Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e38382e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          2ej3hxJKFbsqiOvVFuMcOCCJxare+fjdnjhfPsCeOoc=
Subject key identifier:   0E:20:E5:A5:DF:C0:2A:0D:51:2A:15:56:49:6A:F8:58:58:F0:4F:69
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       3FA228C6D709E86022F192559B30FC0F2CEA1973
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:21 +0000
ROA not before:           Wed 28 Feb 2024 13:58:21 +0000
ROA not after:            Wed 26 Feb 2025 14:03:21 +0000
asID:                     28210
IP address blocks:        191.243.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:28:c6:d7:09:e8:60:22:f1:92:55:9b:30:fc:0f:2c:ea:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:21 2024 GMT
            Not After : Feb 26 14:03:21 2025 GMT
        Subject: CN=0E20E5A5DFC02A0D512A1556496AF85858F04F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:fb:c7:fe:63:18:70:8a:05:8b:87:5a:01:
                    15:a5:74:eb:a9:8a:e6:d8:b8:4a:24:17:27:40:46:
                    c9:05:02:68:a9:64:9b:86:96:75:b3:42:28:f2:c7:
                    9c:96:25:67:0b:64:bc:6f:03:a6:4c:e4:1c:72:80:
                    d1:fb:2c:ba:59:c8:60:bf:64:a5:89:1a:de:0c:79:
                    52:02:8e:7e:de:cc:46:73:a3:bd:d1:86:5c:00:34:
                    53:50:50:2c:53:c3:6d:6a:9e:49:ff:c4:33:21:f9:
                    48:9d:0b:52:be:6b:6f:44:65:c1:81:47:bd:19:d5:
                    e4:3c:d8:47:ee:0b:3b:f8:2f:18:5f:bc:29:a8:45:
                    49:4b:fd:bc:e8:ba:d3:a3:88:1e:76:11:27:fc:ac:
                    cf:ef:8e:9d:a2:f3:eb:e7:94:14:34:bc:da:7a:6c:
                    9f:4a:32:ad:16:e0:54:a9:5a:d9:46:4b:0e:90:25:
                    18:83:bb:99:2c:e0:60:58:c7:b1:15:2b:f2:33:c0:
                    11:b8:fe:a1:e3:26:65:14:78:b3:7b:0d:31:af:5a:
                    be:8c:15:ed:ad:f0:53:74:19:f4:4e:39:fd:46:d0:
                    d4:dd:cc:ae:6b:36:ec:a2:83:d5:b7:2e:93:5f:25:
                    42:5d:d6:99:61:49:32:1c:61:6d:a3:a0:da:5b:73:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:E5:A5:DF:C0:2A:0D:51:2A:15:56:49:6A:F8:58:58:F0:4F:69
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:97:0e:57:59:2e:72:be:01:12:82:70:2d:9f:0e:ee:bb:bb:
         f9:0a:5d:84:32:96:94:c7:2d:5d:41:5d:35:1a:b9:ad:ae:51:
         fa:46:05:0d:b4:a0:d6:71:14:ad:06:7e:87:f6:09:d7:35:7e:
         3f:6f:bc:d6:f3:38:50:b1:e6:e8:34:75:0d:52:4b:d1:51:bf:
         60:ac:e8:22:db:f8:2e:8d:f8:08:93:5c:08:56:1f:a2:47:35:
         0e:60:01:2c:88:a5:d5:70:6e:f7:9d:a0:a8:1f:5e:58:44:14:
         0d:83:06:cf:92:d5:0b:39:04:50:90:47:3b:b8:69:19:92:be:
         17:7d:eb:6b:18:77:d3:5e:40:1d:9b:e5:5b:e9:d1:30:94:59:
         9d:98:33:cb:4b:22:05:99:7e:b4:3e:6b:17:b1:4d:4a:bc:77:
         a1:9d:04:a3:53:2d:00:49:9f:d0:44:1f:13:f4:5d:dc:58:a6:
         9c:14:a5:1d:2b:e5:fe:56:81:7f:9d:52:a3:bd:be:62:1f:24:
         81:42:af:01:4b:a7:bc:a1:fa:92:85:11:c5:a3:13:d1:8e:5b:
         8d:1a:2b:17:e3:11:29:02:ce:70:ed:2e:35:bf:82:cd:b5:19:
         df:33:5b:ba:a9:11:ec:72:a7:ba:00:66:38:65:e8:ee:da:55:
         0b:c3:8b:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP6IoxtcJ6GAi8ZJVmzD8DyzqGXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjFaFw0yNTAyMjYxNDAzMjFaMDMxMTAvBgNV
BAMTKDBFMjBFNUE1REZDMDJBMEQ1MTJBMTU1NjQ5NkFGODU4NThGMDRGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaPvH/mMYcIoFi4daARWldOup
iubYuEokFydARskFAmipZJuGlnWzQijyx5yWJWcLZLxvA6ZM5BxygNH7LLpZyGC/
ZKWJGt4MeVICjn7ezEZzo73RhlwANFNQUCxTw21qnkn/xDMh+UidC1K+a29EZcGB
R70Z1eQ82EfuCzv4LxhfvCmoRUlL/bzoutOjiB52ESf8rM/vjp2i8+vnlBQ0vNp6
bJ9KMq0W4FSpWtlGSw6QJRiDu5ks4GBYx7EVK/IzwBG4/qHjJmUUeLN7DTGvWr6M
Fe2t8FN0GfROOf1G0NTdzK5rNuyig9W3LpNfJUJd1plhSTIcYW2joNpbcxJLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDiDlpd/AKg1RKhVWSWr4WFjwT2kwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzOTMxMmUzMjM0MzMyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAv/NYMA0GCSqGSIb3DQEBCwUAA4IBAQCRlw5XWS5y
vgESgnAtnw7uu7v5Cl2EMpaUxy1dQV01GrmtrlH6RgUNtKDWcRStBn6H9gnXNX4/
b7zW8zhQseboNHUNUkvRUb9grOgi2/gujfgIk1wIVh+iRzUOYAEsiKXVcG73naCo
H15YRBQNgwbPktULOQRQkEc7uGkZkr4XfetrGHfTXkAdm+Vb6dEwlFmdmDPLSyIF
mX60PmsXsU1KvHehnQSjUy0ASZ/QRB8T9F3cWKacFKUdK+X+VoF/nVKjvb5iHySB
Qq8BS6e8ofqShRHFoxPRjluNGisX4xEpAs5w7S41v4LNtRnfM1u6qRHscqe6AGY4
Zeju2lULw4vr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org