Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          xYXdknY8Zi2DC6AoyDA9n/Q4iNE65xdxzqzHQUHxsyg=
Subject key identifier:   54:27:82:A3:DD:00:D4:02:21:6C:35:A6:01:AB:3C:F7:04:DE:A4:1B
Certificate issuer:       /CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
Certificate serial:       24B4FB38828F3A1D3A8C4966E5E0852C690343B8
Authority key identifier: AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 15 Feb 2024 19:05:31 +0000
ROA not before:           Thu 15 Feb 2024 19:00:31 +0000
ROA not after:            Thu 13 Feb 2025 19:05:31 +0000
asID:                     271267
IP address blocks:        168.197.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b4:fb:38:82:8f:3a:1d:3a:8c:49:66:e5:e0:85:2c:69:03:43:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
        Validity
            Not Before: Feb 15 19:00:31 2024 GMT
            Not After : Feb 13 19:05:31 2025 GMT
        Subject: CN=542782A3DD00D402216C35A601AB3CF704DEA41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:21:ab:7b:9f:e1:05:fe:a4:08:f5:e6:aa:
                    45:9e:c1:1b:fc:03:cf:ce:36:62:fd:d2:f3:36:93:
                    51:cb:88:dd:70:c9:29:60:f2:04:c1:d4:ae:ee:4c:
                    53:e1:ac:f7:e7:c3:97:38:fd:e7:93:6f:89:af:ec:
                    16:82:22:cf:c7:12:e5:c1:b7:29:84:19:ef:19:d9:
                    d1:13:bb:2c:0d:f1:7e:3d:c7:7a:56:4c:30:17:78:
                    10:04:10:88:0b:38:0c:c5:46:c1:f3:b1:f4:1d:51:
                    f2:fb:98:ca:cc:ac:b6:98:10:eb:b5:92:e9:98:8f:
                    56:f7:83:e9:ad:5d:63:33:66:87:58:a1:6f:68:b0:
                    c3:bc:e9:e2:5e:2f:1c:97:dc:8b:f2:52:72:5d:51:
                    b2:fc:d2:f6:32:00:60:73:18:58:ac:8a:15:c9:6c:
                    98:6c:72:5d:52:09:87:01:60:1f:b5:92:90:09:5e:
                    47:a9:d3:70:06:14:6c:76:a2:35:fa:73:2e:96:35:
                    a2:bd:df:cf:96:20:77:e5:75:6c:38:85:e2:fa:ba:
                    4a:0d:9c:23:b8:a7:95:ac:7f:6c:a2:4e:ea:82:47:
                    79:e3:08:5a:4d:f9:57:0e:e2:ef:29:c2:d1:12:1e:
                    2d:aa:f8:af:98:fd:99:94:84:23:16:cf:f0:ee:af:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:82:A3:DD:00:D4:02:21:6C:35:A6:01:AB:3C:F7:04:DE:A4:1B
            X509v3 Authority Key Identifier:
                keyid:AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:d5:0c:9d:77:c8:03:7e:0b:68:fc:15:46:35:6b:e4:c1:
         b7:6e:aa:57:7f:2e:97:ed:eb:c0:8c:b3:04:73:e0:19:df:3b:
         12:6c:e1:02:22:4f:63:d3:6b:e5:43:9e:74:ba:b6:d6:47:df:
         5b:68:c7:23:2b:78:92:ac:4b:c4:25:89:c4:29:85:d1:04:48:
         27:19:cb:8c:a2:ad:2e:f3:e4:f9:70:a3:47:11:2d:5c:56:d4:
         59:73:44:6b:98:a2:e9:45:6f:f9:0e:36:f5:e2:5d:68:bf:ce:
         b0:f7:e1:cb:f7:21:bc:51:e2:64:0d:d1:a7:04:b5:ed:45:0b:
         b5:3e:2e:43:bc:2a:34:58:35:c7:6a:d5:38:a7:07:51:15:b0:
         1c:7b:70:d7:96:1a:93:98:73:75:50:44:a0:31:c2:89:b4:55:
         b4:34:66:87:99:b0:66:2a:d3:8e:cc:65:34:03:2b:2f:c3:6c:
         49:a9:e3:5f:8b:01:af:9c:53:67:c7:6f:f2:ca:a7:12:c4:e3:
         68:71:8b:a1:ad:ee:45:8a:5d:c1:7e:52:e9:94:c1:62:79:65:
         df:c4:a6:31:6a:8a:26:a3:4d:d9:11:1f:d6:ed:52:d0:5e:f4:
         36:de:ac:ab:3e:ed:14:f8:fd:f6:bf:96:42:f2:95:bf:17:7d:
         c3:a2:af:74
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJLT7OIKPOh06jElm5eCFLGkDQ7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYyMEMxQUY1OUYxMzg2QjAwRjdDODI0NzgyQ0MyRTEz
QjBFQkFFNjAeFw0yNDAyMTUxOTAwMzFaFw0yNTAyMTMxOTA1MzFaMDMxMTAvBgNV
BAMTKDU0Mjc4MkEzREQwMEQ0MDIyMTZDMzVBNjAxQUIzQ0Y3MDRERUE0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLSGre5/hBf6kCPXmqkWewRv8
A8/ONmL90vM2k1HLiN1wySlg8gTB1K7uTFPhrPfnw5c4/eeTb4mv7BaCIs/HEuXB
tymEGe8Z2dETuywN8X49x3pWTDAXeBAEEIgLOAzFRsHzsfQdUfL7mMrMrLaYEOu1
kumYj1b3g+mtXWMzZodYoW9osMO86eJeLxyX3IvyUnJdUbL80vYyAGBzGFisihXJ
bJhscl1SCYcBYB+1kpAJXkep03AGFGx2ojX6cy6WNaK938+WIHfldWw4heL6ukoN
nCO4p5Wsf2yiTuqCR3njCFpN+VcO4u8pwtESHi2q+K+Y/ZmUhCMWz/Dur1EBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVCeCo90A1AIhbDWmAas89wTepBswHwYDVR0j
BBgwFoAUryDBr1nxOGsA98gkeCzC4TsOuuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGo4ZUJEZlFyRmhWOEN1NlhxTFk3eEQ0N1d5MlZKNWlZbUVzaTh3ekI0
OTYvMC9BRjIwQzFBRjU5RjEzODZCMDBGN0M4MjQ3ODJDQzJFMTNCMEVCQUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGMjBDMUFGNTlGMTM4NkIw
MEY3QzgyNDc4MkNDMkUxM0IwRUJBRTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqOGVCRGZRckZoVjhDdTZYcUxZN3hENDdXeTJWSjVpWW1Fc2k4d3pCNDk2LzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFtjANBgkqhkiG9w0BAQsFAAOCAQEAAh3V
DJ13yAN+C2j8FUY1a+TBt26qV38ul+3rwIyzBHPgGd87EmzhAiJPY9Nr5UOedLq2
1kffW2jHIyt4kqxLxCWJxCmF0QRIJxnLjKKtLvPk+XCjRxEtXFbUWXNEa5ii6UVv
+Q429eJdaL/OsPfhy/chvFHiZA3RpwS17UULtT4uQ7wqNFg1x2rVOKcHURWwHHtw
15Yak5hzdVBEoDHCibRVtDRmh5mwZirTjsxlNAMrL8NsSanjX4sBr5xTZ8dv8sqn
EsTjaHGLoa3uRYpdwX5S6ZTBYnll38SmMWqKJqNN2REf1u1S0F70Nt6sqz7tFPj9
9r+WQvKVvxd9w6KvdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org