Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231352e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          Nb1iGPJPiUKrSBJEfUlUcUo9FWUXT2CbKFfS7hACGwg=
Subject key identifier:   5F:04:04:07:CA:18:27:2B:62:CF:EF:54:F3:15:F4:D1:6C:ED:40:CF
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       3AE86A49C8557B62B405FCA76E0986CF169B14A3
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:27 +0000
ROA not before:           Tue 10 Oct 2023 13:52:27 +0000
ROA not after:            Tue 08 Oct 2024 13:57:27 +0000
asID:                     262808
IP address blocks:        191.253.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e8:6a:49:c8:55:7b:62:b4:05:fc:a7:6e:09:86:cf:16:9b:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:27 2023 GMT
            Not After : Oct  8 13:57:27 2024 GMT
        Subject: CN=5F040407CA18272B62CFEF54F315F4D16CED40CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:49:0e:44:32:31:d8:c4:d8:54:fa:c9:41:
                    34:91:60:b3:36:1e:61:ec:a8:a0:b7:53:cd:eb:2c:
                    e3:f3:c1:31:9f:a5:15:55:23:63:94:f9:da:98:a5:
                    6d:2e:8f:28:65:22:ce:d4:f1:46:d7:d0:07:af:a0:
                    37:92:23:4f:0f:d5:92:78:3d:37:ae:0c:e1:7f:cd:
                    97:73:07:8c:07:1a:c9:d7:14:68:9b:42:9b:f8:68:
                    1b:fb:e4:81:84:25:73:1f:7f:a1:cf:66:a7:f0:56:
                    8d:0e:b6:23:82:4b:cc:6d:0a:14:84:c2:06:8f:03:
                    ff:25:fc:79:28:8b:97:3f:54:b5:e1:31:b1:ca:1e:
                    c9:9f:94:e0:6e:9b:94:fc:8f:94:cd:3d:e2:f2:50:
                    6b:7d:0f:8d:e6:cf:e7:79:a1:f6:36:dd:9b:19:4c:
                    4c:68:f3:ad:3a:e8:b9:87:94:a1:01:37:88:1b:b0:
                    36:20:15:39:6a:39:73:8a:b1:d3:1a:a1:8e:8e:87:
                    a5:1b:37:b3:7b:84:18:fc:04:4d:3a:02:36:3f:0b:
                    9c:e6:af:ea:c2:77:81:33:bc:63:c0:ae:5e:cf:95:
                    5f:fe:16:80:75:8a:5f:ab:21:df:b0:30:74:45:38:
                    0b:b2:fc:f0:f0:98:30:09:db:13:ab:e4:f8:51:17:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:04:07:CA:18:27:2B:62:CF:EF:54:F3:15:F4:D1:6C:ED:40:CF
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f3:e5:12:52:4c:4d:ff:cf:3c:76:c2:1d:8a:92:32:46:0c:
         8c:20:7b:c7:42:e0:69:13:2a:40:74:6a:3f:10:3c:43:9c:84:
         60:7a:9b:f4:43:81:cf:96:a0:12:a1:68:2a:39:e1:aa:5b:98:
         56:39:0d:45:8e:ec:97:cc:67:19:c7:99:ae:f5:0c:f8:4d:a1:
         05:ee:27:95:71:de:ed:59:e1:dc:bd:02:20:b4:4f:61:6f:e3:
         3e:b0:03:4a:6d:5a:b0:3f:cb:12:f2:dd:5f:10:2a:08:ab:95:
         7b:d6:dc:25:e2:08:70:5b:94:8b:20:57:6a:65:67:7f:64:24:
         38:1b:51:a0:ad:eb:fc:11:e1:6f:ed:c3:99:11:83:d2:89:26:
         b2:79:8d:c6:8c:d6:b7:38:2a:ec:a5:a1:82:69:7d:66:39:68:
         1f:38:67:49:86:2d:b0:9f:dd:2c:78:04:e7:53:1c:dd:05:00:
         aa:97:73:d5:1c:76:78:ee:ea:aa:c4:39:ab:b4:af:e2:bb:ab:
         62:b5:8c:e0:89:ae:87:6e:4e:f1:d4:7c:f2:a7:d5:e5:95:7a:
         1c:96:85:9c:44:dd:10:ff:1e:e3:20:a9:0b:f0:39:af:09:ba:
         5d:fe:4c:f7:94:01:d7:3e:b4:d2:63:c9:bd:ed:7b:d8:18:30:
         0a:a3:0a:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOuhqSchVe2K0BfynbgmGzxabFKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMjdaFw0yNDEwMDgxMzU3MjdaMDMxMTAvBgNV
BAMTKDVGMDQwNDA3Q0ExODI3MkI2MkNGRUY1NEYzMTVGNEQxNkNFRDQwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8kkORDIx2MTYVPrJQTSRYLM2
HmHsqKC3U83rLOPzwTGfpRVVI2OU+dqYpW0ujyhlIs7U8UbX0AevoDeSI08P1ZJ4
PTeuDOF/zZdzB4wHGsnXFGibQpv4aBv75IGEJXMff6HPZqfwVo0OtiOCS8xtChSE
wgaPA/8l/Hkoi5c/VLXhMbHKHsmflOBum5T8j5TNPeLyUGt9D43mz+d5ofY23ZsZ
TExo86066LmHlKEBN4gbsDYgFTlqOXOKsdMaoY6Oh6UbN7N7hBj8BE06AjY/C5zm
r+rCd4EzvGPArl7PlV/+FoB1il+rId+wMHRFOAuy/PDwmDAJ2xOr5PhRF6b7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXwQEB8oYJytiz+9U8xX00WztQM8wHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/91zANBgkqhkiG9w0BAQsFAAOCAQEAKvPl
ElJMTf/PPHbCHYqSMkYMjCB7x0LgaRMqQHRqPxA8Q5yEYHqb9EOBz5agEqFoKjnh
qluYVjkNRY7sl8xnGceZrvUM+E2hBe4nlXHe7Vnh3L0CILRPYW/jPrADSm1asD/L
EvLdXxAqCKuVe9bcJeIIcFuUiyBXamVnf2QkOBtRoK3r/BHhb+3DmRGD0okmsnmN
xozWtzgq7KWhgml9ZjloHzhnSYYtsJ/dLHgE51Mc3QUAqpdz1Rx2eO7qqsQ5q7Sv
4rurYrWM4Imuh25O8dR88qfV5ZV6HJaFnETdEP8e4yCpC/A5rwm6Xf5M95QB1z60
0mPJve172BgwCqMK3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org