Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          0oo9pgFw/E26zn2KhL6uiNWmEhrVC/D3gO4hHGhDa50=
Subject key identifier:   35:FC:DA:C5:CF:59:23:80:8C:86:40:26:9D:72:F7:4D:92:D6:1C:0A
Certificate issuer:       /CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
Certificate serial:       29A084A144CC986231940836D0D87FABD91583C4
Authority key identifier: E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa
Signing time:             Sat 22 Apr 2023 11:26:41 +0000
ROA not before:           Sat 22 Apr 2023 11:21:41 +0000
ROA not after:            Sat 20 Apr 2024 11:26:41 +0000
asID:                     263271
IP address blocks:        179.108.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a0:84:a1:44:cc:98:62:31:94:08:36:d0:d8:7f:ab:d9:15:83:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
        Validity
            Not Before: Apr 22 11:21:41 2023 GMT
            Not After : Apr 20 11:26:41 2024 GMT
        Subject: CN=35FCDAC5CF5923808C8640269D72F74D92D61C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:74:b2:ea:b0:11:58:9e:26:ed:4a:9b:b6:9b:
                    9d:e3:c1:cd:8f:e6:f9:e8:d1:0a:3f:e0:6d:b9:b6:
                    c9:11:71:be:d7:f1:85:25:96:e4:39:45:e3:4b:87:
                    9e:fa:9b:64:52:4e:a7:ec:fe:35:fe:52:b9:dc:24:
                    e0:39:f0:b6:34:3b:4e:4f:15:1d:88:f6:4c:ff:a6:
                    bf:f7:04:ac:89:68:da:39:49:a2:f0:08:b0:24:b1:
                    b7:e4:47:d9:29:fd:0c:a3:41:88:7c:7d:99:55:56:
                    10:9a:47:9f:0f:e9:57:a6:b7:78:ca:f4:3b:05:56:
                    f5:1f:d8:25:a2:a7:25:24:1e:5c:68:e5:90:e8:67:
                    12:3e:d7:88:1b:01:0e:da:08:11:61:c7:aa:42:c5:
                    cd:c4:64:fa:9a:d6:e6:1e:26:93:b7:86:f1:67:86:
                    4c:dc:f6:a8:28:ff:1f:7c:ca:da:32:db:7d:95:13:
                    45:af:82:c1:90:d8:90:9c:12:37:1c:a3:13:92:8d:
                    35:6c:81:0e:c7:4c:bb:9a:55:13:0b:62:e4:14:11:
                    8e:f9:05:a5:93:dc:9e:78:48:21:34:a8:7a:fc:99:
                    a4:98:59:86:65:4e:d0:d0:bb:72:1d:38:eb:6a:e9:
                    75:97:aa:2e:96:cc:79:74:85:e6:bd:ea:b4:47:98:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:DA:C5:CF:59:23:80:8C:86:40:26:9D:72:F7:4D:92:D6:1C:0A
            X509v3 Authority Key Identifier:
                keyid:E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:24:95:f6:b4:02:6d:a0:e8:e1:ef:f3:53:24:cf:95:af:16:
         25:e7:bd:42:c3:38:26:70:b4:c8:59:1a:94:0a:c9:17:42:b1:
