Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/3139302e392e3131362e302f32322d3332203d3e20323731353930.roa
File:                     3139302e392e3131362e302f32322d3332203d3e20323731353930.roa (raw, json)
Hash identifier:          Hb+WVtWJuDCLAjPeF4kVErTRkIfkrapXpzrdK7MqdlU=
Subject key identifier:   B5:B5:76:D1:FF:D9:42:0C:DC:2D:5C:0A:14:32:A9:93:E5:7E:18:31
Certificate issuer:       /CN=123655A491B92F602833549B87EF8A0E5AFCE31A
Certificate serial:       3392F3E5D43B57291F84DF5097650C3437CAAA44
Authority key identifier: 12:36:55:A4:91:B9:2F:60:28:33:54:9B:87:EF:8A:0E:5A:FC:E3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/123655A491B92F602833549B87EF8A0E5AFCE31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/3139302e392e3131362e302f32322d3332203d3e20323731353930.roa
Signing time:             Wed 01 Feb 2023 19:48:02 +0000
ROA not before:           Wed 01 Feb 2023 19:43:02 +0000
ROA not after:            Wed 31 Jan 2024 19:48:02 +0000
asID:                     271590
IP address blocks:        190.9.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:f3:e5:d4:3b:57:29:1f:84:df:50:97:65:0c:34:37:ca:aa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123655A491B92F602833549B87EF8A0E5AFCE31A
        Validity
            Not Before: Feb  1 19:43:02 2023 GMT
            Not After : Jan 31 19:48:02 2024 GMT
        Subject: CN=B5B576D1FFD9420CDC2D5C0A1432A993E57E1831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:a9:f0:c4:be:7d:5a:9c:c7:92:a5:e5:ed:
                    26:d7:22:87:42:13:28:44:05:c5:17:0e:73:62:f6:
                    ed:5a:73:75:2e:a9:26:5c:38:7d:80:46:74:0c:4e:
                    0a:67:d1:60:3f:dd:bf:4d:f9:97:f3:39:a5:d0:87:
                    1d:f6:73:dd:e3:02:9b:31:61:38:ef:cf:91:e3:5a:
                    e6:e2:a1:03:4c:1c:ff:11:46:68:a9:7d:ae:89:13:
                    8e:63:cd:8c:2d:64:22:9c:2c:38:5c:4d:9f:4c:63:
                    b8:5e:b2:f6:d7:34:fb:05:b9:a2:55:98:12:51:bf:
                    9f:8b:07:1c:5e:95:a1:28:18:5f:e3:57:91:de:e8:
                    e8:64:76:56:a5:d0:be:3d:f7:69:78:8b:10:ba:2a:
                    29:93:f6:de:7f:85:32:e1:b5:41:5d:26:81:06:f0:
                    16:ad:cf:1a:bc:c9:4c:dc:7b:a2:92:ce:fe:c0:e0:
                    49:20:f4:af:71:25:2f:e4:77:6e:c2:44:97:aa:19:
                    1e:9b:cb:3b:d9:33:18:95:96:49:43:ef:a0:10:fb:
                    c5:3a:e6:f0:c1:50:1b:c7:1a:81:c9:d4:f6:9b:5a:
                    8e:90:40:84:81:c0:d0:46:c9:47:3f:69:f2:02:1e:
                    f3:f9:c5:31:01:b7:4b:90:5f:80:bf:81:11:68:80:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:76:D1:FF:D9:42:0C:DC:2D:5C:0A:14:32:A9:93:E5:7E:18:31
            X509v3 Authority Key Identifier:
