Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          6ytYPPwhBoW33g7Z34k+Aqr0Lq+WPZZ7o0FjRhqRVtw=
Subject key identifier:   7D:DE:60:B9:6D:C9:EB:17:82:7A:9D:1E:AF:1F:51:42:3A:13:64:26
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       6AF2F56C41F1258009B892C46F0880D20F167509
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 01:00:00 +0000
ROA not before:           Mon 24 Jul 2023 00:55:00 +0000
ROA not after:            Mon 22 Jul 2024 01:00:00 +0000
asID:                     270716
IP address blocks:        189.127.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f2:f5:6c:41:f1:25:80:09:b8:92:c4:6f:08:80:d2:0f:16:75:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 24 00:55:00 2023 GMT
            Not After : Jul 22 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:0c:76:9d:d4:4d:64:05:b2:30:66:3e:da:
                    3b:5d:dc:50:c4:2b:4a:f1:62:30:10:d1:6f:f5:6b:
                    db:d1:05:00:8e:11:d0:55:4b:fe:c3:14:29:82:fb:
                    e8:d8:dd:80:8c:db:1f:0b:34:3a:d0:71:9e:2a:96:
                    7c:0d:c8:c8:b2:b2:9f:d8:df:cb:ab:ce:ce:01:fd:
                    66:8f:8e:1d:05:15:22:d4:bf:37:9e:3e:79:cc:f2:
                    88:ac:6d:d2:7a:9c:95:71:5a:11:e6:68:77:d1:ea:
                    fc:67:d5:c8:fa:05:21:3d:58:0a:24:3d:3a:86:6b:
                    7d:83:a7:33:f4:4e:41:01:02:5e:b5:dc:0c:d2:82:
                    51:7e:71:3c:17:57:38:71:7a:98:ee:3a:17:d7:6c:
                    28:c7:cf:92:58:c6:c5:b4:09:6e:bf:b3:f8:28:da:
                    bb:74:b2:2c:51:ce:e7:39:6a:c5:4d:25:2b:61:b6:
                    b7:13:7a:ce:94:c4:45:2f:37:1e:06:a6:54:3e:d2:
                    95:b2:45:e6:23:49:71:4d:c2:64:ca:aa:16:15:5a:
                    db:e7:0a:92:fc:96:14:05:a4:67:8b:83:98:f8:32:
                    b2:a1:1b:99:48:b5:05:d2:3a:ce:9f:6e:73:58:46:
                    17:93:07:e0:fc:34:e4:ff:14:c2:54:94:a9:4e:0f:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:60:B9:6D:C9:EB:17:82:7A:9D:1E:AF:1F:51:42:3A:13:64:26
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139302e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:88:dc:d5:9a:4b:ad:3a:bb:74:5d:56:c1:a5:bb:6a:ba:
         e3:cd:7f:d7:32:a9:a7:3c:7c:1f:30:af:e2:b6:1a:c2:2d:ab:
         60:86:f8:4f:09:3b:2a:4b:27:45:c0:70:ec:0b:6b:f5:10:27:
         19:ff:71:af:24:14:54:59:a3:10:7c:8b:a8:56:64:67:fd:da:
         34:ff:b9:c7:f7:b0:55:b2:4a:06:1e:a6:91:41:c5:a7:cb:20:
         c5:5a:f8:a9:a8:7c:26:c6:c1:fc:a8:46:10:f0:ce:f6:e3:c0:
         c1:c3:3e:b1:58:78:bd:c4:96:15:d2:30:e7:fb:af:1e:8b:02:
         79:5e:e9:21:05:6e:fd:a6:a3:ad:2e:1f:a2:be:90:6a:66:ea:
         a3:a9:d8:0b:9b:42:4a:35:f5:5d:09:3f:12:a4:d2:f9:02:95:
