Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa
File:                     3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          n+usr9tcecfHRtT1J8i013VTzDFiefHHChokcJ9XoTY=
Subject key identifier:   F8:58:3F:C3:29:A8:56:E6:BE:AC:BC:67:9C:E2:1D:AD:8A:4C:25:90
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       0D95329898A90DDBCBF866BC9B6DDC099D450A30
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:43:10 +0000
ROA not before:           Tue 28 Feb 2023 12:38:10 +0000
ROA not after:            Tue 27 Feb 2024 12:43:10 +0000
asID:                     271724
IP address blocks:        179.191.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:32:98:98:a9:0d:db:cb:f8:66:bc:9b:6d:dc:09:9d:45:0a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:38:10 2023 GMT
            Not After : Feb 27 12:43:10 2024 GMT
        Subject: CN=F8583FC329A856E6BEACBC679CE21DAD8A4C2590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:4b:79:45:92:59:42:0c:4d:91:cf:09:38:
                    77:d0:b9:77:a0:49:47:30:8b:81:9e:0a:85:a6:ca:
                    28:52:fe:78:7e:d1:24:f8:ce:a7:84:6b:dc:cd:62:
                    89:04:5a:81:9a:35:f7:d1:a6:fd:f4:99:7e:e0:5e:
                    59:93:22:5c:41:92:87:76:44:a7:21:27:9c:e9:d3:
                    d8:88:b0:2a:9f:78:1b:ac:5f:0a:ab:db:fe:7b:59:
                    92:0c:34:02:77:6a:87:42:f9:0e:32:3d:4b:b8:ec:
                    26:b8:39:b6:aa:1c:c2:57:4e:b5:c8:96:7d:7b:9a:
                    8f:af:a2:c4:c3:ea:ca:65:3e:b1:64:f6:da:b3:0d:
                    c3:b5:1c:ed:f0:f2:aa:76:fc:2d:7e:52:3e:28:4d:
                    65:2c:02:ab:3a:a4:5c:80:ce:60:af:9c:3f:d1:b6:
                    77:31:2a:0a:19:0a:46:fb:60:70:21:c9:26:14:dc:
                    ce:b0:0d:26:14:a6:12:93:97:9c:bd:78:8e:58:76:
                    a2:7d:a7:90:ab:f6:f0:c0:d7:36:72:e1:90:9a:df:
                    a0:00:1d:f2:2f:1d:60:4c:c3:84:37:ec:3a:99:f0:
                    af:11:ba:3b:62:41:f3:80:20:7f:cc:ca:14:de:17:
                    e8:0e:9d:bd:72:98:85:8f:53:9c:1a:a7:a3:d1:88:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:58:3F:C3:29:A8:56:E6:BE:AC:BC:67:9C:E2:1D:AD:8A:4C:25:90
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:82:8c:92:0d:f1:13:7e:c1:46:49:7f:fc:19:f0:cb:7d:
         d2:a5:96:2d:a5:38:72:52:b7:5b:f0:95:59:63:bf:cc:cd:c4:
         00:6b:2f:a0:0e:d9:b0:7b:ad:43:55:6a:f7:14:c4:01:5a:19:
         c8:69:6b:29:9c:85:c5:70:da:c2:2a:5d:98:53:b1:3c:e4:48:
         23:41:da:99:2c:14:38:a5:8f:99:39:49:b1:a1:c9:80:b1:f3:
         b9:57:72:ed:3c:f4:bb:0a:e3:a6:f8:2d:0f:87:84:5a:68:c1:
         c7:9a:a7:98:08:a1:52:29:36:d7:86:1e:e7:d7:c3:56:71:9a:
         de:1c:18:74:11:28:e5:63:6b:d0:03:8d:c5:a3:50:4a:ef:f4:
         42:1d:10:c2:8d:03:15:e9:2a:d8:36:f0:72:e2:3a:45:90:8a:
         55:63:78:12:63:8d:99:7d:7d:72:80:30:f9:7a:60:13:10:27:
         77:f6:ee:95:06:36:ca:ad:9e:da:1d:62:cf:65:f8:51:61:af:
         59:4f:07:a3:e4:af:b0:87:c3:e8:68:43:5a:07:15:49:0d:c6:
         af:37:17:e6:a5:38:7c:7e:93:7a:7f:40:de:0f:5b:bc:84:0f:
         51:4b:e4:9c:9f:c3:ee:cb:c6:01:e8:65:02:8f:38:37:cb:b4:
         30:42:9d:ec
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDZUymJipDdvL+Ga8m23cCZ1FCjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMwNTExNjVBMDhFOUVGOUYwRjNENDYxQjU3RDhCRDE4
MTg0RkM1QjAeFw0yMzAyMjgxMjM4MTBaFw0yNDAyMjcxMjQzMTBaMDMxMTAvBgNV
BAMTKEY4NTgzRkMzMjlBODU2RTZCRUFDQkM2NzlDRTIxREFEOEE0QzI1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRX0t5RZJZQgxNkc8JOHfQuXeg
SUcwi4GeCoWmyihS/nh+0ST4zqeEa9zNYokEWoGaNffRpv30mX7gXlmTIlxBkod2
RKchJ5zp09iIsCqfeBusXwqr2/57WZIMNAJ3aodC+Q4yPUu47Ca4ObaqHMJXTrXI
ln17mo+vosTD6splPrFk9tqzDcO1HO3w8qp2/C1+Uj4oTWUsAqs6pFyAzmCvnD/R
tncxKgoZCkb7YHAhySYU3M6wDSYUphKTl5y9eI5YdqJ9p5Cr9vDA1zZy4ZCa36AA
HfIvHWBMw4Q37DqZ8K8RujtiQfOAIH/MyhTeF+gOnb1ymIWPU5wap6PRiIRFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+Fg/wymoVua+rLxnnOIdrYpMJZAwHwYDVR0j
BBgwFoAU4wURZaCOnvnw89RhtX2L0YGE/FswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9FMzA1MTE2NUEwOEU5RUY5RjBGM0Q0NjFCNTdEOEJEMTgxODRGQzVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzMDUxMTY1QTA4RTlFRjlG
MEYzRDQ2MUI1N0Q4QkQxODE4NEZDNUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLO/kDANBgkqhkiG9w0BAQsFAAOCAQEAS/+C
jJIN8RN+wUZJf/wZ8Mt90qWWLaU4clK3W/CVWWO/zM3EAGsvoA7ZsHutQ1Vq9xTE
AVoZyGlrKZyFxXDawipdmFOxPORII0HamSwUOKWPmTlJsaHJgLHzuVdy7Tz0uwrj
pvgtD4eEWmjBx5qnmAihUik214Ye59fDVnGa3hwYdBEo5WNr0AONxaNQSu/0Qh0Q
wo0DFekq2DbwcuI6RZCKVWN4EmONmX19coAw+XpgExAnd/bulQY2yq2e2h1iz2X4
UWGvWU8Ho+SvsIfD6GhDWgcVSQ3GrzcX5qU4fH6Ten9A3g9bvIQPUUvknJ/D7svG
AehlAo84N8u0MEKd7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org