Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3132392e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3132392e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          ax7qxitNqGrnFq4Uu6EJuj0J0At7z8Fhg1J7yfcgHKM=
Subject key identifier:   A5:D5:51:91:38:C3:07:E0:57:47:4F:FC:2C:AC:C0:77:ED:72:39:13
Certificate issuer:       /CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
Certificate serial:       772996742784F44CF5BB498C9814F910021124
Authority key identifier: 85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3132392e302f32342d3234203d3e20323730333832.roa
Signing time:             Mon 18 Dec 2023 19:19:25 +0000
ROA not before:           Mon 18 Dec 2023 19:14:25 +0000
ROA not after:            Mon 16 Dec 2024 19:19:25 +0000
asID:                     270382
IP address blocks:        190.111.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:96:74:27:84:f4:4c:f5:bb:49:8c:98:14:f9:10:02:11:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Validity
            Not Before: Dec 18 19:14:25 2023 GMT
            Not After : Dec 16 19:19:25 2024 GMT
        Subject: CN=A5D5519138C307E057474FFC2CACC077ED723913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:12:c5:1a:0c:aa:86:77:bb:d4:11:39:59:
                    9b:e8:17:17:e3:a0:1d:41:1c:93:a8:a1:10:ee:e7:
                    f2:1d:50:e1:16:44:01:e2:ff:3f:b6:ea:90:53:19:
                    40:c2:e7:5c:f8:9f:e1:31:e5:be:b2:5a:54:f8:76:
                    3d:93:33:62:8b:ec:9d:b5:52:a2:47:43:84:f9:7a:
                    75:b2:90:41:32:ef:a6:fb:36:41:08:0a:d4:84:f0:
                    3e:89:a2:00:0d:35:be:17:40:87:f1:ed:00:2d:2f:
                    52:f8:1d:02:c0:55:22:9a:65:15:80:3e:98:0b:ff:
                    de:b7:5b:23:4c:2f:9f:18:d6:ff:16:1a:1b:f5:03:
                    3d:e1:2e:5d:3a:0a:b6:a5:7c:11:1c:2e:e1:99:5f:
                    aa:f7:71:97:6e:cd:04:1e:02:0a:c5:a0:00:fb:51:
                    d9:d9:3a:2c:05:ec:b2:23:63:9a:54:30:bb:f2:10:
                    d6:79:01:4e:aa:3e:c1:fe:a6:e2:15:2f:b6:c5:d6:
                    11:29:45:24:82:e7:8a:96:31:98:ce:72:c3:a2:17:
                    38:1c:d2:14:af:d8:56:a8:f0:bc:ec:36:e7:01:3d:
                    3a:d3:1c:b4:a9:57:45:92:8a:aa:f0:42:57:6d:f1:
                    2d:51:1f:83:51:03:29:fd:56:3d:30:d0:db:28:52:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:51:91:38:C3:07:E0:57:47:4F:FC:2C:AC:C0:77:ED:72:39:13
            X509v3 Authority Key Identifier:
                keyid:85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3132392e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:dc:41:a2:10:af:c4:d4:f7:9e:5a:0d:f5:4d:d7:f7:cc:
