Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133382e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133382e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          9meBsTj53BlIlGKwlHnIIFYy3eoErspQm7I3Z8wqL7M=
Subject key identifier:   FB:0F:4F:1E:4E:B0:9A:3F:26:7D:E9:46:74:19:D7:47:CA:ED:2D:88
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       26292FB7C583E8F8B9AD5F17F904DC83C5099BD0
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133382e302f32342d3234203d3e20323730353730.roa
Signing time:             Thu 11 Apr 2024 11:10:39 +0000
ROA not before:           Thu 11 Apr 2024 11:05:39 +0000
ROA not after:            Thu 10 Apr 2025 11:10:39 +0000
asID:                     270570
IP address blocks:        201.49.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:2f:b7:c5:83:e8:f8:b9:ad:5f:17:f9:04:dc:83:c5:09:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: Apr 11 11:05:39 2024 GMT
            Not After : Apr 10 11:10:39 2025 GMT
        Subject: CN=FB0F4F1E4EB09A3F267DE9467419D747CAED2D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:e9:0f:03:b6:31:31:1a:60:b9:51:e0:ad:
                    4f:77:f9:0f:b0:11:29:47:35:e7:67:59:ad:96:9f:
                    1e:4c:4a:f1:93:97:72:2d:58:f0:e3:51:af:6e:c8:
                    8c:0b:2b:fe:96:ea:15:91:f2:0e:e9:99:88:8a:25:
                    72:fb:fb:e5:33:55:31:62:79:6a:50:9e:d3:9c:ff:
                    01:70:e4:12:65:a3:86:78:f1:48:6e:fc:33:ef:a0:
                    c5:4d:3f:9d:66:11:6c:68:11:1d:4d:7e:84:94:86:
                    3d:c5:14:ea:ca:f5:5e:1a:b0:0e:fc:7b:db:90:12:
                    0c:86:93:d1:4b:ef:c2:db:00:c4:ca:c8:5b:40:bd:
                    21:04:62:c0:dd:37:7f:03:d8:6c:60:34:e5:4c:2a:
                    6e:4f:81:f0:62:a8:68:28:d3:08:8f:cb:74:7d:0f:
                    87:1f:4a:1c:1e:8d:d3:d9:62:d3:de:d0:68:4d:e3:
                    fb:62:20:d6:9f:44:7f:22:df:6f:90:a4:59:8b:17:
                    6a:2a:7f:69:48:95:59:81:77:21:e7:d7:40:d7:b6:
                    2d:59:dd:dc:b1:02:41:c0:96:e9:c1:78:2b:53:08:
                    59:c9:8c:26:b8:56:b0:a2:26:a2:ab:b1:ff:de:0e:
                    2d:ec:60:5a:b0:8a:ca:e8:72:e4:6a:b9:d0:66:b5:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:4F:1E:4E:B0:9A:3F:26:7D:E9:46:74:19:D7:47:CA:ED:2D:88
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133382e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:41:5d:5f:b7:24:25:2a:63:84:18:36:6c:17:5f:0f:59:
         d1:d4:f1:94:f1:1f:2a:90:ee:4d:b4:e6:ca:86:7c:d1:0c:83:
         06:4d:9e:fe:a0:cb:bd:48:d5:b2:4a:8c:8a:3b:a8:18:f7:9f:
         ea:ba:a3:f7:19:c3:93:16:c8:c2:41:3e:6b:07:e5:76:90:43:
         67:ed:89:1e:83:d8:68:c1:7c:53:48:47:11:bb:aa:a9:8d:73:
         0e:1c:44:5a:4f:02:90:ce:8b:df:5d:84:9e:48:d3:18:a1:a2:
         70:63:c6:61:66:60:0e:7c:da:e5:68:0f:e6:94:a8:b5:be:ff:
         9a:87:aa:1f:be:d9:b4:ba:0f:92:e5:a1:98:87:0c:86:59:17:
         0d:2b:7b:52:51:6b:3c:e6:0d:20:2f:13:7a:c5:52:65:9d:5d:
         35:81:e1:75:c5:44:8e:7d:8b:64:e2:6f:82:d3:da:00:67:4a:
         0c:e2:88:1a:3b:36:bf:2c:89:40:8c:7e:e7:72:d1:74:f6:9d:
         2a:ec:e5:0d:48:60:13:ed:a2:8a:ea:f7:02:3e:32:0c:97:81:
         66:cd:22:3e:79:9d:fc:07:f3:89:c0:dc:9d:34:d8:3c:8a:85:
         3a:32:7e:ba:4f:c7:32:d9:5b:cc:de:83:e9:01:ec:54:70:16:
         1a:ff:f5:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJikvt8WD6Pi5rV8X+QTcg8UJm9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNDOUMwNzE2RDlDN0U3OTFEQ0U3MjM0Q0E0QzJERkQx
MUI4NzZCQzAeFw0yNDA0MTExMTA1MzlaFw0yNTA0MTAxMTEwMzlaMDMxMTAvBgNV
BAMTKEZCMEY0RjFFNEVCMDlBM0YyNjdERTk0Njc0MTlENzQ3Q0FFRDJEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw+kPA7YxMRpguVHgrU93+Q+w
ESlHNednWa2Wnx5MSvGTl3ItWPDjUa9uyIwLK/6W6hWR8g7pmYiKJXL7++UzVTFi
eWpQntOc/wFw5BJlo4Z48Uhu/DPvoMVNP51mEWxoER1NfoSUhj3FFOrK9V4asA78
e9uQEgyGk9FL78LbAMTKyFtAvSEEYsDdN38D2GxgNOVMKm5PgfBiqGgo0wiPy3R9
D4cfShwejdPZYtPe0GhN4/tiINafRH8i32+QpFmLF2oqf2lIlVmBdyHn10DXti1Z
3dyxAkHAlunBeCtTCFnJjCa4VrCiJqKrsf/eDi3sYFqwisrocuRqudBmtbVhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+w9PHk6wmj8mfelGdBnXR8rtLYgwHwYDVR0j
BBgwFoAUo8nAcW2cfnkdznI0ykwt/RG4drwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRqV2ZTVVg0cnMyQ3hmNTNHbTk1WExQVlNwUmNaQXNQVjFwMndRUWh4
d24vMC9BM0M5QzA3MTZEOUM3RTc5MURDRTcyMzRDQTRDMkRGRDExQjg3NkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzQzlDMDcxNkQ5QzdFNzkx
RENFNzIzNENBNEMyREZEMTFCODc2QkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0aldmU1VYNHJzMkN4ZjUzR205NVhMUFZTcFJjWkFzUFYxcDJ3UVFoeHduLzAv
MzIzMDMxMmUzNDM5MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJMYowDQYJKoZIhvcNAQELBQADggEBACU+QV1f
tyQlKmOEGDZsF18PWdHU8ZTxHyqQ7k205sqGfNEMgwZNnv6gy71I1bJKjIo7qBj3
n+q6o/cZw5MWyMJBPmsH5XaQQ2ftiR6D2GjBfFNIRxG7qqmNcw4cRFpPApDOi99d
hJ5I0xihonBjxmFmYA582uVoD+aUqLW+/5qHqh++2bS6D5LloZiHDIZZFw0re1JR
azzmDSAvE3rFUmWdXTWB4XXFRI59i2Tib4LT2gBnSgziiBo7Nr8siUCMfudy0XT2
nSrs5Q1IYBPtoorq9wI+MgyXgWbNIj55nfwH84nA3J002DyKhToyfrpPxzLZW8ze
g+kB7FRwFhr/9ZM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org