d:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9C:80:C8:C4:4A:F9:8B:12:6F:7B:BC:14:75:8F:D2:2A:28:8D:A4
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:65:fd:fa:29:7a:08:ee:a8:ff:3c:ea:1b:35:a0:75:35:
         ad:22:3e:7b:84:47:50:21:87:01:2c:0b:bb:b4:e2:2d:28:1e:
         37:6e:4d:82:d9:39:ff:b0:9f:ef:13:42:a6:0e:e6:51:f3:89:
         3a:4a:d3:65:3f:79:b9:16:f5:38:d0:b2:dc:86:9f:a9:80:a9:
         fd:80:9f:61:b1:a1:49:00:cd:e1:9e:b9:12:9b:19:d9:c7:58:
         07:7a:f1:3c:3f:08:0a:7f:09:c9:66:2a:83:80:99:ff:21:01:
         6e:7e:de:29:92:5d:34:24:b5:c9:79:5e:93:89:51:e8:72:1c:
         53:89:d3:4d:cb:44:c7:30:93:46:ec:9d:17:8d:1a:bc:96:07:
         65:80:24:65:58:48:ec:02:2d:1e:58:0a:3c:0c:15:e1:60:82:
         5b:a9:75:49:d4:4f:74:2e:d4:64:9d:1f:da:81:9c:30:3d:78:
         15:77:6a:f0:85:67:b7:5a:3f:2f:28:d0:2c:ff:e4:db:43:c5:
         79:a8:53:6f:80:ca:62:d1:25:85:b7:47:ce:de:3a:ef:5d:77:
         25:2a:c8:bf:44:7a:53:f9:9b:09:e0:bf:7d:b4:42:f3:86:85:
         c4:f8:7c:d4:a7:c6:14:f6:20:7d:ef:29:0b:a5:e8:fa:f9:0f:
         b1:e8:db:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGjYY+vcLwHbzN02UVNrgwTAT2i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFREMxOEFGNjYwRDU1QjVEM0FCOTI1QTEzNzFFNTRF
RURENzUxMDAeFw0yNDA0MDQxNjAxMDhaFw0yNTA0MDMxNjA2MDhaMDMxMTAvBgNV
BAMTKDIzOUM4MEM4QzQ0QUY5OEIxMjZGN0JCQzE0NzU4RkQyMkEyODhEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkIuZTeTitPqCPaqqdQX/3a3T
BL7+lG3ydWYJDVVkgtUK/WCTOfjVKrL0FryQuAsEaH41VCJbLxyp4zjo/m5MrHqv
yj9u/pDwaOssr237JH7e6A7FAMjf4cr17e3DnGwNZWP2WsjVqp1jQF7fVxWR9FFJ
Xym/YfnvLeUzyIdDuqP8tSGvODC8aSt1bIDEQG/g/Ln68ksxDJhEpXVowFl8TDzC
cW9fWzmQ94pairXEiEqaDY/2HcOn/AIpnDYoZy29VfIFnb92jxCXE/1U2Kb+zXZg
r2yYeAG9bt/VEIRUshLvdWsBe/2jzCi4C82LG4D1pmhm0BFsk8b7aR7pnXkNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI5yAyMRK+YsSb3u8FHWP0ioojaQwHwYDVR0j
BBgwFoAUyu3BivZg1VtdOrkloTceVO7ddRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMS9DQUVEQzE4QUY2NjBENTVCNUQzQUI5MjVBMTM3MUU1NEVFREQ3NTEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRURDMThBRjY2MEQ1NUI1
RDNBQjkyNUExMzcxRTU0RUVERDc1MTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzEv
MzEzNjM4MmUzMTM5MzYyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxGwwDQYJKoZIhvcNAQELBQADggEBADT0Zf36
KXoI7qj/POobNaB1Na0iPnuER1AhhwEsC7u04i0oHjduTYLZOf+wn+8TQqYO5lHz
iTpK02U/ebkW9TjQstyGn6mAqf2An2GxoUkAzeGeuRKbGdnHWAd68Tw/CAp/Cclm
KoOAmf8hAW5+3imSXTQktcl5XpOJUehyHFOJ003LRMcwk0bsnReNGryWB2WAJGVY
SOwCLR5YCjwMFeFgglupdUnUT3Qu1GSdH9qBnDA9eBV3avCFZ7daPy8o0Cz/5NtD
xXmoU2+AymLRJYW3R87eOu9ddyUqyL9EelP5mwngv320QvOGhcT4fNSnxhT2IH3v
KQul6Pr5D7Ho27U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org