Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31392e302f32342d3234203d3e20323633393930.roa
File:                     3134332e302e31392e302f32342d3234203d3e20323633393930.roa (raw, json)
Hash identifier:          hDqtkxYUhF7NY77FJEernY9qiLYvdCQJGnbx2H3ZTbg=
Subject key identifier:   11:0E:19:D2:80:3E:5C:14:BD:0B:56:4B:1D:C1:76:C5:90:B6:2D:47
Certificate issuer:       /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial:       5B38269B85297E30DA52CCCE35BDB6AC1D41F6F8
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31392e302f32342d3234203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:25 +0000
ROA not before:           Sat 13 Apr 2024 16:08:25 +0000
ROA not after:            Sat 12 Apr 2025 16:13:25 +0000
asID:                     263990
IP address blocks:        143.0.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:38:26:9b:85:29:7e:30:da:52:cc:ce:35:bd:b6:ac:1d:41:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
        Validity
            Not Before: Apr 13 16:08:25 2024 GMT
            Not After : Apr 12 16:13:25 2025 GMT
        Subject: CN=110E19D2803E5C14BD0B564B1DC176C590B62D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:00:03:14:2a:97:1b:ae:5d:68:8a:f5:b4:
                    b3:60:2c:07:47:60:b1:56:9e:d0:9e:d2:ed:2f:01:
                    35:e0:19:4f:b1:10:3f:dd:04:24:20:fa:36:c9:92:
                    04:01:02:3d:fe:2e:a2:12:81:4f:1a:24:ab:af:cb:
                    9b:60:f2:f0:43:2f:25:90:f7:45:67:8b:27:6f:a6:
                    cc:25:0a:13:9d:8d:a4:57:a4:8f:da:6f:d9:13:f0:
                    48:82:0a:ba:0c:56:bc:03:33:37:83:24:9c:50:7d:
                    b7:00:f3:62:c7:38:2a:51:0a:5d:6e:02:8a:80:6b:
                    a0:5e:89:f3:e4:1b:d9:77:2c:20:d7:5a:8d:9c:0c:
                    a0:4c:76:4e:4a:8d:1e:2f:dd:1c:6d:f8:27:79:f2:
                    72:86:06:b0:de:72:0d:90:91:04:ff:61:2b:2a:11:
                    ed:27:a9:40:f6:ed:40:95:1f:c6:ce:29:ad:fe:61:
                    33:93:8e:e2:57:5d:49:a8:ef:28:26:27:28:a5:3d:
                    5c:4e:8a:0b:85:63:f4:1f:a6:e8:7d:f8:c1:6e:46:
                    0b:c9:aa:70:12:14:6b:7b:f8:5a:9e:e5:f7:3c:a9:
                    1a:2e:a6:45:cc:9e:e8:a3:01:10:68:5a:88:3b:9c:
                    e8:cc:e3:99:e7:5d:ee:4b:97:6b:a5:e6:1c:02:a4:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0E:19:D2:80:3E:5C:14:BD:0B:56:4B:1D:C1:76:C5:90:B6:2D:47
            X509v3 Authority Key Identifier:
                keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31392e302f32342d3234203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:42:69:00:55:0a:2d:5b:41:e0:c5:6d:9f:30:8b:5a:1d:a7:
