Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232302e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3232302e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          2IDC6RBcvuJ8AQKR/KfK2onFdxSpt9mziGegmTiLG7U=
Subject key identifier:   13:75:59:04:44:80:A3:80:36:0A:02:C1:60:16:64:68:BE:66:F2:83
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       4211EA45B50A85949F2F25F0EC01CEF04B97912F
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232302e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:31 +0000
ROA not before:           Tue 10 Oct 2023 13:52:31 +0000
ROA not after:            Tue 08 Oct 2024 13:57:31 +0000
asID:                     262808
IP address blocks:        191.253.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:11:ea:45:b5:0a:85:94:9f:2f:25:f0:ec:01:ce:f0:4b:97:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:31 2023 GMT
            Not After : Oct  8 13:57:31 2024 GMT
        Subject: CN=137559044480A380360A02C160166468BE66F283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:bc:f2:cd:ea:ba:d3:9b:11:b0:fa:13:7d:
                    45:18:e4:46:ec:e7:89:a4:98:ac:08:bb:dc:77:c0:
                    62:36:4c:96:0b:ce:e5:82:9b:9b:4c:0b:b7:2c:06:
                    22:90:23:6d:86:cb:81:8b:7d:76:2d:28:73:4a:b4:
                    6c:10:a9:c3:e8:28:6d:13:17:da:0c:38:00:a9:b3:
                    02:a1:3c:df:ea:4a:01:c6:02:d9:1e:38:bf:2a:b7:
                    ff:eb:5e:48:1e:9d:12:32:04:99:3a:a9:9c:50:d6:
                    14:0f:80:c4:12:da:c8:ab:f1:c1:a3:91:a3:36:b1:
                    a5:c6:18:dc:01:ad:4d:58:f7:71:da:6d:fa:1b:14:
                    9d:59:68:a6:7a:52:c4:96:b0:21:b1:79:f7:fe:b9:
                    8a:c6:16:76:00:aa:a7:78:33:ff:c6:61:39:a1:c3:
                    93:3e:c7:30:30:d6:9e:60:99:4a:e6:f7:00:2a:05:
                    5f:5d:99:b0:18:3f:d2:e4:d7:4e:ca:34:4a:27:f5:
                    dd:d8:24:a6:9c:94:ef:15:0c:ab:18:9e:7f:67:fd:
                    9a:ca:31:62:f7:1a:44:49:ad:58:8b:1d:91:05:4e:
                    87:60:7e:b6:20:fe:8a:b3:9e:20:62:c6:07:19:37:
                    c1:f0:10:5c:72:bf:e1:de:a8:29:07:63:90:23:e1:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:59:04:44:80:A3:80:36:0A:02:C1:60:16:64:68:BE:66:F2:83
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232302e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:d9:e6:30:97:a9:c3:ee:70:44:78:0f:ea:bc:be:13:f7:
         a9:79:12:24:2d:a4:f7:21:84:d4:3e:07:5b:c8:93:f2:ba:36:
         e3:8c:a4:b7:8a:38:7b:2a:83:90:7f:bc:7e:47:10:5b:f2:07:
         27:63:b4:32:e8:dd:59:98:af:f5:93:25:6e:a5:3b:32:a6:4f:
         33:f6:1c:31:94:a7:8a:a7:d3:87:0a:56:67:11:c1:a6:a2:cd:
         f2:54:15:e2:0e:aa:c9:ba:18:b8:ef:69:0f:84:9b:40:85:30:
         45:d2:26:d0:40:8e:64:0d:19:be:08:cb:02:3f:19:88:02:d5:
         62:09:f9:77:a4:b4:11:0f:91:66:9d:6e:35:be:bd:ff:19:f6:
         71:2b:54:9c:24:6e:a3:a9:fc:8b:c2:05:32:da:1d:49:85:dc:
         aa:cb:f0:e4:fb:bd:9d:87:73:70:ef:37:4f:49:92:33:a1:af:
         49:d4:0b:8d:ec:fb:68:15:fa:29:77:21:c9:9a:d1:8e:d1:fe:
         4f:f2:83:1d:3b:10:ac:25:12:04:bf:04:2d:8a:04:d1:82:0c:
         db:e6:52:8a:b1:a7:c9:75:9a:4f:61:56:fc:a4:43:3e:06:8e:
         9b:41:81:80:83:af:50:ee:89:16:d1:5d:2c:9a:95:25:45:ee:
         fd:69:39:23
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQhHqRbUKhZSfLyXw7AHO8EuXkS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMzFaFw0yNDEwMDgxMzU3MzFaMDMxMTAvBgNV
BAMTKDEzNzU1OTA0NDQ4MEEzODAzNjBBMDJDMTYwMTY2NDY4QkU2NkYyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmrzyzeq605sRsPoTfUUY5Ebs
54mkmKwIu9x3wGI2TJYLzuWCm5tMC7csBiKQI22Gy4GLfXYtKHNKtGwQqcPoKG0T
F9oMOACpswKhPN/qSgHGAtkeOL8qt//rXkgenRIyBJk6qZxQ1hQPgMQS2sir8cGj
kaM2saXGGNwBrU1Y93HabfobFJ1ZaKZ6UsSWsCGxeff+uYrGFnYAqqd4M//GYTmh
w5M+xzAw1p5gmUrm9wAqBV9dmbAYP9Lk107KNEon9d3YJKaclO8VDKsYnn9n/ZrK
MWL3GkRJrViLHZEFTodgfrYg/oqzniBixgcZN8HwEFxyv+HeqCkHY5Aj4eiVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUE3VZBESAo4A2CgLBYBZkaL5m8oMwHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/93DANBgkqhkiG9w0BAQsFAAOCAQEAa+3Z
5jCXqcPucER4D+q8vhP3qXkSJC2k9yGE1D4HW8iT8ro244ykt4o4eyqDkH+8fkcQ
W/IHJ2O0MujdWZiv9ZMlbqU7MqZPM/YcMZSniqfThwpWZxHBpqLN8lQV4g6qyboY
uO9pD4SbQIUwRdIm0ECOZA0ZvgjLAj8ZiALVYgn5d6S0EQ+RZp1uNb69/xn2cStU
nCRuo6n8i8IFMtodSYXcqsvw5Pu9nYdzcO83T0mSM6GvSdQLjez7aBX6KXchyZrR
jtH+T/KDHTsQrCUSBL8ELYoE0YIM2+ZSirGnyXWaT2FW/KRDPgaOm0GBgIOvUO6J
FtFdLJqVJUXu/Wk5Iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org