Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (raw, json)
Hash identifier:          OaNwPegHe7oYr8a867rXC2UfJLG0B1+tAcxqY9AFOJQ=
Subject key identifier:   E5:04:26:26:3A:57:9D:13:C6:7C:85:39:B0:EA:67:1C:4E:10:FA:66
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       587EC5133947346EE4450A8F12E4E5309A6A8FC7
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:51 +0000
ROA not before:           Sat 16 Dec 2023 09:31:51 +0000
ROA not after:            Sat 14 Dec 2024 09:36:51 +0000
asID:                     270652
IP address blocks:        190.11.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:c5:13:39:47:34:6e:e4:45:0a:8f:12:e4:e5:30:9a:6a:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:51 2023 GMT
            Not After : Dec 14 09:36:51 2024 GMT
        Subject: CN=E50426263A579D13C67C8539B0EA671C4E10FA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:fc:2a:ed:ce:00:4d:79:a9:49:96:0b:ea:
                    a5:b5:13:f3:50:cb:42:e7:bf:60:5e:53:1d:e2:08:
                    58:f9:85:65:e1:f6:17:a4:8a:68:bd:0a:a7:9a:28:
                    e3:e4:b0:98:ff:6d:1b:af:9a:5d:c8:4a:f2:d6:39:
                    b3:2e:8e:52:0d:2c:27:c2:bb:9c:81:62:da:eb:88:
                    11:f9:8a:d1:03:c2:a0:a1:74:f8:50:bb:49:df:65:
                    30:4f:db:ea:13:02:4d:6c:5b:34:bc:28:ab:e4:b8:
                    8e:06:fc:d3:84:22:15:31:dc:6e:89:cb:c1:77:d6:
                    90:f1:8e:fa:4e:f9:33:73:61:b3:ce:a7:c1:7f:d3:
                    6a:97:30:67:c9:87:69:d1:e7:e1:6f:c5:98:0d:bc:
                    27:e1:59:09:59:c3:90:dd:9a:1a:40:5a:6c:3b:78:
                    c2:d9:09:27:67:ee:b3:58:a2:e0:ea:47:f8:a5:26:
                    5b:c8:03:e6:53:3d:af:05:dc:58:08:38:b2:06:c0:
                    25:04:b0:2d:20:e0:41:e6:b4:06:bd:5a:d1:85:ee:
                    10:8b:63:42:77:f0:69:cb:9a:de:d9:0f:c3:8a:89:
                    e8:09:4b:67:90:c2:35:8f:fe:17:9c:1c:71:03:90:
                    11:da:2c:ee:79:f5:d5:6b:e9:d3:4b:81:d8:ad:c7:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:26:26:3A:57:9D:13:C6:7C:85:39:B0:EA:67:1C:4E:10:FA:66
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:bd:81:0c:d0:49:50:ba:f9:b2:62:fc:7a:ef:b7:5e:a9:eb:
         c7:ec:b4:bf:6e:30:df:ee:bc:60:78:3a:24:8d:8a:f2:31:4e:
         c1:a0:13:57:5d:57:7b:b4:80:25:56:43:fb:7e:ff:ea:29:5f:
         e5:fe:e5:15:f3:d6:a7:69:d4:08:f2:e1:e7:b4:76:01:2f:fd:
         7b:18:db:1b:75:70:fd:f9:9e:90:92:c3:9e:e0:96:85:1b:d2:
         08:21:6b:18:25:8a:c4:f2:a4:91:c5:e8:8c:db:dd:81:d9:86:
         aa:b6:22:f1:1f:60:31:96:25:3c:cb:d6:3c:01:ed:34:2c:42:
         a2:9e:6d:8a:54:b4:71:d0:e6:23:6b:f0:15:84:07:9a:e8:70:
         68:b4:94:dc:78:81:c8:3b:ca:66:16:3e:2e:e5:c9:9b:d8:ea:
         5e:a2:65:70:d9:83:7c:da:99:25:1d:92:2e:9e:ee:69:1a:b2:
         e0:b9:c5:74:30:f8:a3:2b:1a:dd:8f:4f:77:0e:bc:8a:4a:14:
         cb:aa:23:79:a3:c1:3b:fa:11:e0:3f:f0:24:23:e0:7d:e2:d2:
         71:52:c7:67:d8:28:50:6f:9c:ba:3c:87:dd:dd:5e:23:9b:3e:
         4d:19:44:d9:77:f4:ad:0a:8c:e2:8b:bd:87:e4:0e:08:af:0d:
         eb:16:fe:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWH7FEzlHNG7kRQqPEuTlMJpqj8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg5MjI5NkNDNUQ1Mzc1ODc4MTU0OTNDRTdCNjU1Qzk0
Njk0NDRENzAeFw0yMzEyMTYwOTMxNTFaFw0yNDEyMTQwOTM2NTFaMDMxMTAvBgNV
BAMTKEU1MDQyNjI2M0E1NzlEMTNDNjdDODUzOUIwRUE2NzFDNEUxMEZBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3s/wq7c4ATXmpSZYL6qW1E/NQ
y0Lnv2BeUx3iCFj5hWXh9hekimi9CqeaKOPksJj/bRuvml3ISvLWObMujlINLCfC
u5yBYtrriBH5itEDwqChdPhQu0nfZTBP2+oTAk1sWzS8KKvkuI4G/NOEIhUx3G6J
y8F31pDxjvpO+TNzYbPOp8F/02qXMGfJh2nR5+FvxZgNvCfhWQlZw5DdmhpAWmw7
eMLZCSdn7rNYouDqR/ilJlvIA+ZTPa8F3FgIOLIGwCUEsC0g4EHmtAa9WtGF7hCL
Y0J38GnLmt7ZD8OKiegJS2eQwjWP/hecHHEDkBHaLO559dVr6dNLgditx9LNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5QQmJjpXnRPGfIU5sOpnHE4Q+mYwHwYDVR0j
BBgwFoAU2JIpbMXVN1h4FUk857ZVyUaURNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMC9EODkyMjk2Q0M1RDUzNzU4NzgxNTQ5M0NFN0I2NTVDOTQ2OTQ0NEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4OTIyOTZDQzVENTM3NTg3
ODE1NDkzQ0U3QjY1NUM5NDY5NDQ0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzAv
MzEzOTMwMmUzMTMxMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+C9AwDQYJKoZIhvcNAQELBQADggEBAMS9gQzQ
SVC6+bJi/Hrvt16p68fstL9uMN/uvGB4OiSNivIxTsGgE1ddV3u0gCVWQ/t+/+op
X+X+5RXz1qdp1Ajy4ee0dgEv/XsY2xt1cP35npCSw57gloUb0gghaxglisTypJHF
6Izb3YHZhqq2IvEfYDGWJTzL1jwB7TQsQqKebYpUtHHQ5iNr8BWEB5rocGi0lNx4
gcg7ymYWPi7lyZvY6l6iZXDZg3zamSUdki6e7mkasuC5xXQw+KMrGt2PT3cOvIpK
FMuqI3mjwTv6EeA/8CQj4H3i0nFSx2fYKFBvnLo8h93dXiObPk0ZRNl39K0KjOKL
vYfkDgivDesW/gg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org