Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa
File:                     3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          I4kL5iXDEKg65c5/LwL6zJkRDUZoS1eMjdxuulxCYtM=
Subject key identifier:   6F:4C:71:AD:39:26:1E:71:31:AA:BE:38:B2:A9:8A:E7:3E:15:30:7E
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       63AB42CEB82101C5B99201227182EFB93854963D
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa
Signing time:             Mon 15 Jan 2024 17:31:47 +0000
ROA not before:           Mon 15 Jan 2024 17:26:47 +0000
ROA not after:            Mon 13 Jan 2025 17:31:47 +0000
asID:                     268323
IP address blocks:        192.141.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:42:ce:b8:21:01:c5:b9:92:01:22:71:82:ef:b9:38:54:96:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Jan 15 17:26:47 2024 GMT
            Not After : Jan 13 17:31:47 2025 GMT
        Subject: CN=6F4C71AD39261E7131AABE38B2A98AE73E15307E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:e5:d1:47:a0:ee:10:a4:e6:c7:d7:ce:76:
                    c2:07:e4:cc:e2:76:f9:2e:20:be:66:0f:37:f3:35:
                    0f:fc:3b:49:7c:b6:19:0c:45:17:3a:aa:89:5e:6b:
                    81:3a:74:ec:b5:19:f2:7b:5c:63:31:e9:e0:1f:d3:
                    7b:e9:3a:9e:3a:1e:f9:32:46:9c:f6:b4:dd:68:10:
                    3e:54:79:37:7c:02:d3:f8:db:ec:59:7f:af:9c:a8:
                    bb:2c:8c:f2:1d:2b:3d:74:98:0e:6a:7c:e3:a8:68:
                    78:05:03:8b:81:14:01:97:c8:35:f3:fc:55:d6:a8:
                    5a:86:d3:f7:12:8c:68:48:d0:38:f6:81:a5:a5:f9:
                    a6:1e:ee:e5:e9:85:4e:36:46:d7:51:fb:27:9e:b7:
                    16:f4:6f:3e:ce:1d:77:ff:18:f1:11:31:e8:7e:12:
                    a3:b2:4f:2d:9b:ce:9c:bb:d5:5c:9e:18:58:6e:9f:
                    bc:ba:6c:21:06:27:f1:22:78:53:14:32:0e:b5:1c:
                    54:66:29:ec:e2:55:fe:92:0b:a4:d2:03:34:9f:15:
                    8f:77:2f:db:b8:5d:d1:81:a7:ad:5c:55:b2:28:f8:
                    6c:ea:30:f1:17:16:97:4f:3f:1c:ab:d5:db:11:38:
                    99:db:3b:cf:d8:07:a4:f4:1d:b5:97:aa:a5:a3:99:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:71:AD:39:26:1E:71:31:AA:BE:38:B2:A9:8A:E7:3E:15:30:7E
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:f3:d0:a6:57:87:32:00:2d:1a:bc:4e:c4:04:0c:c5:9c:
         20:da:fd:45:c3:5d:63:57:5a:0f:a8:a6:ff:05:a5:5b:f7:5a:
         cf:a1:5f:4b:f4:3c:f2:25:69:fe:33:84:ec:e9:bf:d1:fb:31:
         45:cd:7c:0b:fb:0d:0a:fd:7a:55:97:7a:52:c7:60:76:63:d7:
         8c:b8:33:99:ca:f2:75:6c:09:28:54:d6:d3:62:99:a4:10:49:
         d8:0b:8c:3b:05:76:94:22:f7:f8:e0:0b:28:4d:f1:a1:81:01:
         09:6f:6d:10:f5:f4:61:e1:d5:dc:30:96:f7:c1:8c:6f:31:60:
         f7:ab:04:17:a6:b1:0b:85:41:10:55:95:c7:59:0a:e5:14:a8:
         c4:ed:49:98:b3:65:d3:86:fc:07:22:a8:ee:7c:fc:43:86:ac:
         66:48:59:39:6b:56:51:cc:f7:99:5c:aa:b8:2b:d1:9a:98:b8:
         52:33:ad:18:19:d3:28:af:b5:23:d2:7e:6d:af:a7:58:4d:29:
         a9:a1:ba:dc:2d:bb:27:69:e2:59:6c:1e:22:87:fd:11:b6:45:
         18:ae:37:27:44:e3:7a:e8:a9:32:c7:8a:40:b4:46:2a:a1:07:
         cf:c7:6b:a5:61:c3:24:42:16:3c:ca:67:24:eb:f5:f6:6f:32:
         0d:68:af:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY6tCzrghAcW5kgEicYLvuThUlj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBREFBODY2MTRGNkU0QzNCMTBGNDhEOUFCRDUwMzc4
OTYyRDI5NTAeFw0yNDAxMTUxNzI2NDdaFw0yNTAxMTMxNzMxNDdaMDMxMTAvBgNV
BAMTKDZGNEM3MUFEMzkyNjFFNzEzMUFBQkUzOEIyQTk4QUU3M0UxNTMwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1OXRR6DuEKTmx9fOdsIH5Mzi
dvkuIL5mDzfzNQ/8O0l8thkMRRc6qolea4E6dOy1GfJ7XGMx6eAf03vpOp46Hvky
Rpz2tN1oED5UeTd8AtP42+xZf6+cqLssjPIdKz10mA5qfOOoaHgFA4uBFAGXyDXz
/FXWqFqG0/cSjGhI0Dj2gaWl+aYe7uXphU42RtdR+yeetxb0bz7OHXf/GPERMeh+
EqOyTy2bzpy71VyeGFhun7y6bCEGJ/EieFMUMg61HFRmKeziVf6SC6TSAzSfFY93
L9u4XdGBp61cVbIo+GzqMPEXFpdPPxyr1dsROJnbO8/YB6T0HbWXqqWjme5NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUb0xxrTkmHnExqr44sqmK5z4VMH4wHwYDVR0j
BBgwFoAUTa2qhmFPbkw7EPSNmr1QN4li0pUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMC80REFEQUE4NjYxNEY2RTRDM0IxMEY0OEQ5QUJENTAzNzg5NjJEMjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREQURBQTg2NjE0RjZFNEMz
QjEwRjQ4RDlBQkQ1MDM3ODk2MkQyOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3QVpWRnB1bjhEUmNmNzI3TW9yS2J0V3Z2dHpuQVNlejJIdVhwSDgxaG5mLzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzODMzMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCNxDANBgkqhkiG9w0BAQsFAAOCAQEABz7z
0KZXhzIALRq8TsQEDMWcINr9RcNdY1daD6im/wWlW/daz6FfS/Q88iVp/jOE7Om/
0fsxRc18C/sNCv16VZd6UsdgdmPXjLgzmcrydWwJKFTW02KZpBBJ2AuMOwV2lCL3
+OALKE3xoYEBCW9tEPX0YeHV3DCW98GMbzFg96sEF6axC4VBEFWVx1kK5RSoxO1J
mLNl04b8ByKo7nz8Q4asZkhZOWtWUcz3mVyquCvRmpi4UjOtGBnTKK+1I9J+ba+n
WE0pqaG63C27J2niWWweIof9EbZFGK43J0TjeuipMseKQLRGKqEHz8drpWHDJEIW
PMpnJOv19m8yDWivGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org