Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          gSMcIgnKaJwr7rqHUMxri3W/CARWScSWUxf+e/pWSYQ=
Subject key identifier:   B2:5B:54:56:35:5C:06:63:66:02:E2:D6:52:5B:17:FE:33:3A:CB:46
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       4142832356DBEB2448E9201E2319E8D8E62225DD
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:83:23:56:db:eb:24:48:e9:20:1e:23:19:e8:d8:e6:22:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=B25B5456355C06636602E2D6525B17FE333ACB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:20:19:4b:60:c0:3a:30:d5:1a:e7:d1:e5:
                    35:f0:d0:9d:e9:b0:7a:ae:0e:d0:f2:e9:f1:5b:51:
                    bc:52:16:71:b4:2a:48:06:6f:80:1a:87:41:d7:4c:
                    c2:03:1a:18:bf:e8:51:7b:80:4b:32:e6:84:46:7c:
                    77:80:e8:87:7b:06:bc:01:60:6d:b1:a6:a5:fc:61:
                    91:8f:b8:3a:9b:5c:98:d7:9f:0d:cf:c1:e1:87:fa:
                    dc:6c:7e:9b:2f:49:2c:dd:b2:4d:a7:2c:e1:d2:62:
                    d2:ec:20:29:65:23:0f:68:c3:40:56:5e:c6:37:24:
                    23:b9:30:bf:ee:e7:d0:e4:2f:b1:34:cb:5c:14:91:
                    60:91:0a:c6:6f:6a:b0:fc:f6:6d:66:f6:4e:a3:8d:
                    9b:ab:1a:e1:17:39:d0:56:8f:08:91:6d:f9:f6:d5:
                    8e:43:cf:18:a5:92:65:17:8a:a9:d9:9b:55:9d:03:
                    38:2c:ed:ba:fd:f9:26:83:ac:f7:cd:10:58:72:52:
                    20:79:8c:b4:33:fc:a6:05:99:4a:2b:3a:27:ac:ca:
                    78:4d:e8:d7:f1:b7:cf:d6:83:4a:9c:88:59:d9:02:
                    7a:3b:ce:1b:fe:b4:f1:1f:6d:12:bb:36:5c:91:cf:
                    f1:8f:b2:1b:1f:15:eb:13:c9:d5:72:98:ec:ab:af:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5B:54:56:35:5C:06:63:66:02:E2:D6:52:5B:17:FE:33:3A:CB:46
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:ea:bb:c7:66:bb:31:f3:81:09:71:46:65:e1:2c:1c:57:
         e3:52:97:f6:80:d0:57:25:9c:86:4d:85:fd:bb:1b:4c:22:03:
         16:b4:50:95:20:f8:86:2b:44:40:e5:c3:e4:ef:9c:71:80:a5:
         f3:cb:25:18:c2:9d:ea:c5:0a:76:a0:98:af:2e:26:66:15:26:
         c6:fc:63:0c:93:0b:b8:c1:b4:92:08:15:ed:39:52:5a:77:40:
         41:a8:d6:24:e1:fe:b9:2b:8a:8a:ee:a6:dd:98:b7:5f:00:df:
         07:dc:76:bd:fa:02:92:e2:08:df:aa:21:18:d4:ac:7c:9c:ad:
         78:3c:02:18:f3:8d:2d:66:9d:b8:ee:1e:19:6d:cb:71:1b:d5:
         25:01:e2:4f:29:4d:cf:aa:f2:c9:44:c0:c6:a0:87:09:e8:5c:
         d0:48:97:6e:59:9d:77:65:5d:3c:37:5c:57:ee:11:42:6e:30:
         c1:57:b5:4f:0d:65:89:ba:b2:05:22:8c:68:98:dd:3a:47:45:
         7d:29:4d:f0:18:cf:72:a9:f9:b6:e2:47:1b:0e:e0:9b:dc:dc:
         17:87:bb:c0:9b:31:59:03:dd:d6:00:44:a7:e7:d4:63:1d:2a:
         51:52:21:0c:d8:96:f4:cb:fb:be:9d:a1:e4:87:6f:6a:b8:21:
         5f:91:d8:a7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQUKDI1bb6yRI6SAeIxno2OYiJd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTRaFw0yNTExMDYyMDQwMTRaMDMxMTAvBgNV
BAMTKEIyNUI1NDU2MzU1QzA2NjM2NjAyRTJENjUyNUIxN0ZFMzMzQUNCNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73iAZS2DAOjDVGufR5TXw0J3p
sHquDtDy6fFbUbxSFnG0KkgGb4Aah0HXTMIDGhi/6FF7gEsy5oRGfHeA6Id7BrwB
YG2xpqX8YZGPuDqbXJjXnw3PweGH+txsfpsvSSzdsk2nLOHSYtLsICllIw9ow0BW
XsY3JCO5ML/u59DkL7E0y1wUkWCRCsZvarD89m1m9k6jjZurGuEXOdBWjwiRbfn2
1Y5DzxilkmUXiqnZm1WdAzgs7br9+SaDrPfNEFhyUiB5jLQz/KYFmUorOiesynhN
6Nfxt8/Wg0qciFnZAno7zhv+tPEfbRK7NlyRz/GPshsfFesTydVymOyrrwJdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsltUVjVcBmNmAuLWUlsX/jM6y0YwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLO/gDANBgkqhkiG9w0BAQsFAAOCAQEAe3zq
u8dmuzHzgQlxRmXhLBxX41KX9oDQVyWchk2F/bsbTCIDFrRQlSD4hitEQOXD5O+c
cYCl88slGMKd6sUKdqCYry4mZhUmxvxjDJMLuMG0kggV7TlSWndAQajWJOH+uSuK
iu6m3Zi3XwDfB9x2vfoCkuII36ohGNSsfJyteDwCGPONLWaduO4eGW3LcRvVJQHi
TylNz6ryyUTAxqCHCehc0EiXblmdd2VdPDdcV+4RQm4wwVe1Tw1libqyBSKMaJjd
OkdFfSlN8BjPcqn5tuJHGw7gm9zcF4e7wJsxWQPd1gBEp+fUYx0qUVIhDNiW9Mv7
vp2h5IdvarghX5HYpw==
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org