Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3136382e302e3134302e302f32322d3234203d3e20323632353635.roa
File:                     3136382e302e3134302e302f32322d3234203d3e20323632353635.roa (raw, json)
Hash identifier:          wS1KRob5ai0qFBRlEUTJ3jlByZT+p0SsiYkRzJa3hhU=
Subject key identifier:   D9:3F:7B:10:B3:FD:26:06:D1:CD:49:0E:41:5F:E1:1C:77:6D:C9:8A
Certificate issuer:       /CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
Certificate serial:       79373E8C7A9E5C7814C5467E8A7A8B289B784778
Authority key identifier: C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3136382e302e3134302e302f32322d3234203d3e20323632353635.roa
Signing time:             Tue 19 Mar 2024 18:04:17 +0000
ROA not before:           Tue 19 Mar 2024 17:59:17 +0000
ROA not after:            Tue 18 Mar 2025 18:04:17 +0000
asID:                     262565
IP address blocks:        168.0.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:37:3e:8c:7a:9e:5c:78:14:c5:46:7e:8a:7a:8b:28:9b:78:47:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
        Validity
            Not Before: Mar 19 17:59:17 2024 GMT
            Not After : Mar 18 18:04:17 2025 GMT
        Subject: CN=D93F7B10B3FD2606D1CD490E415FE11C776DC98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:62:ff:30:3c:71:fb:a9:63:53:3c:67:d4:
                    dd:fa:f7:b4:ee:34:48:52:07:8b:c4:b4:d6:e1:00:
                    b6:55:7d:2b:57:36:64:f4:22:8c:92:e7:cd:06:3f:
                    11:2b:9f:7e:2a:3e:39:85:5f:b9:96:10:61:18:85:
                    ef:29:3e:72:17:ab:21:87:3d:cc:ef:13:e8:1a:9e:
                    ff:f0:55:cc:91:66:d3:c4:40:e0:4f:ff:35:da:44:
                    7c:48:3e:cc:ea:ff:f4:1f:c5:9f:27:6b:8c:76:f1:
                    6c:3b:b4:50:c8:fe:7a:52:e6:90:48:ac:c6:8e:78:
                    19:5f:3b:d1:8b:1b:58:e6:81:42:02:b0:f3:14:b8:
                    7c:aa:8e:c3:80:d7:2d:ad:6e:ff:03:e7:b9:e8:a2:
                    c6:19:c8:bd:94:2a:28:4d:f7:39:52:90:65:59:64:
                    e5:39:42:93:2d:a9:35:1b:c4:ae:7a:56:03:6c:14:
                    9b:52:0d:db:0f:be:ac:80:25:d4:bd:26:b7:e4:86:
                    26:49:a9:49:25:c4:96:3c:e3:e4:49:0f:a3:ed:4d:
                    31:83:6b:f6:e8:6b:71:ce:4f:d6:fe:9a:3a:58:49:
                    fb:81:f4:11:b4:6c:a6:dc:19:39:7e:07:84:55:de:
                    39:51:8a:f6:ed:06:ba:03:1a:87:f6:b5:f4:7c:30:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3F:7B:10:B3:FD:26:06:D1:CD:49:0E:41:5F:E1:1C:77:6D:C9:8A
            X509v3 Authority Key Identifier:
                keyid:C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3136382e302e3134302e302f32322d3234203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:d3:ab:2b:8f:12:c8:fc:3b:00:31:0e:2f:90:19:da:8a:
