Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e32332e3139322e302f31392d3234203d3e20323632353839.roa
File:                     3230312e32332e3139322e302f31392d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          QYxTyLZAhMPzpDDoA0P8r3/OXTVU6YWM1js6STKoGsc=
Subject key identifier:   CA:F5:2E:56:A7:67:7D:58:9E:AA:B5:D1:06:CB:C9:22:06:E4:9B:78
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       7C88778052D6136C83A33228015F9635529450AB
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e32332e3139322e302f31392d3234203d3e20323632353839.roa
Signing time:             Tue 28 Nov 2023 19:32:56 +0000
ROA not before:           Tue 28 Nov 2023 19:27:56 +0000
ROA not after:            Tue 26 Nov 2024 19:32:56 +0000
asID:                     262589
IP address blocks:        201.23.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:88:77:80:52:d6:13:6c:83:a3:32:28:01:5f:96:35:52:94:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 28 19:27:56 2023 GMT
            Not After : Nov 26 19:32:56 2024 GMT
        Subject: CN=CAF52E56A7677D589EAAB5D106CBC92206E49B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ed:e9:73:89:5d:bb:10:83:b9:0c:b7:9c:f8:
                    fe:a9:6a:52:6c:2d:c4:1e:0f:f4:4b:76:78:0d:a1:
                    1d:7b:92:e0:3e:5d:2f:67:f5:9d:3c:89:1a:4e:c3:
                    e4:05:0d:10:fe:6e:a2:ed:8e:c9:30:a5:81:b7:10:
                    68:79:ce:dd:df:b4:d2:ba:68:6f:da:b7:ac:de:dd:
                    c2:f4:f2:ba:89:03:60:c0:e3:47:ca:59:94:40:6b:
                    1e:47:ca:99:80:a1:13:3f:48:83:f6:89:b0:3e:51:
                    77:ef:e8:df:1f:60:b2:2c:62:a0:5e:f7:23:c1:25:
                    d8:68:6e:a4:65:68:8a:98:2f:9e:a4:3b:4a:ff:9d:
                    5d:f3:46:98:36:51:80:1b:40:79:0a:38:69:72:f2:
                    d1:f7:65:42:38:93:4e:ce:18:e7:4f:d6:5e:b1:b7:
                    45:37:9d:83:1d:25:68:13:22:7a:e1:e7:62:9d:1f:
                    85:7d:0d:f2:e2:cb:4f:c6:3e:51:29:eb:0d:58:59:
                    f6:db:fa:c6:7e:5d:0c:c9:52:1a:ab:15:0b:96:30:
                    64:92:b0:b9:a5:4b:88:60:ed:29:d5:d7:c3:90:8b:
                    dd:4c:28:c8:75:42:4a:48:9f:72:af:66:3e:4b:2f:
                    70:2f:68:ec:bc:16:a5:3c:c5:fd:a9:da:4c:4b:44:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:2E:56:A7:67:7D:58:9E:AA:B5:D1:06:CB:C9:22:06:E4:9B:78
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e32332e3139322e302f31392d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:7a:0c:40:75:53:72:ae:77:7b:73:43:11:64:77:ae:68:c3:
         d9:7c:49:b4:0b:93:40:4a:53:0b:2f:77:3e:74:7c:64:a1:dc:
         21:e0:9f:cb:99:10:29:41:b0:8d:93:68:4e:a2:50:68:73:8c:
         82:d9:a6:41:4e:10:9d:ec:e2:0b:cb:34:44:ae:78:70:ad:b7:
         75:01:ab:7b:84:67:fd:a9:0a:93:d7:a6:32:ed:dc:1e:ef:fa:
         73:ab:48:88:37:d4:3d:b3:0d:7a:27:50:24:1e:a4:ec:b1:62:
         75:fc:07:22:b2:51:65:80:11:7d:d0:e7:d9:e0:9d:3d:55:49:
         54:91:21:26:05:c1:ec:f2:b9:4e:ef:c5:b5:e1:3c:b1:b4:05:
         44:01:64:53:7f:ff:ff:74:04:dd:db:55:3d:ca:ba:d8:86:e2:
         ab:a8:bf:12:10:4e:25:e9:2b:3d:3b:4e:95:cc:41:28:99:35:
         f3:c9:f4:de:0a:21:5e:30:0d:e8:19:69:48:33:d6:56:dc:c8:
         97:bf:62:7d:39:ab:b1:b4:2e:09:68:bf:b8:6c:35:ca:7d:b7:
         11:bc:8d:43:db:19:b9:0d:e6:34:f4:4a:eb:a9:ce:d5:b5:0c:
         bc:a0:d0:49:f4:14:0f:e0:fe:d9:1f:c7:2c:6b:3c:2a:3c:00:
         45:4a:6e:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfIh3gFLWE2yDozIoAV+WNVKUUKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ0RURGMzZDODgxQkM5N0E3NjZCREVFRkYwNzAyNTE2
MTNFMDk1RDAeFw0yMzExMjgxOTI3NTZaFw0yNDExMjYxOTMyNTZaMDMxMTAvBgNV
BAMTKENBRjUyRTU2QTc2NzdENTg5RUFBQjVEMTA2Q0JDOTIyMDZFNDlCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx7elziV27EIO5DLec+P6palJs
LcQeD/RLdngNoR17kuA+XS9n9Z08iRpOw+QFDRD+bqLtjskwpYG3EGh5zt3ftNK6
aG/at6ze3cL08rqJA2DA40fKWZRAax5HypmAoRM/SIP2ibA+UXfv6N8fYLIsYqBe
9yPBJdhobqRlaIqYL56kO0r/nV3zRpg2UYAbQHkKOGly8tH3ZUI4k07OGOdP1l6x
t0U3nYMdJWgTInrh52KdH4V9DfLiy0/GPlEp6w1YWfbb+sZ+XQzJUhqrFQuWMGSS
sLmlS4hg7SnV18OQi91MKMh1QkpIn3KvZj5LL3AvaOy8FqU8xf2p2kxLRLE7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyvUuVqdnfVieqrXRBsvJIgbkm3gwHwYDVR0j
BBgwFoAU9E7fNsiBvJenZr3u/wcCUWE+CV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMC9GNDRFREYzNkM4ODFCQzk3QTc2NkJERUVGRjA3MDI1MTYxM0UwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0NEVERjM2Qzg4MUJDOTdB
NzY2QkRFRUZGMDcwMjUxNjEzRTA5NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzAv
MzIzMDMxMmUzMjMzMmUzMTM5MzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAXJF8AwDQYJKoZIhvcNAQELBQADggEBABF6DEB1
U3Kud3tzQxFkd65ow9l8SbQLk0BKUwsvdz50fGSh3CHgn8uZEClBsI2TaE6iUGhz
jILZpkFOEJ3s4gvLNESueHCtt3UBq3uEZ/2pCpPXpjLt3B7v+nOrSIg31D2zDXon
UCQepOyxYnX8ByKyUWWAEX3Q59ngnT1VSVSRISYFwezyuU7vxbXhPLG0BUQBZFN/
//90BN3bVT3KutiG4quovxIQTiXpKz07TpXMQSiZNfPJ9N4KIV4wDegZaUgz1lbc
yJe/Yn05q7G0Lglov7hsNcp9txG8jUPbGbkN5jT0SuupztW1DLyg0En0FA/g/tkf
xyxrPCo8AEVKbps=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org