Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa
File:                     3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          2jvY4/jEVMwTWKoSCFCMnoc/gOJtF3Pz1HayZCcCdAE=
Subject key identifier:   4A:C9:E7:63:2D:F8:EF:90:4B:94:F1:C9:78:8C:ED:84:76:E8:5F:5C
Certificate issuer:       /CN=0ABCC24D9042D878C138BB44FE08B34367601A60
Certificate serial:       3FC5C2C0D0CD0F3CE6E58AB0351D6B9E5435B284
Authority key identifier: 0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0ABCC24D9042D878C138BB44FE08B34367601A60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa
Signing time:             Fri 15 Mar 2024 01:44:42 +0000
ROA not before:           Fri 15 Mar 2024 01:39:42 +0000
ROA not after:            Fri 14 Mar 2025 01:44:42 +0000
asID:                     28270
IP address blocks:        187.110.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c5:c2:c0:d0:cd:0f:3c:e6:e5:8a:b0:35:1d:6b:9e:54:35:b2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ABCC24D9042D878C138BB44FE08B34367601A60
        Validity
            Not Before: Mar 15 01:39:42 2024 GMT
            Not After : Mar 14 01:44:42 2025 GMT
        Subject: CN=4AC9E7632DF8EF904B94F1C9788CED8476E85F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:e2:c2:c6:02:46:9f:d6:43:34:05:7d:10:
                    13:7b:1f:51:3f:5c:b5:9d:8f:57:0a:82:03:6f:99:
                    c0:28:b9:95:7a:37:9a:d9:a0:8c:08:0f:1e:a0:67:
                    ce:b9:95:e4:6d:f0:04:c1:de:f4:26:fd:13:4d:a7:
                    a4:d3:fa:d0:95:dc:9d:f4:12:e8:8c:51:6f:3c:9e:
                    e5:76:91:93:7d:f1:31:27:b3:23:8d:43:89:a1:58:
                    4a:58:4f:57:02:a3:27:b9:1f:01:ed:59:a0:1e:fc:
                    37:a0:99:67:29:b8:1b:a6:07:06:bb:78:f7:91:b2:
                    a0:5f:a9:fb:31:6d:ed:af:99:c1:a8:01:c1:e7:4e:
                    94:7d:99:27:ff:03:d7:55:39:44:c7:42:1c:aa:0a:
                    1c:97:78:3b:71:1b:4f:f5:89:70:23:d0:34:a8:1a:
                    eb:ce:fc:f0:86:d5:1b:d1:d8:c8:53:f7:fa:b7:57:
                    1b:3d:2e:de:8d:d8:29:eb:3e:0d:41:e1:e1:f3:16:
                    a0:bb:14:f9:bf:13:ad:01:45:d2:e8:9d:48:12:d6:
                    30:be:38:91:6a:0b:cc:9b:14:22:09:95:76:3b:b8:
                    1f:0a:1a:88:88:6d:2b:ca:d2:8e:89:cf:df:8e:e4:
                    11:60:66:8c:27:5b:33:61:45:e6:fd:21:5f:88:f6:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C9:E7:63:2D:F8:EF:90:4B:94:F1:C9:78:8C:ED:84:76:E8:5F:5C
            X509v3 Authority Key Identifier:
