Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
File:                     3136382e3139342e36302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          35/6Va2JRox8ot+iWmygMckFHMWs/3MHNIF0YdU3SGE=
Subject key identifier:   41:6C:3A:90:CF:BC:7E:1B:7C:89:45:F6:FA:5C:F4:3E:92:FF:B4:AF
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       4D6BF3BFEC2EB35CA08D641332CDFD2844DAA6CC
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 20 May 2024 13:18:18 +0000
ROA not before:           Mon 20 May 2024 13:13:18 +0000
ROA not after:            Mon 19 May 2025 13:18:18 +0000
asID:                     28287
IP address blocks:        168.194.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6b:f3:bf:ec:2e:b3:5c:a0:8d:64:13:32:cd:fd:28:44:da:a6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:13:18 2024 GMT
            Not After : May 19 13:18:18 2025 GMT
        Subject: CN=416C3A90CFBC7E1B7C8945F6FA5CF43E92FFB4AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:32:6b:76:b1:97:bc:94:45:52:dd:21:80:
                    5e:9c:8e:fb:ac:11:48:64:ab:41:09:e4:2a:51:30:
                    a1:89:26:52:4a:b0:1c:5d:c5:d7:39:37:37:37:90:
                    6e:8a:14:95:58:7c:38:77:da:af:45:86:00:d2:a2:
                    a9:77:8e:72:28:fd:1e:ca:ed:2b:2e:78:fa:e1:b3:
                    21:b6:90:1e:0d:33:48:58:5c:ef:5e:ed:c8:8f:43:
                    9e:cf:c7:a0:2b:d3:4e:ce:47:8d:6e:70:b3:0e:dd:
                    df:11:80:15:7b:29:6c:ac:70:18:32:da:c6:a2:4e:
                    e9:aa:14:ed:61:65:48:8c:83:4f:f8:02:73:df:50:
                    58:9e:4e:58:c4:04:1c:de:c2:2d:58:4d:b8:79:a8:
                    25:ed:e4:eb:59:8e:f3:92:34:c2:3c:cc:85:72:e9:
                    c5:71:89:73:42:54:c6:25:12:9a:8a:2a:f2:3d:94:
                    81:31:c3:7e:53:a4:35:c7:dc:3e:da:a0:7f:bb:96:
                    7a:15:22:36:63:f5:44:53:8d:4b:16:a7:d2:0d:d6:
                    d4:35:a4:40:33:09:be:5c:f8:db:29:87:56:91:51:
                    92:93:f8:28:3a:a5:4c:71:86:2e:a5:82:0a:79:ce:
                    29:3e:b0:90:98:d3:9f:a4:d1:39:7f:54:8a:30:f4:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:3A:90:CF:BC:7E:1B:7C:89:45:F6:FA:5C:F4:3E:92:FF:B4:AF
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:b0:16:aa:22:c4:67:34:18:80:2a:68:37:27:3b:ee:e3:
         02:18:bd:33:2c:c6:90:28:bc:d7:49:40:bb:a3:69:6a:7f:f8:
         5e:10:d1:0a:fb:93:36:dd:ca:f5:c9:b6:ca:21:36:58:09:7b:
         cb:33:0c:b8:48:89:b9:6d:a5:b7:52:09:c2:6f:41:54:fb:d2:
         df:a5:de:c7:d5:be:d1:c2:57:32:aa:c3:ec:85:e1:34:5e:c6:
         f8:7c:8a:40:20:df:26:35:46:51:85:d2:2f:f0:b1:73:46:b8:
         f2:88:15:e3:07:28:01:a0:1a:bc:7b:d9:3e:55:de:ba:02:0c:
         50:c9:a2:78:1f:62:d9:7e:6c:e8:d1:2b:2d:98:a7:46:d1:76:
         27:96:ea:39:d6:e4:1f:67:a7:7d:12:1d:b1:88:dc:d8:9f:77:
         74:ed:b7:5e:c7:50:a1:6d:ce:23:c2:03:22:d7:e2:7e:71:9e:
         88:41:88:37:78:eb:f9:c8:78:4c:ac:61:14:35:9f:0d:bf:8d:
         4d:e1:76:0e:d6:1c:6b:b6:b1:73:db:1a:ca:cd:36:c7:c1:42:
         46:9c:76:45:37:9e:0f:5c:1a:f5:db:5a:58:b5:55:8c:ca:6d:
         90:5b:82:3a:b9:5e:db:77:8a:e1:ae:eb:cb:00:41:6a:a4:30:
         58:8d:32:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTWvzv+wus1ygjWQTMs39KETapswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwOTU5NzAxRTA1N0Q3Q0NBQjM5QTc2QzJCNkFGNkU1
MTM0ODExRTAeFw0yNDA1MjAxMzEzMThaFw0yNTA1MTkxMzE4MThaMDMxMTAvBgNV
BAMTKDQxNkMzQTkwQ0ZCQzdFMUI3Qzg5NDVGNkZBNUNGNDNFOTJGRkI0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRDJrdrGXvJRFUt0hgF6cjvus
EUhkq0EJ5CpRMKGJJlJKsBxdxdc5Nzc3kG6KFJVYfDh32q9FhgDSoql3jnIo/R7K
7SsuePrhsyG2kB4NM0hYXO9e7ciPQ57Px6Ar007OR41ucLMO3d8RgBV7KWyscBgy
2saiTumqFO1hZUiMg0/4AnPfUFieTljEBBzewi1YTbh5qCXt5OtZjvOSNMI8zIVy
6cVxiXNCVMYlEpqKKvI9lIExw35TpDXH3D7aoH+7lnoVIjZj9URTjUsWp9IN1tQ1
pEAzCb5c+Nsph1aRUZKT+Cg6pUxxhi6lggp5zik+sJCY05+k0Tl/VIow9BkPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQWw6kM+8fht8iUX2+lz0PpL/tK8wHwYDVR0j
BBgwFoAUHglZcB4FfXzKs5p2wravblE0gR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMC8xRTA5NTk3MDFFMDU3RDdDQ0FCMzlBNzZDMkI2QUY2RTUxMzQ4MTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMDk1OTcwMUUwNTdEN0ND
QUIzOUE3NkMyQjZBRjZFNTEzNDgxMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzAv
MzEzNjM4MmUzMTM5MzQyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMI8MA0GCSqGSIb3DQEBCwUAA4IBAQB48LAWqiLE
ZzQYgCpoNyc77uMCGL0zLMaQKLzXSUC7o2lqf/heENEK+5M23cr1ybbKITZYCXvL
Mwy4SIm5baW3UgnCb0FU+9Lfpd7H1b7RwlcyqsPsheE0Xsb4fIpAIN8mNUZRhdIv
8LFzRrjyiBXjBygBoBq8e9k+Vd66AgxQyaJ4H2LZfmzo0SstmKdG0XYnluo51uQf
Z6d9Eh2xiNzYn3d07bdex1Chbc4jwgMi1+J+cZ6IQYg3eOv5yHhMrGEUNZ8Nv41N
4XYO1hxrtrFz2xrKzTbHwUJGnHZFN54PXBr121pYtVWMym2QW4I6uV7bd4rhruvL
AEFqpDBYjTI6
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org