         62:ef:40:03:7b:54:22:38:fa:42:7e:e2:76:dd:a8:e8:02:b6:
         7c:f6:5f:83:de:2b:12:74:6a:bf:6b:70:83:c9:9a:71:9e:52:
         70:72:33:4f:32:97:85:49:06:1f:19:a3:25:f1:7d:34:f2:9e:
         6b:75:22:47:5f:0f:b2:fb:ba:5e:9d:fd:b2:1c:10:2a:26:fa:
         79:59:4b:57:f1:95:3b:88:09:6a:8a:30:57:ba:5b:32:11:41:
         d8:6c:ab:ea
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUavL1bEHxJYAJuJLEbwiA0g8WdQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQy
MTZFMTA1OTAeFw0yMzA3MjQwMDU1MDBaFw0yNDA3MjIwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTdEMTBDNzY5REQ0NEQ2NDA1
QjIzMDY2M0VEQTNCNUREQzUwQzQyQjRBRjE2MjMwMTBEMTZGRjU2QkRCRDEwNTAw
OEUxMUQwNTU0QkZFQzMxNDI5ODJGQkU4RDhERDgwOENEQjFGMEIzNDNBRDA3MTlF
MkE5NjdDMERDOEM4QjJCMjlGRDhERkNCQUJDRUNFMDFGRDY2OEY4RTFEMDUxNTIy
RDRCRjM3OUUzRTc5Q0NGMjg4QUM2REQyN0E5Qzk1NzE1QTExRTY2ODc3RDFFQUZD
NjdENUM4RkEwNTIxM0Q1ODBBMjQzRDNBODY2QjdEODNBNzMzRjQ0RTQxMDEwMjVF
QjVEQzBDRDI4MjUxN0U3MTNDMTc1NzM4NzE3QTk4RUUzQTE3RDc2QzI4QzdDRjky
NThDNkM1QjQwOTZFQkZCM0Y4MjhEQUJCNzRCMjJDNTFDRUU3Mzk2QUM1NEQyNTJC
NjFCNkI3MTM3QUNFOTRDNDQ1MkYzNzFFMDZBNjU0M0VEMjk1QjI0NUU2MjM0OTcx
NERDMjY0Q0FBQTE2MTU1QURCRTcwQTkyRkM5NjE0MDVBNDY3OEI4Mzk4RjgzMkIy
QTExQjk5NDhCNTA1RDIzQUNFOUY2RTczNTg0NjE3OTMwN0UwRkMzNEU0RkYxNEMy
NTQ5NEE5NEUwRjA0NUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAl9EMdp3UTWQFsjBmPto7XdxQxCtK8WIwENFv9Wvb0QUAjhHQVUv+
wxQpgvvo2N2AjNsfCzQ60HGeKpZ8DcjIsrKf2N/Lq87OAf1mj44dBRUi1L83nj55
zPKIrG3SepyVcVoR5mh30er8Z9XI+gUhPVgKJD06hmt9g6cz9E5BAQJetdwM0oJR
fnE8F1c4cXqY7joX12wox8+SWMbFtAluv7P4KNq7dLIsUc7nOWrFTSUrYba3E3rO
lMRFLzceBqZUPtKVskXmI0lxTcJkyqoWFVrb5wqS/JYUBaRni4OY+DKyoRuZSLUF
0jrOn25zWEYXkwfg/DTk/xTCVJSpTg8EXQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FH3eYLltyesXgnqdHq8fUUI6E2QmMB8GA1UdIwQYMBaAFC8BQ4ATmoZzwj4s+a9u
2sQhbhBZMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRR
S2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzJGMDE0MzgwMTM5QTg2NzND
MjNFMkNGOUFGNkVEQUM0MjE2RTEwNTkuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQyMTZFMTA1
OS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRRS2VrQlAx
aGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzMxMzgzOTJlMzEzMjM3MmUzMTM5MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzNzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9
f74wDQYJKoZIhvcNAQELBQADggEBAIxuiNzVmkutOrt0XVbBpbtquuPNf9cyqac8
fB8wr+K2GsItq2CG+E8JOypLJ0XAcOwLa/UQJxn/ca8kFFRZoxB8i6hWZGf92jT/
ucf3sFWySgYeppFBxafLIMVa+KmofCbGwfyoRhDwzvbjwMHDPrFYeL3ElhXSMOf7
rx6LAnle6SEFbv2mo60uH6K+kGpm6qOp2AubQko19V0JPxKk0vkClWLvQAN7VCI4
+kJ+4nbdqOgCtnz2X4PeKxJ0ar9rcIPJmnGeUnByM08yl4VJBh8ZoyXxfTTynmt1
IkdfD7L7ul6d/bIcECom+nlZS1fxlTuICWqKMFe6WzIRQdhsq+o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org