Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33392e302f32342d3234203d3e20323636323032.roa
File:                     3139322e3134302e33392e302f32342d3234203d3e20323636323032.roa (raw, json)
Hash identifier:          Dy5lt9HvfyiAABpFN1M2Cw8F9owQoxCbbd7Fqx+hncY=
Subject key identifier:   23:5E:DB:61:CB:92:21:26:E2:AC:AB:3E:68:C3:0F:1A:31:E6:D2:5A
Certificate issuer:       /CN=4CF6EBAC581A90E8521B224F46F976605D537556
Certificate serial:       518D4E0CD08C9C57231535D2C307DEC8EC54AC0A
Authority key identifier: 4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33392e302f32342d3234203d3e20323636323032.roa
Signing time:             Mon 23 Oct 2023 19:32:45 +0000
ROA not before:           Mon 23 Oct 2023 19:27:45 +0000
ROA not after:            Mon 21 Oct 2024 19:32:45 +0000
asID:                     266202
IP address blocks:        192.140.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:4e:0c:d0:8c:9c:57:23:15:35:d2:c3:07:de:c8:ec:54:ac:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CF6EBAC581A90E8521B224F46F976605D537556
        Validity
            Not Before: Oct 23 19:27:45 2023 GMT
            Not After : Oct 21 19:32:45 2024 GMT
        Subject: CN=235EDB61CB922126E2ACAB3E68C30F1A31E6D25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:7a:60:01:96:9e:e9:d8:fe:1c:ba:7f:ad:
                    e2:04:de:a1:9e:a5:1c:11:2a:72:f6:7a:9c:6d:10:
                    31:6a:30:99:b9:58:ca:b9:a8:5f:1a:06:19:1e:53:
                    c6:b5:ac:80:d6:47:82:ca:56:e1:f2:2c:d1:b6:e9:
                    15:03:7b:36:d8:92:98:26:81:13:02:6d:7c:e5:3a:
                    55:26:9e:c6:54:73:f1:c7:7f:b1:58:9c:6d:23:ec:
                    d3:d5:09:a9:bc:07:42:f5:60:b2:de:05:87:e6:23:
                    7a:3d:c6:b3:f8:36:46:41:95:35:1d:27:c9:b0:58:
                    04:e7:9b:20:cb:03:b8:a6:5e:c9:49:fb:c0:e2:21:
                    d7:d0:6b:df:e2:8e:f9:14:69:5a:ad:b5:89:42:7a:
                    bd:38:ca:8b:4b:66:cf:89:3a:c1:74:ce:95:06:f9:
                    99:ea:31:a2:6b:31:85:f3:87:e9:a7:43:77:48:5b:
                    33:c6:21:5d:1a:ef:e1:4a:7b:26:80:a3:80:6b:8a:
                    58:da:b1:53:24:0d:e2:88:d9:70:af:b1:39:fc:18:
                    84:f5:fe:ab:1c:17:28:e7:db:f1:8d:08:c9:d3:ce:
                    4e:78:89:a5:75:31:73:6f:6c:73:7c:b4:75:e9:01:
                    cc:13:8d:9f:1f:61:2f:00:a7:8d:62:72:96:01:48:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:DB:61:CB:92:21:26:E2:AC:AB:3E:68:C3:0F:1A:31:E6:D2:5A
            X509v3 Authority Key Identifier:
                keyid:4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33392e302f32342d3234203d3e20323636323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:5d:c6:cb:66:72:82:ad:29:28:88:ea:cd:38:05:31:98:
