Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32332d3233203d3e20323730343036.roa
File:                     3139302e3131312e3130302e302f32332d3233203d3e20323730343036.roa (raw, json)
Hash identifier:          CmdoqEOen+FeP0pNFQmUZMhtuPjuit40pSy93yoB4HY=
Subject key identifier:   82:B6:C1:AB:30:1E:C6:07:48:0D:FA:E6:A0:D0:06:32:CC:2D:A7:96
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       6B3DC24E0D730057FFCE6DE27EB7FBB5F5331B99
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32332d3233203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:09 +0000
ROA not before:           Wed 03 Apr 2024 20:31:09 +0000
ROA not after:            Wed 02 Apr 2025 20:36:09 +0000
asID:                     270406
IP address blocks:        190.111.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3d:c2:4e:0d:73:00:57:ff:ce:6d:e2:7e:b7:fb:b5:f5:33:1b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:31:09 2024 GMT
            Not After : Apr  2 20:36:09 2025 GMT
        Subject: CN=82B6C1AB301EC607480DFAE6A0D00632CC2DA796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:f2:b3:21:72:08:3d:84:68:9e:8e:bf:a0:
                    bd:c0:6f:18:13:cc:b0:79:29:0c:6d:4f:59:86:b9:
                    cc:ea:e5:56:39:a0:45:03:50:72:23:d4:36:2d:70:
                    04:3f:6c:f6:49:56:c6:7d:60:aa:55:7d:97:80:65:
                    f4:5a:48:ba:37:39:8f:7c:86:23:14:69:19:75:d4:
                    4f:5e:db:37:37:7d:31:61:90:9d:11:6b:9a:8e:9a:
                    34:b0:a6:bf:fb:69:7b:34:d4:ce:ac:a2:0d:77:c9:
                    33:81:9d:c9:33:fd:81:ed:2f:ac:21:bf:b4:d6:cd:
                    c3:6f:5b:fd:24:85:ad:1f:1f:22:cf:44:de:c7:51:
                    09:a4:34:55:b3:c4:a5:1b:e6:79:63:b8:a5:f6:3b:
                    81:8b:99:87:e9:e6:ce:a6:59:8a:30:aa:be:8d:b6:
                    7c:19:bc:ed:27:2c:cc:35:6c:d6:bb:06:03:ae:90:
                    aa:fa:70:b1:69:98:42:cf:c6:91:ca:83:66:e0:47:
                    26:a1:8f:7a:fa:df:d9:7e:4e:ed:a1:98:15:13:94:
                    3f:17:2a:5d:91:6e:d1:7e:20:fc:7c:40:0d:a4:8e:
                    f1:a6:35:1b:2a:61:28:fc:15:dd:73:d7:44:96:9c:
                    70:b2:1b:1e:82:1a:ef:b4:9d:bf:d2:61:f0:5c:7d:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B6:C1:AB:30:1E:C6:07:48:0D:FA:E6:A0:D0:06:32:CC:2D:A7:96
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32332d3233203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:04:32:94:db:0e:f5:b7:51:67:d1:b3:5f:a8:0f:ed:0e:b6:
         72:8f:c4:b4:bc:24:04:70:6e:18:80:a5:6a:1f:b0:6a:6c:6e:
         d7:cd:fb:fc:cf:c8:15:df:f2:80:a6:e3:f9:18:46:05:00:7d:
         7c:5a:51:0d:11:6a:9d:b3:09:72:13:4e:69:33:32:37:b0:de:
         f0:74:65:6c:ea:05:80:fc:cb:29:18:19:d4:8f:39:d3:89:d0:
         76:a6:3a:6b:d3:73:09:ba:88:d4:b8:cc:90:cd:00:36:0c:ae:
         ad:34:f2:f1:c4:6e:02:19:e0:7b:c9:2f:e4:a2:31:72:df:2b:
         e1:1b:d9:75:5e:d2:8d:25:00:bb:c2:86:82:22:86:23:3d:e5:
         ba:89:ea:42:1f:2b:f6:3d:93:5d:87:72:58:db:44:0b:8c:2b:
         0a:5e:9a:42:e4:1f:a5:54:01:eb:54:f4:c9:50:26:9a:d5:97:
         73:eb:73:41:a7:3b:66:f8:c3:4a:13:20:e8:2f:1b:c3:50:cb:
         18:c3:cf:d1:09:1b:4a:74:85:e8:7e:dd:47:f2:da:77:74:6b:
         3d:3a:0a:27:23:30:3d:df:40:29:10:75:83:0c:ef:02:e8:e1:
         e6:96:88:a1:a6:28:6e:98:6d:24:ed:47:86:dc:fc:45:e9:9f:
         93:5e:fe:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaz3CTg1zAFf/zm3ifrf7tfUzG5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGMEFGNzA2QzYyQjUyNTAyMjFDQUFBNThDNjM0MTlB
ODFGMzQ3MjAeFw0yNDA0MDMyMDMxMDlaFw0yNTA0MDIyMDM2MDlaMDMxMTAvBgNV
BAMTKDgyQjZDMUFCMzAxRUM2MDc0ODBERkFFNkEwRDAwNjMyQ0MyREE3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTTvKzIXIIPYRono6/oL3AbxgT
zLB5KQxtT1mGuczq5VY5oEUDUHIj1DYtcAQ/bPZJVsZ9YKpVfZeAZfRaSLo3OY98
hiMUaRl11E9e2zc3fTFhkJ0Ra5qOmjSwpr/7aXs01M6sog13yTOBnckz/YHtL6wh
v7TWzcNvW/0kha0fHyLPRN7HUQmkNFWzxKUb5nljuKX2O4GLmYfp5s6mWYowqr6N
tnwZvO0nLMw1bNa7BgOukKr6cLFpmELPxpHKg2bgRyahj3r639l+Tu2hmBUTlD8X
Kl2RbtF+IPx8QA2kjvGmNRsqYSj8Fd1z10SWnHCyGx6CGu+0nb/SYfBcfWjZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgrbBqzAexgdIDfrmoNAGMswtp5YwHwYDVR0j
BBgwFoAUX/CvcGxitSUCIcqqWMY0GagfNHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dzRThpaVA4M2p6ZGhGMzZSVGc1YTJkWW1KRndZOU5iblNKejVtOExn
UVQvMC81RkYwQUY3MDZDNjJCNTI1MDIyMUNBQUE1OEM2MzQxOUE4MUYzNDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjBBRjcwNkM2MkI1MjUw
MjIxQ0FBQTU4QzYzNDE5QTgxRjM0NzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHc0U4aWlQODNqemRoRjM2UlRnNWEyZFltSkZ3WTlOYm5TSno1bThMZ1FULzAv
MzEzOTMwMmUzMTMxMzEyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM0MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5vZDANBgkqhkiG9w0BAQsFAAOCAQEAdwQy
lNsO9bdRZ9GzX6gP7Q62co/EtLwkBHBuGIClah+wamxu1837/M/IFd/ygKbj+RhG
BQB9fFpRDRFqnbMJchNOaTMyN7De8HRlbOoFgPzLKRgZ1I8504nQdqY6a9NzCbqI
1LjMkM0ANgyurTTy8cRuAhnge8kv5KIxct8r4RvZdV7SjSUAu8KGgiKGIz3luonq
Qh8r9j2TXYdyWNtEC4wrCl6aQuQfpVQB61T0yVAmmtWXc+tzQac7ZvjDShMg6C8b
w1DLGMPP0QkbSnSF6H7dR/Lad3RrPToKJyMwPd9AKRB1gwzvAujh5paIoaYobpht
JO1Hhtz8Remfk17+Cg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org