Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa
File:                     3139302e35322e37322e302f32322d3332203d3e20323731323935.roa (raw, json)
Hash identifier:          Xm9n5aU6ZF52Y2MgV7GprUzs3d/liksZzIduYfc1HsQ=
Subject key identifier:   04:AD:E7:20:75:6E:1A:70:29:94:71:E0:8F:B3:2B:F7:F8:30:94:37
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       3761BC8FFC221680A9DA39C3475559049C6B203F
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa
Signing time:             Mon 27 Mar 2023 17:41:38 +0000
ROA not before:           Mon 27 Mar 2023 17:36:38 +0000
ROA not after:            Mon 25 Mar 2024 17:41:38 +0000
asID:                     271295
IP address blocks:        190.52.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:61:bc:8f:fc:22:16:80:a9:da:39:c3:47:55:59:04:9c:6b:20:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:36:38 2023 GMT
            Not After : Mar 25 17:41:38 2024 GMT
        Subject: CN=04ADE720756E1A70299471E08FB32BF7F8309437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:bd:29:1e:19:f7:bc:11:60:32:e7:ee:61:
                    d6:ca:f5:e4:3b:d2:d8:dc:5a:87:36:29:7b:4f:61:
                    3b:f0:b3:84:54:fc:a0:99:f4:a6:bf:17:d4:0b:9b:
                    13:3d:f7:35:a5:e0:a5:67:cc:d8:dd:04:56:58:87:
                    f9:e0:fd:96:47:a2:30:56:c3:de:d4:16:04:17:5d:
                    a3:36:fe:71:db:d7:a0:6f:56:bb:5d:0b:18:fe:f4:
                    25:48:1d:4a:d7:11:85:af:1e:7e:01:19:32:29:06:
                    72:2c:ef:d9:44:8f:e3:da:28:a9:dc:48:c2:3b:c5:
                    e4:a4:22:37:3d:74:1b:40:e6:89:cf:07:96:e5:0d:
                    18:3d:73:9d:00:f0:ed:95:0b:ba:52:3a:fa:7c:89:
                    cb:01:f2:35:dd:1b:8b:79:76:32:91:91:b4:c7:7e:
                    a5:96:e3:9f:46:27:c4:5e:e9:ef:ba:b8:0b:2e:93:
                    73:98:a7:28:3d:cc:bf:31:2c:6b:a0:36:78:a4:84:
                    15:8c:ee:06:cb:2b:42:7e:5f:dc:e3:81:9e:4a:23:
                    02:3b:5d:c8:64:1f:0d:73:6f:41:db:c0:32:3e:9f:
                    a3:d7:ba:89:bd:21:e2:1f:e4:28:52:5e:f4:40:00:
                    ee:04:12:62:f8:28:15:ff:07:3b:07:76:94:97:a0:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AD:E7:20:75:6E:1A:70:29:94:71:E0:8F:B3:2B:F7:F8:30:94:37
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:41:d3:b4:0a:0d:63:d6:60:83:45:7d:6d:01:2b:50:c9:89:
         45:94:f8:e3:f3:df:14:f8:59:22:c2:6c:38:57:65:bc:94:35:
         04:6e:cb:05:be:d9:4e:92:ad:4d:a5:63:bc:93:32:8c:0c:e2:
         d7:11:88:4f:17:e5:ac:87:fe:14:ed:d0:d8:e5:11:e1:5e:96:
         e3:28:dd:d6:f3:09:61:34:83:4b:b3:20:53:bd:73:47:42:87:
         77:66:71:4d:24:f9:eb:4e:5b:e6:eb:fe:a3:95:97:96:aa:c3:
         9f:fe:5d:40:84:4b:18:b8:dd:09:c4:56:50:6d:2f:83:fa:bb:
         b1:15:54:f6:ac:9c:47:97:0c:ba:a7:17:42:d8:4e:b0:16:1f:
         43:a3:d7:c4:29:4d:5d:81:7b:c1:f5:22:b3:3b:04:52:93:5b:
         27:ac:b0:19:83:09:87:79:0c:60:6d:2a:c8:c4:81:fd:e7:8e:
         44:5b:95:14:8f:8a:97:00:5f:be:bd:c8:5e:8f:f1:ed:88:60:
         6a:19:db:ad:e7:8b:64:f5:4f:ae:e1:17:0e:ac:72:8a:a8:b9:
         8f:36:ee:cd:bb:ef:80:b3:26:07:86:8c:0c:a4:3f:ea:55:9d:
         dd:a9:bf:90:a1:a5:a9:27:0e:ac:0a:0b:de:43:6e:b8:d1:b5:
         5c:b3:b6:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN2G8j/wiFoCp2jnDR1VZBJxrID8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENEREIwQzIyOUJDRDgzRUY5QkYyODMyMUYwQUQ5NjZF
MDE5QjVBRjAeFw0yMzAzMjcxNzM2MzhaFw0yNDAzMjUxNzQxMzhaMDMxMTAvBgNV
BAMTKDA0QURFNzIwNzU2RTFBNzAyOTk0NzFFMDhGQjMyQkY3RjgzMDk0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Er0pHhn3vBFgMufuYdbK9eQ7
0tjcWoc2KXtPYTvws4RU/KCZ9Ka/F9QLmxM99zWl4KVnzNjdBFZYh/ng/ZZHojBW
w97UFgQXXaM2/nHb16BvVrtdCxj+9CVIHUrXEYWvHn4BGTIpBnIs79lEj+PaKKnc
SMI7xeSkIjc9dBtA5onPB5blDRg9c50A8O2VC7pSOvp8icsB8jXdG4t5djKRkbTH
fqWW459GJ8Re6e+6uAsuk3OYpyg9zL8xLGugNnikhBWM7gbLK0J+X9zjgZ5KIwI7
XchkHw1zb0HbwDI+n6PXuom9IeIf5ChSXvRAAO4EEmL4KBX/BzsHdpSXoOynAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBK3nIHVuGnAplHHgj7Mr9/gwlDcwHwYDVR0j
BBgwFoAUTN2wwim82D75vygyHwrZZuAZta8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC80Q0REQjBDMjI5QkNEODNFRjlCRjI4MzIxRjBBRDk2NkUwMTlCNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDRERCMEMyMjlCQ0Q4M0VG
OUJGMjgzMjFGMEFEOTY2RTAxOUI1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzOTMwMmUzNTMyMmUzNzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvjRIMA0GCSqGSIb3DQEBCwUAA4IBAQAxQdO0Cg1j
1mCDRX1tAStQyYlFlPjj898U+Fkiwmw4V2W8lDUEbssFvtlOkq1NpWO8kzKMDOLX
EYhPF+Wsh/4U7dDY5RHhXpbjKN3W8wlhNINLsyBTvXNHQod3ZnFNJPnrTlvm6/6j
lZeWqsOf/l1AhEsYuN0JxFZQbS+D+ruxFVT2rJxHlwy6pxdC2E6wFh9Do9fEKU1d
gXvB9SKzOwRSk1snrLAZgwmHeQxgbSrIxIH9545EW5UUj4qXAF++vchej/HtiGBq
Gdut54tk9U+u4RcOrHKKqLmPNu7Nu++AsyYHhowMpD/qVZ3dqb+QoaWpJw6sCgve
Q2640bVcs7bM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org