Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          o7Tcf4wMDS/vQalkxrsHCpx3VRu1JpgfVVMiDdgImN4=
Subject key identifier:   3B:68:AC:31:25:A4:B3:CC:0D:EC:54:BE:47:20:9E:A3:73:EC:1D:1E
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       75B5C5A4AF9B3392AE6653DD5DCA0FD32D709855
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:25:22 +0000
ROA not before:           Tue 12 Dec 2023 16:20:22 +0000
ROA not after:            Tue 10 Dec 2024 16:25:22 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b5:c5:a4:af:9b:33:92:ae:66:53:dd:5d:ca:0f:d3:2d:70:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:20:22 2023 GMT
            Not After : Dec 10 16:25:22 2024 GMT
        Subject: CN=3B68AC3125A4B3CC0DEC54BE47209EA373EC1D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:c7:13:cb:c3:9e:53:db:cd:f2:ac:1a:f5:
                    8f:3a:35:53:23:ec:90:41:de:c7:6c:8f:da:0e:5c:
                    1f:81:c2:d6:14:c6:63:1c:3b:76:fc:97:51:81:93:
                    92:a0:a5:f7:49:31:3a:d9:fc:47:fe:e4:dc:09:7c:
                    8d:c2:b3:1f:ad:70:c2:10:29:64:47:6e:07:7f:20:
                    41:bb:88:19:e0:69:e7:1c:42:97:18:a3:6f:a3:bf:
                    49:b0:4a:4e:77:30:ac:cc:b3:bd:6f:de:d3:af:fe:
                    99:73:13:ed:c8:5a:f9:dc:d6:17:ce:21:95:5a:14:
                    ae:70:b7:3d:64:3e:97:c6:c2:11:b0:5e:17:f2:07:
                    5d:91:5d:a6:25:66:c3:7d:69:56:8c:6d:9e:28:d9:
                    07:ec:47:b6:c2:d9:bb:0b:b6:29:7d:b4:2d:31:de:
                    f6:da:1e:29:63:68:f5:dd:c4:f4:a6:c9:25:35:11:
                    36:d2:6a:22:f8:08:e8:84:e4:d8:ec:25:6a:27:8d:
                    75:66:64:f9:a2:47:74:f9:22:18:6b:32:e3:f9:00:
                    6e:55:3c:62:a2:fb:89:0c:61:6f:8b:66:9f:75:cd:
                    d5:e8:fb:c7:ae:f9:30:1f:6b:23:c3:e9:8e:63:b5:
                    f2:f5:b3:93:fd:11:22:52:93:d4:47:39:a5:93:80:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:AC:31:25:A4:B3:CC:0D:EC:54:BE:47:20:9E:A3:73:EC:1D:1E
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:ab:ed:b6:77:4b:4c:44:1a:d3:a1:0d:77:cd:1d:d3:5c:
         3e:83:f4:21:df:9e:07:45:aa:16:ec:d9:40:91:8d:3a:3a:a6:
         2f:00:4f:31:42:8d:1f:5a:8f:e1:e6:da:a2:ba:73:f6:f4:60:
         97:f1:ed:a5:22:c0:2c:c3:00:d0:3c:32:ca:43:f8:32:cc:16:
         e3:13:d9:61:6b:f9:fd:e5:1b:2f:06:b2:0a:f6:e0:9d:1c:ea:
         58:90:94:32:a7:17:4d:ba:ee:40:a0:49:96:62:b2:f1:f1:eb:
         7e:57:33:84:05:6a:2e:64:4b:c5:50:72:7b:13:1b:f7:e3:67:
         08:60:ee:54:af:b5:a4:ee:9f:aa:f3:b7:9b:1a:c7:55:c7:62:
         9d:31:9c:0f:34:29:35:65:e9:55:af:90:10:0c:7e:ed:59:04:
         ab:26:1d:a3:3f:dd:d0:51:c4:10:2a:9f:27:97:46:34:bb:fd:
         5c:e8:d5:c3:60:cd:9f:af:4f:b8:ef:d0:8d:94:0d:3d:61:3f:
         0b:cc:94:9d:27:da:43:e9:e1:a4:7a:27:73:78:f7:7f:2c:ae:
         68:ec:df:33:31:30:c6:7e:ac:ea:92:08:20:e8:84:0e:9f:fc:
         fd:0d:74:9d:07:4a:f4:79:be:b6:35:da:56:f1:b8:55:5d:03:
         f1:08:f2:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdbXFpK+bM5KuZlPdXcoP0y1wmFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBQzlCOTI3N0ExRUJGMjFEODVBMjgxNTQwMTU1RjYw
NTI3QTcyMTAeFw0yMzEyMTIxNjIwMjJaFw0yNDEyMTAxNjI1MjJaMDMxMTAvBgNV
BAMTKDNCNjhBQzMxMjVBNEIzQ0MwREVDNTRCRTQ3MjA5RUEzNzNFQzFEMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5McTy8OeU9vN8qwa9Y86NVMj
7JBB3sdsj9oOXB+BwtYUxmMcO3b8l1GBk5KgpfdJMTrZ/Ef+5NwJfI3Csx+tcMIQ
KWRHbgd/IEG7iBngaeccQpcYo2+jv0mwSk53MKzMs71v3tOv/plzE+3IWvnc1hfO
IZVaFK5wtz1kPpfGwhGwXhfyB12RXaYlZsN9aVaMbZ4o2QfsR7bC2bsLtil9tC0x
3vbaHiljaPXdxPSmySU1ETbSaiL4COiE5NjsJWonjXVmZPmiR3T5IhhrMuP5AG5V
PGKi+4kMYW+LZp91zdXo+8eu+TAfayPD6Y5jtfL1s5P9ESJSk9RHOaWTgAkhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO2isMSWks8wN7FS+RyCeo3PsHR4wHwYDVR0j
BBgwFoAU1aybkneh6/IdhaKBVAFV9gUnpyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC9ENUFDOUI5Mjc3QTFFQkYyMUQ4NUEyODE1NDAxNTVGNjA1MjdBNzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1QUM5QjkyNzdBMUVCRjIx
RDg1QTI4MTU0MDE1NUY2MDUyN0E3MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIswDQYJKoZIhvcNAQELBQADggEBAByZq+22
d0tMRBrToQ13zR3TXD6D9CHfngdFqhbs2UCRjTo6pi8ATzFCjR9aj+Hm2qK6c/b0
YJfx7aUiwCzDANA8MspD+DLMFuMT2WFr+f3lGy8Gsgr24J0c6liQlDKnF0267kCg
SZZisvHx635XM4QFai5kS8VQcnsTG/fjZwhg7lSvtaTun6rzt5sax1XHYp0xnA80
KTVl6VWvkBAMfu1ZBKsmHaM/3dBRxBAqnyeXRjS7/Vzo1cNgzZ+vT7jv0I2UDT1h
PwvMlJ0n2kPp4aR6J3N4938srmjs3zMxMMZ+rOqSCCDohA6f/P0NdJ0HSvR5vrY1
2lbxuFVdA/EI8vg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org