Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa (raw, json)
Hash identifier:          ItxAVY5zFdhw6hlyTVFSJp68TR4TaECfMrlykuSHIAk=
Subject key identifier:   25:29:C3:A0:22:68:76:7F:60:31:BB:15:52:B7:01:35:4C:78:A9:41
Certificate issuer:       /CN=CA298D59E7C66D747401ACF553288EF82DA95796
Certificate serial:       1BD30EBED16CA279A3BEEAA4AD21BF295546797E
Authority key identifier: CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa
Signing time:             Thu 07 Mar 2024 13:50:56 +0000
ROA not before:           Thu 07 Mar 2024 13:45:56 +0000
ROA not after:            Thu 06 Mar 2025 13:50:56 +0000
asID:                     272753
IP address blocks:        187.109.112.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d3:0e:be:d1:6c:a2:79:a3:be:ea:a4:ad:21:bf:29:55:46:79:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Validity
            Not Before: Mar  7 13:45:56 2024 GMT
            Not After : Mar  6 13:50:56 2025 GMT
        Subject: CN=2529C3A02268767F6031BB1552B701354C78A941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:48:fb:72:4a:ec:02:f4:3c:88:5d:a0:e6:99:
                    8f:40:9e:85:92:9b:8b:c2:e4:de:b8:cd:dd:35:9b:
                    c0:22:c4:73:4a:18:41:67:cb:38:46:62:2b:18:16:
                    8d:ff:ff:4b:95:40:f7:c6:5c:1e:98:80:b0:eb:21:
                    4d:62:61:a8:fc:d7:3d:8e:3e:4e:a5:65:c3:37:71:
                    5b:94:77:74:71:55:ee:fb:74:b9:ce:c1:a1:31:73:
                    7d:81:d9:47:99:91:db:7b:b4:55:24:40:aa:af:20:
                    2c:9e:1d:10:76:3f:7b:84:a9:34:69:63:69:a1:22:
                    70:6e:01:97:aa:6b:f7:42:49:24:43:04:a5:ed:cb:
                    52:9f:0e:26:c1:66:68:1b:69:71:00:af:b3:e8:88:
                    46:c5:98:44:e7:ce:33:2a:f1:bc:20:65:ae:d5:60:
                    b3:ce:b1:6a:11:72:56:00:8c:b6:ac:4c:be:2c:a5:
                    21:2f:f2:7e:50:91:fc:bc:4a:fd:27:62:81:18:11:
                    ed:7e:39:39:f9:6a:49:bc:c5:67:37:99:89:a0:cc:
                    e3:54:41:cc:02:70:d6:c8:c0:ec:67:6a:26:ee:c3:
                    d1:43:b0:57:0d:0c:5d:36:1b:94:1b:a6:75:a7:ca:
                    e7:39:9d:b9:21:3a:82:02:6b:c7:d8:1d:cb:bc:c8:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:C3:A0:22:68:76:7F:60:31:BB:15:52:B7:01:35:4C:78:A9:41
            X509v3 Authority Key Identifier:
                keyid:CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:83:a3:e5:a6:5b:45:63:c7:0b:8c:b3:f8:13:10:0e:72:
         51:67:b1:dd:7e:b4:e0:20:cc:b3:5a:61:b4:63:84:78:8d:b6:
         a4:09:08:13:90:08:16:92:3e:81:bf:7f:cd:b4:de:20:f7:7e:
         99:3b:3b:8a:45:9a:33:94:17:bf:78:2e:f7:c2:0d:19:34:0d:
         62:05:d8:79:44:d6:ab:ab:23:b4:ca:c0:ee:35:f8:e8:12:b1:
         9f:fb:04:e7:3e:08:52:c0:7a:36:06:46:f7:b0:52:24:17:04:
         d3:2b:f4:cf:71:02:d7:e8:a2:bc:c2:a4:12:b0:98:41:01:a2:
         f3:ef:81:f2:e9:15:ef:83:85:be:9c:f1:ca:46:d6:40:a7:e2:
         0d:60:44:78:90:f0:2c:26:24:53:fd:5b:c6:2c:f3:71:a8:24:
         b1:b6:ec:76:3f:50:93:33:7b:a0:11:c0:11:67:a2:b5:5c:0e:
         ee:da:b8:d3:ab:4c:94:8f:b7:bc:c4:00:9d:a2:c8:62:e6:ca:
         b5:45:dd:cc:fd:a5:6b:70:9c:6d:bd:ea:0d:09:05:e0:33:39:
         ed:2b:42:d5:40:dd:59:13:dc:16:3d:f3:09:71:a5:02:d9:be:
         78:22:5d:ea:fc:83:66:df:19:e1:0e:b4:c9:b8:e7:6c:21:08:
         99:f5:0c:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG9MOvtFsonmjvuqkrSG/KVVGeX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyOThENTlFN0M2NkQ3NDc0MDFBQ0Y1NTMyODhFRjgy
REE5NTc5NjAeFw0yNDAzMDcxMzQ1NTZaFw0yNTAzMDYxMzUwNTZaMDMxMTAvBgNV
BAMTKDI1MjlDM0EwMjI2ODc2N0Y2MDMxQkIxNTUyQjcwMTM1NEM3OEE5NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzSPtySuwC9DyIXaDmmY9AnoWS
m4vC5N64zd01m8AixHNKGEFnyzhGYisYFo3//0uVQPfGXB6YgLDrIU1iYaj81z2O
Pk6lZcM3cVuUd3RxVe77dLnOwaExc32B2UeZkdt7tFUkQKqvICyeHRB2P3uEqTRp
Y2mhInBuAZeqa/dCSSRDBKXty1KfDibBZmgbaXEAr7PoiEbFmETnzjMq8bwgZa7V
YLPOsWoRclYAjLasTL4spSEv8n5Qkfy8Sv0nYoEYEe1+OTn5akm8xWc3mYmgzONU
QcwCcNbIwOxnaibuw9FDsFcNDF02G5QbpnWnyuc5nbkhOoICa8fYHcu8yDsZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJSnDoCJodn9gMbsVUrcBNUx4qUEwHwYDVR0j
BBgwFoAUyimNWefGbXR0Aaz1UyiO+C2pV5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlq
RmIvMC9DQTI5OEQ1OUU3QzY2RDc0NzQwMUFDRjU1MzI4OEVGODJEQTk1Nzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMjk4RDU5RTdDNjZENzQ3
NDAxQUNGNTUzMjg4RUY4MkRBOTU3OTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzR0dnS1cxTHJOUGdzTXhLRHBHU1d4aTZzTG92R2g2Ymtkb283VTlZakZiLzAv
MzEzODM3MmUzMTMwMzkyZTMxMzEzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczMjM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbttcDANBgkqhkiG9w0BAQsFAAOCAQEAN7yD
o+WmW0VjxwuMs/gTEA5yUWex3X604CDMs1phtGOEeI22pAkIE5AIFpI+gb9/zbTe
IPd+mTs7ikWaM5QXv3gu98INGTQNYgXYeUTWq6sjtMrA7jX46BKxn/sE5z4IUsB6
NgZG97BSJBcE0yv0z3EC1+iivMKkErCYQQGi8++B8ukV74OFvpzxykbWQKfiDWBE
eJDwLCYkU/1bxizzcagksbbsdj9QkzN7oBHAEWeitVwO7tq406tMlI+3vMQAnaLI
YubKtUXdzP2la3Ccbb3qDQkF4DM57StC1UDdWRPcFj3zCXGlAtm+eCJd6vyDZt8Z
4Q60ybjnbCEImfUMyg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org