         11:a0:f2:50:04:e3:91:d9:c9:66:3b:69:ff:d3:c6:b8:76:47:
         db:be:dc:57:02:9f:cd:b0:5f:0b:f9:d5:09:21:90:cf:5c:72:
         82:06:50:17:e1:d5:ac:41:ab:7b:3c:b1:c6:37:57:fb:5f:d5:
         39:88:b7:d8:13:71:b1:87:76:39:15:d5:5e:d4:29:a3:c1:61:
         41:93:7e:ba:21:fc:72:8d:28:bf:9d:3e:99:32:38:77:c8:f4:
         23:ce:64:d9:ea:3e:3a:b0:9e:da:a9:f7:13:b1:1c:cf:46:3e:
         de:b7:57:8d:4d:a8:f0:b1:72:78:17:35:0c:f9:2b:e5:40:0d:
         53:9b:04:8f:c0:a3:2f:b0:d3:01:73:8f:5b:40:3d:dd:b4:17:
         41:3a:03:da:2d:39:da:93:51:75:c9:6f:65:22:3e:a2:13:e6:
         19:e0:0d:85:d7:c4:d7:f5:9e:1b:18:25:c4:4b:30:4e:35:aa:
         b0:a8:42:87:07:a4:d8:27:c5:8b:b8:eb:fd:c4:c5:9c:28:ff:
         ee:76:a0:97:7e:f6:15:6c:97:11:04:88:9f:be:b7:92:34:40:
         8b:ae:04:fe:a5:bc:17:4f:60:8f:dd:9b:16:59:a3:f8:5c:fd:
         67:3f:bb:0b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWzgmm4UpfjDaUszONb22rB1B9vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDMzI3Q0IwRDJFNDcyRTBDREU0M0I0QTZDMDg2MDZD
QjBFQjBGNTAeFw0yNDA0MTMxNjA4MjVaFw0yNTA0MTIxNjEzMjVaMDMxMTAvBgNV
BAMTKDExMEUxOUQyODAzRTVDMTRCRDBCNTY0QjFEQzE3NkM1OTBCNjJENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OwADFCqXG65daIr1tLNgLAdH
YLFWntCe0u0vATXgGU+xED/dBCQg+jbJkgQBAj3+LqISgU8aJKuvy5tg8vBDLyWQ
90VniydvpswlChOdjaRXpI/ab9kT8EiCCroMVrwDMzeDJJxQfbcA82LHOCpRCl1u
AoqAa6BeifPkG9l3LCDXWo2cDKBMdk5KjR4v3Rxt+Cd58nKGBrDecg2QkQT/YSsq
Ee0nqUD27UCVH8bOKa3+YTOTjuJXXUmo7ygmJyilPVxOiguFY/Qfpuh9+MFuRgvJ
qnASFGt7+Fqe5fc8qRoupkXMnuijARBoWog7nOjM45nnXe5Ll2ul5hwCpBLhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEQ4Z0oA+XBS9C1ZLHcF2xZC2LUcwHwYDVR0j
BBgwFoAUdcMnyw0uRy4M3kO0psCGBssOsPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWt6cG1SRm5XVWJ0MWNyajhkb3ZBUWZhb01vd0hmUmVvRE5wa3ZQVkx0
d2kvMS83NUMzMjdDQjBEMkU0NzJFMENERTQzQjRBNkMwODYwNkNCMEVCMEY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1QzMyN0NCMEQyRTQ3MkUw
Q0RFNDNCNEE2QzA4NjA2Q0IwRUIwRjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrenBtUkZuV1VidDFjcmo4ZG92QVFmYW9Nb3dIZlJlb0ROcGt2UFZMdHdpLzEv
MzEzNDMzMmUzMDJlMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM5
MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAI8AEzANBgkqhkiG9w0BAQsFAAOCAQEAdUJpAFUKLVtB
4MVtnzCLWh2nEaDyUATjkdnJZjtp/9PGuHZH277cVwKfzbBfC/nVCSGQz1xyggZQ
F+HVrEGrezyxxjdX+1/VOYi32BNxsYd2ORXVXtQpo8FhQZN+uiH8co0ov50+mTI4
d8j0I85k2eo+OrCe2qn3E7Ecz0Y+3rdXjU2o8LFyeBc1DPkr5UANU5sEj8CjL7DT
AXOPW0A93bQXQToD2i052pNRdclvZSI+ohPmGeANhdfE1/WeGxglxEswTjWqsKhC
hwek2CfFi7jr/cTFnCj/7nagl372FWyXEQSIn763kjRAi64E/qW8F09gj92bFlmj
+Fz9Zz+7Cw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org