Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232302e302f32342d3234203d3e20323633313434.roa
File:                     3139312e3234322e3232302e302f32342d3234203d3e20323633313434.roa (raw, json)
Hash identifier:          DFuxqnM7GwFvseY82k1kowyd2/Ra2Zw9KJnV1IlY/jA=
Subject key identifier:   03:92:A9:9E:00:0F:45:E1:D7:C0:69:80:54:FD:7C:D9:7E:F7:A7:A9
Certificate issuer:       /CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
Certificate serial:       4F8A496254856DB88833969009D2FBC75B8A0655
Authority key identifier: DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232302e302f32342d3234203d3e20323633313434.roa
Signing time:             Tue 05 Sep 2023 12:07:57 +0000
ROA not before:           Tue 05 Sep 2023 12:02:57 +0000
ROA not after:            Tue 03 Sep 2024 12:07:57 +0000
asID:                     263144
IP address blocks:        191.242.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:49:62:54:85:6d:b8:88:33:96:90:09:d2:fb:c7:5b:8a:06:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Validity
            Not Before: Sep  5 12:02:57 2023 GMT
            Not After : Sep  3 12:07:57 2024 GMT
        Subject: CN=0392A99E000F45E1D7C0698054FD7CD97EF7A7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:77:35:75:01:eb:bb:26:b5:91:40:42:b3:
                    6e:dc:73:fe:df:34:84:a9:a0:7e:fb:6c:e7:43:53:
                    85:10:e8:a0:df:b8:a0:db:bc:46:0f:8c:f6:bb:97:
                    33:5c:05:c5:64:19:fa:4f:62:15:f4:5b:00:6f:19:
                    9c:f4:8f:5b:56:43:2e:0c:71:50:91:d2:b9:1d:83:
                    2e:c5:a5:d7:3f:90:69:72:8b:87:76:e0:ea:cb:2b:
                    49:e2:3d:12:ee:19:19:7e:54:0a:65:24:03:af:43:
                    1a:2f:bf:f4:dd:c0:ec:bd:68:4c:90:64:94:26:dd:
                    b1:19:7f:5e:aa:eb:b7:9f:a5:2f:f3:f6:c9:be:e1:
                    fc:74:13:d1:89:e7:27:40:49:af:20:d5:5a:bf:bd:
                    c5:17:83:3e:12:ac:38:30:31:6c:7f:c1:2f:1d:09:
                    c5:eb:0c:69:64:81:90:a4:fa:da:74:8b:00:9f:04:
                    c4:3b:b0:96:91:33:be:4d:e0:e5:21:68:87:0a:18:
                    52:b6:88:bd:40:03:09:da:4c:9d:a7:7b:84:ba:32:
                    25:ea:81:0b:1d:9a:9a:be:90:01:a7:1c:a1:5c:b7:
                    d6:66:9e:df:5c:ae:0d:65:60:ec:8b:d5:45:03:b3:
                    d4:2a:7b:10:78:67:fd:18:37:b4:ae:cf:e3:d7:8b:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:A9:9E:00:0F:45:E1:D7:C0:69:80:54:FD:7C:D9:7E:F7:A7:A9
            X509v3 Authority Key Identifier:
                keyid:DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232302e302f32342d3234203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:2c:99:b9:4a:5d:a5:5a:47:3c:01:39:63:42:a9:67:b9:
         e6:5b:64:3e:89:37:26:91:34:55:46:c1:46:46:26:1d:30:f7:
         c0:29:73:8b:48:6e:01:97:bb:ad:34:ad:39:c9:e0:45:c0:21:
         43:1a:b2:99:59:6b:32:c6:73:21:88:05:8c:09:3b:ad:20:e8:
         b9:99:a5:74:30:b3:e9:db:87:d4:3f:72:8f:ea:7c:91:19:48:
         f7:d2:92:f7:d9:4b:55:66:31:81:8f:32:84:4d:3d:eb:3d:00:
         f6:45:c7:ec:bb:08:a0:93:0e:d3:f1:8f:b6:a1:ef:a8:82:33:
         36:3e:7f:83:ad:a6:3f:f5:b6:f4:8f:27:8b:5b:fb:f9:7a:14:
         5e:bc:d9:a9:cb:55:f2:e4:38:2b:48:7a:a2:1a:db:a5:cc:6c:
         7a:1d:6e:8f:5b:e3:6e:48:f8:a9:11:7b:11:38:48:c8:8d:50:
         6b:fd:f6:d6:57:c7:b4:e6:2b:29:9f:c6:9d:e4:da:16:0c:2c:
         db:78:ae:82:81:10:a2:94:a6:b2:ce:15:4c:22:ed:cf:05:b6:
         f8:4e:ce:d2:58:0f:14:88:8f:f3:b4:af:01:09:40:43:9d:8c:
         5e:08:0b:48:cc:28:b0:fe:ea:90:3f:90:38:a2:af:b0:c9:c9:
         d8:6e:cc:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUT4pJYlSFbbiIM5aQCdL7x1uKBlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwN0Y5QzRDMDlEMUIzNzdCNkJFQUUzQ0FGQjE4REY4
RTJBQTlBQzAeFw0yMzA5MDUxMjAyNTdaFw0yNDA5MDMxMjA3NTdaMDMxMTAvBgNV
BAMTKDAzOTJBOTlFMDAwRjQ1RTFEN0MwNjk4MDU0RkQ3Q0Q5N0VGN0E3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNW3c1dQHruya1kUBCs27cc/7f
NISpoH77bOdDU4UQ6KDfuKDbvEYPjPa7lzNcBcVkGfpPYhX0WwBvGZz0j1tWQy4M
cVCR0rkdgy7Fpdc/kGlyi4d24OrLK0niPRLuGRl+VAplJAOvQxovv/TdwOy9aEyQ
ZJQm3bEZf16q67efpS/z9sm+4fx0E9GJ5ydASa8g1Vq/vcUXgz4SrDgwMWx/wS8d
CcXrDGlkgZCk+tp0iwCfBMQ7sJaRM75N4OUhaIcKGFK2iL1AAwnaTJ2ne4S6MiXq
gQsdmpq+kAGnHKFct9Zmnt9crg1lYOyL1UUDs9QqexB4Z/0YN7Suz+PXiyYnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUA5KpngAPReHXwGmAVP182X73p6kwHwYDVR0j
BBgwFoAU3Af5xMCdGzd7a+rjyvsY344qqawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndO
UWIvMC9EQzA3RjlDNEMwOUQxQjM3N0I2QkVBRTNDQUZCMThERjhFMkFBOUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMDdGOUM0QzA5RDFCMzc3
QjZCRUFFM0NBRkIxOERGOEUyQUE5QUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyUjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/y3DANBgkqhkiG9w0BAQsFAAOCAQEAjr4s
mblKXaVaRzwBOWNCqWe55ltkPok3JpE0VUbBRkYmHTD3wClzi0huAZe7rTStOcng
RcAhQxqymVlrMsZzIYgFjAk7rSDouZmldDCz6duH1D9yj+p8kRlI99KS99lLVWYx
gY8yhE096z0A9kXH7LsIoJMO0/GPtqHvqIIzNj5/g62mP/W29I8ni1v7+XoUXrzZ
qctV8uQ4K0h6ohrbpcxseh1uj1vjbkj4qRF7EThIyI1Qa/321lfHtOYrKZ/GneTa
Fgws23iugoEQopSmss4VTCLtzwW2+E7O0lgPFIiP87SvAQlAQ52MXggLSMwosP7q
kD+QOKKvsMnJ2G7MYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org