         ba:49:db:b9:e5:4a:8c:65:3e:6c:1b:88:3e:48:c9:2c:b2:5f:
         36:8b:bf:cd:85:28:39:78:58:08:6c:c7:62:d9:cc:f9:dd:5c:
         c7:af:85:79:89:22:94:ec:5b:a3:bf:09:56:d1:df:a6:8e:f7:
         aa:d4:63:8b:84:6f:fa:a1:64:77:3d:ea:8e:fa:8c:c5:a8:92:
         b8:0f:f1:95:f3:fc:00:d9:8b:e4:03:ec:81:c0:97:aa:60:7b:
         d6:80:ac:04:f5:e5:67:5c:c1:a8:66:86:f0:57:76:a0:c0:b0:
         fb:24:b0:a0:44:bb:88:bd:92:d8:68:c9:4f:62:7d:2b:b1:f0:
         f3:8a:31:bb:35:ac:f3:30:16:5a:cf:12:94:f6:8a:b8:20:4d:
         3b:ba:f5:f0:24:aa:32:60:fc:38:2b:ee:c9:2e:c1:67:d6:3f:
         ef:13:25:43:46:e7:62:69:d3:41:76:67:08:b1:8a:73:c1:ea:
         27:48:5e:52:21:ef:ea:61:68:fb:6f:ef:38:7c:73:53:c5:d8:
         f5:5f:34:c1:c5:54:53:e2:67:60:21:7a:84:3f:0f:1f:36:cd:
         b5:0c:b7:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKaCEoUTMmGIxlAg20Nh/q9kVg8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkyODFGQTU0NjE0RkQ4QkI0NzBFREI3NjNEOEE1RjlG
NzQxRTVGNzAeFw0yMzA0MjIxMTIxNDFaFw0yNDA0MjAxMTI2NDFaMDMxMTAvBgNV
BAMTKDM1RkNEQUM1Q0Y1OTIzODA4Qzg2NDAyNjlENzJGNzREOTJENjFDMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+dLLqsBFYnibtSpu2m53jwc2P
5vno0Qo/4G25tskRcb7X8YUlluQ5ReNLh576m2RSTqfs/jX+UrncJOA58LY0O05P
FR2I9kz/pr/3BKyJaNo5SaLwCLAksbfkR9kp/QyjQYh8fZlVVhCaR58P6Vemt3jK
9DsFVvUf2CWipyUkHlxo5ZDoZxI+14gbAQ7aCBFhx6pCxc3EZPqa1uYeJpO3hvFn
hkzc9qgo/x98ytoy232VE0WvgsGQ2JCcEjccoxOSjTVsgQ7HTLuaVRMLYuQUEY75
BaWT3J54SCE0qHr8maSYWYZlTtDQu3IdOOtq6XWXqi6WzHl0hea96rRHmFedAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNfzaxc9ZI4CMhkAmnXL3TZLWHAowHwYDVR0j
BBgwFoAU6SgfpUYU/Yu0cO23Y9il+fdB5fcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1U5d0FpVm91aU1WdVdvYURwNWZFdmRMUFRyS3RWYk53QWcycktwd2FR
QUEvMS9FOTI4MUZBNTQ2MTRGRDhCQjQ3MEVEQjc2M0Q4QTVGOUY3NDFFNUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5MjgxRkE1NDYxNEZEOEJC
NDcwRURCNzYzRDhBNUY5Rjc0MUU1RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVOXdBaVZvdWlNVnVXb2FEcDVmRXZkTFBUckt0VmJOd0FnMnJLcHdhUUFBLzEv
MzEzNzM5MmUzMTMwMzgyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNsvTANBgkqhkiG9w0BAQsFAAOCAQEAUCSV
9rQCbaDo4e/zUyTPla8WJee9QsM4JnC0yFkalArJF0KxuknbueVKjGU+bBuIPkjJ
LLJfNou/zYUoOXhYCGzHYtnM+d1cx6+FeYkilOxbo78JVtHfpo73qtRji4Rv+qFk
dz3qjvqMxaiSuA/xlfP8ANmL5APsgcCXqmB71oCsBPXlZ1zBqGaG8Fd2oMCw+ySw
oES7iL2S2GjJT2J9K7Hw84oxuzWs8zAWWs8SlPaKuCBNO7r18CSqMmD8OCvuyS7B
Z9Y/7xMlQ0bnYmnTQXZnCLGKc8HqJ0heUiHv6mFo+2/vOHxzU8XY9V80wcVUU+Jn
YCF6hD8PHzbNtQy3oA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org