Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          V5hWcS/oyo4cgoE9i/51y666jxu7hKwDLDEnxT6vFjQ=
Subject key identifier:   E2:9F:85:FD:01:10:D6:C7:97:E5:76:EB:4B:F7:9A:39:43:22:46:E2
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       7821DE4652715068307AF3BB86447FE5B92AE218
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:03 +0000
ROA not before:           Mon 30 Oct 2023 12:42:03 +0000
ROA not after:            Mon 28 Oct 2024 12:47:03 +0000
asID:                     270544
IP address blocks:        187.95.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:21:de:46:52:71:50:68:30:7a:f3:bb:86:44:7f:e5:b9:2a:e2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:03 2023 GMT
            Not After : Oct 28 12:47:03 2024 GMT
        Subject: CN=E29F85FD0110D6C797E576EB4BF79A39432246E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:2d:39:c5:8c:44:33:a1:b9:cd:a9:9f:12:
                    cd:0e:11:24:ae:a1:68:4c:db:cb:f6:87:5c:34:f3:
                    f3:61:20:86:cf:a1:d8:65:d7:f7:e9:ba:29:2c:53:
                    fb:c0:5e:00:dc:ac:56:76:f6:4c:13:03:ce:e9:67:
                    57:74:ed:84:86:64:6b:bc:b7:54:26:4e:07:6c:62:
                    54:80:97:16:37:bb:d7:4d:7f:b9:b3:cc:42:58:64:
                    bf:7b:0e:44:18:f1:b6:06:a3:d8:84:15:71:01:f4:
                    89:5c:2b:e8:77:6f:41:64:8a:df:24:d3:99:24:8e:
                    c6:d0:11:ce:e3:20:49:7e:58:7b:aa:86:52:39:28:
                    17:29:f8:58:6d:e0:f6:ad:7f:ed:97:d8:31:55:81:
                    04:6f:72:dd:b3:2f:80:db:72:1d:57:e5:09:1b:da:
                    ff:24:76:e2:52:58:e5:82:91:f6:66:08:00:d5:de:
                    14:b5:8b:35:17:4b:46:1d:2c:3a:d9:4d:7f:11:6f:
                    9e:b2:4b:2f:e5:44:23:fe:bf:97:2f:41:d0:2a:e3:
                    a1:1d:20:5b:b6:30:f2:d2:f3:a7:96:94:c5:de:88:
                    f5:d9:4e:6f:9c:59:c6:e4:bb:d3:49:2a:e1:0e:d6:
                    b6:12:57:1b:b5:1c:95:3b:b2:d3:43:aa:c2:f7:b8:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:85:FD:01:10:D6:C7:97:E5:76:EB:4B:F7:9A:39:43:22:46:E2
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:ef:7c:5a:b3:f9:4d:e7:21:58:08:1e:7b:52:e0:27:d6:e2:
         84:18:ac:2d:9f:9b:47:87:8e:36:f9:15:0d:93:70:4b:9c:bf:
         a9:89:0e:a5:dc:99:ca:d4:c2:df:1f:48:e5:79:6a:ce:e7:98:
         8d:88:0e:60:33:a7:9e:55:af:33:29:0c:55:7c:14:0e:e3:91:
         65:35:49:9d:23:e5:eb:c4:a2:6c:1d:90:55:d4:d0:ef:ed:f2:
         fc:00:83:80:d9:e6:58:2d:cf:cf:64:59:9d:8c:88:88:ae:10:
         16:8d:79:ec:84:0e:f1:39:3b:45:ae:e7:66:5f:1f:42:4c:79:
         ba:4c:99:39:c9:a2:1c:b7:94:25:c3:26:c3:2f:9d:97:2d:ce:
         37:8b:ea:27:87:95:68:67:6c:bb:cd:8d:a7:04:77:bf:41:b2:
         a4:7f:1d:dd:bb:54:9f:15:8e:f7:28:ed:74:94:2d:47:91:4f:
         54:62:52:4b:86:9e:4a:60:ff:b1:c8:89:5a:67:20:5b:8a:e6:
         4e:65:93:2c:9f:49:d0:45:bd:ff:70:46:6e:29:cf:a9:af:3c:
         53:02:f0:12:51:ff:d7:35:0e:88:72:be:ce:e1:2d:e7:dc:e1:
         69:59:4c:11:66:6a:6d:ed:09:de:b4:b0:c9:ec:28:79:d9:03:
         98:07:04:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeCHeRlJxUGgwevO7hkR/5bkq4hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIyNEU3OUFDRjhBQzY4RTlDNjgzMTdBQjY1MDcwNjhD
OEYyMkY3QzAeFw0yMzEwMzAxMjQyMDNaFw0yNDEwMjgxMjQ3MDNaMDMxMTAvBgNV
BAMTKEUyOUY4NUZEMDExMEQ2Qzc5N0U1NzZFQjRCRjc5QTM5NDMyMjQ2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqC05xYxEM6G5zamfEs0OESSu
oWhM28v2h1w08/NhIIbPodhl1/fpuiksU/vAXgDcrFZ29kwTA87pZ1d07YSGZGu8
t1QmTgdsYlSAlxY3u9dNf7mzzEJYZL97DkQY8bYGo9iEFXEB9IlcK+h3b0Fkit8k
05kkjsbQEc7jIEl+WHuqhlI5KBcp+Fht4Patf+2X2DFVgQRvct2zL4Dbch1X5Qkb
2v8kduJSWOWCkfZmCADV3hS1izUXS0YdLDrZTX8Rb56ySy/lRCP+v5cvQdAq46Ed
IFu2MPLS86eWlMXeiPXZTm+cWcbku9NJKuEO1rYSVxu1HJU7stNDqsL3uEJVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4p+F/QEQ1seX5XbrS/eaOUMiRuIwHwYDVR0j
BBgwFoAUsiTnms+Kxo6caDF6tlBwaMjyL3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMC9CMjI0RTc5QUNGOEFDNjhFOUM2ODMxN0FCNjUwNzA2OEM4RjIyRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyMjRFNzlBQ0Y4QUM2OEU5
QzY4MzE3QUI2NTA3MDY4QzhGMjJGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzAv
MzEzODM3MmUzOTM1MmUzMjMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7X9IwDQYJKoZIhvcNAQELBQADggEBAM/vfFqz
+U3nIVgIHntS4CfW4oQYrC2fm0eHjjb5FQ2TcEucv6mJDqXcmcrUwt8fSOV5as7n
mI2IDmAzp55VrzMpDFV8FA7jkWU1SZ0j5evEomwdkFXU0O/t8vwAg4DZ5lgtz89k
WZ2MiIiuEBaNeeyEDvE5O0Wu52ZfH0JMebpMmTnJohy3lCXDJsMvnZctzjeL6ieH
lWhnbLvNjacEd79BsqR/Hd27VJ8Vjvco7XSULUeRT1RiUkuGnkpg/7HIiVpnIFuK
5k5lkyyfSdBFvf9wRm4pz6mvPFMC8BJR/9c1Dohyvs7hLefc4WlZTBFmam3tCd60
sMnsKHnZA5gHBOg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org