Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa
File:                     3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa (raw, json)
Hash identifier:          WhBaqbYLNjNkjo+KZXaXgoUPnWtytQS06SHnQJduR/U=
Subject key identifier:   43:CF:1A:25:95:F7:DC:11:7B:82:BC:C7:FC:57:CD:F4:A4:48:E1:83
Certificate issuer:       /CN=EFD561DB9E03BE1890E4391CF346AC9B46BB2A23
Certificate serial:       0AA54D3CEC97885019AC6C0505F729F364E8E4DF
Authority key identifier: EF:D5:61:DB:9E:03:BE:18:90:E4:39:1C:F3:46:AC:9B:46:BB:2A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa
Signing time:             Thu 04 Apr 2024 19:09:29 +0000
ROA not before:           Thu 04 Apr 2024 19:04:29 +0000
ROA not after:            Thu 03 Apr 2025 19:09:29 +0000
asID:                     271376
IP address blocks:        192.140.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:4d:3c:ec:97:88:50:19:ac:6c:05:05:f7:29:f3:64:e8:e4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD561DB9E03BE1890E4391CF346AC9B46BB2A23
        Validity
            Not Before: Apr  4 19:04:29 2024 GMT
            Not After : Apr  3 19:09:29 2025 GMT
        Subject: CN=43CF1A2595F7DC117B82BCC7FC57CDF4A448E183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:13:82:4b:09:3b:62:c3:44:b1:9f:05:15:
                    44:65:a7:b7:c5:15:15:a9:60:41:ef:08:b5:27:be:
                    71:e3:b5:d5:36:d5:73:3a:50:c5:f6:5b:c7:83:7a:
                    03:c3:70:7c:4e:e2:46:b5:bf:d7:c9:92:bd:e1:d1:
                    57:2f:19:6c:77:b3:0e:66:9f:49:30:d1:4f:17:cc:
                    0b:e3:d8:64:3b:64:dd:67:03:e3:37:4e:a5:23:bc:
                    a0:fe:cd:85:18:93:05:34:0a:24:30:ef:9c:59:7e:
                    e5:9c:b0:d2:cd:d8:6d:78:10:26:c8:4f:39:d9:4e:
                    b2:f0:c9:a7:a7:93:3d:ad:29:59:c4:ae:64:7b:0d:
                    b2:d8:86:de:d3:e1:62:ce:c9:f8:d5:bf:64:51:13:
                    80:16:d0:89:ed:81:3e:ed:63:9f:6c:0f:28:a2:5f:
                    23:b9:29:b9:a3:ea:bd:47:24:d6:55:05:83:c6:14:
                    2c:a3:69:d5:c9:65:fa:2f:bd:cc:1a:fd:38:50:30:
                    b6:8d:2e:8b:75:39:99:d1:b1:9a:cd:2e:a0:02:50:
                    32:9a:e4:e2:a4:18:88:b4:97:e9:62:97:26:46:95:
                    7f:3f:e7:66:d2:25:76:c0:23:91:72:80:6a:28:66:
                    31:32:99:c4:0b:ec:df:57:0b:4b:de:7e:28:ec:de:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CF:1A:25:95:F7:DC:11:7B:82:BC:C7:FC:57:CD:F4:A4:48:E1:83
            X509v3 Authority Key Identifier:
                keyid:EF:D5:61:DB:9E:03:BE:18:90:E4:39:1C:F3:46:AC:9B:46:BB:2A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:10:7a:a4:9c:5f:7b:cc:b0:07:be:64:97:0a:f2:32:53:
