Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
File:                     3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa (raw, json)
Hash identifier:          Mby7mtHJQ2JhyUFCsYsD3sEP6Wl+77kulDvW2F4URTw=
Subject key identifier:   FC:A7:BD:85:4C:76:5D:D6:7A:21:90:83:11:AD:55:5A:F9:49:A4:8D
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       0A3A26A84348A60DDD4FD638E2E272A875D3B3B8
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:57 +0000
ROA not before:           Fri 12 Apr 2024 16:14:57 +0000
ROA not after:            Fri 11 Apr 2025 16:19:57 +0000
asID:                     271390
IP address blocks:        181.189.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:26:a8:43:48:a6:0d:dd:4f:d6:38:e2:e2:72:a8:75:d3:b3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:57 2024 GMT
            Not After : Apr 11 16:19:57 2025 GMT
        Subject: CN=FCA7BD854C765DD67A21908311AD555AF949A48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:7f:6b:f2:fb:c0:bd:74:5a:17:d6:8d:b9:
                    d2:56:8c:7d:00:87:48:bd:21:b9:d8:df:35:e2:38:
                    d8:cf:d3:29:c0:0a:2b:97:0b:c4:b4:f8:4a:68:90:
                    5a:df:d8:8e:3a:03:a1:7a:94:04:0a:fc:66:64:76:
                    04:2e:43:c3:eb:7d:c9:ad:bc:0d:0c:2f:73:1e:c3:
                    8e:6e:00:98:2b:9d:18:c8:52:9d:17:ba:e0:53:a5:
                    ee:4e:63:84:32:06:3c:42:fc:ee:88:d0:34:ec:74:
                    b3:90:6a:a6:8f:5b:0b:77:66:f7:48:fe:f8:12:89:
                    16:02:66:01:8a:a7:1e:76:51:6f:9f:fc:0b:ce:ad:
                    f7:75:ef:cc:bf:d0:0b:72:0e:f5:28:c3:c2:72:e6:
                    87:43:c9:70:e7:ef:59:37:c1:52:9d:95:6a:44:21:
                    f3:a6:11:d3:46:91:68:cd:b5:3a:b0:d5:d2:dc:56:
                    bd:26:f7:a1:3c:d9:56:28:13:d7:98:13:36:d8:43:
                    87:45:6d:13:f0:d4:67:13:98:4b:9c:82:4d:09:d6:
                    27:b1:95:99:e5:fd:6e:60:ed:19:04:a3:8e:9e:08:
                    3e:f2:0f:33:77:22:ae:df:ca:da:33:d2:55:ef:a2:
                    76:b5:f1:56:3f:f5:6f:85:4e:15:01:d3:01:07:32:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:BD:85:4C:76:5D:D6:7A:21:90:83:11:AD:55:5A:F9:49:A4:8D
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:74:23:3b:28:6c:fe:09:f4:a4:37:53:ac:5a:ea:d6:4e:b2:
         3c:94:20:17:5c:79:30:3a:27:b9:fe:66:e2:cc:7b:7a:1a:2e:
         7b:61:4a:25:ae:68:01:e1:ee:7a:88:e9:2c:81:53:71:cf:da:
         e3:c7:bb:c8:38:57:cb:c4:eb:42:be:5e:7d:d5:0f:d2:29:a8:
         ad:fd:f7:f8:1e:cb:70:5a:58:70:60:b0:cb:f8:e2:d8:4f:8e:
         1c:77:e6:75:f4:d6:7e:f4:83:64:a1:f5:1b:bd:5e:33:fc:13:
         3e:43:35:33:c9:96:93:9c:cb:4c:6a:63:7e:a5:64:43:00:cc:
         7c:6f:df:97:9d:75:16:92:cc:17:f0:37:5b:45:a1:ad:d8:c1:
         26:e5:d7:54:a5:da:3a:00:57:47:c4:d7:58:33:6b:ed:b2:7f:
         4b:41:fb:da:c8:38:2b:e0:80:1f:25:d3:9f:0f:92:52:1d:3a:
         9a:46:75:97:59:85:8d:6c:d9:65:1c:5f:08:e6:06:97:80:7d:
         21:cd:ee:cc:1e:68:d5:b6:61:96:93:f6:f4:19:d9:3e:72:72:
         8f:16:86:ba:5e:81:65:80:e6:11:37:e4:8e:cf:f4:74:1d:38:
         b0:f4:58:e3:8f:be:68:fe:10:48:34:48:35:28:30:34:59:5f:
         6c:63:c1:06
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCjomqENIpg3dT9Y44uJyqHXTs7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFNTVGM0UwQjA3REMyOUQ5MkI4QkMyNEZGODkwNDRF
OThFMTlEMDAeFw0yNDA0MTIxNjE0NTdaFw0yNTA0MTExNjE5NTdaMDMxMTAvBgNV
BAMTKEZDQTdCRDg1NEM3NjVERDY3QTIxOTA4MzExQUQ1NTVBRjk0OUE0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+X9r8vvAvXRaF9aNudJWjH0A
h0i9IbnY3zXiONjP0ynACiuXC8S0+EpokFrf2I46A6F6lAQK/GZkdgQuQ8Prfcmt
vA0ML3Mew45uAJgrnRjIUp0XuuBTpe5OY4QyBjxC/O6I0DTsdLOQaqaPWwt3ZvdI
/vgSiRYCZgGKpx52UW+f/AvOrfd178y/0AtyDvUow8Jy5odDyXDn71k3wVKdlWpE
IfOmEdNGkWjNtTqw1dLcVr0m96E82VYoE9eYEzbYQ4dFbRPw1GcTmEucgk0J1iex
lZnl/W5g7RkEo46eCD7yDzN3Iq7fytoz0lXvona18VY/9W+FThUB0wEHMg+nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/Ke9hUx2XdZ6IZCDEa1VWvlJpI0wHwYDVR0j
BBgwFoAUT+VfPgsH3CnZK4vCT/iQROmOGdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxy
VmUvMS80RkU1NUYzRTBCMDdEQzI5RDkyQjhCQzI0RkY4OTA0NEU5OEUxOUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGRTU1RjNFMEIwN0RDMjlE
OTJCOEJDMjRGRjg5MDQ0RTk4RTE5RDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJxOXZVVWZUeFRUQm9GNEtzQnFaYVJvVUxQdUs3bzlUMVZnc2lnd3VMclZlLzEv
MzEzODMxMmUzMTM4MzkyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbW9ajANBgkqhkiG9w0BAQsFAAOCAQEAkXQj
Oyhs/gn0pDdTrFrq1k6yPJQgF1x5MDonuf5m4sx7ehoue2FKJa5oAeHueojpLIFT
cc/a48e7yDhXy8TrQr5efdUP0imorf33+B7LcFpYcGCwy/ji2E+OHHfmdfTWfvSD
ZKH1G71eM/wTPkM1M8mWk5zLTGpjfqVkQwDMfG/fl511FpLMF/A3W0WhrdjBJuXX
VKXaOgBXR8TXWDNr7bJ/S0H72sg4K+CAHyXTnw+SUh06mkZ1l1mFjWzZZRxfCOYG
l4B9Ic3uzB5o1bZhlpP29BnZPnJyjxaGul6BZYDmETfkjs/0dB04sPRY44++aP4Q
SDRINSgwNFlfbGPBBg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org