Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa
File:                     3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          4VL++MynK1JRkzluNn6FlAVuIVFYtStEYy/2mStd5VM=
Subject key identifier:   29:AB:DA:A9:FB:C7:D0:CB:F0:53:3A:BD:1F:E2:8D:47:BD:BD:28:99
Certificate issuer:       /CN=7196070155EEACE0B9DB990C69D30A191553EAC8
Certificate serial:       5DD390D43DDD6E59CAC4725076518A3863AD4F32
Authority key identifier: 71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa
Signing time:             Thu 29 Feb 2024 20:36:32 +0000
ROA not before:           Thu 29 Feb 2024 20:31:32 +0000
ROA not after:            Thu 27 Feb 2025 20:36:32 +0000
asID:                     270370
IP address blocks:        190.89.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:90:d4:3d:dd:6e:59:ca:c4:72:50:76:51:8a:38:63:ad:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7196070155EEACE0B9DB990C69D30A191553EAC8
        Validity
            Not Before: Feb 29 20:31:32 2024 GMT
            Not After : Feb 27 20:36:32 2025 GMT
        Subject: CN=29ABDAA9FBC7D0CBF0533ABD1FE28D47BDBD2899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:9e:30:ab:27:2b:ee:e0:4c:bc:79:40:97:
                    2c:b6:2e:86:69:6e:92:95:66:16:46:b1:a7:91:d6:
                    d7:fd:7b:2c:e4:3d:84:4e:b8:c7:88:45:55:7f:c8:
                    57:18:30:56:89:f3:8c:a8:ec:48:4c:57:a3:ba:aa:
                    f9:1f:bd:85:d6:37:62:19:e3:e7:ca:04:f5:76:68:
                    44:e3:10:97:ba:4a:6a:2b:f1:e1:93:7d:b2:ea:60:
                    b8:83:14:8e:c9:c5:49:d3:2b:4f:86:61:cc:ee:a7:
                    05:c8:2e:92:23:e4:08:06:01:df:4d:c6:4a:1a:19:
                    d7:b9:98:45:21:ae:5d:11:63:0c:ad:59:7c:a6:16:
                    ff:7f:73:6c:34:57:26:c9:88:e2:06:fa:41:08:58:
                    45:06:84:cb:5a:87:e4:2b:6d:07:6d:c0:65:9c:a2:
                    33:80:de:f0:c4:07:e4:d5:b4:b4:6d:52:ad:71:22:
                    68:46:0d:f9:69:29:4b:9b:8f:57:ce:41:68:7f:9f:
                    0b:87:7f:19:b0:9e:b4:97:cb:d3:59:08:75:85:e1:
                    02:52:a0:6a:cb:9b:6a:95:fe:3a:76:5f:88:57:9b:
                    24:89:a8:d7:ae:9b:37:42:38:22:32:99:2f:40:3c:
                    cc:3a:35:69:3a:4d:1f:97:0f:b3:ee:8b:22:f6:99:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:DA:A9:FB:C7:D0:CB:F0:53:3A:BD:1F:E2:8D:47:BD:BD:28:99
            X509v3 Authority Key Identifier:
                keyid:71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/7196070155EEACE0B9DB990C69D30A191553EAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:86:1e:b3:7b:52:b6:b9:16:52:a1:d6:e1:62:95:91:a6:46:
         75:c1:c9:7c:be:5d:de:ba:cd:d6:9d:c7:c2:63:cb:af:53:8d:
         49:bd:4f:68:c7:67:8b:f4:fd:10:2f:ca:b1:4b:0f:c9:f3:d8:
         55:f1:fb:f5:09:58:c8:8c:c4:a5:12:6b:4b:c7:b7:32:01:32:
         2b:8d:18:b3:a8:88:d1:51:3b:70:f4:cb:63:be:83:a0:bf:34:
         da:1e:45:1b:0a:5c:a6:ff:39:bd:6a:2c:02:5f:43:8d:14:0a:
         80:d2:5e:f2:a3:d0:91:65:32:5a:ee:ca:7e:6a:a9:21:00:bf:
         13:8d:26:85:bc:35:12:52:df:2d:23:3a:7e:91:a0:dd:67:66:
         46:64:42:5c:1c:6e:37:4c:54:c7:75:ab:a0:9c:f8:83:fd:71:
         55:ba:f9:82:78:db:eb:62:48:9c:ee:b4:34:67:51:b3:e7:05:
         6f:54:2f:3f:67:61:da:81:8a:64:56:d6:e7:68:8f:b2:08:39:
         82:a8:9f:f5:c4:9f:b1:c9:8a:23:ce:21:08:f3:0f:56:fa:41:
         73:51:8a:44:3a:14:57:14:2c:37:48:59:7a:08:7e:a2:53:a8:
         1a:6d:3b:8f:82:41:e2:b8:0d:99:ec:df:f6:1f:d5:0b:7f:30:
         66:78:d2:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXdOQ1D3dblnKxHJQdlGKOGOtTzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5NjA3MDE1NUVFQUNFMEI5REI5OTBDNjlEMzBBMTkx
NTUzRUFDODAeFw0yNDAyMjkyMDMxMzJaFw0yNTAyMjcyMDM2MzJaMDMxMTAvBgNV
BAMTKDI5QUJEQUE5RkJDN0QwQ0JGMDUzM0FCRDFGRTI4RDQ3QkRCRDI4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnop4wqycr7uBMvHlAlyy2LoZp
bpKVZhZGsaeR1tf9eyzkPYROuMeIRVV/yFcYMFaJ84yo7EhMV6O6qvkfvYXWN2IZ
4+fKBPV2aETjEJe6Smor8eGTfbLqYLiDFI7JxUnTK0+GYczupwXILpIj5AgGAd9N
xkoaGde5mEUhrl0RYwytWXymFv9/c2w0VybJiOIG+kEIWEUGhMtah+QrbQdtwGWc
ojOA3vDEB+TVtLRtUq1xImhGDflpKUubj1fOQWh/nwuHfxmwnrSXy9NZCHWF4QJS
oGrLm2qV/jp2X4hXmySJqNeumzdCOCIymS9APMw6NWk6TR+XD7PuiyL2maUrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKavaqfvH0MvwUzq9H+KNR729KJkwHwYDVR0j
BBgwFoAUcZYHAVXurOC525kMadMKGRVT6sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMC83MTk2MDcwMTU1RUVBQ0UwQjlEQjk5MEM2OUQzMEExOTE1NTNFQUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxOTYwNzAxNTVFRUFDRTBC
OURCOTkwQzY5RDMwQTE5MTU1M0VBQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzAv
MzEzOTMwMmUzODM5MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+WZQwDQYJKoZIhvcNAQELBQADggEBAHeGHrN7
Ura5FlKh1uFilZGmRnXByXy+Xd66zdadx8Jjy69TjUm9T2jHZ4v0/RAvyrFLD8nz
2FXx+/UJWMiMxKUSa0vHtzIBMiuNGLOoiNFRO3D0y2O+g6C/NNoeRRsKXKb/Ob1q
LAJfQ40UCoDSXvKj0JFlMlruyn5qqSEAvxONJoW8NRJS3y0jOn6RoN1nZkZkQlwc
bjdMVMd1q6Cc+IP9cVW6+YJ42+tiSJzutDRnUbPnBW9ULz9nYdqBimRW1udoj7II
OYKon/XEn7HJiiPOIQjzD1b6QXNRikQ6FFcULDdIWXoIfqJTqBptO4+CQeK4DZns
3/Yf1Qt/MGZ40sw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org