Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32322d3232203d3e20323632353332.roa
File:                     3138362e3234392e3137362e302f32322d3232203d3e20323632353332.roa (raw, json)
Hash identifier:          tq3a3is3gtMQunfus50h4iwxUdO6UztPkDa0FgF4+xo=
Subject key identifier:   3A:E2:73:15:88:AD:13:35:5A:84:D8:A7:55:74:E5:95:11:9D:58:A2
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       57524710C01AEF3E9C0CF6CAF58B4620A8133CFE
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32322d3232203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:41 +0000
ROA not before:           Wed 28 Feb 2024 14:07:41 +0000
ROA not after:            Wed 26 Feb 2025 14:12:41 +0000
asID:                     262532
IP address blocks:        186.249.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:52:47:10:c0:1a:ef:3e:9c:0c:f6:ca:f5:8b:46:20:a8:13:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:41 2024 GMT
            Not After : Feb 26 14:12:41 2025 GMT
        Subject: CN=3AE2731588AD13355A84D8A75574E595119D58A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:d3:30:45:e3:9b:32:54:75:06:84:aa:2c:
                    dd:c6:81:84:ca:d1:9c:fc:06:1f:93:06:1a:85:a2:
                    06:1f:f9:ea:a6:e8:9f:5a:17:9e:32:76:eb:aa:7b:
                    3b:42:f8:64:00:bf:c4:27:7a:da:f1:6b:ba:8c:14:
                    05:d3:1a:eb:04:b7:71:b0:e6:7d:78:af:86:6c:0f:
                    93:1b:34:3d:67:c3:83:fe:a5:5b:8e:09:4d:7f:fb:
                    34:08:dc:b6:e3:55:20:29:ef:7e:7b:72:5f:9a:d2:
                    94:7b:5f:51:cf:01:42:41:7d:e0:65:9f:89:1b:95:
                    4e:c5:f3:f3:31:aa:dd:20:82:d4:17:a7:68:3a:70:
                    3d:ba:7b:a1:34:15:c5:54:07:05:67:ba:01:3a:ce:
                    87:78:c2:b8:74:0d:5e:f4:34:ae:e7:66:29:ef:a3:
                    5f:a3:81:40:51:3c:57:5c:0b:37:0c:a1:40:c6:bb:
                    68:98:b8:59:1c:bc:a7:68:0d:8b:e1:3f:1c:b0:ac:
                    cc:88:b5:5e:c4:23:f5:00:05:7b:ba:a7:21:ed:b5:
                    32:1b:8f:21:e2:17:ce:0a:d1:f8:41:0b:ce:3c:b2:
                    83:c1:e8:37:33:23:e9:ae:3f:a5:b5:c9:79:ce:2b:
                    25:45:49:58:fe:e7:08:e6:f0:32:d9:51:b0:73:15:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E2:73:15:88:AD:13:35:5A:84:D8:A7:55:74:E5:95:11:9D:58:A2
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3137362e302f32322d3232203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:61:41:51:b4:3b:f8:1c:d7:e2:c2:9f:b7:35:18:f8:f9:
         7f:e4:1d:a6:e5:09:63:d1:a6:67:b4:53:ac:bd:63:ff:55:89:
         8b:d7:c1:7c:0a:fd:6c:ff:3b:dc:41:f1:39:c9:b7:1a:2b:8c:
         08:95:b9:c3:d0:48:83:cc:4f:3b:90:a2:e0:b8:24:4a:7f:7a:
         ee:a9:6a:ea:32:8f:fe:b0:68:cb:5f:73:c4:1d:56:ec:bd:e6:
         ad:66:08:f3:05:b9:86:ec:4c:5a:01:aa:20:70:3f:f1:dc:87:
         e4:03:91:20:fc:e5:9c:2e:04:0e:7d:31:3d:47:a0:3b:36:f6:
         8a:af:de:22:ad:8b:22:eb:3a:9a:52:73:82:9f:8b:ca:c9:6b:
         ea:27:49:8e:bf:ba:5e:5b:b2:23:cd:90:60:f9:a0:7a:08:98:
         58:a9:8a:d8:57:dc:99:b4:1e:b5:90:f9:88:2c:c4:6f:c4:1f:
         07:8a:e9:fe:c6:bc:d8:df:ea:d6:7b:4d:af:c0:28:36:29:4f:
         1c:c2:65:19:a5:50:da:eb:8f:db:4c:58:72:a2:f9:24:5e:88:
         f8:a8:8c:9d:94:4f:51:3a:30:14:0c:34:a4:d3:b0:80:0c:0c:
         b2:34:1f:50:db:7f:8f:c8:7a:d3:df:99:e8:ed:d0:10:9c:4d:
         4f:70:75:cc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUV1JHEMAa7z6cDPbK9YtGIKgTPP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA3NDFaFw0yNTAyMjYxNDEyNDFaMDMxMTAvBgNV
BAMTKDNBRTI3MzE1ODhBRDEzMzU1QTg0RDhBNzU1NzRFNTk1MTE5RDU4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKV9MwReObMlR1BoSqLN3GgYTK
0Zz8Bh+TBhqFogYf+eqm6J9aF54yduuqeztC+GQAv8Qnetrxa7qMFAXTGusEt3Gw
5n14r4ZsD5MbND1nw4P+pVuOCU1/+zQI3LbjVSAp7357cl+a0pR7X1HPAUJBfeBl
n4kblU7F8/Mxqt0ggtQXp2g6cD26e6E0FcVUBwVnugE6zod4wrh0DV70NK7nZinv
o1+jgUBRPFdcCzcMoUDGu2iYuFkcvKdoDYvhPxywrMyItV7EI/UABXu6pyHttTIb
jyHiF84K0fhBC848soPB6DczI+muP6W1yXnOKyVFSVj+5wjm8DLZUbBzFVVbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOuJzFYitEzVahNinVXTllRGdWKIwHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzEzODM2MmUzMjM0MzkyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr5sDANBgkqhkiG9w0BAQsFAAOCAQEAE8Jh
QVG0O/gc1+LCn7c1GPj5f+QdpuUJY9GmZ7RTrL1j/1WJi9fBfAr9bP873EHxOcm3
GiuMCJW5w9BIg8xPO5Ci4LgkSn967qlq6jKP/rBoy19zxB1W7L3mrWYI8wW5huxM
WgGqIHA/8dyH5AORIPzlnC4EDn0xPUegOzb2iq/eIq2LIus6mlJzgp+Lyslr6idJ
jr+6XluyI82QYPmgegiYWKmK2FfcmbQetZD5iCzEb8QfB4rp/sa82N/q1ntNr8Ao
NilPHMJlGaVQ2uuP20xYcqL5JF6I+KiMnZRPUTowFAw0pNOwgAwMsjQfUNt/j8h6
09+Z6O3QEJxNT3B1zA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org