Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa
File:                     3138392e35302e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          BVNkLagflgdkcOl48FdB1h9Lr9aXgi9VoVqRkutKFwE=
Subject key identifier:   FE:AF:8D:4D:1D:9E:46:E5:9F:77:CC:74:2F:FC:68:57:90:06:A8:D5
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       578028E64D97A776C7BA5C807EF966D8B046AFD2
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:57 +0000
ROA not before:           Mon 08 Apr 2024 20:01:57 +0000
ROA not after:            Mon 07 Apr 2025 20:06:57 +0000
asID:                     28270
IP address blocks:        189.50.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:80:28:e6:4d:97:a7:76:c7:ba:5c:80:7e:f9:66:d8:b0:46:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:57 2024 GMT
            Not After : Apr  7 20:06:57 2025 GMT
        Subject: CN=FEAF8D4D1D9E46E59F77CC742FFC68579006A8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:06:47:e3:aa:e0:48:26:6b:a8:a9:dd:da:
                    70:ce:ee:d6:9e:f4:b9:1f:e6:e4:83:46:8b:f7:4c:
                    a5:6d:19:14:be:8d:36:51:43:de:e8:c8:06:2b:60:
                    5f:58:c3:88:2e:a3:81:6c:ae:67:a6:45:70:20:63:
                    61:72:44:f7:fc:ca:11:0a:3e:64:a8:70:35:2f:c3:
                    d8:1b:41:45:c5:66:52:e5:66:b8:d1:ee:6b:36:99:
                    53:c8:63:99:2b:eb:d5:53:50:d4:c6:8a:df:a0:46:
                    0c:30:78:e5:2b:59:5d:ef:4c:5d:ed:b7:3f:ca:47:
                    a7:05:c6:60:92:86:d7:e3:05:ae:23:6f:0c:b3:65:
                    dc:4d:5b:a0:66:97:80:ea:16:fa:ae:97:41:93:d8:
                    36:05:21:07:23:0d:e3:e1:bc:60:80:9b:8d:d7:3a:
                    3a:7a:ed:d8:00:3f:d1:ad:8c:6c:47:8a:9a:e9:f1:
                    14:0d:27:d5:e1:5a:cf:51:22:e0:ae:13:27:f2:98:
                    f3:da:05:04:27:3d:0c:77:6b:65:a2:89:b7:1f:34:
                    c8:29:0c:76:40:78:b8:1c:4c:82:a4:48:90:be:7a:
                    50:a6:1e:2b:33:4d:3e:7c:a3:4c:e1:3f:9d:8e:64:
                    07:a2:35:da:04:84:89:49:ed:85:8a:10:98:65:0e:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:8D:4D:1D:9E:46:E5:9F:77:CC:74:2F:FC:68:57:90:06:A8:D5
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:2d:3d:25:d6:48:0f:d1:01:4c:fa:f6:83:c1:97:ca:c6:0c:
         21:61:b1:19:5e:a5:3f:7e:8d:1e:ac:f1:93:c2:03:37:cc:8e:
         ec:3c:00:47:31:27:cf:ae:58:28:9b:10:47:ab:0f:f3:49:73:
         67:23:aa:51:f8:90:71:8d:d3:10:0d:50:e1:09:9c:c0:a5:31:
         7c:62:c3:a6:ec:76:a3:ab:5d:a2:eb:5d:ce:ee:4d:f8:36:40:
         f2:f1:98:0c:bf:aa:5f:c6:51:36:b0:7f:94:ed:56:52:6e:ab:
         81:1f:93:96:e9:09:02:6a:bf:c5:f1:08:24:9c:6f:e9:8f:ee:
         8b:7e:6d:a6:46:0e:f1:66:5b:f0:d5:32:48:b2:db:4b:4b:2c:
         14:ef:f9:d0:c8:91:9e:fa:ef:aa:01:55:12:cf:e7:67:32:3c:
         3e:dc:13:28:d2:70:ab:e5:18:04:e7:69:c8:e0:32:62:26:86:
         af:87:60:ed:de:5e:da:2c:d7:7c:b7:48:ac:0d:e5:ce:7e:de:
         8b:e8:7d:dd:8a:69:a6:c6:39:d6:fb:d5:33:37:3c:7b:c7:58:
         02:2b:51:1a:64:c1:2b:65:99:d7:1c:24:c0:ad:c7:1d:4c:28:
         b6:b8:b3:05:93:68:6c:2a:b5:93:dd:26:71:97:0c:c3:18:ab:
         0b:e0:fd:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV4Ao5k2Xp3bHulyAfvlm2LBGr9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTdaFw0yNTA0MDcyMDA2NTdaMDMxMTAvBgNV
BAMTKEZFQUY4RDREMUQ5RTQ2RTU5Rjc3Q0M3NDJGRkM2ODU3OTAwNkE4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsAZH46rgSCZrqKnd2nDO7tae
9Lkf5uSDRov3TKVtGRS+jTZRQ97oyAYrYF9Yw4guo4FsrmemRXAgY2FyRPf8yhEK
PmSocDUvw9gbQUXFZlLlZrjR7ms2mVPIY5kr69VTUNTGit+gRgwweOUrWV3vTF3t
tz/KR6cFxmCShtfjBa4jbwyzZdxNW6Bml4DqFvqul0GT2DYFIQcjDePhvGCAm43X
Ojp67dgAP9GtjGxHiprp8RQNJ9XhWs9RIuCuEyfymPPaBQQnPQx3a2WiibcfNMgp
DHZAeLgcTIKkSJC+elCmHiszTT58o0zhP52OZAeiNdoEhIlJ7YWKEJhlDttFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/q+NTR2eRuWfd8x0L/xoV5AGqNUwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzODM5MmUzNTMwMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvTKQMA0GCSqGSIb3DQEBCwUAA4IBAQBCLT0l1kgP
0QFM+vaDwZfKxgwhYbEZXqU/fo0erPGTwgM3zI7sPABHMSfPrlgomxBHqw/zSXNn
I6pR+JBxjdMQDVDhCZzApTF8YsOm7Hajq12i613O7k34NkDy8ZgMv6pfxlE2sH+U
7VZSbquBH5OW6QkCar/F8QgknG/pj+6Lfm2mRg7xZlvw1TJIsttLSywU7/nQyJGe
+u+qAVUSz+dnMjw+3BMo0nCr5RgE52nI4DJiJoavh2Dt3l7aLNd8t0isDeXOft6L
6H3dimmmxjnW+9UzNzx7x1gCK1EaZMErZZnXHCTArccdTCi2uLMFk2hsKrWT3SZx
lwzDGKsL4P1/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org