         b4:a4:91:7d:66:49:09:67:7c:6a:19:cd:92:bf:75:0b:e0:ce:
         cf:9e:91:ae:05:ed:07:de:12:da:2b:b3:c6:10:59:45:35:2c:
         99:e5:2f:32:30:8e:45:ea:5a:ba:04:c6:d5:75:e8:cf:b0:80:
         68:da:95:b0:72:8d:2e:17:e1:84:20:bb:c9:55:6f:3b:b0:35:
         41:14:7d:e3:6b:d7:72:3c:84:12:ad:af:4f:7d:6a:eb:45:0b:
         21:61:42:b0:64:b1:71:7f:c4:1d:0b:f2:c0:ab:2e:02:a7:5c:
         0b:dd:4f:41:e1:a5:80:85:ec:18:4f:32:2b:b4:20:b7:ad:17:
         ff:74:e8:a2:3b:fe:18:6a:b7:a4:7a:a2:41:9c:b0:f6:a1:f2:
         1d:ef:84:90:18:5b:a6:a5:23:a4:cb:c1:b7:77:b9:28:fa:b0:
         95:b3:ea:f0:8d:8f:12:8a:48:2c:a5:4d:45:e2:84:f5:7c:d2:
         90:e8:85:09:2d:37:ab:1e:da:a7:05:69:20:b8:66:16:50:73:
         1e:a5:52:28:6f:fa:9d:ed:13:37:83:67:07:29:36:a6:a5:e2:
         56:de:28:5e:a7:08:b7:33:e0:85:f2:46:ac:62:26:a4:02:f6:
         ee:27:e4:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUY1ODNCMnFcjFTXSwwfeyOxUrAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENGNkVCQUM1ODFBOTBFODUyMUIyMjRGNDZGOTc2NjA1
RDUzNzU1NjAeFw0yMzEwMjMxOTI3NDVaFw0yNDEwMjExOTMyNDVaMDMxMTAvBgNV
BAMTKDIzNUVEQjYxQ0I5MjIxMjZFMkFDQUIzRTY4QzMwRjFBMzFFNkQyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvHpgAZae6dj+HLp/reIE3qGe
pRwRKnL2epxtEDFqMJm5WMq5qF8aBhkeU8a1rIDWR4LKVuHyLNG26RUDezbYkpgm
gRMCbXzlOlUmnsZUc/HHf7FYnG0j7NPVCam8B0L1YLLeBYfmI3o9xrP4NkZBlTUd
J8mwWATnmyDLA7imXslJ+8DiIdfQa9/ijvkUaVqttYlCer04yotLZs+JOsF0zpUG
+ZnqMaJrMYXzh+mnQ3dIWzPGIV0a7+FKeyaAo4BriljasVMkDeKI2XCvsTn8GIT1
/qscFyjn2/GNCMnTzk54iaV1MXNvbHN8tHXpAcwTjZ8fYS8Ap41icpYBSGOnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI17bYcuSISbirKs+aMMPGjHm0lowHwYDVR0j
BBgwFoAUTPbrrFgakOhSGyJPRvl2YF1TdVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VnUDF1TGhKaTlZb25XRHQ3UFQ3Tkx1WndkYk04VmVrMUwzN0ZSZ0pl
N1YvMC80Q0Y2RUJBQzU4MUE5MEU4NTIxQjIyNEY0NkY5NzY2MDVENTM3NTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDRjZFQkFDNTgxQTkwRTg1
MjFCMjI0RjQ2Rjk3NjYwNUQ1Mzc1NTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1Z1AxdUxoSmk5WW9uV0R0N1BUN05MdVp3ZGJNOFZlazFMMzdGUmdKZTdWLzAv
MzEzOTMyMmUzMTM0MzAyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjCcwDQYJKoZIhvcNAQELBQADggEBAF6CXcbL
ZnKCrSkoiOrNOAUxmLSkkX1mSQlnfGoZzZK/dQvgzs+eka4F7QfeEtors8YQWUU1
LJnlLzIwjkXqWroExtV16M+wgGjalbByjS4X4YQgu8lVbzuwNUEUfeNr13I8hBKt
r099autFCyFhQrBksXF/xB0L8sCrLgKnXAvdT0HhpYCF7BhPMiu0ILetF/906KI7
/hhqt6R6okGcsPah8h3vhJAYW6alI6TLwbd3uSj6sJWz6vCNjxKKSCylTUXihPV8
0pDohQktN6se2qcFaSC4ZhZQcx6lUihv+p3tEzeDZwcpNqal4lbeKF6nCLcz4IXy
RqxiJqQC9u4n5B0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org