Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234392e302f32342d3234203d3e20323633343231.roa
File:                     3137392e3139312e3234392e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          rhy/PqI6hdIkdXyNBiG4YKLCFr9JpVS4midTp1KYR8g=
Subject key identifier:   8B:BD:0D:32:A6:73:37:BD:72:8B:EC:64:B4:F4:CB:98:3C:38:40:70
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       7428EFF416900736982A1F1E04CA8066EF532E38
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234392e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:50 +0000
ROA not before:           Thu 13 Apr 2023 20:16:50 +0000
ROA not after:            Thu 11 Apr 2024 20:21:50 +0000
asID:                     263421
IP address blocks:        179.191.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:28:ef:f4:16:90:07:36:98:2a:1f:1e:04:ca:80:66:ef:53:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:50 2023 GMT
            Not After : Apr 11 20:21:50 2024 GMT
        Subject: CN=8BBD0D32A67337BD728BEC64B4F4CB983C384070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:c5:b2:80:af:0c:68:05:b9:e0:26:2e:d8:
                    77:29:3a:e4:a8:f8:62:98:ed:8d:fe:7f:99:47:0a:
                    88:50:eb:77:9a:a3:b3:2e:1e:dd:19:10:33:42:91:
                    72:88:8a:26:c5:77:52:82:a4:6b:0d:bb:cf:10:e9:
                    dd:c4:cb:c2:95:b1:1a:09:fc:a4:53:2b:1e:17:8a:
                    23:44:5d:1e:2d:d3:0f:a3:c3:f7:af:10:3d:99:b9:
                    0d:94:7d:4e:f4:c2:e2:51:72:0a:26:b7:06:0a:79:
                    fe:a7:52:59:5d:b7:a7:c5:f7:71:1f:cd:7c:85:39:
                    45:b1:45:d5:ab:a2:f4:74:42:f1:86:20:04:e5:5c:
                    a3:be:f4:7f:3d:ff:9d:b0:d9:8d:95:93:fe:61:de:
                    51:40:27:04:af:94:33:cc:4c:9d:f9:0c:3f:3d:91:
                    69:cf:44:b7:b6:d6:be:95:42:3a:1d:c9:cf:ae:2e:
                    00:cc:dc:be:1b:fc:d4:02:13:b5:82:32:db:49:f3:
                    4c:5a:5d:86:c7:c7:78:fa:6e:46:7b:93:56:0d:f2:
                    36:d8:e5:ca:44:5b:d7:aa:d6:be:b6:8a:23:f2:2f:
                    59:79:3c:cd:16:ab:4b:c8:8d:ca:dc:0b:01:c1:99:
                    9b:78:79:a0:84:6b:1b:77:75:3e:f4:98:c8:e0:d8:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BD:0D:32:A6:73:37:BD:72:8B:EC:64:B4:F4:CB:98:3C:38:40:70
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234392e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:a2:5a:eb:ca:f6:78:bc:a6:37:a4:8e:9b:63:53:96:5d:
         49:0b:86:dc:6e:49:8b:3c:eb:31:ca:5c:dd:49:5e:cf:47:d5:
         05:32:8f:68:12:e3:8b:71:9c:5d:3c:24:e4:9b:1a:bd:f1:81:
         7f:41:f7:f4:8c:6a:c9:3f:3b:fb:34:50:05:71:b4:a9:c2:9a:
         62:5d:bb:a0:e4:ef:c9:0f:88:16:fc:47:3e:53:cc:2e:4d:68:
         fa:c7:2b:40:4e:28:ef:80:c1:bd:8e:5f:3f:11:1a:cd:37:32:
         2d:4a:32:96:03:0d:63:b8:79:4e:a6:c2:02:f6:95:b4:46:cd:
         06:97:da:32:74:be:e5:8b:8c:04:e7:51:c8:55:d7:8c:bf:f5:
         a4:0c:ca:a3:71:9f:44:56:c0:f8:b5:ad:5c:4c:b0:d7:93:e7:
         ee:f3:71:fe:a2:fa:c7:c5:4e:e9:ce:2a:ef:df:00:a0:d4:00:
         5d:7e:28:86:b8:56:f9:54:52:23:8e:02:aa:b1:0b:34:f5:6a:
         d0:ef:d6:c1:f8:ee:d1:97:a7:96:7e:10:ca:62:2c:1f:37:30:
         72:73:ec:03:64:ad:c4:76:25:7c:b7:df:44:ec:b5:ff:b6:54:
         d6:98:c6:b1:e1:ac:e0:a6:bb:ed:f0:37:30:b7:a9:71:a5:6a:
         b1:93:b2:8f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdCjv9BaQBzaYKh8eBMqAZu9TLjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExMTk0QkQ4NDcyMkZEMjUyQzc5RjMzMDdBN0MzQUNG
REM4NDc4MjAeFw0yMzA0MTMyMDE2NTBaFw0yNDA0MTEyMDIxNTBaMDMxMTAvBgNV
BAMTKDhCQkQwRDMyQTY3MzM3QkQ3MjhCRUM2NEI0RjRDQjk4M0MzODQwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDju8WygK8MaAW54CYu2HcpOuSo
+GKY7Y3+f5lHCohQ63eao7MuHt0ZEDNCkXKIiibFd1KCpGsNu88Q6d3Ey8KVsRoJ
/KRTKx4XiiNEXR4t0w+jw/evED2ZuQ2UfU70wuJRcgomtwYKef6nUlldt6fF93Ef
zXyFOUWxRdWrovR0QvGGIATlXKO+9H89/52w2Y2Vk/5h3lFAJwSvlDPMTJ35DD89
kWnPRLe21r6VQjodyc+uLgDM3L4b/NQCE7WCMttJ80xaXYbHx3j6bkZ7k1YN8jbY
5cpEW9eq1r62iiPyL1l5PM0Wq0vIjcrcCwHBmZt4eaCEaxt3dT70mMjg2P05AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUi70NMqZzN71yi+xktPTLmDw4QHAwHwYDVR0j
BBgwFoAUQRGUvYRyL9JSx58zB6fDrP3IR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMC80MTExOTRCRDg0NzIyRkQyNTJDNzlGMzMwN0E3QzNBQ0ZEQzg0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxMTE5NEJEODQ3MjJGRDI1
MkM3OUYzMzA3QTdDM0FDRkRDODQ3ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv
MzEzNzM5MmUzMTM5MzEyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALO/+TANBgkqhkiG9w0BAQsFAAOCAQEAHNai
WuvK9ni8pjekjptjU5ZdSQuG3G5JizzrMcpc3Ulez0fVBTKPaBLji3GcXTwk5Jsa
vfGBf0H39IxqyT87+zRQBXG0qcKaYl27oOTvyQ+IFvxHPlPMLk1o+scrQE4o74DB
vY5fPxEazTcyLUoylgMNY7h5TqbCAvaVtEbNBpfaMnS+5YuMBOdRyFXXjL/1pAzK
o3GfRFbA+LWtXEyw15Pn7vNx/qL6x8VO6c4q798AoNQAXX4ohrhW+VRSI44CqrEL
NPVq0O/Wwfju0Zenln4QymIsHzcwcnPsA2StxHYlfLffROy1/7ZU1pjGseGs4Ka7
7fA3MLepcaVqsZOyjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org