         b2:7a:ae:19:0e:c6:bf:e7:00:97:b4:0c:d8:aa:09:f9:44:89:
         49:46:de:a3:a9:2f:31:92:98:d1:43:a9:2b:29:8e:bb:70:8a:
         a7:30:dc:3f:96:86:21:06:c7:ba:ef:58:ff:a3:cc:31:70:cc:
         b1:e7:d7:ef:5a:46:1b:0b:8a:4e:33:d4:e1:ae:c8:c1:5f:49:
         f1:f4:f5:3c:a1:a3:96:93:b1:9b:e0:db:ae:f7:57:86:4e:52:
         90:e0:68:72:56:8f:d3:20:ae:fd:88:a6:fd:70:48:13:0c:a7:
         f9:3a:34:19:0b:88:e5:c5:cb:68:6d:de:2a:69:04:f1:75:1e:
         17:3c:fb:91:4d:3f:fd:a3:f5:7e:86:51:a3:78:64:21:8b:c5:
         96:da:f2:23:e3:ae:7a:75:a4:14:69:26:88:ae:d3:eb:e6:10:
         3b:1f:89:d2:b7:fc:a6:71:41:d0:b6:80:7d:8d:24:b7:24:ae:
         e4:88:2a:c1:95:8e:40:2c:a8:64:1a:0d:df:6c:ba:9f:fb:8c:
         33:03:78:26:39:3d:9f:15:73:1a:0b:26:1f:5d:21:8d:0d:c2:
         78:82:32:ab:b2:51:65:6a:c9:c6:67:93:19:0b:30:2c:be:a5:
         eb:15:3a:38
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITdymWdCeE9Ez1u0mMmBT5EAIRJDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4NTE5MkM1RkE4NTZBMjBEMzZEQkQyMTU1QjlGOTREMkM5
NERGQTNGMB4XDTIzMTIxODE5MTQyNVoXDTI0MTIxNjE5MTkyNVowMzExMC8GA1UE
AxMoQTVENTUxOTEzOEMzMDdFMDU3NDc0RkZDMkNBQ0MwNzdFRDcyMzkxMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANK2EsUaDKqGd7vUETlZm+gXF+Og
HUEck6ihEO7n8h1Q4RZEAeL/P7bqkFMZQMLnXPif4THlvrJaVPh2PZMzYovsnbVS
okdDhPl6dbKQQTLvpvs2QQgK1ITwPomiAA01vhdAh/HtAC0vUvgdAsBVIpplFYA+
mAv/3rdbI0wvnxjW/xYaG/UDPeEuXToKtqV8ERwu4Zlfqvdxl27NBB4CCsWgAPtR
2dk6LAXssiNjmlQwu/IQ1nkBTqo+wf6m4hUvtsXWESlFJILnipYxmM5yw6IXOBzS
FK/YVqjwvOw25wE9OtMctKlXRZKKqvBCV23xLVEfg1EDKf1WPTDQ2yhS848CAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBSl1VGROMMH4FdHT/wsrMB37XI5EzAfBgNVHSME
GDAWgBSFGSxfqFaiDTbb0hVbn5TSyU36PzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EV1JrTnlWNmtMTGNGYXg5bXRRUVg5THlUOGlRdUVaWllBaHdEWlpENnVQ
bS8wLzg1MTkyQzVGQTg1NkEyMEQzNkRCRDIxNTVCOUY5NEQyQzk0REZBM0YuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvODUxOTJDNUZBODU2QTIwRDM2
REJEMjE1NUI5Rjk0RDJDOTRERkEzRi5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFdSa055VjZrTExjRmF4OW10UVFYOUx5VDhpUXVFWlpZQWh3RFpaRDZ1UG0vMC8z
MTM5MzAyZTMxMzEzMTJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NzMwMzMzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvm+BMA0GCSqGSIb3DQEBCwUAA4IBAQAk79xB
ohCvxNT3nloN9U3X98yyeq4ZDsa/5wCXtAzYqgn5RIlJRt6jqS8xkpjRQ6krKY67
cIqnMNw/loYhBse671j/o8wxcMyx59fvWkYbC4pOM9ThrsjBX0nx9PU8oaOWk7Gb
4Nuu91eGTlKQ4GhyVo/TIK79iKb9cEgTDKf5OjQZC4jlxctobd4qaQTxdR4XPPuR
TT/9o/V+hlGjeGQhi8WW2vIj4656daQUaSaIrtPr5hA7H4nSt/ymcUHQtoB9jSS3
JK7kiCrBlY5ALKhkGg3fbLqf+4wzA3gmOT2fFXMaCyYfXSGNDcJ4gjKrslFlasnG
Z5MZCzAsvqXrFTo4
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org