Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32342d3234203d3e20323637343430.roa (raw, json)
Hash identifier:          G3Ys+q7ZVRZF3/E0hIj8KjlP4uyXS0CEKaITjcvQj84=
Subject key identifier:   DD:9D:72:76:75:74:A4:FF:DE:61:10:94:0E:82:A6:6A:6C:92:8C:94
Certificate issuer:       /CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
Certificate serial:       27154DBE8E8A6DF762613072AEF5147E0583E5A4
Authority key identifier: EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa
Signing time:             Mon 01 Apr 2024 14:35:43 +0000
ROA not before:           Mon 01 Apr 2024 14:30:43 +0000
ROA not after:            Mon 31 Mar 2025 14:35:43 +0000
asID:                     267440
IP address blocks:        192.141.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:15:4d:be:8e:8a:6d:f7:62:61:30:72:ae:f5:14:7e:05:83:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
        Validity
            Not Before: Apr  1 14:30:43 2024 GMT
            Not After : Mar 31 14:35:43 2025 GMT
        Subject: CN=DD9D72767574A4FFDE6110940E82A66A6C928C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:29:4e:eb:6c:98:9d:6b:0c:6a:9d:01:2a:
                    06:7c:3f:76:d5:e4:8e:df:02:e7:65:fb:8f:20:52:
                    d2:9a:41:e4:51:2b:f5:6e:9b:e8:4c:2e:0a:13:95:
                    6e:d6:f3:e1:2f:cf:92:d2:fd:9a:f3:67:81:df:9c:
                    5f:52:fb:36:0c:a4:5d:1a:fb:e3:ea:fb:98:25:2d:
                    78:20:e1:6c:60:b4:d6:61:bf:14:04:a7:c4:70:6b:
                    86:c8:bd:39:17:21:d8:37:b3:35:0e:77:f3:1c:de:
                    47:fd:30:f3:e4:5e:e4:ae:14:18:c5:84:61:96:4a:
                    89:98:e6:7a:81:f8:c8:cd:c7:d8:e0:a4:a2:cc:7c:
                    34:e8:5b:06:eb:d3:1e:6c:70:a1:bb:cf:5f:86:31:
                    96:da:19:c0:51:52:61:c3:3b:f4:64:11:2f:96:ff:
                    87:0b:d0:ea:a6:ff:85:7d:bf:18:ba:21:0d:95:ed:
                    92:0d:46:38:75:c5:e6:bc:a1:1f:c6:32:6f:90:7d:
                    d8:b2:28:c6:ff:f3:c1:21:fa:bd:9b:d3:3f:4c:c3:
                    c2:81:d3:ad:2f:3c:2c:8a:fd:9f:c3:47:d2:ed:62:
                    ca:2f:f3:28:47:9c:63:e5:c2:ac:8f:6d:9a:0e:2e:
                    cc:18:fc:63:15:47:5a:cc:6f:bf:44:d9:bb:ad:ce:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:72:76:75:74:A4:FF:DE:61:10:94:0E:82:A6:6A:6C:92:8C:94
            X509v3 Authority Key Identifier:
                keyid:EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32342d3234203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:1e:b6:cf:5c:8e:b8:89:2d:74:cc:c3:13:af:6f:8a:68:
         5c:2b:f9:9e:68:82:02:a8:4e:bd:da:27:59:ee:e8:91:98:7c:
         44:0e:1d:3c:75:ef:32:92:d6:6f:3d:4c:c1:c3:17:c2:45:91:
         95:fc:a2:08:39:80:b9:74:9f:5e:58:3b:c6:cb:95:cd:16:c2:
         09:c2:34:f7:d3:9d:88:6a:04:21:81:fe:2a:c8:07:ae:a4:aa:
         96:8a:e8:b6:f3:10:5d:cb:af:98:be:ed:f0:4f:c6:ee:dd:53:
         cd:65:83:1e:21:7b:19:02:ac:d1:6b:97:fb:28:20:75:15:16:
         3f:67:f2:4b:db:64:3a:29:21:35:4a:fc:71:53:14:1d:61:d0:
         80:0f:1e:a7:4c:91:dc:05:67:f6:45:df:25:08:e9:1e:01:9f:
         be:0a:9c:b3:33:90:e2:90:03:70:f1:a7:d5:89:ae:3c:e1:f5:
         fb:be:c2:2e:65:79:01:56:36:a2:9f:a6:11:8b:59:5b:1d:92:
         69:d6:7f:8d:46:28:f0:45:d3:3a:ed:6e:e5:6e:9d:d6:93:45:
         ef:de:8b:0a:74:9a:8a:53:64:ac:a0:6d:61:55:ca:2c:5d:95:
         ad:a0:5a:c8:73:d1:e9:f5:74:f5:7c:28:2b:23:89:18:d3:e7:
         f0:92:ad:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJxVNvo6KbfdiYTByrvUUfgWD5aQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QUVCODAzQ0M0MDNGNDVCOUNCQ0QzRDE5MzE1RjRC
NTgyNTNERDAeFw0yNDA0MDExNDMwNDNaFw0yNTAzMzExNDM1NDNaMDMxMTAvBgNV
BAMTKEREOUQ3Mjc2NzU3NEE0RkZERTYxMTA5NDBFODJBNjZBNkM5MjhDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTSlO62yYnWsMap0BKgZ8P3bV
5I7fAudl+48gUtKaQeRRK/Vum+hMLgoTlW7W8+Evz5LS/ZrzZ4HfnF9S+zYMpF0a
++Pq+5glLXgg4WxgtNZhvxQEp8Rwa4bIvTkXIdg3szUOd/Mc3kf9MPPkXuSuFBjF
hGGWSomY5nqB+MjNx9jgpKLMfDToWwbr0x5scKG7z1+GMZbaGcBRUmHDO/RkES+W
/4cL0Oqm/4V9vxi6IQ2V7ZINRjh1xea8oR/GMm+QfdiyKMb/88Eh+r2b0z9Mw8KB
060vPCyK/Z/DR9LtYsov8yhHnGPlwqyPbZoOLswY/GMVR1rMb79E2butzlYdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3Z1ydnV0pP/eYRCUDoKmamySjJQwHwYDVR0j
BBgwFoAU72rrgDzEA/RbnLzT0ZMV9LWCU90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC9FRjZBRUI4MDNDQzQwM0Y0NUI5Q0JDRDNEMTkzMTVGNEI1ODI1M0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGNkFFQjgwM0NDNDAzRjQ1
QjlDQkNEM0QxOTMxNUY0QjU4MjUzREQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzEzOTMyMmUzMTM0MzEyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwI0CMA0GCSqGSIb3DQEBCwUAA4IBAQAeYR62z1yO
uIktdMzDE69vimhcK/meaIICqE692idZ7uiRmHxEDh08de8yktZvPUzBwxfCRZGV
/KIIOYC5dJ9eWDvGy5XNFsIJwjT3052IagQhgf4qyAeupKqWiui28xBdy6+Yvu3w
T8bu3VPNZYMeIXsZAqzRa5f7KCB1FRY/Z/JL22Q6KSE1SvxxUxQdYdCADx6nTJHc
BWf2Rd8lCOkeAZ++CpyzM5DikANw8afVia484fX7vsIuZXkBVjain6YRi1lbHZJp
1n+NRijwRdM67W7lbp3Wk0Xv3osKdJqKU2SsoG1hVcosXZWtoFrIc9Hp9XT1fCgr
I4kY0+fwkq3s
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org