Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          XsJgeDInnYPR6q5Q06AElAlogpERZQmfhl7GIOsIGHU=
Subject key identifier:   B9:05:E1:47:86:61:2A:48:C0:98:37:F5:89:C3:D1:5B:13:BB:E0:E4
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       3DFB6401F07483E5BBFBB221216A879BDC8EACD6
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:02 +0000
ROA not before:           Mon 26 Jun 2023 13:03:02 +0000
ROA not after:            Mon 24 Jun 2024 13:08:02 +0000
asID:                     270413
IP address blocks:        190.89.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fb:64:01:f0:74:83:e5:bb:fb:b2:21:21:6a:87:9b:dc:8e:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:02 2023 GMT
            Not After : Jun 24 13:08:02 2024 GMT
        Subject: CN=B905E14786612A48C09837F589C3D15B13BBE0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:11:cb:6d:97:22:3c:24:eb:a8:f7:76:89:
                    1f:76:4e:d9:0b:2d:e3:48:76:5d:c6:a8:3f:f4:66:
                    87:e0:cb:99:a5:9a:21:dc:4c:fa:f9:2a:61:8b:02:
                    32:9b:12:3f:4f:01:24:b4:9d:db:a8:18:48:fe:89:
                    95:b1:27:39:d3:9a:90:37:ac:b2:8c:a3:54:39:07:
                    3c:a7:cf:d5:d2:0a:e5:6a:c0:ad:7a:df:9b:40:24:
                    82:76:72:dd:31:71:9d:73:b1:91:fd:42:b6:78:9a:
                    fa:50:59:95:a2:b5:db:a4:76:7b:96:41:f7:be:6b:
                    0c:e0:45:58:eb:7b:91:c5:76:7d:81:b9:54:f2:d1:
                    c2:f0:8f:84:d7:8b:5f:ec:09:36:cf:df:28:bd:f9:
                    08:1f:f0:78:27:20:c1:b9:9e:10:e9:1a:fb:79:7f:
                    7d:15:14:b9:bf:cf:39:c9:96:3d:11:33:61:4c:99:
                    70:8e:08:73:80:e3:21:1e:f7:a3:66:56:63:ec:8e:
                    f9:0a:c2:28:4b:03:68:03:69:51:ac:b2:6b:66:06:
                    b4:1e:d7:b5:7e:ac:07:20:3f:11:af:0d:32:85:43:
                    3f:7e:7d:a0:f6:ea:ec:23:d6:90:82:b6:ec:53:45:
                    7b:7d:1a:c7:5b:05:99:17:1a:56:fb:81:db:8a:71:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:E1:47:86:61:2A:48:C0:98:37:F5:89:C3:D1:5B:13:BB:E0:E4
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:e2:41:44:9b:22:8e:ad:51:6a:c1:c1:a1:61:6a:4e:ce:
         7a:a4:6c:3d:8a:4a:ff:5d:1d:8f:de:03:48:d9:1e:cf:e5:c1:
         c2:69:e4:12:d3:fe:6f:c8:96:92:fe:a1:f2:6c:c1:d2:93:1f:
         26:71:c7:84:7d:25:97:47:a9:e6:ec:0b:c4:85:d9:37:31:e2:
         bc:70:f9:2f:50:f7:d2:62:31:4c:80:46:98:85:a6:f6:c9:63:
         e9:76:c8:0f:b9:90:d6:ca:7a:88:cd:03:ca:a6:ae:03:88:45:
         37:40:bf:eb:d0:37:fb:be:ab:ac:ce:45:5f:52:c7:65:ff:86:
         bc:03:94:60:3d:e6:67:d4:05:3a:09:3b:ff:eb:26:b6:d8:b5:
         42:62:ff:7c:b2:dc:57:31:21:53:76:c4:e8:02:68:31:f3:93:
         2e:6d:80:5e:eb:d9:f5:c4:6d:04:54:88:6e:ed:29:c1:fa:68:
         81:23:fc:16:aa:e8:e5:a3:60:c0:70:d2:4d:e1:7d:62:e7:0d:
         9a:93:0b:57:28:e9:22:53:d2:af:03:3d:62:95:25:cf:37:8b:
         3c:7e:3a:24:8b:57:3e:ae:42:b0:8b:ac:be:43:1f:cd:8a:fb:
         f6:4b:2c:42:2d:4f:9c:a3:4c:5b:2e:5b:76:f5:61:7f:a0:4f:
         7d:e2:17:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPftkAfB0g+W7+7IhIWqHm9yOrNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE1MDc5RDBERDNENzRCOUYyRjMwODNGRjUyQTlDNjhG
NjZCRjJBOTAeFw0yMzA2MjYxMzAzMDJaFw0yNDA2MjQxMzA4MDJaMDMxMTAvBgNV
BAMTKEI5MDVFMTQ3ODY2MTJBNDhDMDk4MzdGNTg5QzNEMTVCMTNCQkUwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVhHLbZciPCTrqPd2iR92TtkL
LeNIdl3GqD/0Zofgy5mlmiHcTPr5KmGLAjKbEj9PASS0nduoGEj+iZWxJznTmpA3
rLKMo1Q5Bzynz9XSCuVqwK1635tAJIJ2ct0xcZ1zsZH9QrZ4mvpQWZWitdukdnuW
Qfe+awzgRVjre5HFdn2BuVTy0cLwj4TXi1/sCTbP3yi9+Qgf8HgnIMG5nhDpGvt5
f30VFLm/zznJlj0RM2FMmXCOCHOA4yEe96NmVmPsjvkKwihLA2gDaVGssmtmBrQe
17V+rAcgPxGvDTKFQz9+faD26uwj1pCCtuxTRXt9GsdbBZkXGlb7gduKcckTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuQXhR4ZhKkjAmDf1icPRWxO74OQwHwYDVR0j
BBgwFoAUqlB50N09dLny8wg/9SqcaPZr8qkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5nWlluQ2c0WlBqVG5lUjRMdDVZM3JMMVBjUXBQcXBaRGFnc0JTRzZo
YUIvMC9BQTUwNzlEMEREM0Q3NEI5RjJGMzA4M0ZGNTJBOUM2OEY2NkJGMkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNTA3OUQwREQzRDc0QjlG
MkYzMDgzRkY1MkE5QzY4RjY2QkYyQTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZOZ1pZbkNnNFpQalRuZVI0THQ1WTNyTDFQY1FwUHFwWkRhZ3NCU0c2aGFCLzAv
MzEzOTMwMmUzODM5MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WfQwDQYJKoZIhvcNAQELBQADggEBABid4kFE
myKOrVFqwcGhYWpOznqkbD2KSv9dHY/eA0jZHs/lwcJp5BLT/m/IlpL+ofJswdKT
HyZxx4R9JZdHqebsC8SF2Tcx4rxw+S9Q99JiMUyARpiFpvbJY+l2yA+5kNbKeojN
A8qmrgOIRTdAv+vQN/u+q6zORV9Sx2X/hrwDlGA95mfUBToJO//rJrbYtUJi/3yy
3FcxIVN2xOgCaDHzky5tgF7r2fXEbQRUiG7tKcH6aIEj/Baq6OWjYMBw0k3hfWLn
DZqTC1co6SJT0q8DPWKVJc83izx+OiSLVz6uQrCLrL5DH82K+/ZLLEItT5yjTFsu
W3b1YX+gT33iF8E=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org