Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3332203d3e20323731333533.roa
File:                     3139302e35322e37372e302f32342d3332203d3e20323731333533.roa (raw, json)
Hash identifier:          O4/IEw9sYwlj0bYSzmp++GmqFq/ppHETYlMfjshtwnI=
Subject key identifier:   BB:4F:AA:C8:A5:49:75:29:05:5E:21:3F:ED:E8:70:24:E0:57:D2:20
Certificate issuer:       /CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
Certificate serial:       735B8178187283986B94556B7F8B32F5C04D5960
Authority key identifier: 43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3332203d3e20323731333533.roa
Signing time:             Tue 02 May 2023 11:18:12 +0000
ROA not before:           Tue 02 May 2023 11:13:12 +0000
ROA not after:            Tue 30 Apr 2024 11:18:12 +0000
asID:                     271353
IP address blocks:        190.52.77.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5b:81:78:18:72:83:98:6b:94:55:6b:7f:8b:32:f5:c0:4d:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
        Validity
            Not Before: May  2 11:13:12 2023 GMT
            Not After : Apr 30 11:18:12 2024 GMT
        Subject: CN=BB4FAAC8A5497529055E213FEDE87024E057D220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:ef:1e:94:29:31:98:ff:40:4b:17:b7:2c:
                    6a:f0:53:f5:3a:f3:a3:59:11:a2:e3:98:9e:1e:bc:
                    09:db:c9:d6:1e:3a:f4:20:7e:c4:ac:1e:3b:0a:4d:
                    ab:3c:1a:30:d8:89:d3:e9:8a:15:db:dc:d9:35:af:
                    9a:7f:74:59:65:26:53:84:fc:64:bb:97:6c:9b:17:
                    fd:a9:fb:03:36:22:bd:92:30:dd:75:f1:19:d9:1c:
                    a8:ab:64:8e:4a:2a:00:56:c4:ec:16:c3:32:02:d2:
                    74:f6:23:56:8f:75:f5:46:ff:b1:d7:c6:14:13:1d:
                    6a:15:0d:5f:00:96:72:05:07:6c:f9:c3:82:2e:19:
                    bd:d3:68:47:52:c5:f3:e8:29:9f:45:82:cb:82:81:
                    33:7f:af:e2:18:af:c3:3b:80:cc:4e:3f:9a:07:ad:
                    3c:cd:73:37:e8:58:96:2a:53:6e:33:af:ec:55:0f:
                    7c:ba:fc:e2:19:5e:a0:f2:86:87:f0:0a:25:9b:09:
                    53:a5:30:23:12:28:f6:ee:a8:2c:5e:f9:35:20:91:
                    c9:97:ec:ce:0a:6e:cd:6a:58:ec:f4:b2:df:a9:ac:
                    95:b3:a6:7d:67:43:b1:a7:7e:85:77:40:ca:9e:93:
                    d5:cd:a4:f8:49:55:ca:6b:e7:cd:0a:72:df:59:40:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:AA:C8:A5:49:75:29:05:5E:21:3F:ED:E8:70:24:E0:57:D2:20
            X509v3 Authority Key Identifier:
                keyid:43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3332203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:e9:ef:4a:37:24:bd:1b:70:a4:12:48:ea:a7:3e:e8:69:
         98:12:b2:c7:cd:c2:a0:39:0c:e3:4c:09:47:db:b7:84:d5:c2:
         1d:a3:f9:f5:5c:88:d1:93:90:6d:cf:01:76:25:b8:bc:9a:9d:
         ba:e5:68:01:0b:8b:0f:e1:23:8f:11:49:12:14:00:11:d4:b6:
         bd:28:4d:c0:53:70:19:4a:90:7a:7f:56:41:e5:19:47:07:ed:
         68:46:b1:e4:a4:a7:56:c4:12:0e:66:9e:9a:e2:cf:76:2a:bd:
         02:42:fb:a2:ef:f1:35:e2:26:22:49:83:78:8b:5d:43:6a:02:
         ab:f2:2f:2a:d4:44:ae:9e:59:a7:b0:f8:77:08:29:d1:67:f1:
         61:66:87:60:ba:e4:90:93:18:32:f4:b2:3d:a3:85:f2:9b:07:
         68:8c:81:f8:80:f9:0a:28:38:fb:a2:65:b2:e2:61:69:26:f6:
         c4:cd:6e:5a:c5:29:46:82:f7:05:51:87:99:c7:b8:f4:8b:58:
         21:93:28:1a:6d:e8:ec:8f:96:31:22:d9:ad:6e:dc:96:fd:50:
         c0:83:c4:93:07:eb:f8:0e:c6:7f:a8:0e:2d:47:f4:d2:f6:4e:
         01:1c:86:06:fb:1a:d7:6e:48:89:ed:54:99:6f:78:9a:2c:a6:
         af:ab:03:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc1uBeBhyg5hrlFVrf4sy9cBNWWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBMENDNzdCN0ZERDUzRjg1NDI5NTIwNjlCNDhDMjVE
MkI1RjQ1MDAeFw0yMzA1MDIxMTEzMTJaFw0yNDA0MzAxMTE4MTJaMDMxMTAvBgNV
BAMTKEJCNEZBQUM4QTU0OTc1MjkwNTVFMjEzRkVERTg3MDI0RTA1N0QyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QO8elCkxmP9ASxe3LGrwU/U6
86NZEaLjmJ4evAnbydYeOvQgfsSsHjsKTas8GjDYidPpihXb3Nk1r5p/dFllJlOE
/GS7l2ybF/2p+wM2Ir2SMN118RnZHKirZI5KKgBWxOwWwzIC0nT2I1aPdfVG/7HX
xhQTHWoVDV8AlnIFB2z5w4IuGb3TaEdSxfPoKZ9FgsuCgTN/r+IYr8M7gMxOP5oH
rTzNczfoWJYqU24zr+xVD3y6/OIZXqDyhofwCiWbCVOlMCMSKPbuqCxe+TUgkcmX
7M4Kbs1qWOz0st+prJWzpn1nQ7GnfoV3QMqek9XNpPhJVcpr580Kct9ZQJVjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUu0+qyKVJdSkFXiE/7ehwJOBX0iAwHwYDVR0j
BBgwFoAUQ6DMd7f91T+FQpUgabSMJdK19FAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMC80M0EwQ0M3N0I3RkRENTNGODU0Mjk1MjA2OUI0OEMyNUQyQjVGNDUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQTBDQzc3QjdGREQ1M0Y4
NTQyOTUyMDY5QjQ4QzI1RDJCNUY0NTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzAv
MzEzOTMwMmUzNTMyMmUzNzM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMx
MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvjRNMA0GCSqGSIb3DQEBCwUAA4IBAQCb2OnvSjck
vRtwpBJI6qc+6GmYErLHzcKgOQzjTAlH27eE1cIdo/n1XIjRk5BtzwF2Jbi8mp26
5WgBC4sP4SOPEUkSFAAR1La9KE3AU3AZSpB6f1ZB5RlHB+1oRrHkpKdWxBIOZp6a
4s92Kr0CQvui7/E14iYiSYN4i11DagKr8i8q1ESunlmnsPh3CCnRZ/FhZodguuSQ
kxgy9LI9o4XymwdojIH4gPkKKDj7omWy4mFpJvbEzW5axSlGgvcFUYeZx7j0i1gh
kygabejsj5YxItmtbtyW/VDAg8STB+v4DsZ/qA4tR/TS9k4BHIYG+xrXbkiJ7VSZ
b3iaLKavqwOm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org