Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aoojw3AbUF3fQuaDzifBCQ2tWBcAY6fmLSQnjYUUnnDU/0/3139302e382e31362e302f32322d3234203d3e20323730373637.roa
File:                     3139302e382e31362e302f32322d3234203d3e20323730373637.roa (raw, json)
Hash identifier:          PxbIIl2GdNf57HM7yQwK+WGxabxbhyoL23avGaFbe94=
Subject key identifier:   0F:66:35:3C:42:41:65:B1:07:3B:C9:60:5A:C3:8E:5D:F1:BC:6F:3C
Certificate issuer:       /CN=5806B19F384BBA30AE37930526FAA09131DC9165
Certificate serial:       29F95D69D64CEEB3D894E0BE525ABCA6E1B23717
Authority key identifier: 58:06:B1:9F:38:4B:BA:30:AE:37:93:05:26:FA:A0:91:31:DC:91:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5806B19F384BBA30AE37930526FAA09131DC9165.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aoojw3AbUF3fQuaDzifBCQ2tWBcAY6fmLSQnjYUUnnDU/0/3139302e382e31362e302f32322d3234203d3e20323730373637.roa
Signing time:             Thu 01 Dec 2022 17:19:32 +0000
ROA not before:           Thu 01 Dec 2022 17:14:32 +0000
ROA not after:            Thu 30 Nov 2023 17:19:32 +0000
asID:                     270767
IP address blocks:        190.8.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:5d:69:d6:4c:ee:b3:d8:94:e0:be:52:5a:bc:a6:e1:b2:37:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806B19F384BBA30AE37930526FAA09131DC9165
        Validity
            Not Before: Dec  1 17:14:32 2022 GMT
            Not After : Nov 30 17:19:32 2023 GMT
        Subject: CN=0F66353C424165B1073BC9605AC38E5DF1BC6F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:70:e0:52:48:b0:14:db:88:51:a5:58:a4:
                    0c:fe:e7:20:68:37:e6:09:9d:9e:65:7e:3d:80:95:
                    29:89:3c:54:bb:da:6f:30:91:37:86:08:f6:8e:ad:
                    34:64:73:45:2d:2f:c9:93:b5:f1:92:4d:a6:2b:4f:
                    b5:99:e9:ce:01:1f:1c:fb:6f:a4:2b:a2:f9:a6:d3:
                    3c:0b:c7:42:42:0c:6e:2f:c4:d4:30:6b:93:1e:30:
                    3e:b6:99:f7:71:2d:bd:c5:f8:86:23:f7:63:9c:66:
                    7b:9a:c1:d4:80:31:f8:b7:59:94:e3:01:27:07:34:
                    21:f0:b2:25:c6:7a:0e:aa:ed:7f:8b:06:54:b4:4c:
                    1d:97:d7:dc:4f:a7:5c:16:ee:51:f5:c8:b2:ea:01:
                    14:bd:d5:6e:b7:74:16:18:65:82:53:26:cb:bb:91:
                    80:82:46:17:be:95:ae:67:df:91:9d:f7:0a:69:d1:
                    a0:2e:a7:3c:eb:19:0c:79:2d:2a:f8:23:f8:f4:ef:
                    29:2a:c2:60:40:f7:8d:1d:20:4f:0d:71:07:e3:db:
                    22:b4:40:ca:84:9f:44:23:51:a9:85:1d:16:ad:6b:
                    66:83:9e:93:89:0a:9d:92:30:84:6f:1c:33:f0:de:
                    d3:5f:7d:77:7a:27:c1:50:ae:41:7d:0c:f4:9f:35:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:35:3C:42:41:65:B1:07:3B:C9:60:5A:C3:8E:5D:F1:BC:6F:3C
            X509v3 Authority Key Identifier:
