Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3332203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32322d3332203d3e20323634383939.roa (raw, json)
Hash identifier:          aUuqvZFOBzhTD2t+N4Yx0YjD3RhWW98VVRv621RRYmI=
Subject key identifier:   AB:0B:7E:EA:84:0C:52:BE:3D:6A:02:9D:2E:5E:31:82:04:1A:95:2D
Certificate issuer:       /CN=F4D30AC27DF988AA76B945204A3F14D14A74F97B
Certificate serial:       560D9038C99B1B2FFF25F22B1D3369888259299E
Authority key identifier: F4:D3:0A:C2:7D:F9:88:AA:76:B9:45:20:4A:3F:14:D1:4A:74:F9:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3332203d3e20323634383939.roa
Signing time:             Wed 24 Jan 2024 16:29:46 +0000
ROA not before:           Wed 24 Jan 2024 16:24:46 +0000
ROA not after:            Wed 22 Jan 2025 16:29:46 +0000
asID:                     264899
IP address blocks:        168.228.4.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0d:90:38:c9:9b:1b:2f:ff:25:f2:2b:1d:33:69:88:82:59:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D30AC27DF988AA76B945204A3F14D14A74F97B
        Validity
            Not Before: Jan 24 16:24:46 2024 GMT
            Not After : Jan 22 16:29:46 2025 GMT
        Subject: CN=AB0B7EEA840C52BE3D6A029D2E5E3182041A952D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:f8:2d:26:bc:41:99:ac:6a:8d:6b:21:1f:
                    47:ec:ea:a4:d2:f6:51:c7:89:f0:01:17:63:8d:2b:
                    15:58:81:46:fe:97:a1:e5:8f:9b:a3:53:77:0a:b0:
                    ef:0b:91:e1:69:59:a3:51:cf:1c:fc:5c:b5:0f:13:
                    8e:a6:cd:85:cd:cb:89:a0:ea:40:27:91:1e:31:cd:
                    ce:f4:b7:2e:7d:54:8c:8a:35:02:20:2e:ed:4d:02:
                    ed:e7:d6:55:5e:db:56:5d:a5:9e:55:b8:95:e0:97:
                    81:7b:85:a9:e1:e4:1a:5b:a8:93:6d:b3:ac:34:db:
                    59:f5:03:1c:36:f1:90:d6:20:7c:7f:6c:ad:73:56:
                    76:15:ff:e0:f3:63:8c:e1:0e:eb:e2:f3:f7:b7:fe:
                    cf:29:10:a2:9f:fa:3a:07:81:4a:b6:fa:cb:87:f7:
                    ca:ac:b6:b2:dc:c6:f2:f5:7e:ff:96:54:b5:c2:b6:
                    e2:94:8e:8b:b9:21:5a:2f:bb:ad:31:df:ce:ef:39:
                    34:ee:75:fb:54:d2:91:82:06:27:ab:96:18:83:11:
                    96:7f:ea:67:19:db:9b:5e:46:81:45:17:ea:4b:68:
                    f1:d9:84:3c:78:f4:a0:7c:7a:56:c8:3c:28:50:56:
                    ea:43:1a:14:46:60:96:24:75:7b:e4:52:42:19:cb:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:7E:EA:84:0C:52:BE:3D:6A:02:9D:2E:5E:31:82:04:1A:95:2D
            X509v3 Authority Key Identifier:
