Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          yK1Rn8fHVD8spqx1v+yXrzkduPeaBmmt/wgWAyz0Tk8=
Subject key identifier:   FF:44:9C:BB:20:CC:3C:04:EA:8F:EF:5C:D4:12:05:D4:10:A6:11:58
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       7D919DC408660A6DBB19D805E5B72B52AA51726A
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:06:55 +0000
ROA not before:           Mon 08 Apr 2024 20:01:55 +0000
ROA not after:            Mon 07 Apr 2025 20:06:55 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:91:9d:c4:08:66:0a:6d:bb:19:d8:05:e5:b7:2b:52:aa:51:72:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:55 2024 GMT
            Not After : Apr  7 20:06:55 2025 GMT
        Subject: CN=FF449CBB20CC3C04EA8FEF5CD41205D410A61158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:32:38:9a:cb:27:88:f2:92:95:d5:8f:ce:
                    c5:f9:a1:33:18:0d:84:7e:3e:35:b1:e3:49:15:2c:
                    b4:52:2a:20:b9:4b:71:c5:43:35:c3:a7:14:e9:b7:
                    27:19:20:a6:4d:c2:b3:33:ff:ef:bd:3b:39:2d:15:
                    fc:40:06:c5:4d:1c:a2:0a:f3:2a:98:d7:a5:87:61:
                    0c:97:98:57:58:08:87:0c:f9:bb:4b:e5:45:8b:4d:
                    98:17:70:70:86:31:15:85:cb:a1:c3:4b:fb:d6:ac:
                    93:ab:f4:5d:5b:75:5e:cf:b1:c1:c3:bf:e4:9f:6c:
                    12:e5:ed:42:b4:3a:c5:7b:e2:61:99:4c:ed:e2:b3:
                    2d:5e:bb:f3:9c:0e:1d:48:c4:dd:55:02:0a:8a:eb:
                    b8:fa:a6:82:81:09:26:da:80:31:49:61:39:23:ae:
                    f8:49:d6:6f:c2:29:a4:32:94:ae:47:5f:62:15:60:
                    42:3a:ee:d5:65:98:75:8a:60:a6:83:57:e5:ae:c8:
                    86:d9:30:b8:2d:77:9a:00:86:f4:89:5c:52:97:a7:
                    60:21:37:b9:2c:da:c4:b9:29:ea:8d:ed:d5:c7:a8:
                    04:33:6c:d4:24:6a:16:76:ec:66:2d:e2:86:4d:b8:
                    3e:84:c9:80:b8:f3:f4:19:08:87:3c:41:60:43:11:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:44:9C:BB:20:CC:3C:04:EA:8F:EF:5C:D4:12:05:D4:10:A6:11:58
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:37:3d:22:53:ea:4d:54:fd:6c:97:09:3c:06:45:5e:a7:
         d6:ad:9e:30:3d:57:97:c7:01:e7:da:3c:ac:02:d7:cf:6a:b4:
         92:b2:c8:87:db:61:89:2a:be:79:94:f8:b0:e9:cd:5e:9b:be:
         b2:9c:2b:0e:d8:5e:50:53:fa:7b:31:c8:8e:56:49:13:21:e2:
         fb:4e:34:c5:d8:07:7e:cb:76:93:3b:11:65:4c:3f:2d:0e:5f:
         58:00:ec:b8:5e:34:35:c0:fa:d6:92:bf:2b:f5:55:2f:a7:d2:
         cc:01:4e:02:1f:20:78:e8:19:b6:5a:0b:e0:f3:d4:a9:da:95:
         32:2b:c6:66:00:f3:6d:b5:38:f7:0f:50:8d:25:53:bd:7d:29:
         f0:64:de:4b:1b:b3:4d:89:ae:a3:40:43:fa:05:ad:4d:8b:45:
         c7:92:18:d3:70:47:29:12:19:94:6e:2b:e5:99:a4:59:64:0d:
         a0:b9:c3:2f:58:bc:ca:39:1f:a6:55:11:af:c6:2d:f4:24:83:
         bf:f6:3e:59:a7:29:d0:77:7b:c7:c9:fd:28:d0:5d:ac:42:33:
         ae:d4:dd:6b:66:d6:f3:0f:a9:65:b6:b4:7e:91:3a:d3:c8:a4:
         b3:11:5c:b2:11:56:55:21:64:f4:c7:d4:e5:27:5c:f1:fc:93:
         ba:c1:aa:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfZGdxAhmCm27GdgF5bcrUqpRcmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTVaFw0yNTA0MDcyMDA2NTVaMDMxMTAvBgNV
BAMTKEZGNDQ5Q0JCMjBDQzNDMDRFQThGRUY1Q0Q0MTIwNUQ0MTBBNjExNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/DI4mssniPKSldWPzsX5oTMY
DYR+PjWx40kVLLRSKiC5S3HFQzXDpxTptycZIKZNwrMz/++9OzktFfxABsVNHKIK
8yqY16WHYQyXmFdYCIcM+btL5UWLTZgXcHCGMRWFy6HDS/vWrJOr9F1bdV7PscHD
v+SfbBLl7UK0OsV74mGZTO3isy1eu/OcDh1IxN1VAgqK67j6poKBCSbagDFJYTkj
rvhJ1m/CKaQylK5HX2IVYEI67tVlmHWKYKaDV+WuyIbZMLgtd5oAhvSJXFKXp2Ah
N7ks2sS5KeqN7dXHqAQzbNQkahZ27GYt4oZNuD6EyYC48/QZCIc8QWBDEY3rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/0ScuyDMPATqj+9c1BIF1BCmEVgwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDxEwwDQYJKoZIhvcNAQELBQADggEBAIwUNz0i
U+pNVP1slwk8BkVep9atnjA9V5fHAefaPKwC189qtJKyyIfbYYkqvnmU+LDpzV6b
vrKcKw7YXlBT+nsxyI5WSRMh4vtONMXYB37LdpM7EWVMPy0OX1gA7LheNDXA+taS
vyv1VS+n0swBTgIfIHjoGbZaC+Dz1KnalTIrxmYA8221OPcPUI0lU719KfBk3ksb
s02JrqNAQ/oFrU2LRceSGNNwRykSGZRuK+WZpFlkDaC5wy9YvMo5H6ZVEa/GLfQk
g7/2PlmnKdB3e8fJ/SjQXaxCM67U3Wtm1vMPqWW2tH6ROtPIpLMRXLIRVlUhZPTH
1OUnXPH8k7rBqsI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org