         5e:db:b6:75:25:0e:1c:d8:39:81:a2:a7:57:2c:60:dd:f6:bc:
         59:b0:5b:f6:25:f1:8d:8d:53:79:6f:37:6f:74:d2:3d:84:5e:
         21:ce:d7:e5:cb:5f:0f:ee:57:4a:f0:2b:1f:53:6a:f5:32:59:
         3c:21:90:ec:a4:19:c8:e5:ad:a2:c7:64:2e:be:3f:c2:67:39:
         f3:09:11:80:60:9d:6a:bf:72:28:1f:0c:43:b1:5d:f7:71:85:
         36:f2:19:5e:e8:d5:9d:12:71:e9:70:b0:b4:b5:6c:bc:23:72:
         33:ac:64:e4:4f:01:79:d2:aa:da:b0:8c:55:ab:9f:de:24:92:
         db:33:06:ec:69:24:e6:58:64:ba:0e:68:d1:8e:2d:7a:44:d3:
         9b:1e:d6:e3:b7:f9:da:1b:45:f8:1b:7c:cb:b6:4d:5b:5e:db:
         55:bd:e3:b2:2f:ac:ee:ba:a3:96:3b:aa:87:78:44:17:23:20:
         41:b0:5a:79:f6:43:af:c3:fb:fa:21:09:8c:a0:ff:98:a7:a9:
         d0:78:07:47:3d:5d:63:46:5d:2c:c3:f7:1c:c6:df:2e:94:6d:
         65:bb:7b:13:1f:8b:b5:df:84:eb:03:da:27:41:09:37:e5:27:
         ff:04:2b:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCqVNPOyXiFAZrGwFBfcp82To5N8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZENTYxREI5RTAzQkUxODkwRTQzOTFDRjM0NkFDOUI0
NkJCMkEyMzAeFw0yNDA0MDQxOTA0MjlaFw0yNTA0MDMxOTA5MjlaMDMxMTAvBgNV
BAMTKDQzQ0YxQTI1OTVGN0RDMTE3QjgyQkNDN0ZDNTdDREY0QTQ0OEUxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRROCSwk7YsNEsZ8FFURlp7fF
FRWpYEHvCLUnvnHjtdU21XM6UMX2W8eDegPDcHxO4ka1v9fJkr3h0VcvGWx3sw5m
n0kw0U8XzAvj2GQ7ZN1nA+M3TqUjvKD+zYUYkwU0CiQw75xZfuWcsNLN2G14ECbI
TznZTrLwyaenkz2tKVnErmR7DbLYht7T4WLOyfjVv2RRE4AW0IntgT7tY59sDyii
XyO5Kbmj6r1HJNZVBYPGFCyjadXJZfovvcwa/ThQMLaNLot1OZnRsZrNLqACUDKa
5OKkGIi0l+lilyZGlX8/52bSJXbAI5FygGooZjEymcQL7N9XC0vefijs3vXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ88aJZX33BF7grzH/FfN9KRI4YMwHwYDVR0j
BBgwFoAU79Vh254DvhiQ5Dkc80asm0a7KiMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFOV2FHQkxrTEhuQ2g2NXlOVTNKNFQxM3FEVjFSSkpocXhIakhDOFRC
MjUvMS9FRkQ1NjFEQjlFMDNCRTE4OTBFNDM5MUNGMzQ2QUM5QjQ2QkIyQTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRDU2MURCOUUwM0JFMTg5
MEU0MzkxQ0YzNDZBQzlCNDZCQjJBMjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRTldhR0JMa0xIbkNoNjV5TlUzSjRUMTNxRFYxUkpKaHF4SGpIQzhUQjI1LzEv
MzEzOTMyMmUzMTM0MzAyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjBQwDQYJKoZIhvcNAQELBQADggEBABjMEHqk
nF97zLAHvmSXCvIyU17btnUlDhzYOYGip1csYN32vFmwW/Yl8Y2NU3lvN2900j2E
XiHO1+XLXw/uV0rwKx9TavUyWTwhkOykGcjlraLHZC6+P8JnOfMJEYBgnWq/cigf
DEOxXfdxhTbyGV7o1Z0ScelwsLS1bLwjcjOsZORPAXnSqtqwjFWrn94kktszBuxp
JOZYZLoOaNGOLXpE05se1uO3+dobRfgbfMu2TVte21W947IvrO66o5Y7qod4RBcj
IEGwWnn2Q6/D+/ohCYyg/5inqdB4B0c9XWNGXSzD9xzG3y6UbWW7exMfi7XfhOsD
2idBCTflJ/8EK1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org