                keyid:0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/0ABCC24D9042D878C138BB44FE08B34367601A60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0ABCC24D9042D878C138BB44FE08B34367601A60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c0:f7:c8:60:a6:ec:66:5b:53:64:33:67:c5:e1:ad:ec:1d:
         c3:5b:39:8d:21:85:ca:21:60:7d:b7:78:60:c5:d4:07:63:ad:
         6f:b2:45:d2:9a:70:0a:1b:b4:41:bc:56:6b:23:e0:37:90:c0:
         33:43:b2:7c:34:9b:7b:a2:f4:a2:6c:d9:28:48:3d:12:ee:1e:
         b1:ba:a6:9e:2f:63:31:ba:46:02:88:56:e5:ec:f8:e8:cb:2d:
         ae:73:5f:80:2f:bc:62:ed:cc:b2:ed:83:f0:69:df:31:34:c4:
         4b:74:b8:ed:3c:ae:d8:25:cf:8f:a8:45:fd:4f:02:cb:50:f4:
         a3:b3:17:27:3d:27:7e:b3:8e:c4:9a:b5:da:fa:ce:9f:26:f7:
         5c:f1:7e:a9:bd:80:57:aa:fe:26:14:56:eb:02:b9:fc:0e:ea:
         1f:50:b9:14:02:a0:be:ac:d9:15:c1:90:f6:0f:c4:20:1b:64:
         f8:ef:bf:df:e6:5a:85:3e:a4:02:f1:5f:3e:b2:10:66:64:41:
         85:6c:b7:91:ae:c6:2b:5d:13:24:d4:59:14:75:2d:1d:6d:15:
         c9:f9:d3:d9:40:9e:66:3b:61:24:3e:14:66:65:c4:95:e8:ec:
         b3:45:58:06:7c:34:22:9e:f0:22:7f:a4:e4:f7:87:1b:96:7b:
         5c:ba:2d:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP8XCwNDNDzzm5YqwNR1rnlQ1soQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFCQ0MyNEQ5MDQyRDg3OEMxMzhCQjQ0RkUwOEIzNDM2
NzYwMUE2MDAeFw0yNDAzMTUwMTM5NDJaFw0yNTAzMTQwMTQ0NDJaMDMxMTAvBgNV
BAMTKDRBQzlFNzYzMkRGOEVGOTA0Qjk0RjFDOTc4OENFRDg0NzZFODVGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYo+LCxgJGn9ZDNAV9EBN7H1E/
XLWdj1cKggNvmcAouZV6N5rZoIwIDx6gZ865leRt8ATB3vQm/RNNp6TT+tCV3J30
EuiMUW88nuV2kZN98TEnsyONQ4mhWEpYT1cCoye5HwHtWaAe/DegmWcpuBumBwa7
ePeRsqBfqfsxbe2vmcGoAcHnTpR9mSf/A9dVOUTHQhyqChyXeDtxG0/1iXAj0DSo
GuvO/PCG1RvR2MhT9/q3Vxs9Lt6N2CnrPg1B4eHzFqC7FPm/E60BRdLonUgS1jC+
OJFqC8ybFCIJlXY7uB8KGoiIbSvK0o6Jz9+O5BFgZownWzNhReb9IV+I9s2vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSsnnYy3475BLlPHJeIzthHboX1wwHwYDVR0j
BBgwFoAUCrzCTZBC2HjBOLtE/gizQ2dgGmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wQUJDQzI0RDkwNDJEODc4QzEzOEJCNDRGRTA4QjM0MzY3NjAxQTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBQkNDMjREOTA0MkQ4NzhD
MTM4QkI0NEZFMDhCMzQzNjc2MDFBNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM3MmUzMTMxMzAyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7btEwDQYJKoZIhvcNAQELBQADggEBAK/A98hg
puxmW1NkM2fF4a3sHcNbOY0hhcohYH23eGDF1AdjrW+yRdKacAobtEG8Vmsj4DeQ
wDNDsnw0m3ui9KJs2ShIPRLuHrG6pp4vYzG6RgKIVuXs+OjLLa5zX4AvvGLtzLLt
g/Bp3zE0xEt0uO08rtglz4+oRf1PAstQ9KOzFyc9J36zjsSatdr6zp8m91zxfqm9
gFeq/iYUVusCufwO6h9QuRQCoL6s2RXBkPYPxCAbZPjvv9/mWoU+pALxXz6yEGZk
QYVst5GuxitdEyTUWRR1LR1tFcn509lAnmY7YSQ+FGZlxJXo7LNFWAZ8NCKe8CJ/
pOT3hxuWe1y6LYU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org