         4a:ef:3b:63:2d:92:93:3e:c2:87:51:f0:74:95:91:9c:3e:8a:
         54:f7:a0:60:6c:8e:33:46:f5:88:9a:5b:88:fa:a1:ca:20:81:
         e0:fe:3d:c8:c6:75:2b:c5:7d:6d:3f:aa:dc:d9:d8:71:ed:7b:
         2d:11:66:11:81:f9:2d:76:54:f2:59:17:9a:14:3b:e5:66:0f:
         fe:5d:e2:09:55:a4:93:fe:e2:52:ab:e2:5a:f1:a1:02:41:c5:
         98:c5:4a:6c:d9:75:9c:89:e6:dd:d6:42:a5:44:7a:5e:1f:dd:
         06:15:1f:31:2d:77:8d:5e:ba:eb:09:ad:67:f9:a0:11:de:3f:
         8c:59:44:27:a2:7b:50:26:bc:b2:3a:09:76:ba:ae:ca:11:c0:
         f2:6a:e6:52:44:8d:18:05:17:46:c0:88:ab:10:f0:41:17:c2:
         3b:b7:2c:c6:84:a1:38:c7:03:0d:c0:98:e4:dc:51:7e:3b:0b:
         ae:30:1e:75:66:ad:d3:4b:e8:f5:d6:58:64:b3:b5:26:e6:ab:
         e3:56:b8:97:7f:a2:6b:11:22:2e:37:f6:0b:a3:85:75:35:00:
         af:63:39:66:ff:cf:a4:f3:1a:7c:d8:49:77:31:94:c8:4d:64:
         04:03:63:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeTc+jHqeXHgUxUZ+inqLKJt4R3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4QzY0RDlBRTJCNzZBRTkzMEQ5Q0Q0MEM4N0Q4MDMw
MUVFRDU0QzAeFw0yNDAzMTkxNzU5MTdaFw0yNTAzMTgxODA0MTdaMDMxMTAvBgNV
BAMTKEQ5M0Y3QjEwQjNGRDI2MDZEMUNENDkwRTQxNUZFMTFDNzc2REM5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJWL/MDxx+6ljUzxn1N3697Tu
NEhSB4vEtNbhALZVfStXNmT0IoyS580GPxErn34qPjmFX7mWEGEYhe8pPnIXqyGH
PczvE+ganv/wVcyRZtPEQOBP/zXaRHxIPszq//QfxZ8na4x28Ww7tFDI/npS5pBI
rMaOeBlfO9GLG1jmgUICsPMUuHyqjsOA1y2tbv8D57noosYZyL2UKihN9zlSkGVZ
ZOU5QpMtqTUbxK56VgNsFJtSDdsPvqyAJdS9JrfkhiZJqUklxJY84+RJD6PtTTGD
a/boa3HOT9b+mjpYSfuB9BG0bKbcGTl+B4RV3jlRivbtBroDGof2tfR8MITfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2T97ELP9JgbRzUkOQV/hHHdtyYowHwYDVR0j
BBgwFoAUyYxk2a4rdq6TDZzUDIfYAwHu1UwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzg1MllBNVFOVnF0cTM1ZmNOY21NTlU4OUFDNkVSNW9VZ0dlblBMWlhk
OTkvMC9DOThDNjREOUFFMkI3NkFFOTMwRDlDRDQwQzg3RDgwMzAxRUVENTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OEM2NEQ5QUUyQjc2QUU5
MzBEOUNENDBDODdEODAzMDFFRUQ1NEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4NTJZQTVRTlZxdHEzNWZjTmNtTU5VODlBQzZFUjVvVWdHZW5QTFpYZDk5LzAv
MzEzNjM4MmUzMDJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqACMMA0GCSqGSIb3DQEBCwUAA4IBAQAlW9OrK48S
yPw7ADEOL5AZ2opK7ztjLZKTPsKHUfB0lZGcPopU96BgbI4zRvWImluI+qHKIIHg
/j3IxnUrxX1tP6rc2dhx7XstEWYRgfktdlTyWReaFDvlZg/+XeIJVaST/uJSq+Ja
8aECQcWYxUps2XWciebd1kKlRHpeH90GFR8xLXeNXrrrCa1n+aAR3j+MWUQnontQ
JryyOgl2uq7KEcDyauZSRI0YBRdGwIirEPBBF8I7tyzGhKE4xwMNwJjk3FF+Owuu
MB51Zq3TS+j11lhks7Um5qvjVriXf6JrESIuN/YLo4V1NQCvYzlm/8+k8xp82El3
MZTITWQEA2Py
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org