                keyid:F4:D3:0A:C2:7D:F9:88:AA:76:B9:45:20:4A:3F:14:D1:4A:74:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4D30AC27DF988AA76B945204A3F14D14A74F97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3332203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:a9:d2:75:b2:89:8b:b4:c8:4a:5e:ba:3a:31:d9:7f:99:
         ed:d1:75:40:0a:5a:6a:12:b9:11:49:bd:95:da:33:fc:56:0b:
         b5:fe:b8:63:f0:2a:3c:ed:78:11:ea:0a:c7:81:2d:62:59:ce:
         b8:de:0f:f5:00:7e:cd:38:0c:bd:09:f6:dc:d1:2c:73:26:78:
         f5:bf:3b:de:90:75:3b:bd:d5:90:54:26:33:e9:23:fe:fb:57:
         a6:71:0f:cd:77:d3:ec:6d:8f:2c:0e:87:d1:36:90:5d:9e:c1:
         2a:a2:e3:ac:fc:3c:0d:41:e6:1e:5d:af:f5:f3:0a:d4:8c:f6:
         b0:08:fb:83:e6:7e:ec:24:ed:a6:6a:fa:58:61:56:49:6c:79:
         1e:a2:4a:cf:ba:84:0e:de:63:72:48:fa:77:28:42:c5:47:fc:
         14:84:c5:d4:e7:af:a0:0b:01:0f:1f:c0:48:31:f7:a3:ce:a1:
         27:8b:24:2c:0e:cc:d2:f4:14:14:34:76:cf:0d:f9:74:96:1f:
         30:6e:78:a3:93:d8:7e:8d:af:2b:19:63:f6:6e:5c:a7:90:f9:
         ce:9a:ed:cb:2e:84:17:d6:13:00:e9:eb:06:be:24:a5:eb:37:
         95:5a:b8:37:6f:5d:71:2a:48:f3:5f:0e:9e:9f:d2:26:e3:0f:
         b5:bd:03:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVg2QOMmbGy//JfIrHTNpiIJZKZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjREMzBBQzI3REY5ODhBQTc2Qjk0NTIwNEEzRjE0RDE0
QTc0Rjk3QjAeFw0yNDAxMjQxNjI0NDZaFw0yNTAxMjIxNjI5NDZaMDMxMTAvBgNV
BAMTKEFCMEI3RUVBODQwQzUyQkUzRDZBMDI5RDJFNUUzMTgyMDQxQTk1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdfgtJrxBmaxqjWshH0fs6qTS
9lHHifABF2ONKxVYgUb+l6Hlj5ujU3cKsO8LkeFpWaNRzxz8XLUPE46mzYXNy4mg
6kAnkR4xzc70ty59VIyKNQIgLu1NAu3n1lVe21ZdpZ5VuJXgl4F7hanh5BpbqJNt
s6w021n1Axw28ZDWIHx/bK1zVnYV/+DzY4zhDuvi8/e3/s8pEKKf+joHgUq2+suH
98qstrLcxvL1fv+WVLXCtuKUjou5IVovu60x387vOTTudftU0pGCBierlhiDEZZ/
6mcZ25teRoFFF+pLaPHZhDx49KB8elbIPChQVupDGhRGYJYkdXvkUkIZy7MNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqwt+6oQMUr49agKdLl4xggQalS0wHwYDVR0j
BBgwFoAU9NMKwn35iKp2uUUgSj8U0Up0+XswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC9GNEQzMEFDMjdERjk4OEFBNzZCOTQ1MjA0QTNGMTREMTRBNzRGOTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0RDMwQUMyN0RGOTg4QUE3
NkI5NDUyMDRBM0YxNEQxNEE3NEY5N0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqOQEMA0GCSqGSIb3DQEBCwUAA4IBAQBIq6nSdbKJ
i7TISl66OjHZf5nt0XVAClpqErkRSb2V2jP8Vgu1/rhj8Co87XgR6grHgS1iWc64
3g/1AH7NOAy9Cfbc0SxzJnj1vzvekHU7vdWQVCYz6SP++1emcQ/Nd9PsbY8sDofR
NpBdnsEqouOs/DwNQeYeXa/18wrUjPawCPuD5n7sJO2mavpYYVZJbHkeokrPuoQO
3mNySPp3KELFR/wUhMXU56+gCwEPH8BIMfejzqEniyQsDszS9BQUNHbPDfl0lh8w
bnijk9h+ja8rGWP2blynkPnOmu3LLoQX1hMA6esGviSl6zeVWrg3b11xKkjzXw6e
n9Im4w+1vQO4
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:32 2025 by rpki-client