Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38362e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          2zB7/12mnZeioghRlUdL02m28PPSXTxF39yexc1WMhg=
Subject key identifier:   08:96:75:14:B0:09:E5:79:FB:CD:8C:A8:C2:BA:D7:42:CC:E9:74:C7
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       1878A7C5FEC43E53B9B176EB6535DC1B44AE47CF
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:10 +0000
ROA not before:           Wed 06 Mar 2024 17:57:10 +0000
ROA not after:            Wed 05 Mar 2025 18:02:10 +0000
asID:                     52780
IP address blocks:        168.205.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:78:a7:c5:fe:c4:3e:53:b9:b1:76:eb:65:35:dc:1b:44:ae:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:10 2024 GMT
            Not After : Mar  5 18:02:10 2025 GMT
        Subject: CN=08967514B009E579FBCD8CA8C2BAD742CCE974C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:cb:45:31:11:98:c6:79:64:d3:19:91:09:
                    fa:45:61:9e:ef:55:1a:c4:a1:c6:67:16:c3:e2:33:
                    67:48:6a:93:87:44:a7:e1:1f:b9:12:9b:bd:e6:c8:
                    33:e4:b6:be:27:67:8f:a2:cc:5f:8a:aa:60:c7:de:
                    c0:d1:de:f7:e9:d8:bc:cc:18:ca:c8:29:b8:00:c9:
                    bf:9c:ac:13:9e:9e:ba:f4:66:41:16:08:67:c4:90:
                    ce:0f:ed:f7:d1:d3:a9:2b:e0:93:46:d4:05:24:31:
                    de:74:3d:0e:ec:41:f9:1e:cf:d0:29:50:aa:6f:3a:
                    e9:d5:7c:4d:4b:8e:ec:00:53:a7:92:05:6a:21:2b:
                    3f:3f:ce:b0:df:ff:fe:7d:33:45:cd:9c:ba:c5:9b:
                    b8:2f:29:45:81:17:ba:2d:4d:5c:b4:1c:49:be:ae:
                    61:8f:51:7a:96:60:9c:92:c9:3e:96:97:65:ae:f9:
                    4d:bf:48:65:9e:13:09:72:c1:95:88:32:55:ca:62:
                    d5:2d:77:0a:9b:8c:8d:6d:5c:90:60:8e:93:33:dc:
                    85:c5:f3:c0:46:d1:26:c4:98:c6:48:f8:aa:c1:7b:
                    3d:52:0d:56:a8:26:77:cb:05:ce:a1:c1:ce:2e:a4:
                    3a:9b:9a:a3:c5:4e:5b:68:c1:07:c3:d8:3d:27:60:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:96:75:14:B0:09:E5:79:FB:CD:8C:A8:C2:BA:D7:42:CC:E9:74:C7
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:00:cb:94:7d:d1:7c:47:a5:71:38:7a:b9:d0:a1:ba:ad:a4:
         c9:eb:ec:8a:ff:69:e8:39:2a:91:c6:88:a1:87:45:31:fe:dd:
         b2:bb:aa:a4:5e:56:14:a8:26:fe:08:ad:1a:11:3f:6a:60:86:
         98:61:1c:0c:2a:d7:2d:a8:c1:a7:82:e1:f2:52:96:fd:da:97:
         65:85:d7:7a:bd:a8:c9:ec:de:4d:95:c1:b8:97:fa:de:bc:9b:
         80:80:10:81:3e:5b:dd:6f:91:ff:bb:19:89:cf:51:8b:13:38:
         c2:b3:09:23:21:b0:a2:1a:97:f5:bb:1b:c9:fa:23:c0:d3:69:
         a2:05:1e:3f:6f:9a:9f:92:b0:5c:44:cc:44:c9:de:b3:75:28:
         f9:f6:b3:84:be:7e:99:e6:51:e4:50:39:09:fc:a4:b4:a6:7e:
         f6:a6:d9:3d:59:07:40:96:c1:b2:38:4a:74:f9:b6:22:b3:e3:
         b3:11:8c:6f:19:76:95:ed:ec:b4:c9:57:d6:17:a4:08:df:44:
         66:8c:e0:7e:28:c5:bb:b2:fb:bf:46:a9:18:f1:aa:2b:2b:ca:
         82:9a:d4:3e:80:8f:2f:e1:f4:0a:a2:0b:e4:85:20:ac:ff:4c:
         93:64:1f:72:9d:4b:16:3e:23:a4:e2:f0:40:30:99:81:cb:53:
         4b:6e:7a:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGHinxf7EPlO5sXbrZTXcG0SuR88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGRjZEODJGRTA1QjFEN0YyMUVBOTg2ODdGRkM5ODA4
OEI1OUI2NDAeFw0yNDAzMDYxNzU3MTBaFw0yNTAzMDUxODAyMTBaMDMxMTAvBgNV
BAMTKDA4OTY3NTE0QjAwOUU1NzlGQkNEOENBOEMyQkFENzQyQ0NFOTc0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0MtFMRGYxnlk0xmRCfpFYZ7v
VRrEocZnFsPiM2dIapOHRKfhH7kSm73myDPktr4nZ4+izF+KqmDH3sDR3vfp2LzM
GMrIKbgAyb+crBOenrr0ZkEWCGfEkM4P7ffR06kr4JNG1AUkMd50PQ7sQfkez9Ap
UKpvOunVfE1LjuwAU6eSBWohKz8/zrDf//59M0XNnLrFm7gvKUWBF7otTVy0HEm+
rmGPUXqWYJySyT6Wl2Wu+U2/SGWeEwlywZWIMlXKYtUtdwqbjI1tXJBgjpMz3IXF
88BG0SbEmMZI+KrBez1SDVaoJnfLBc6hwc4upDqbmqPFTltowQfD2D0nYLc5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCJZ1FLAJ5Xn7zYyowrrXQszpdMcwHwYDVR0j
BBgwFoAUlP9tgv4FsdfyHqmGh//JgIi1m2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMC85NEZGNkQ4MkZFMDVCMUQ3RjIxRUE5ODY4N0ZGQzk4MDg4QjU5QjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0RkY2RDgyRkUwNUIxRDdG
MjFFQTk4Njg3RkZDOTgwODhCNTlCNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzAv
MzEzNjM4MmUzMjMwMzUyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqM1WMA0GCSqGSIb3DQEBCwUAA4IBAQBgAMuUfdF8
R6VxOHq50KG6raTJ6+yK/2noOSqRxoihh0Ux/t2yu6qkXlYUqCb+CK0aET9qYIaY
YRwMKtctqMGnguHyUpb92pdlhdd6vajJ7N5NlcG4l/revJuAgBCBPlvdb5H/uxmJ
z1GLEzjCswkjIbCiGpf1uxvJ+iPA02miBR4/b5qfkrBcRMxEyd6zdSj59rOEvn6Z
5lHkUDkJ/KS0pn72ptk9WQdAlsGyOEp0+bYis+OzEYxvGXaV7ey0yVfWF6QI30Rm
jOB+KMW7svu/RqkY8aorK8qCmtQ+gI8v4fQKogvkhSCs/0yTZB9ynUsWPiOk4vBA
MJmBy1NLbnqS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org