Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3234203d3e203631353638.roa
File:                     3139302e31352e39362e302f31392d3234203d3e203631353638.roa (raw, json)
Hash identifier:          ln+83AIhMW8ZKSmDDc/O8k4wnvUbTVHM9Unw2Zji4/o=
Subject key identifier:   8F:4D:2A:82:D1:A7:17:2C:CD:F9:85:AC:9D:F6:11:F2:52:E4:CC:E7
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       07FE8E401AE62BC66A2D59BFB92659E4436B35DB
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3234203d3e203631353638.roa
Signing time:             Mon 02 Oct 2023 15:04:13 +0000
ROA not before:           Mon 02 Oct 2023 14:59:13 +0000
ROA not after:            Mon 30 Sep 2024 15:04:13 +0000
asID:                     61568
IP address blocks:        190.15.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fe:8e:40:1a:e6:2b:c6:6a:2d:59:bf:b9:26:59:e4:43:6b:35:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Oct  2 14:59:13 2023 GMT
            Not After : Sep 30 15:04:13 2024 GMT
        Subject: CN=8F4D2A82D1A7172CCDF985AC9DF611F252E4CCE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:32:28:1d:c1:7b:a0:9b:a5:3a:3f:1c:74:
                    03:c8:a2:71:e1:26:6d:32:c4:78:1f:a3:d7:58:ba:
                    14:22:76:f6:39:3e:72:87:61:38:32:93:2a:08:08:
                    11:dc:8e:ee:e4:6f:1b:23:16:29:98:c9:94:80:45:
                    94:0e:53:7c:6a:40:82:7e:99:c3:19:aa:d3:ce:c1:
                    c1:62:ac:ca:d5:11:b8:15:2d:9a:d7:9f:fa:ca:d1:
                    ee:22:af:28:f5:d1:f0:cb:0a:2b:9e:e0:fb:93:ab:
                    a2:47:22:81:91:a7:77:9f:ea:f4:ed:fb:b0:7c:62:
                    b1:96:10:59:0c:e3:9b:7c:71:2d:36:7e:ef:c6:aa:
                    d9:42:52:24:d6:31:b9:75:94:03:f8:d3:7e:8c:3a:
                    e5:79:8d:36:77:73:a7:40:18:08:4d:ed:0c:14:20:
                    1a:79:3a:29:2d:dd:1f:64:41:10:8c:11:a0:b6:49:
                    40:32:d0:c2:50:b5:f1:35:4e:48:aa:49:65:4e:10:
                    fb:38:47:d1:d0:b3:76:dd:ec:50:46:b6:bd:cd:79:
                    e2:4d:a9:e0:76:1a:36:ce:27:1c:86:ac:ec:35:70:
                    0f:96:ba:b0:33:bf:88:e5:cf:ec:5c:00:0e:73:e3:
                    df:7a:82:94:c4:e4:ff:01:dc:87:b9:6c:af:68:e1:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:2A:82:D1:A7:17:2C:CD:F9:85:AC:9D:F6:11:F2:52:E4:CC:E7
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3234203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:13:fa:06:2d:56:ef:fc:e4:a7:bc:a7:7f:89:da:ec:88:d0:
         1b:f6:19:fc:17:7b:f6:0f:c3:43:a9:17:36:b8:88:35:cf:69:
