Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File:                     3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          uZMOLZ0/7LubAHxLV6j4j+N5QV1mme2/iuqjbJqxjLA=
Subject key identifier:   96:60:9A:AC:C8:BC:20:30:2B:C6:DA:7E:DB:51:C4:1F:25:5B:EC:44
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       37520654ADA25013606C7153B0BB3E9D2909B606
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:27:00 +0000
ROA not before:           Thu 22 Jun 2023 11:22:00 +0000
ROA not after:            Thu 20 Jun 2024 11:27:00 +0000
asID:                     28202
IP address blocks:        191.240.0.0/17 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:52:06:54:ad:a2:50:13:60:6c:71:53:b0:bb:3e:9d:29:09:b6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:22:00 2023 GMT
            Not After : Jun 20 11:27:00 2024 GMT
        Subject: CN=96609AACC8BC20302BC6DA7EDB51C41F255BEC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:4e:fa:59:af:96:cf:0c:85:ed:ba:dc:c3:
                    45:ba:4e:af:8e:11:45:80:cf:dc:ee:30:d5:93:f0:
                    1e:6a:8f:7e:8b:4d:df:a7:da:5d:14:a5:46:79:c3:
                    bb:27:92:53:ae:90:46:92:cb:2a:cc:4a:ec:6e:df:
                    e4:c5:0f:d2:59:1c:c1:9c:14:ed:9e:fc:94:97:fb:
                    de:e9:bf:a7:83:41:05:0f:e8:d7:9d:48:33:8d:da:
                    27:9d:fc:ab:85:77:64:a8:67:81:68:5e:c2:77:f6:
                    b4:13:e2:c8:59:24:18:20:50:92:96:4a:1f:0b:a2:
                    fa:c6:fa:a5:b4:16:f7:4f:c1:bd:cc:57:55:57:0b:
                    83:37:36:ee:bb:e8:6a:ef:6f:7f:78:23:40:64:66:
                    f3:79:5d:05:29:8b:71:83:68:57:2f:60:63:80:67:
                    a5:60:7b:f0:7c:4b:0f:ab:0f:52:43:46:b2:6b:7d:
                    9f:a0:da:c0:82:ea:1a:45:aa:e7:b6:fa:fc:4b:42:
                    be:b0:1b:a6:98:63:65:e0:4e:50:20:3b:a1:f0:b1:
                    f4:cc:59:a7:61:a6:ea:91:f9:d4:fc:1d:78:e7:ee:
                    61:ea:08:68:57:55:b6:1d:24:07:54:11:4d:26:dd:
                    a1:03:7e:3c:af:61:25:38:da:1f:d4:66:df:c2:da:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:9A:AC:C8:BC:20:30:2B:C6:DA:7E:DB:51:C4:1F:25:5B:EC:44
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e3234302e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:78:89:15:d4:a8:72:66:41:e3:18:35:17:d5:b1:e2:52:
         49:19:f7:7a:de:2f:43:9d:b7:38:ec:b0:a6:54:b8:0d:a5:8b:
         0f:28:04:36:2a:82:1c:66:16:33:3b:0e:36:87:75:f3:4d:6c:
         e4:60:13:8c:97:32:44:4c:51:eb:72:42:76:54:b0:f4:ad:b3:
         b2:13:f1:d9:da:6b:fb:3a:83:69:36:5f:1a:ea:f6:10:c1:a5:
         d3:ca:4d:b7:74:58:61:a6:b4:84:11:ce:06:c1:d8:49:98:c9:
         c0:de:74:69:09:3c:ee:9a:bb:86:93:83:a3:d5:eb:e5:8b:df:
         02:f6:c4:d8:0a:99:55:28:c9:7e:f6:d4:02:00:5f:70:a5:ea:
         74:b8:9c:5f:0a:de:f7:a4:82:ac:74:fa:46:bb:86:2f:6d:86:
         79:4c:b6:66:2f:ce:28:89:8b:22:8f:24:75:f2:2e:a3:a6:ee:
         db:9c:6f:da:01:19:44:3a:ad:7d:9a:19:e4:71:74:5c:db:fb:
         a5:23:9b:cb:b7:96:97:33:c3:e4:0b:5e:81:63:ac:e9:fe:74:
         83:41:c5:d7:2d:32:20:41:5d:2a:16:b2:0e:0b:d2:cd:9d:5d:
         d9:d8:43:f1:6f:6b:f7:ae:85:90:19:dd:10:88:bd:99:f5:b8:
         c0:b6:ec:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUN1IGVK2iUBNgbHFTsLs+nSkJtgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyRkMxMDA4MTlBMUE3QjQ4RjlGNzk4MThFRkI2OUI2
QjlBMUZFODAeFw0yMzA2MjIxMTIyMDBaFw0yNDA2MjAxMTI3MDBaMDMxMTAvBgNV
BAMTKDk2NjA5QUFDQzhCQzIwMzAyQkM2REE3RURCNTFDNDFGMjU1QkVDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuU76Wa+WzwyF7brcw0W6Tq+O
EUWAz9zuMNWT8B5qj36LTd+n2l0UpUZ5w7snklOukEaSyyrMSuxu3+TFD9JZHMGc
FO2e/JSX+97pv6eDQQUP6NedSDON2ied/KuFd2SoZ4FoXsJ39rQT4shZJBggUJKW
Sh8LovrG+qW0FvdPwb3MV1VXC4M3Nu676Grvb394I0BkZvN5XQUpi3GDaFcvYGOA
Z6Vge/B8Sw+rD1JDRrJrfZ+g2sCC6hpFque2+vxLQr6wG6aYY2XgTlAgO6HwsfTM
WadhpuqR+dT8HXjn7mHqCGhXVbYdJAdUEU0m3aEDfjyvYSU42h/UZt/C2qIVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlmCarMi8IDArxtp+21HEHyVb7EQwHwYDVR0j
BBgwFoAU5i/BAIGaGntI+feYGO+2m2uaH+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMS9FNjJGQzEwMDgxOUExQTdCNDhGOUY3OTgxOEVGQjY5QjZCOUExRkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MkZDMTAwODE5QTFBN0I0
OEY5Rjc5ODE4RUZCNjlCNkI5QTFGRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzEv
MzEzOTMxMmUzMjM0MzAyZTMwMmUzMDJmMzEzNzJkMzIzNTIwM2QzZTIwMzIzODMy
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEB7/wADANBgkqhkiG9w0BAQsFAAOCAQEArlh4iRXUqHJm
QeMYNRfVseJSSRn3et4vQ523OOywplS4DaWLDygENiqCHGYWMzsONod1801s5GAT
jJcyRExR63JCdlSw9K2zshPx2dpr+zqDaTZfGur2EMGl08pNt3RYYaa0hBHOBsHY
SZjJwN50aQk87pq7hpODo9Xr5YvfAvbE2AqZVSjJfvbUAgBfcKXqdLicXwre96SC
rHT6RruGL22GeUy2Zi/OKImLIo8kdfIuo6bu25xv2gEZRDqtfZoZ5HF0XNv7pSOb
y7eWlzPD5AtegWOs6f50g0HF1y0yIEFdKhayDgvSzZ1d2dhD8W9r966FkBndEIi9
mfW4wLbsaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org