Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e203238363536.roa
File:                     3139302e35322e37352e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          csgA0SlZPTthLhR1BwretI7+dR/ORNY2UqZam+ILIVM=
Subject key identifier:   F1:A2:E9:73:9F:FE:44:CD:16:D6:6C:17:18:0D:DD:96:25:62:83:7F
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       540932AF573C9FA6EA6CDFCB73C2927C05A375B6
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e203238363536.roa
Signing time:             Mon 24 Apr 2023 13:01:13 +0000
ROA not before:           Mon 24 Apr 2023 12:56:13 +0000
ROA not after:            Mon 22 Apr 2024 13:01:13 +0000
asID:                     28656
IP address blocks:        190.52.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:09:32:af:57:3c:9f:a6:ea:6c:df:cb:73:c2:92:7c:05:a3:75:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Apr 24 12:56:13 2023 GMT
            Not After : Apr 22 13:01:13 2024 GMT
        Subject: CN=F1A2E9739FFE44CD16D66C17180DDD962562837F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:7d:c3:05:0b:bd:1b:93:35:5d:53:09:d9:
                    0a:a8:8e:5a:be:e4:51:4a:e0:2a:73:90:06:d0:53:
                    da:90:64:2a:8b:2d:b0:c5:14:7a:5b:d2:77:09:93:
                    3c:c2:84:1d:98:28:80:78:1f:bb:a7:81:bc:02:26:
                    73:89:52:08:af:a9:17:69:a9:bb:f1:c0:aa:bc:1e:
                    57:16:54:02:9c:ae:61:61:60:a2:d5:ab:f3:5d:9c:
                    8b:1c:84:f8:20:75:18:24:58:91:3c:bc:38:03:ce:
                    fd:82:20:42:95:cc:b2:94:4a:f3:80:26:ee:d3:f4:
                    79:7f:7d:9e:5f:53:07:c4:11:b0:23:3d:55:20:6e:
                    29:ee:f4:c3:6a:58:ec:d2:8b:96:f4:b3:46:76:9d:
                    f6:7e:1e:4f:69:d3:8e:ce:19:9a:4b:9a:d0:74:57:
                    00:70:3b:cc:b9:ef:ae:59:6d:92:72:8a:a9:4d:e9:
                    0c:67:f2:9b:c4:c8:a9:68:81:ea:ea:71:68:a3:1d:
                    07:1c:c5:68:fa:44:d6:82:91:3c:aa:4e:1d:5d:28:
                    df:0c:99:db:2e:aa:b8:68:d9:1b:d5:0b:c7:e1:5e:
                    6b:4d:ea:dc:45:7b:34:88:8e:e1:81:24:bd:7c:2a:
                    11:91:92:c2:19:8a:70:67:7a:df:49:c9:03:44:03:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:E9:73:9F:FE:44:CD:16:D6:6C:17:18:0D:DD:96:25:62:83:7F
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:52:4c:a9:24:5f:10:8a:0a:95:cf:be:1b:9d:49:63:28:47:
         da:f8:87:5b:03:24:ac:bc:a3:05:ae:02:7c:3d:21:f5:6b:00:
         fc:bb:f8:88:be:4f:6f:7d:fb:26:08:e2:c1:a5:96:0b:18:40:
         8b:c1:d1:15:7a:cb:0a:6c:ce:75:2c:f4:3c:fa:72:99:85:9f:
         16:b4:4a:78:b3:a2:7e:4f:da:4a:f2:78:40:d1:1e:0c:39:34:
         be:f6:41:57:15:65:be:60:0d:58:3a:06:cf:08:57:41:e6:4c:
         e4:07:19:73:4b:3f:05:be:dc:e9:e1:df:b0:3b:ee:b5:7b:a9:
         c4:a8:0e:09:31:26:37:5f:0a:54:5e:10:f9:ac:8e:a9:f0:a4:
         f3:df:da:89:a1:0f:6c:44:86:f5:2b:96:41:13:08:5c:ce:6b:
         aa:ea:b6:bc:57:05:e1:17:f9:a9:75:f9:dc:fa:7e:c4:9f:54:
         a1:4b:7d:68:4e:98:5e:3e:dc:90:e5:62:b5:4b:d1:3b:ce:6d:
         98:d0:86:d2:bf:15:fb:ad:c6:10:35:5c:b7:81:49:ce:4d:3e:
         4c:b9:99:c0:67:36:46:a6:c7:76:8b:57:26:64:91:71:6f:e7:
         5b:72:a6:d6:0c:19:1f:db:c8:c3:f7:c4:ca:a1:56:7c:fd:a5:
         82:36:13:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVAkyr1c8n6bqbN/Lc8KSfAWjdbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENEREIwQzIyOUJDRDgzRUY5QkYyODMyMUYwQUQ5NjZF
MDE5QjVBRjAeFw0yMzA0MjQxMjU2MTNaFw0yNDA0MjIxMzAxMTNaMDMxMTAvBgNV
BAMTKEYxQTJFOTczOUZGRTQ0Q0QxNkQ2NkMxNzE4MERERDk2MjU2MjgzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LH3DBQu9G5M1XVMJ2Qqojlq+
5FFK4CpzkAbQU9qQZCqLLbDFFHpb0ncJkzzChB2YKIB4H7ungbwCJnOJUgivqRdp
qbvxwKq8HlcWVAKcrmFhYKLVq/NdnIschPggdRgkWJE8vDgDzv2CIEKVzLKUSvOA
Ju7T9Hl/fZ5fUwfEEbAjPVUgbinu9MNqWOzSi5b0s0Z2nfZ+Hk9p047OGZpLmtB0
VwBwO8y5765ZbZJyiqlN6Qxn8pvEyKlogerqcWijHQccxWj6RNaCkTyqTh1dKN8M
mdsuqrho2RvVC8fhXmtN6txFezSIjuGBJL18KhGRksIZinBnet9JyQNEA65NAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8aLpc5/+RM0W1mwXGA3dliVig38wHwYDVR0j
BBgwFoAUTN2wwim82D75vygyHwrZZuAZta8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC80Q0REQjBDMjI5QkNEODNFRjlCRjI4MzIxRjBBRDk2NkUwMTlCNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDRERCMEMyMjlCQ0Q4M0VG
OUJGMjgzMjFGMEFEOTY2RTAxOUI1QUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzOTMwMmUzNTMyMmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM2
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL40SzANBgkqhkiG9w0BAQsFAAOCAQEABFJMqSRfEIoK
lc++G51JYyhH2viHWwMkrLyjBa4CfD0h9WsA/Lv4iL5Pb337JgjiwaWWCxhAi8HR
FXrLCmzOdSz0PPpymYWfFrRKeLOifk/aSvJ4QNEeDDk0vvZBVxVlvmANWDoGzwhX
QeZM5AcZc0s/Bb7c6eHfsDvutXupxKgOCTEmN18KVF4Q+ayOqfCk89/aiaEPbESG
9SuWQRMIXM5rquq2vFcF4Rf5qXX53Pp+xJ9UoUt9aE6YXj7ckOVitUvRO85tmNCG
0r8V+63GEDVct4FJzk0+TLmZwGc2RqbHdotXJmSRcW/nW3Km1gwZH9vIw/fEyqFW
fP2lgjYTlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org