         41:51:00:ec:ef:4c:19:75:44:5c:2d:e6:28:d2:ae:43:99:cf:
         60:2c:9e:e5:45:90:11:cd:79:de:1e:4f:af:1f:b1:71:29:35:
         54:01:70:ab:9c:04:9e:a5:10:f9:af:8e:15:2a:e7:a5:16:18:
         7f:75:fc:20:da:5a:b2:b0:63:8f:82:d1:23:52:60:a1:85:50:
         51:3f:ba:c9:c0:b0:99:4b:18:ad:f0:0f:2d:af:76:fd:81:bd:
         ff:b7:b8:b4:10:d3:d7:8a:66:5d:06:e1:89:8d:a3:d3:86:98:
         4f:ea:d4:41:8f:78:a3:c5:7a:99:7c:e7:91:f2:03:cc:87:ae:
         d9:94:f0:14:05:97:c6:84:a7:70:d7:50:a2:74:a3:a9:9f:ac:
         27:19:e2:a8:2d:71:f1:52:8a:dc:5f:16:28:d0:d7:80:82:e6:
         42:87:1e:05:7b:ec:33:d5:42:b8:fa:5b:95:56:7a:e3:a7:d7:
         0a:7b:c5:44:45:02:74:89:14:88:9f:c4:10:7a:22:8c:fd:9d:
         13:15:f5:6f:a6:54:34:f7:47:61:44:98:79:91:c8:48:c3:25:
         e8:6b:37:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUB/6OQBrmK8ZqLVm/uSZZ5ENrNdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxMEVBOEE5MDBCRThFRkJGMEIyNjk0MTM1ODVEQ0M5
Nzk5RjMxMjAeFw0yMzEwMDIxNDU5MTNaFw0yNDA5MzAxNTA0MTNaMDMxMTAvBgNV
BAMTKDhGNEQyQTgyRDFBNzE3MkNDREY5ODVBQzlERjYxMUYyNTJFNENDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xDIoHcF7oJulOj8cdAPIonHh
Jm0yxHgfo9dYuhQidvY5PnKHYTgykyoICBHcju7kbxsjFimYyZSARZQOU3xqQIJ+
mcMZqtPOwcFirMrVEbgVLZrXn/rK0e4iryj10fDLCiue4PuTq6JHIoGRp3ef6vTt
+7B8YrGWEFkM45t8cS02fu/GqtlCUiTWMbl1lAP4036MOuV5jTZ3c6dAGAhN7QwU
IBp5Oikt3R9kQRCMEaC2SUAy0MJQtfE1TkiqSWVOEPs4R9HQs3bd7FBGtr3NeeJN
qeB2GjbOJxyGrOw1cA+WurAzv4jlz+xcAA5z4996gpTE5P8B3Ie5bK9o4TTfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUj00qgtGnFyzN+YWsnfYR8lLkzOcwHwYDVR0j
BBgwFoAUtBDqipAL6O+/CyaUE1hdzJeZ8xIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUpZeFBxUnprTll1ZGpteW81aGpqdXVweGtUTXhHTXVwTHJxYXlQM29l
SkIvMC9CNDEwRUE4QTkwMEJFOEVGQkYwQjI2OTQxMzU4NURDQzk3OTlGMzEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0MTBFQThBOTAwQkU4RUZC
RjBCMjY5NDEzNTg1RENDOTc5OUYzMTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKWXhQcVJ6a05ZdWRqbXlvNWhqanV1cHhrVE14R011cExycWF5UDNvZUpCLzAv
MzEzOTMwMmUzMTM1MmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzYzMTM1
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBb4PYDANBgkqhkiG9w0BAQsFAAOCAQEABxP6Bi1W7/zk
p7ynf4na7IjQG/YZ/Bd79g/DQ6kXNriINc9pQVEA7O9MGXVEXC3mKNKuQ5nPYCye
5UWQEc153h5Prx+xcSk1VAFwq5wEnqUQ+a+OFSrnpRYYf3X8INpasrBjj4LRI1Jg
oYVQUT+6ycCwmUsYrfAPLa92/YG9/7e4tBDT14pmXQbhiY2j04aYT+rUQY94o8V6
mXznkfIDzIeu2ZTwFAWXxoSncNdQonSjqZ+sJxniqC1x8VKK3F8WKNDXgILmQoce
BXvsM9VCuPpblVZ646fXCnvFREUCdIkUiJ/EEHoijP2dExX1b6ZUNPdHYUSYeZHI
SMMl6Gs3Tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org