Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          qrVrs/6rlrvkrhVeTb4jHH+on7EjqKjNeL8siucd+L0=
Subject key identifier:   4E:8A:2F:71:C1:1E:75:06:5F:13:22:E6:70:B1:38:B0:E2:7D:2A:6B
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       219E5D6BAD20052CA8FC707472F45E2405B63F0B
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:15 +0000
ROA not before:           Wed 31 Jan 2024 14:26:15 +0000
ROA not after:            Wed 29 Jan 2025 14:31:15 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:5d:6b:ad:20:05:2c:a8:fc:70:74:72:f4:5e:24:05:b6:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:15 2024 GMT
            Not After : Jan 29 14:31:15 2025 GMT
        Subject: CN=4E8A2F71C11E75065F1322E670B138B0E27D2A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:2d:0f:ad:02:ea:e2:77:61:d8:35:93:4f:
                    ae:78:e2:b8:a5:0e:f2:a7:80:fd:d3:0b:f9:c5:6d:
                    ca:ac:c4:39:27:c7:e4:97:63:ee:28:c4:9f:eb:cd:
                    c7:1d:16:4f:64:7f:46:55:05:c7:d6:e3:13:8d:5f:
                    62:f2:92:db:53:48:7a:6f:15:0c:ac:02:f2:70:e7:
                    72:af:fd:93:cb:c8:1e:4c:e0:e9:96:ef:03:72:cc:
                    5d:8d:1f:9d:3a:25:2b:b3:ef:82:25:1d:19:4f:e7:
                    79:7b:dd:09:1c:a3:77:8f:8d:02:15:81:cb:a1:9e:
                    01:05:ea:64:d6:20:42:bd:5b:b3:31:b8:0f:b1:6a:
                    93:ef:40:83:93:46:e8:db:40:04:76:cc:3c:ee:6c:
                    4d:f9:17:62:42:d8:4f:2a:a9:1f:21:14:a6:11:6f:
                    f7:41:42:52:42:01:99:fe:b9:97:29:03:55:24:29:
                    6f:e2:4f:e4:c3:a3:d6:05:74:90:40:d9:47:d5:2e:
                    d9:d3:69:b5:4b:23:10:d7:b1:f1:8a:01:61:be:87:
                    85:8e:2b:75:f9:a9:bd:17:c1:22:94:92:c5:c0:3e:
                    17:8d:a1:92:82:e9:fe:4a:44:a5:8b:0c:e1:1f:7b:
                    a2:42:86:fe:f7:30:f0:14:8f:1f:b6:25:37:d9:f3:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:2F:71:C1:1E:75:06:5F:13:22:E6:70:B1:38:B0:E2:7D:2A:6B
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:5b:62:88:9d:93:8e:f6:3a:17:5d:e7:0d:c7:da:b1:9e:
         2a:ed:66:28:27:a8:09:64:7e:a6:42:23:17:60:64:97:80:bc:
         ed:4a:ed:88:82:ab:e4:58:f3:f5:20:cb:89:48:b8:ed:a6:2b:
         10:3d:1f:17:3b:b0:d8:22:91:f5:cb:1c:14:0d:a4:fe:8b:e6:
         a4:1e:a6:7d:75:b8:e7:63:55:b8:66:fc:53:f3:9c:df:cb:e3:
         68:5e:01:22:99:34:4e:48:8a:f9:b9:73:bd:2c:6b:0c:e8:60:
         58:db:14:31:51:1f:b7:3f:6b:58:29:be:23:f6:8f:d8:94:6e:
         c2:13:a9:58:b0:9f:6f:6e:06:91:94:01:98:54:59:1c:c4:08:
         7d:7c:58:0a:82:bf:d4:eb:f5:1e:46:22:c3:47:dc:76:07:9d:
         59:da:86:9e:24:80:29:29:49:08:15:7f:5a:f2:24:c8:93:59:
         c5:ad:42:b4:e5:11:d1:79:ef:86:5f:7c:c8:57:4c:7e:ba:96:
         47:81:ee:aa:2e:c1:83:25:09:53:ea:10:64:77:6c:cb:fc:4a:
         ba:82:80:14:0c:41:b5:58:67:51:fb:89:79:92:d8:de:87:79:
         e8:98:67:55:f6:d8:3f:27:8c:2a:9f:9c:64:58:5c:41:b1:55:
         36:e0:8a:73
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIZ5da60gBSyo/HB0cvReJAW2PwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yNDAxMzExNDI2MTVaFw0yNTAxMjkxNDMxMTVaMDMxMTAvBgNV
BAMTKDRFOEEyRjcxQzExRTc1MDY1RjEzMjJFNjcwQjEzOEIwRTI3RDJBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLi0PrQLq4ndh2DWTT6544ril
DvKngP3TC/nFbcqsxDknx+SXY+4oxJ/rzccdFk9kf0ZVBcfW4xONX2LykttTSHpv
FQysAvJw53Kv/ZPLyB5M4OmW7wNyzF2NH506JSuz74IlHRlP53l73Qkco3ePjQIV
gcuhngEF6mTWIEK9W7MxuA+xapPvQIOTRujbQAR2zDzubE35F2JC2E8qqR8hFKYR
b/dBQlJCAZn+uZcpA1UkKW/iT+TDo9YFdJBA2UfVLtnTabVLIxDXsfGKAWG+h4WO
K3X5qb0XwSKUksXAPheNoZKC6f5KRKWLDOEfe6JChv73MPAUjx+2JTfZ88M9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUToovccEedQZfEyLmcLE4sOJ9KmswHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLO/gDANBgkqhkiG9w0BAQsFAAOCAQEAPFNb
Yoidk472Ohdd5w3H2rGeKu1mKCeoCWR+pkIjF2Bkl4C87UrtiIKr5Fjz9SDLiUi4
7aYrED0fFzuw2CKR9cscFA2k/ovmpB6mfXW452NVuGb8U/Oc38vjaF4BIpk0TkiK
+blzvSxrDOhgWNsUMVEftz9rWCm+I/aP2JRuwhOpWLCfb24GkZQBmFRZHMQIfXxY
CoK/1Ov1HkYiw0fcdgedWdqGniSAKSlJCBV/WvIkyJNZxa1CtOUR0Xnvhl98yFdM
frqWR4Huqi7BgyUJU+oQZHdsy/xKuoKAFAxBtVhnUfuJeZLY3od56JhnVfbYPyeM
Kp+cZFhcQbFVNuCKcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org