Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa
File:                     3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa (raw, json)
Hash identifier:          +JA+yczNux1JbMykrI17v1gXn0TeP5kScItC4g6GS20=
Subject key identifier:   1D:1B:1F:B9:2E:8C:2C:2C:10:D6:50:76:84:57:B4:D2:37:85:4A:C5
Certificate issuer:       /CN=9F6CAAB00E7B77388E82F39831FB778453932941
Certificate serial:       1CA0139C67AC5E2830F90799AB0FA50972DD7739
Authority key identifier: 9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa
Signing time:             Mon 19 Feb 2024 18:20:30 +0000
ROA not before:           Mon 19 Feb 2024 18:15:30 +0000
ROA not after:            Mon 17 Feb 2025 18:20:30 +0000
asID:                     269712
IP address blocks:        190.112.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:13:9c:67:ac:5e:28:30:f9:07:99:ab:0f:a5:09:72:dd:77:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6CAAB00E7B77388E82F39831FB778453932941
        Validity
            Not Before: Feb 19 18:15:30 2024 GMT
            Not After : Feb 17 18:20:30 2025 GMT
        Subject: CN=1D1B1FB92E8C2C2C10D650768457B4D237854AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:d8:bd:10:02:55:cd:e4:6e:bd:7b:84:f1:
                    8c:d4:0b:67:09:4d:46:15:7c:3c:5c:f1:58:d6:0e:
                    d6:66:f3:04:62:a5:fb:a3:e4:3f:05:61:0e:bb:02:
                    5a:a2:25:11:b3:02:a6:db:30:a3:21:b8:8e:5c:1c:
                    9d:62:4c:07:17:68:22:fe:82:31:37:6c:47:26:d2:
                    61:f1:e1:82:8f:5c:76:3c:69:f4:ab:0e:d2:df:6e:
                    65:1e:ff:e9:e5:69:f7:b5:c5:8b:7f:42:85:a0:24:
                    0b:99:6d:ad:fb:00:84:d2:b6:fe:e2:cf:92:20:e6:
                    1a:e3:87:f6:85:c7:0f:ff:3f:37:69:89:a1:12:9c:
                    b3:25:2a:21:18:3a:b0:83:c8:00:44:cc:f2:a0:e8:
                    ad:ee:38:6d:87:48:02:e8:fc:3c:9c:10:b8:c7:95:
                    dc:65:c0:4e:ed:c5:79:1e:f6:90:b9:e8:ab:0b:ad:
                    0f:73:30:09:22:05:40:ad:9d:76:68:86:48:24:2e:
                    ee:5b:3d:5e:4a:b9:44:e2:de:93:94:0c:dc:e8:1c:
                    46:3e:6b:93:2d:eb:9b:81:57:8b:c3:e2:35:81:cc:
                    9d:eb:e6:44:06:5d:dd:2b:ec:61:d8:ed:d4:af:69:
                    8a:2b:0d:db:1e:b6:12:3a:ea:dd:bc:c8:e7:b2:df:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:1F:B9:2E:8C:2C:2C:10:D6:50:76:84:57:B4:D2:37:85:4A:C5
            X509v3 Authority Key Identifier:
                keyid:9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9F6CAAB00E7B77388E82F39831FB778453932941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:f4:f0:3f:8d:0f:e2:c4:6a:13:de:5c:af:f2:7b:9e:02:
         a9:77:58:30:79:ac:d3:70:2b:48:13:f4:f1:29:88:c8:55:58:
         2f:fe:18:18:bd:8e:f4:25:87:78:43:95:f1:cf:29:2b:18:ff:
         bd:40:b7:32:61:66:8f:7b:13:fa:00:93:0c:4b:b0:ff:f4:75:
         2c:bc:bd:fc:07:53:d2:78:a8:2d:8b:60:f2:89:c1:98:a6:1a:
         83:c7:a5:e9:8d:33:04:66:47:51:26:2c:83:2d:e4:69:68:ea:
         6e:a7:29:38:f8:5d:2b:fe:8a:ef:5e:b3:81:5a:85:06:0f:56:
         ce:5f:7b:3a:da:d9:08:4c:f9:51:fc:43:38:1a:9f:a6:54:29:
         00:43:0c:92:58:de:91:a7:bb:67:36:08:62:0c:00:bd:94:f0:
         1d:a1:95:ba:9e:6a:c7:9d:ad:c7:6f:71:89:c3:cc:4d:77:76:
         79:42:45:2d:f1:ec:7e:c4:6c:76:a0:81:4b:38:02:68:fd:42:
         48:cf:70:dc:f9:64:97:5e:67:91:55:19:33:bf:4a:f5:f2:ae:
         99:e0:f7:92:6e:40:89:de:c5:06:e0:44:b3:0f:09:77:5a:8b:
         d5:a8:e6:4f:6d:3e:cc:d6:ad:8c:1e:ec:32:ad:04:2d:4e:d9:
         74:73:d8:54
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHKATnGesXigw+QeZqw+lCXLddzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2Q0FBQjAwRTdCNzczODhFODJGMzk4MzFGQjc3ODQ1
MzkzMjk0MTAeFw0yNDAyMTkxODE1MzBaFw0yNTAyMTcxODIwMzBaMDMxMTAvBgNV
BAMTKDFEMUIxRkI5MkU4QzJDMkMxMEQ2NTA3Njg0NTdCNEQyMzc4NTRBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKNi9EAJVzeRuvXuE8YzUC2cJ
TUYVfDxc8VjWDtZm8wRipfuj5D8FYQ67AlqiJRGzAqbbMKMhuI5cHJ1iTAcXaCL+
gjE3bEcm0mHx4YKPXHY8afSrDtLfbmUe/+nlafe1xYt/QoWgJAuZba37AITStv7i
z5Ig5hrjh/aFxw//PzdpiaESnLMlKiEYOrCDyABEzPKg6K3uOG2HSALo/DycELjH
ldxlwE7txXke9pC56KsLrQ9zMAkiBUCtnXZohkgkLu5bPV5KuUTi3pOUDNzoHEY+
a5Mt65uBV4vD4jWBzJ3r5kQGXd0r7GHY7dSvaYorDdsethI66t28yOey36hxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHRsfuS6MLCwQ1lB2hFe00jeFSsUwHwYDVR0j
BBgwFoAUn2yqsA57dziOgvOYMft3hFOTKUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85RjZDQUFCMDBFN0I3NzM4OEU4MkYzOTgzMUZCNzc4NDUzOTMyOTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGNkNBQUIwMEU3Qjc3Mzg4
RTgyRjM5ODMxRkI3Nzg0NTM5MzI5NDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5wnjANBgkqhkiG9w0BAQsFAAOCAQEAUpz0
8D+ND+LEahPeXK/ye54CqXdYMHms03ArSBP08SmIyFVYL/4YGL2O9CWHeEOV8c8p
Kxj/vUC3MmFmj3sT+gCTDEuw//R1LLy9/AdT0nioLYtg8onBmKYag8el6Y0zBGZH
USYsgy3kaWjqbqcpOPhdK/6K716zgVqFBg9Wzl97OtrZCEz5UfxDOBqfplQpAEMM
kljekae7ZzYIYgwAvZTwHaGVup5qx52tx29xicPMTXd2eUJFLfHsfsRsdqCBSzgC
aP1CSM9w3Plkl15nkVUZM79K9fKumeD3km5Aid7FBuBEsw8Jd1qL1ajmT20+zNat
jB7sMq0ELU7ZdHPYVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org