Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          xFaoDexSEJZbvtq60/TpEtGTDwhFizTUEFifcydxngQ=
Subject key identifier:   0D:8E:79:32:D2:1D:24:AA:29:49:F3:46:0E:81:0E:94:09:5A:CE:81
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       5BC630932E4244D42A4DDD5D4910EEAF05F03591
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:08:04 +0000
ROA not before:           Fri 22 Mar 2024 13:03:04 +0000
ROA not after:            Fri 21 Mar 2025 13:08:04 +0000
asID:                     266242
IP address blocks:        192.145.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c6:30:93:2e:42:44:d4:2a:4d:dd:5d:49:10:ee:af:05:f0:35:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:03:04 2024 GMT
            Not After : Mar 21 13:08:04 2025 GMT
        Subject: CN=0D8E7932D21D24AA2949F3460E810E94095ACE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:3a:50:ef:30:6d:e5:f9:6d:fe:cd:bd:08:
                    f7:15:17:88:7a:6d:d7:af:27:95:cf:88:93:2c:34:
                    3f:b1:d8:14:5f:33:88:cd:7b:93:61:7c:68:bc:df:
                    88:2f:a5:ca:c7:01:10:24:32:f4:ca:9c:12:d0:b7:
                    07:7c:6b:f2:4e:04:af:e5:50:39:52:4a:8a:89:96:
                    ef:3d:4d:82:0c:91:a9:c9:79:31:b1:5c:28:91:b1:
                    c8:82:e7:28:46:7e:fc:4d:08:e3:68:79:74:2a:67:
                    d0:c4:6a:2f:e2:95:49:6e:ba:4c:d6:b7:5e:02:af:
                    2e:e8:ea:c5:a5:66:9b:cc:41:25:c7:98:5f:2c:0c:
                    88:7f:80:3b:6c:b9:14:cb:c8:e6:5e:74:c6:5a:d1:
                    f1:a8:ec:62:77:b7:89:59:f6:bf:10:4c:f0:aa:28:
                    17:85:86:23:c3:f4:3e:ec:c9:f3:ae:89:bd:f4:bc:
                    58:51:22:8e:7e:e6:46:79:67:96:d5:5a:f8:5f:29:
                    ed:d6:c3:57:79:ad:a8:e8:78:34:3d:f0:f8:04:b4:
                    c7:87:71:e6:f2:63:28:69:4c:e6:f1:60:75:54:10:
                    8d:8e:bd:e2:e9:89:38:0f:9e:c2:cb:3e:2e:14:96:
                    93:db:76:e4:23:b6:c8:c8:ab:2a:43:02:d7:6e:00:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8E:79:32:D2:1D:24:AA:29:49:F3:46:0E:81:0E:94:09:5A:CE:81
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230352e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:36:74:b5:6f:19:b3:eb:e4:81:00:d7:8e:00:a8:c3:31:
         a2:73:43:9f:63:ab:f1:2b:e2:a9:38:a2:1d:4d:98:e3:a3:50:
         b9:bc:a6:41:a9:a3:92:33:35:c7:74:a5:6c:67:16:67:d5:fb:
         37:04:bd:21:ee:1c:b6:5e:0b:26:29:d0:48:23:50:39:f5:40:
         a1:b7:ac:d2:3b:14:51:9a:77:c5:7b:c9:23:5a:79:04:ca:6e:
         79:9f:0d:70:52:df:2b:c1:c8:40:eb:b4:b5:d3:00:e3:3c:d9:
         dc:a5:a0:8e:d7:0a:38:0e:33:91:9a:b4:47:07:5b:96:82:6a:
         b2:56:fe:9e:75:07:85:f9:74:3c:d3:9c:a8:e7:86:d5:3a:78:
         ae:f6:c1:9e:40:61:7e:9a:52:72:28:3a:cb:3c:1c:67:81:7a:
         fa:53:e1:65:b5:c5:7f:27:2c:eb:e6:13:68:79:47:90:8f:e6:
         68:e4:6f:89:89:bf:f5:aa:6b:83:76:cc:61:0e:c9:c7:8d:e6:
         4c:be:68:9b:96:9f:d2:b5:27:20:17:ed:f8:d0:1d:60:ba:b8:
         4b:a3:09:68:fc:5a:5c:29:31:50:aa:7b:72:16:67:59:5b:38:
         54:bb:5c:70:01:36:f8:48:b2:98:c2:13:7d:bf:6a:7b:d8:8c:
         4b:6f:d1:4a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW8Ywky5CRNQqTd1dSRDurwXwNZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0N0VCOTk5OTJEODY3QTdEQzlDOTkzMjMwOTYyMERF
RDNFQjA0OTAeFw0yNDAzMjIxMzAzMDRaFw0yNTAzMjExMzA4MDRaMDMxMTAvBgNV
BAMTKDBEOEU3OTMyRDIxRDI0QUEyOTQ5RjM0NjBFODEwRTk0MDk1QUNFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgDpQ7zBt5flt/s29CPcVF4h6
bdevJ5XPiJMsND+x2BRfM4jNe5NhfGi834gvpcrHARAkMvTKnBLQtwd8a/JOBK/l
UDlSSoqJlu89TYIMkanJeTGxXCiRsciC5yhGfvxNCONoeXQqZ9DEai/ilUluukzW
t14Cry7o6sWlZpvMQSXHmF8sDIh/gDtsuRTLyOZedMZa0fGo7GJ3t4lZ9r8QTPCq
KBeFhiPD9D7syfOuib30vFhRIo5+5kZ5Z5bVWvhfKe3Ww1d5rajoeDQ98PgEtMeH
cebyYyhpTObxYHVUEI2OveLpiTgPnsLLPi4UlpPbduQjtsjIqypDAtduAHqvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDY55MtIdJKopSfNGDoEOlAlazoEwHwYDVR0j
BBgwFoAUFUfrmZkthnp9ycmTIwliDe0+sEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZQbnNKcW4yMnZhd2RFUFVRUUhKdXVGVDZIM0hETTg5allFdWg5YU55
N0gvMC8xNTQ3RUI5OTk5MkQ4NjdBN0RDOUM5OTMyMzA5NjIwREVEM0VCMDQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1NDdFQjk5OTkyRDg2N0E3
REM5Qzk5MzIzMDk2MjBERUQzRUIwNDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2UG5zSnFuMjJ2YXdkRVBVUVFISnV1RlQ2SDNIRE04OWpZRXVoOWFOeTdILzAv
MzEzOTMyMmUzMTM0MzUyZTMyMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCRzTANBgkqhkiG9w0BAQsFAAOCAQEArMo2
dLVvGbPr5IEA144AqMMxonNDn2Or8SviqTiiHU2Y46NQubymQamjkjM1x3SlbGcW
Z9X7NwS9Ie4ctl4LJinQSCNQOfVAobes0jsUUZp3xXvJI1p5BMpueZ8NcFLfK8HI
QOu0tdMA4zzZ3KWgjtcKOA4zkZq0RwdbloJqslb+nnUHhfl0PNOcqOeG1Tp4rvbB
nkBhfppScig6yzwcZ4F6+lPhZbXFfycs6+YTaHlHkI/maORviYm/9aprg3bMYQ7J
x43mTL5om5af0rUnIBft+NAdYLq4S6MJaPxaXCkxUKp7chZnWVs4VLtccAE2+Eiy
mMITfb9qe9iMS2/RSg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org