Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31362e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          IWUPdvq1NlBcZnaHHEHG9G9i9lKmk9j+69xssgtPO18=
Subject key identifier:   24:43:80:F5:18:15:93:CE:6A:F8:C7:E3:68:60:03:D2:BD:7D:DE:32
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       4155486A7D53C8766FB4F0DF2219BBE8B168503D
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:46 +0000
ROA not before:           Thu 04 Apr 2024 12:30:46 +0000
ROA not after:            Thu 03 Apr 2025 12:35:46 +0000
asID:                     262485
IP address blocks:        191.7.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:48:6a:7d:53:c8:76:6f:b4:f0:df:22:19:bb:e8:b1:68:50:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:46 2024 GMT
            Not After : Apr  3 12:35:46 2025 GMT
        Subject: CN=244380F5181593CE6AF8C7E3686003D2BD7DDE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:e1:8f:9a:b4:3b:b6:bc:34:98:4d:77:e8:
                    2d:9e:5d:af:4b:03:f1:7d:a1:58:2d:cc:b2:09:23:
                    d4:80:f8:19:ba:d8:f9:b1:9a:46:83:30:3b:a5:b3:
                    71:da:75:24:05:f9:96:f4:b9:c1:46:79:bb:ae:fe:
                    b9:df:c1:b3:71:24:71:94:79:64:b9:dd:eb:d9:02:
                    11:97:a8:72:61:17:ab:f5:de:da:d1:71:c4:ab:29:
                    fd:d4:6b:06:f9:f2:ad:8a:9a:56:a0:0a:0d:55:63:
                    34:0c:86:d6:4c:72:72:96:de:d0:e2:8c:b7:19:33:
                    33:66:55:a2:d6:2a:b4:a0:89:78:cd:e7:d5:6d:1d:
                    da:d1:3d:e1:9b:b8:41:b6:8e:9f:ac:76:fc:80:9d:
                    26:97:1d:f7:d6:ad:90:f3:70:df:bd:22:13:47:7d:
                    3c:4b:20:21:ae:75:ec:d8:6a:f0:f2:81:1a:42:68:
                    4c:37:7b:8f:5e:ad:c9:56:14:7b:38:85:61:36:8c:
                    fd:66:de:d8:0c:6a:d6:68:8c:2e:4b:14:bf:0b:cb:
                    bb:9e:6e:5b:9a:56:d3:da:ab:62:63:ec:0d:ce:15:
                    0a:7b:53:b0:00:0e:34:50:34:f4:89:b6:36:29:62:
                    cf:8f:ea:78:fe:ea:c9:2b:fc:5b:40:83:cf:47:8c:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:43:80:F5:18:15:93:CE:6A:F8:C7:E3:68:60:03:D2:BD:7D:DE:32
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31362e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:b5:02:2f:52:fa:78:37:da:01:98:eb:43:8a:6c:34:3c:
         a9:22:9b:36:76:c2:47:e1:ef:eb:1a:93:42:75:f0:93:6d:0f:
         ea:80:fe:3e:a8:fa:82:d6:ee:28:7c:3b:7d:72:2c:f6:18:25:
         75:64:8b:75:0f:22:62:27:42:29:24:1b:24:cb:cd:d8:c6:56:
         d3:a8:de:6a:97:2c:0b:c6:fa:02:be:cb:c4:11:02:c2:28:cc:
         35:c6:ab:9e:e9:f6:f7:32:7c:3a:6f:48:7d:51:9e:d4:ee:6d:
         cc:5f:88:41:09:98:49:92:f9:af:dd:53:ec:a2:e8:49:33:96:
         26:75:09:55:fd:a9:a0:20:4c:c5:28:50:44:ed:23:e3:98:a7:
         d7:a6:62:dd:7d:da:f7:04:52:57:98:26:6c:df:c2:e4:5d:fb:
         66:b1:7a:03:50:d7:61:bd:b5:2a:f6:0f:f5:ad:a6:65:c0:61:
         9e:4b:08:c7:de:f6:9a:3b:69:dc:c6:e9:c5:a1:c9:49:58:6a:
         76:2c:eb:31:73:03:4a:2d:22:07:c9:2b:eb:a5:28:02:0c:bc:
         94:c5:99:cb:6f:e6:bb:66:ed:81:48:67:31:94:29:be:37:b2:
         32:10:1e:5f:7b:10:7d:7b:91:cf:3b:56:41:1c:5f:19:e3:d2:
         78:bc:21:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQVVIan1TyHZvtPDfIhm76LFoUD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwNjk2NEIxNDIxMDMzNkM3MzVBQTExOTA5RUZCQkYw
QzlGQTdCRDAeFw0yNDA0MDQxMjMwNDZaFw0yNTA0MDMxMjM1NDZaMDMxMTAvBgNV
BAMTKDI0NDM4MEY1MTgxNTkzQ0U2QUY4QzdFMzY4NjAwM0QyQkQ3RERFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsL+GPmrQ7trw0mE136C2eXa9L
A/F9oVgtzLIJI9SA+Bm62PmxmkaDMDuls3HadSQF+Zb0ucFGebuu/rnfwbNxJHGU
eWS53evZAhGXqHJhF6v13trRccSrKf3Uawb58q2KmlagCg1VYzQMhtZMcnKW3tDi
jLcZMzNmVaLWKrSgiXjN59VtHdrRPeGbuEG2jp+sdvyAnSaXHffWrZDzcN+9IhNH
fTxLICGudezYavDygRpCaEw3e49erclWFHs4hWE2jP1m3tgMatZojC5LFL8Ly7ue
bluaVtPaq2Jj7A3OFQp7U7AADjRQNPSJtjYpYs+P6nj+6skr/FtAg89HjCufAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJEOA9RgVk85q+MfjaGAD0r193jIwHwYDVR0j
BBgwFoAU+gaWSxQhAzbHNaoRkJ77vwyfp70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMS9GQTA2OTY0QjE0MjEwMzM2QzczNUFBMTE5MDlFRkJCRjBDOUZBN0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMDY5NjRCMTQyMTAzMzZD
NzM1QUExMTkwOUVGQkJGMEM5RkE3QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzEv
MzEzOTMxMmUzNzJlMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL8HEDANBgkqhkiG9w0BAQsFAAOCAQEARva1Ai9S+ng3
2gGY60OKbDQ8qSKbNnbCR+Hv6xqTQnXwk20P6oD+Pqj6gtbuKHw7fXIs9hgldWSL
dQ8iYidCKSQbJMvN2MZW06jeapcsC8b6Ar7LxBECwijMNcarnun29zJ8Om9IfVGe
1O5tzF+IQQmYSZL5r91T7KLoSTOWJnUJVf2poCBMxShQRO0j45in16Zi3X3a9wRS
V5gmbN/C5F37ZrF6A1DXYb21KvYP9a2mZcBhnksIx972mjtp3MbpxaHJSVhqdizr
MXMDSi0iB8kr66UoAgy8lMWZy2/mu2btgUhnMZQpvjeyMhAeX3sQfXuRzztWQRxf
GePSeLwhTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org