Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
File:                     3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          nVAIhQswCK+CXl7RMYWOPn9bWR3tQ7aD0+JRz0JQE+M=
Subject key identifier:   C2:A7:C3:41:7A:B8:5B:7A:22:A1:DA:EA:C4:2A:E8:A9:16:8D:42:FA
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       6D8856EA5E23BF8A7816351CFB1442ECC1F32DBE
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
Signing time:             Sun 14 Jan 2024 03:44:58 +0000
ROA not before:           Sun 14 Jan 2024 03:39:58 +0000
ROA not after:            Sun 12 Jan 2025 03:44:58 +0000
asID:                     262300
IP address blocks:        168.181.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:88:56:ea:5e:23:bf:8a:78:16:35:1c:fb:14:42:ec:c1:f3:2d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Jan 14 03:39:58 2024 GMT
            Not After : Jan 12 03:44:58 2025 GMT
        Subject: CN=C2A7C3417AB85B7A22A1DAEAC42AE8A9168D42FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:26:f3:9f:bf:d3:60:0b:c9:55:96:51:cf:d1:
                    9b:a0:0b:73:5b:ee:28:32:98:4e:f7:1b:2a:04:fa:
                    74:09:46:93:44:e1:02:1b:fc:f3:b7:d6:09:e3:02:
                    a8:47:30:6d:49:3f:6c:2a:48:fc:19:0b:b3:86:c5:
                    00:a9:c1:7c:2d:bf:05:73:ce:01:5c:c9:68:c4:03:
                    02:e2:82:36:02:eb:d5:76:4e:9e:f9:2c:ff:83:c1:
                    92:ba:59:5c:11:2e:8d:9d:85:22:4e:83:e9:1f:30:
                    a3:fa:0f:e6:e0:5b:b9:ab:6c:91:ea:1c:8c:cf:e9:
                    e4:96:8c:a9:0d:3a:ee:0f:e9:da:4b:66:4a:16:8e:
                    a2:23:98:b5:50:c7:6e:02:73:b3:25:9c:2c:5e:5a:
                    eb:00:2a:f8:a0:62:81:39:7d:97:c1:e4:46:7e:35:
                    8e:1a:a8:1f:4d:92:ec:ef:64:58:2e:8e:17:db:06:
                    8d:a7:58:78:be:50:2d:73:4b:3c:11:8a:d9:4a:04:
                    3f:8e:4e:ab:bc:93:c7:e1:66:a1:a0:82:52:90:19:
                    5f:9a:4b:dd:c7:d8:77:8c:27:46:f2:44:c7:19:9b:
                    3f:15:6b:cd:58:f1:23:2d:91:79:94:65:34:ec:09:
                    ad:93:a3:07:53:6f:3d:95:cb:db:ca:95:11:ef:79:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:C3:41:7A:B8:5B:7A:22:A1:DA:EA:C4:2A:E8:A9:16:8D:42:FA
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:44:32:38:6b:51:e1:84:c9:b9:f1:c4:1d:d7:24:83:7b:37:
         db:1e:ae:be:07:b0:86:94:d8:f5:d7:13:c3:0d:e9:ee:10:81:
         01:7d:ef:27:bb:74:79:5f:ef:04:40:d5:ac:c3:0c:74:ee:b1:
         c4:dd:17:e4:7d:b8:2e:5b:09:1c:a8:d2:59:3b:50:8c:de:c9:
         55:25:c4:4b:6d:8b:52:81:a8:46:68:eb:ab:c3:25:d8:3f:cb:
         fb:57:48:cb:57:2e:02:b0:ff:46:e7:a5:2d:13:59:62:43:33:
         10:de:f8:9b:29:42:a0:89:f4:be:5b:a6:08:22:26:63:b1:bc:
         46:8b:8c:b2:64:c2:76:4e:cd:3e:48:62:f3:fc:81:96:0d:37:
         69:6f:31:f6:69:1d:dc:fb:30:b6:7a:e3:56:e7:aa:ef:cd:01:
         d3:7e:86:58:8c:92:e7:17:d5:10:df:18:ed:c0:28:da:a9:9c:
         e1:22:9c:e6:8d:a1:30:00:92:06:6e:11:f9:03:d7:20:ee:5a:
         a8:27:07:ba:85:6e:d2:49:ad:67:82:f4:cb:49:a7:c0:dc:8b:
         32:05:df:e2:d5:02:e1:77:ba:7f:c4:92:03:fc:38:c6:46:7a:
         77:11:ff:88:68:0d:5c:d3:52:6b:d4:4a:98:97:7f:ec:0b:b3:
         76:86:67:7f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbYhW6l4jv4p4FjUc+xRC7MHzLb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM0MTFCMURDMjhEMTRFQzlDMkQ2RDM1RjhFQ0QyMjNB
Qjc4RUQ0MDAeFw0yNDAxMTQwMzM5NThaFw0yNTAxMTIwMzQ0NThaMDMxMTAvBgNV
BAMTKEMyQTdDMzQxN0FCODVCN0EyMkExREFFQUM0MkFFOEE5MTY4RDQyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3JvOfv9NgC8lVllHP0ZugC3Nb
7igymE73GyoE+nQJRpNE4QIb/PO31gnjAqhHMG1JP2wqSPwZC7OGxQCpwXwtvwVz
zgFcyWjEAwLigjYC69V2Tp75LP+DwZK6WVwRLo2dhSJOg+kfMKP6D+bgW7mrbJHq
HIzP6eSWjKkNOu4P6dpLZkoWjqIjmLVQx24Cc7MlnCxeWusAKvigYoE5fZfB5EZ+
NY4aqB9NkuzvZFgujhfbBo2nWHi+UC1zSzwRitlKBD+OTqu8k8fhZqGgglKQGV+a
S93H2HeMJ0byRMcZmz8Va81Y8SMtkXmUZTTsCa2TowdTbz2Vy9vKlRHvecYXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwqfDQXq4W3oiodrqxCroqRaNQvowHwYDVR0j
BBgwFoAUDEEbHcKNFOycLW01+OzSI6t47UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHE0UkNMN21VSm1nVXRSREtqakI4WTROenBkczRuVHdpVGg3RzhlTmdY
TjMvMC8wQzQxMUIxREMyOEQxNEVDOUMyRDZEMzVGOEVDRDIyM0FCNzhFRDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDNDExQjFEQzI4RDE0RUM5
QzJENkQzNUY4RUNEMjIzQUI3OEVENDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxNFJDTDdtVUptZ1V0UkRLampCOFk0TnpwZHM0blR3aVRoN0c4ZU5nWE4zLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1cDANBgkqhkiG9w0BAQsFAAOCAQEAUkQy
OGtR4YTJufHEHdckg3s32x6uvgewhpTY9dcTww3p7hCBAX3vJ7t0eV/vBEDVrMMM
dO6xxN0X5H24LlsJHKjSWTtQjN7JVSXES22LUoGoRmjrq8Ml2D/L+1dIy1cuArD/
RuelLRNZYkMzEN74mylCoIn0vlumCCImY7G8RouMsmTCdk7NPkhi8/yBlg03aW8x
9mkd3PswtnrjVueq780B036GWIyS5xfVEN8Y7cAo2qmc4SKc5o2hMACSBm4R+QPX
IO5aqCcHuoVu0kmtZ4L0y0mnwNyLMgXf4tUC4Xe6f8SSA/w4xkZ6dxH/iGgNXNNS
a9RKmJd/7AuzdoZnfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org