                keyid:58:06:B1:9F:38:4B:BA:30:AE:37:93:05:26:FA:A0:91:31:DC:91:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aoojw3AbUF3fQuaDzifBCQ2tWBcAY6fmLSQnjYUUnnDU/0/5806B19F384BBA30AE37930526FAA09131DC9165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5806B19F384BBA30AE37930526FAA09131DC9165.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aoojw3AbUF3fQuaDzifBCQ2tWBcAY6fmLSQnjYUUnnDU/0/3139302e382e31362e302f32322d3234203d3e20323730373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:09:1b:76:04:e1:cc:27:f5:7b:40:90:37:70:9b:a8:fe:37:
         06:f7:c9:f1:01:43:57:e2:a2:ae:a5:e5:34:4f:64:70:8f:d4:
         56:24:54:81:ba:dd:7c:6b:20:96:a0:b1:88:7f:9e:10:4e:a1:
         38:10:81:e2:09:a5:fa:29:6e:84:71:39:c6:48:ae:b9:16:4d:
         aa:35:ea:ae:ae:47:39:9b:62:b5:9d:cf:4c:c3:56:7d:db:6a:
         26:92:54:16:0f:1f:95:01:0d:5b:90:2b:2d:e3:08:45:ea:e9:
         35:e3:b8:9b:bd:b5:09:7f:f0:f7:c7:98:7f:71:7d:c2:98:34:
         b1:87:2c:a3:06:96:39:08:16:47:a9:f0:85:07:8c:bd:26:48:
         a0:45:1a:6f:80:74:49:78:ad:1d:2c:21:eb:e7:8a:de:25:4a:
         22:f1:60:d5:f7:91:b6:d6:7f:d2:b8:56:95:8c:41:78:a1:5f:
         1d:b4:7d:12:bf:ca:4d:a0:b1:a1:59:b4:ea:89:b6:f6:06:6c:
         7a:a7:49:3a:e3:5d:8e:7e:c3:da:e4:b0:45:5a:ac:d9:6c:8e:
         d5:4d:98:8a:49:6a:4f:3f:2e:31:ab:33:78:d7:68:a7:dd:70:
         3c:cd:f2:26:a8:16:b1:9c:6f:2c:05:f4:6e:6e:21:6d:b7:db:
         a3:79:15:e1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKfldadZM7rPYlOC+Ulq8puGyNxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNkIxOUYzODRCQkEzMEFFMzc5MzA1MjZGQUEwOTEz
MURDOTE2NTAeFw0yMjEyMDExNzE0MzJaFw0yMzExMzAxNzE5MzJaMDMxMTAvBgNV
BAMTKDBGNjYzNTNDNDI0MTY1QjEwNzNCQzk2MDVBQzM4RTVERjFCQzZGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7HDgUkiwFNuIUaVYpAz+5yBo
N+YJnZ5lfj2AlSmJPFS72m8wkTeGCPaOrTRkc0UtL8mTtfGSTaYrT7WZ6c4BHxz7
b6Qrovmm0zwLx0JCDG4vxNQwa5MeMD62mfdxLb3F+IYj92OcZnuawdSAMfi3WZTj
AScHNCHwsiXGeg6q7X+LBlS0TB2X19xPp1wW7lH1yLLqARS91W63dBYYZYJTJsu7
kYCCRhe+la5n35Gd9wpp0aAupzzrGQx5LSr4I/j07ykqwmBA940dIE8NcQfj2yK0
QMqEn0QjUamFHRata2aDnpOJCp2SMIRvHDPw3tNffXd6J8FQrkF9DPSfNfQRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUD2Y1PEJBZbEHO8lgWsOOXfG8bzwwHwYDVR0j
BBgwFoAUWAaxnzhLujCuN5MFJvqgkTHckWUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9vanczQWJVRjNmUXVhRHppZkJDUTJ0V0JjQVk2Zm1MU1FuallVVW5u
RFUvMC81ODA2QjE5RjM4NEJCQTMwQUUzNzkzMDUyNkZBQTA5MTMxREM5MTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4MDZCMTlGMzg0QkJBMzBB
RTM3OTMwNTI2RkFBMDkxMzFEQzkxNjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Fvb2p3M0FiVUYzZlF1YUR6aWZCQ1EydFdCY0FZNmZtTFNRbmpZVVVubkRVLzAv
MzEzOTMwMmUzODJlMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDM3
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr4IEDANBgkqhkiG9w0BAQsFAAOCAQEAFwkbdgThzCf1
e0CQN3CbqP43BvfJ8QFDV+KirqXlNE9kcI/UViRUgbrdfGsglqCxiH+eEE6hOBCB
4gml+iluhHE5xkiuuRZNqjXqrq5HOZtitZ3PTMNWfdtqJpJUFg8flQENW5ArLeMI
RerpNeO4m721CX/w98eYf3F9wpg0sYcsowaWOQgWR6nwhQeMvSZIoEUab4B0SXit
HSwh6+eK3iVKIvFg1feRttZ/0rhWlYxBeKFfHbR9Er/KTaCxoVm06om29gZseqdJ
OuNdjn7D2uSwRVqs2WyO1U2YiklqTz8uMaszeNdop91wPM3yJqgWsZxvLAX0bm4h
bbfbo3kV4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org