Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e203134383430.roa
File:                     3139302e35322e37382e302f32342d3332203d3e203134383430.roa (raw, json)
Hash identifier:          Dsc9UQAIe002g5Aytc95oE0QSyI4L6DpFlYCeFwxnag=
Subject key identifier:   84:28:2F:88:B7:80:C3:13:87:F3:6C:5E:72:AA:5E:28:6F:8A:77:66
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       114CAC8603E97E9AB5810A1C6CD2E15C8D8BA949
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e203134383430.roa
Signing time:             Tue 28 Feb 2023 13:46:51 +0000
ROA not before:           Tue 28 Feb 2023 13:41:51 +0000
ROA not after:            Tue 27 Feb 2024 13:46:51 +0000
asID:                     14840
IP address blocks:        190.52.78.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:ac:86:03:e9:7e:9a:b5:81:0a:1c:6c:d2:e1:5c:8d:8b:a9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:41:51 2023 GMT
            Not After : Feb 27 13:46:51 2024 GMT
        Subject: CN=84282F88B780C31387F36C5E72AA5E286F8A7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fe:2c:36:7f:0d:04:55:8c:ba:40:94:78:3e:
                    30:94:45:55:85:bc:10:54:ee:b9:1f:e7:1f:8e:bf:
                    c3:cb:52:ff:f0:6f:86:af:99:41:27:14:3b:93:56:
                    cb:e5:8f:53:74:9d:5e:04:0d:1b:04:46:0a:da:db:
                    7e:2b:c4:95:44:24:a8:78:7d:78:7e:b0:a5:b6:e0:
                    b6:f6:c4:05:d2:93:ea:55:da:e7:95:de:23:4d:d0:
                    35:e4:75:85:bb:2e:85:1e:e8:bd:35:2b:37:f0:23:
                    63:28:87:ae:ad:37:ee:fa:75:01:46:49:25:d7:b8:
                    f6:97:dc:27:27:87:b5:47:8b:ee:e4:cc:89:09:d4:
                    ae:dd:37:c1:12:5d:36:ca:86:87:0a:2b:07:f4:6a:
                    71:18:2d:ae:cc:bd:b7:72:e3:b9:b1:2c:29:40:45:
                    12:ec:93:ab:e9:5f:d2:32:50:d3:a5:c9:43:b6:8f:
                    25:3f:8b:63:0a:7d:29:7e:ff:de:0e:ca:ad:51:df:
                    0d:21:d4:1c:50:48:1f:0b:4b:6d:9f:cf:ff:9e:bf:
                    b4:87:69:8d:d6:cf:1e:42:72:78:57:e1:bc:85:58:
                    a5:a5:6a:13:a0:3a:68:39:8f:bf:ce:46:20:7f:e0:
                    37:6f:fc:d4:0c:c4:9f:92:9b:da:a1:2c:56:cd:e1:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:28:2F:88:B7:80:C3:13:87:F3:6C:5E:72:AA:5E:28:6F:8A:77:66
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:af:6b:aa:22:ee:d4:cc:1d:d3:2b:0b:74:45:9d:4e:0c:5b:
         fa:8b:88:d8:0b:6e:0d:0e:0c:7e:4f:b3:44:dc:e6:4f:80:d0:
         0b:ca:f4:5c:2f:3a:36:44:58:2a:6a:51:61:41:e4:b3:1c:39:
         b9:4b:90:97:ea:7e:49:b3:f2:56:40:3d:55:c6:b3:25:cf:00:
         ac:fb:e5:e5:52:34:f4:8e:12:31:41:24:73:c3:22:92:4d:dc:
         7f:a9:56:57:68:5f:e6:4f:1e:84:f3:96:ea:30:56:ae:41:d0:
         26:4d:87:72:11:d3:5f:86:17:6c:8b:c1:9d:d9:d4:66:06:15:
         9b:c7:3a:1d:3c:da:e0:f1:6a:05:49:4d:41:3b:87:53:6e:e5:
         5d:b1:d5:e2:97:73:2b:25:ba:db:07:a6:55:c2:67:4e:41:c8:
         30:d4:cd:6d:95:97:33:78:ab:60:15:e9:e4:3c:d4:ff:99:de:
         40:52:ea:97:5c:76:6b:36:01:99:ab:37:9f:dc:5d:95:8e:1e:
         81:e0:c0:ec:ca:05:5a:02:d5:d7:e9:27:09:0e:ae:77:fe:bf:
         9b:48:15:99:ac:d1:fd:37:2b:52:c0:d0:e9:d6:89:a4:6d:c5:
         86:6d:98:d0:bc:f6:e9:c2:da:60:d2:2f:e5:ac:c1:23:21:cc:
         40:02:5d:8a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEUyshgPpfpq1gQocbNLhXI2LqUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4MDlBREZBRTI4MDU2NEFGOEY3QjRCMzU3RDFBQjNB
RTUyRjFGNzAeFw0yMzAyMjgxMzQxNTFaFw0yNDAyMjcxMzQ2NTFaMDMxMTAvBgNV
BAMTKDg0MjgyRjg4Qjc4MEMzMTM4N0YzNkM1RTcyQUE1RTI4NkY4QTc3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/iw2fw0EVYy6QJR4PjCURVWF
vBBU7rkf5x+Ov8PLUv/wb4avmUEnFDuTVsvlj1N0nV4EDRsERgra234rxJVEJKh4
fXh+sKW24Lb2xAXSk+pV2ueV3iNN0DXkdYW7LoUe6L01KzfwI2Moh66tN+76dQFG
SSXXuPaX3Ccnh7VHi+7kzIkJ1K7dN8ESXTbKhocKKwf0anEYLa7Mvbdy47mxLClA
RRLsk6vpX9IyUNOlyUO2jyU/i2MKfSl+/94Oyq1R3w0h1BxQSB8LS22fz/+ev7SH
aY3Wzx5CcnhX4byFWKWlahOgOmg5j7/ORiB/4Ddv/NQMxJ+Sm9qhLFbN4dp/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhCgviLeAwxOH82xecqpeKG+Kd2YwHwYDVR0j
BBgwFoAU24Ca364oBWSvj3tLNX0as65S8fcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMC9EQjgwOUFERkFFMjgwNTY0QUY4RjdCNEIzNTdEMUFCM0FFNTJGMUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCODA5QURGQUUyODA1NjRB
RjhGN0I0QjM1N0QxQUIzQUU1MkYxRjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzAv
MzEzOTMwMmUzNTMyMmUzNzM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNDM4
MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL40TjANBgkqhkiG9w0BAQsFAAOCAQEAEq9rqiLu1Mwd
0ysLdEWdTgxb+ouI2AtuDQ4Mfk+zRNzmT4DQC8r0XC86NkRYKmpRYUHksxw5uUuQ
l+p+SbPyVkA9VcazJc8ArPvl5VI09I4SMUEkc8Mikk3cf6lWV2hf5k8ehPOW6jBW
rkHQJk2HchHTX4YXbIvBndnUZgYVm8c6HTza4PFqBUlNQTuHU27lXbHV4pdzKyW6
2wemVcJnTkHIMNTNbZWXM3irYBXp5DzU/5neQFLql1x2azYBmas3n9xdlY4egeDA
7MoFWgLV1+knCQ6ud/6/m0gVmazR/TcrUsDQ6daJpG3Fhm2Y0Lz26cLaYNIv5azB
IyHMQAJdig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org