                keyid:12:36:55:A4:91:B9:2F:60:28:33:54:9B:87:EF:8A:0E:5A:FC:E3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/123655A491B92F602833549B87EF8A0E5AFCE31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/123655A491B92F602833549B87EF8A0E5AFCE31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPk5sHmbt27woksfUn8CdNuumJhBZmRb5nBD8HVUDGQ/0/3139302e392e3131362e302f32322d3332203d3e20323731353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:6d:36:17:36:bc:6a:04:36:92:d4:f0:8c:33:27:28:3a:
         93:2c:42:ff:2d:c0:09:a5:0b:ec:06:52:90:fd:bf:d6:90:6c:
         b2:61:6c:43:20:ec:cb:80:48:1a:af:28:53:be:41:e1:da:bf:
         97:5b:9c:b0:13:8a:2a:69:26:36:02:af:2a:ae:8c:de:5f:92:
         65:7b:09:ae:f6:97:8f:02:c2:0b:1a:82:13:2b:1f:b5:9d:08:
         97:1e:58:11:8a:60:14:4b:1c:f2:22:45:24:c4:30:1b:e2:80:
         33:f8:b2:11:1a:f0:cc:1f:bc:e6:d8:d0:b8:d7:e6:fb:87:4b:
         ba:e8:30:e3:29:8e:56:b5:18:eb:f4:dd:8b:12:b9:40:28:8d:
         27:ac:ae:ae:b5:0c:7e:7e:47:b5:bf:91:02:23:eb:38:9a:7d:
         62:e4:ee:d2:9e:5e:a3:56:16:d0:35:de:ce:59:9f:f5:e7:7e:
         3a:a6:4e:38:ba:89:12:77:0b:90:fc:40:d2:36:64:bb:e6:6a:
         04:3f:c6:6c:f9:d1:ca:09:a3:df:a5:cf:31:21:fa:8c:80:ce:
         1b:f7:bd:80:fa:04:71:4f:53:a4:d0:e5:d4:e1:9a:0e:7d:ff:
         cb:aa:1e:9a:29:b5:08:58:05:bd:1c:96:99:e7:bc:96:de:ed:
         ed:df:1f:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM5Lz5dQ7VykfhN9Ql2UMNDfKqkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzNjU1QTQ5MUI5MkY2MDI4MzM1NDlCODdFRjhBMEU1
QUZDRTMxQTAeFw0yMzAyMDExOTQzMDJaFw0yNDAxMzExOTQ4MDJaMDMxMTAvBgNV
BAMTKEI1QjU3NkQxRkZEOTQyMENEQzJENUMwQTE0MzJBOTkzRTU3RTE4MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIanwxL59WpzHkqXl7SbXIodC
EyhEBcUXDnNi9u1ac3UuqSZcOH2ARnQMTgpn0WA/3b9N+ZfzOaXQhx32c93jApsx
YTjvz5HjWubioQNMHP8RRmipfa6JE45jzYwtZCKcLDhcTZ9MY7hesvbXNPsFuaJV
mBJRv5+LBxxelaEoGF/jV5He6Ohkdlal0L4992l4ixC6KimT9t5/hTLhtUFdJoEG
8Batzxq8yUzce6KSzv7A4Ekg9K9xJS/kd27CRJeqGR6byzvZMxiVlklD76AQ+8U6
5vDBUBvHGoHJ1PabWo6QQISBwNBGyUc/afICHvP5xTEBt0uQX4C/gRFogL2FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtbV20f/ZQgzcLVwKFDKpk+V+GDEwHwYDVR0j
BBgwFoAUEjZVpJG5L2AoM1Sbh++KDlr84xowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZQazVzSG1idDI3d29rc2ZVbjhDZE51dW1KaEJabVJiNW5CRDhIVlVE
R1EvMC8xMjM2NTVBNDkxQjkyRjYwMjgzMzU0OUI4N0VGOEEwRTVBRkNFMzFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMzY1NUE0OTFCOTJGNjAy
ODMzNTQ5Qjg3RUY4QTBFNUFGQ0UzMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2UGs1c0htYnQyN3dva3NmVW44Q2ROdXVtSmhCWm1SYjVuQkQ4SFZVREdRLzAv
MzEzOTMwMmUzOTJlMzEzMTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzUzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvgl0MA0GCSqGSIb3DQEBCwUAA4IBAQAtbW02Fza8
agQ2ktTwjDMnKDqTLEL/LcAJpQvsBlKQ/b/WkGyyYWxDIOzLgEgaryhTvkHh2r+X
W5ywE4oqaSY2Aq8qrozeX5Jlewmu9pePAsILGoITKx+1nQiXHlgRimAUSxzyIkUk
xDAb4oAz+LIRGvDMH7zm2NC41+b7h0u66DDjKY5WtRjr9N2LErlAKI0nrK6utQx+
fke1v5ECI+s4mn1i5O7Snl6jVhbQNd7OWZ/15346pk44uokSdwuQ/EDSNmS75moE
P8Zs+dHKCaPfpc8xIfqMgM4b972A+gRxT1Ok0OXU4ZoOff/Lqh6aKbUIWAW9HJaZ
57yW3u3t3x/m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org