Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          mnaoc9+0XDg0LOgIgdKmgc9eqgc5/8PRZGT0xt88Lwk=
Subject key identifier:   FF:FF:92:04:6F:7A:E3:9F:A7:1B:24:92:6C:F0:3D:AC:D2:58:3F:AF
Certificate issuer:       /CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
Certificate serial:       49EAF0DCF95D2F4F75C93CA4296432229BA6EB4B
Authority key identifier: AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 15 Feb 2024 19:05:31 +0000
ROA not before:           Thu 15 Feb 2024 19:00:31 +0000
ROA not after:            Thu 13 Feb 2025 19:05:31 +0000
asID:                     271267
IP address blocks:        168.197.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:f0:dc:f9:5d:2f:4f:75:c9:3c:a4:29:64:32:22:9b:a6:eb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
        Validity
            Not Before: Feb 15 19:00:31 2024 GMT
            Not After : Feb 13 19:05:31 2025 GMT
        Subject: CN=FFFF92046F7AE39FA71B24926CF03DACD2583FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:fa:65:b7:b6:60:26:66:1c:d8:40:1a:24:
                    c5:31:1e:de:a0:32:2c:f4:8c:ed:18:a6:23:57:89:
                    b8:a1:61:9b:e5:92:6f:d9:7c:f6:ed:40:97:82:0e:
                    85:07:67:8b:b4:80:e8:2d:42:9b:f0:44:d1:8c:5a:
                    69:5f:86:d1:2d:0c:b8:97:f5:68:56:2d:24:db:1a:
                    82:d6:73:46:01:b8:94:50:b4:2d:1a:2b:eb:66:8d:
                    40:88:7b:1e:2c:58:63:db:54:ae:79:7c:e4:20:e6:
                    bc:6c:10:df:12:9f:ab:37:76:a0:fc:aa:83:0f:e6:
                    11:e3:fe:b8:ed:bb:e1:85:d3:a7:6e:46:7e:74:6d:
                    6f:54:dc:3e:3a:ee:9d:e1:5f:b1:a4:39:05:71:45:
                    3f:c2:71:b0:e3:df:66:59:21:c9:a2:4e:1b:5a:71:
                    3f:66:07:d9:2a:cc:d6:ef:37:67:f2:b4:bf:58:db:
                    8e:c9:c7:39:f3:89:77:ea:c8:45:ca:d8:e6:9c:dd:
                    99:7c:36:01:97:c6:dc:a8:f9:2d:31:54:12:b2:59:
                    15:0d:74:c7:07:9d:c9:bf:8f:1a:dc:a2:ce:35:4a:
                    38:a7:f2:20:16:0f:8a:c2:6f:83:9d:3f:32:63:3e:
                    f5:49:4b:a7:ea:ff:cc:d4:5f:0c:57:51:34:49:08:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:92:04:6F:7A:E3:9F:A7:1B:24:92:6C:F0:3D:AC:D2:58:3F:AF
            X509v3 Authority Key Identifier:
                keyid:AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:2a:da:6f:85:7e:02:fd:17:a8:20:c4:34:98:0c:f1:cc:
         86:d9:61:a7:36:37:d2:61:fe:b2:5d:d3:51:c7:59:19:da:25:
         10:59:fc:40:c4:f4:29:e5:47:f6:e3:39:53:02:9d:3d:2a:e8:
         59:ef:91:ea:11:65:5d:df:63:5d:98:df:da:ec:a3:51:99:1e:
         25:3b:54:fb:d4:91:13:c0:b9:29:b7:89:78:17:d5:e0:47:9d:
         82:4c:ca:9c:3d:8c:ba:c7:14:eb:5e:56:cb:aa:98:4a:15:ed:
         d5:bd:fc:bd:48:a7:4a:d3:26:82:8b:2f:55:d2:f6:ef:85:c1:
         e1:46:10:6d:04:40:1f:e2:ab:3a:96:68:a0:9e:6a:8e:4a:42:
         5c:8e:1d:c4:01:60:64:72:4a:64:d5:8f:73:38:eb:64:bb:59:
         a0:b4:4e:db:9a:a3:e5:ef:19:69:fb:c4:01:e6:74:2d:6a:0f:
         c0:28:98:be:40:99:a4:e2:ba:d0:95:83:d8:83:98:4c:f7:54:
         e6:f6:0d:42:63:34:38:12:7c:1c:0f:2f:bf:97:85:31:55:a6:
         bd:de:fe:48:99:2d:58:b6:89:32:16:d8:e1:0e:1d:13:2c:87:
         43:ca:fe:5b:e1:e6:78:5f:dd:6f:05:76:61:b6:d9:5b:d9:a8:
         66:07:9f:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSerw3PldL091yTykKWQyIpum60swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYyMEMxQUY1OUYxMzg2QjAwRjdDODI0NzgyQ0MyRTEz
QjBFQkFFNjAeFw0yNDAyMTUxOTAwMzFaFw0yNTAyMTMxOTA1MzFaMDMxMTAvBgNV
BAMTKEZGRkY5MjA0NkY3QUUzOUZBNzFCMjQ5MjZDRjAzREFDRDI1ODNGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDF/plt7ZgJmYc2EAaJMUxHt6g
Miz0jO0YpiNXibihYZvlkm/ZfPbtQJeCDoUHZ4u0gOgtQpvwRNGMWmlfhtEtDLiX
9WhWLSTbGoLWc0YBuJRQtC0aK+tmjUCIex4sWGPbVK55fOQg5rxsEN8Sn6s3dqD8
qoMP5hHj/rjtu+GF06duRn50bW9U3D467p3hX7GkOQVxRT/CcbDj32ZZIcmiThta
cT9mB9kqzNbvN2fytL9Y247JxznziXfqyEXK2Oac3Zl8NgGXxtyo+S0xVBKyWRUN
dMcHncm/jxrcos41Sjin8iAWD4rCb4OdPzJjPvVJS6fq/8zUXwxXUTRJCC8dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU//+SBG9645+nGySSbPA9rNJYP68wHwYDVR0j
BBgwFoAUryDBr1nxOGsA98gkeCzC4TsOuuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGo4ZUJEZlFyRmhWOEN1NlhxTFk3eEQ0N1d5MlZKNWlZbUVzaTh3ekI0
OTYvMC9BRjIwQzFBRjU5RjEzODZCMDBGN0M4MjQ3ODJDQzJFMTNCMEVCQUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGMjBDMUFGNTlGMTM4NkIw
MEY3QzgyNDc4MkNDMkUxM0IwRUJBRTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqOGVCRGZRckZoVjhDdTZYcUxZN3hENDdXeTJWSjVpWW1Fc2k4d3pCNDk2LzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFtTANBgkqhkiG9w0BAQsFAAOCAQEASz8q
2m+FfgL9F6ggxDSYDPHMhtlhpzY30mH+sl3TUcdZGdolEFn8QMT0KeVH9uM5UwKd
PSroWe+R6hFlXd9jXZjf2uyjUZkeJTtU+9SRE8C5KbeJeBfV4EedgkzKnD2MuscU
615Wy6qYShXt1b38vUinStMmgosvVdL274XB4UYQbQRAH+KrOpZooJ5qjkpCXI4d
xAFgZHJKZNWPczjrZLtZoLRO25qj5e8ZafvEAeZ0LWoPwCiYvkCZpOK60JWD2IOY
TPdU5vYNQmM0OBJ8HA8vv5eFMVWmvd7+SJktWLaJMhbY4Q4dEyyHQ8r+W+HmeF/d
bwV2YbbZW9moZgefFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org