Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e39302e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          j5yvG/SzGCdpntiQY06r1noUYh0cOO7Ntnh0KCcSv0Q=
Subject key identifier:   F2:97:05:3B:83:B9:F3:23:BE:DC:C4:83:F6:9B:7F:CC:B5:08:23:50
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       4AA9F5C13396C6AADF85204512CCDFB24A99076F
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:10 +0000
ROA not before:           Mon 11 Mar 2024 17:11:10 +0000
ROA not after:            Mon 10 Mar 2025 17:16:10 +0000
asID:                     28610
IP address blocks:        186.209.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:f5:c1:33:96:c6:aa:df:85:20:45:12:cc:df:b2:4a:99:07:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:10 2024 GMT
            Not After : Mar 10 17:16:10 2025 GMT
        Subject: CN=F297053B83B9F323BEDCC483F69B7FCCB5082350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:3e:c1:b5:24:df:5d:c9:9d:50:63:79:d5:
                    f4:24:cd:77:20:73:9c:49:46:bf:ca:d9:38:2b:80:
                    c0:25:c8:c5:a4:ab:40:35:b0:22:04:6d:74:ae:09:
                    6b:45:9a:66:24:93:c0:e1:3b:6e:a0:d8:7d:3a:b7:
                    93:3e:cd:57:d2:e6:11:50:2f:13:20:a7:b6:b3:b9:
                    a4:82:77:9e:1e:d4:6f:3d:d0:a8:67:59:83:4b:76:
                    02:79:c4:77:d9:ef:08:85:fb:39:97:93:df:99:62:
                    0d:a9:9c:4a:6a:e6:a2:0d:f3:68:0f:f0:a6:97:88:
                    c9:4b:f7:2c:a4:9e:74:b0:b4:5f:bb:1f:9f:10:6e:
                    ae:b6:2c:63:26:c3:4e:31:fb:ec:99:94:c2:87:96:
                    be:0b:a8:c8:94:19:b9:76:58:a2:51:14:f4:05:c9:
                    d8:33:38:c2:f3:fa:35:83:59:d0:f4:6a:26:41:ff:
                    10:c1:29:2a:1c:e4:14:de:1a:fc:dc:5d:2b:84:95:
                    40:3e:ee:7c:b9:fc:84:ff:29:94:eb:e9:5f:a0:72:
                    05:ed:15:4d:b3:db:55:ce:c3:af:2a:86:03:9f:c3:
                    07:b3:68:fc:e6:d3:fc:2f:c9:34:34:ba:88:c3:c9:
                    71:dd:81:0b:f4:49:e7:44:c6:68:d9:16:c9:7f:12:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:05:3B:83:B9:F3:23:BE:DC:C4:83:F6:9B:7F:CC:B5:08:23:50
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2a:49:86:f8:95:38:92:85:68:cc:a5:19:1f:58:e8:92:9b:
         28:91:83:92:5d:76:ae:99:09:0d:f5:6b:f3:d0:5d:31:ea:6b:
         31:ea:da:68:dc:74:c4:ab:3c:af:60:31:24:af:a2:a4:3b:7c:
         ff:b6:15:1d:6e:c0:4d:ca:00:3c:0b:87:48:e5:b4:e2:a1:a0:
         c2:ed:c3:2a:a1:99:32:00:49:db:2d:0a:8f:e7:6b:fc:d4:b2:
         b7:f2:08:e2:e9:46:3e:cd:d9:40:9f:9c:79:c5:9d:d2:7b:c6:
         4a:2e:8e:d5:22:93:fc:2d:f8:d4:59:44:ec:6d:9d:d4:85:3d:
         e7:45:57:41:57:ac:87:f9:a3:07:1e:d1:fd:08:97:bd:73:05:
         51:66:90:70:06:c4:82:b4:31:f9:fc:73:1b:c4:a6:e0:47:95:
         a6:6b:ad:37:64:77:d9:6f:f6:23:3a:2f:7f:60:7a:5c:83:f4:
         47:0c:e2:34:af:f2:19:eb:57:2a:1d:7f:42:d5:22:3c:14:8e:
         9f:d6:7e:40:4f:a9:12:c4:36:59:8c:ff:cf:05:82:fa:d2:b6:
         ce:1f:20:8d:c5:ba:81:c8:ea:50:17:79:32:30:c8:d6:d6:4c:
         05:00:5a:7c:38:05:b0:d4:e4:40:1e:ad:e0:cb:d0:0f:23:76:
         7a:8f:c3:49
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSqn1wTOWxqrfhSBFEszfskqZB28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0MTdGM0UyMzZFMjE4RjZDQUNEODNEQjdDM0E3OTE1
ODJDNjQ2MTAeFw0yNDAzMTExNzExMTBaFw0yNTAzMTAxNzE2MTBaMDMxMTAvBgNV
BAMTKEYyOTcwNTNCODNCOUYzMjNCRURDQzQ4M0Y2OUI3RkNDQjUwODIzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Uj7BtSTfXcmdUGN51fQkzXcg
c5xJRr/K2TgrgMAlyMWkq0A1sCIEbXSuCWtFmmYkk8DhO26g2H06t5M+zVfS5hFQ
LxMgp7azuaSCd54e1G890KhnWYNLdgJ5xHfZ7wiF+zmXk9+ZYg2pnEpq5qIN82gP
8KaXiMlL9yyknnSwtF+7H58Qbq62LGMmw04x++yZlMKHlr4LqMiUGbl2WKJRFPQF
ydgzOMLz+jWDWdD0aiZB/xDBKSoc5BTeGvzcXSuElUA+7ny5/IT/KZTr6V+gcgXt
FU2z21XOw68qhgOfwwezaPzm0/wvyTQ0uojDyXHdgQv0SedExmjZFsl/EusfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8pcFO4O58yO+3MSD9pt/zLUII1AwHwYDVR0j
BBgwFoAUl0F/PiNuIY9srNg9t8OnkVgsZGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda
a0gvMC85NzQxN0YzRTIzNkUyMThGNkNBQ0Q4M0RCN0MzQTc5MTU4MkM2NDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3NDE3RjNFMjM2RTIxOEY2
Q0FDRDgzREI3QzNBNzkxNTgyQzY0NjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv
MzEzODM2MmUzMjMwMzkyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAutFaMA0GCSqGSIb3DQEBCwUAA4IBAQChKkmG+JU4
koVozKUZH1jokpsokYOSXXaumQkN9Wvz0F0x6msx6tpo3HTEqzyvYDEkr6KkO3z/
thUdbsBNygA8C4dI5bTioaDC7cMqoZkyAEnbLQqP52v81LK38gji6UY+zdlAn5x5
xZ3Se8ZKLo7VIpP8LfjUWUTsbZ3UhT3nRVdBV6yH+aMHHtH9CJe9cwVRZpBwBsSC
tDH5/HMbxKbgR5Wma603ZHfZb/YjOi9/YHpcg/RHDOI0r/IZ61cqHX9C1SI8FI6f
1n5AT6kSxDZZjP/PBYL60rbOHyCNxbqByOpQF3kyMMjW1kwFAFp8OAWw1ORAHq3g
y9API3Z6j8NJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org