Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          V2SfYuSyHbN9enmxemtm/XTHPTNA0UPlgsfliGokxDI=
Subject key identifier:   B1:86:6E:73:57:F4:24:17:D4:92:A3:B5:AC:55:2D:82:3E:78:23:00
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       3C0A7C79AF84DE399C9989611FD452A2EF958948
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        190.115.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0a:7c:79:af:84:de:39:9c:99:89:61:1f:d4:52:a2:ef:95:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=B1866E7357F42417D492A3B5AC552D823E782300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:6b:cd:93:23:67:0a:e2:40:03:0f:0b:f4:
                    3d:92:f0:6d:d0:0d:7b:a5:0a:53:d6:b8:56:ef:9e:
                    2a:d5:ca:e0:ca:25:ae:af:70:a4:b6:92:17:9e:cd:
                    6f:d9:fa:3f:bc:9d:66:44:e2:84:45:01:2b:ac:a5:
                    0e:ed:82:65:04:b7:55:a2:c9:35:97:0b:69:ca:31:
                    09:3d:3b:4f:96:eb:ea:c1:56:ea:f1:ff:9b:16:7f:
                    c0:97:9a:31:b7:dd:33:a4:32:b3:98:db:8d:6c:ce:
                    03:29:6c:51:9f:01:41:03:d9:51:59:f5:b8:47:1f:
                    fb:f6:65:dd:0c:a6:c5:07:3a:dc:14:dd:42:98:9f:
                    51:2e:24:31:36:85:1d:2c:30:99:5e:48:ff:89:2a:
                    f5:b2:6e:63:38:9d:02:78:bc:b9:c5:ed:a9:01:6e:
                    64:a2:13:a2:01:a1:8e:f4:77:b8:bb:6e:e4:8c:e4:
                    98:fc:56:5d:74:20:6b:5f:59:b1:e3:6b:5b:3d:3a:
                    47:80:2b:68:9c:e9:24:d4:5c:98:bc:a2:b7:3a:64:
                    a3:78:99:d5:37:52:97:3e:06:73:96:d5:2c:27:9e:
                    7b:ba:14:cc:66:11:04:fa:c8:f7:1c:56:bd:86:d7:
                    08:db:62:17:28:a2:0a:7d:fd:23:df:7e:cd:c0:a0:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:86:6E:73:57:F4:24:17:D4:92:A3:B5:AC:55:2D:82:3E:78:23:00
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:82:84:92:f9:97:4e:9b:f2:df:d6:a2:ae:3c:ed:7e:dd:ac:
         8b:ee:b1:21:06:ff:e5:5d:5f:f9:c6:45:ab:49:75:b5:5f:d4:
         a4:31:ac:42:db:35:f2:70:e9:05:a1:05:f0:ae:85:60:b5:42:
         de:4a:c1:16:c1:76:d1:e9:78:cb:f3:bb:00:d2:0a:4d:eb:b8:
         7f:ce:c8:21:8a:68:b6:75:22:38:c4:16:03:ef:59:9d:df:5e:
         2b:8b:51:d4:0f:f7:4b:34:63:a2:74:09:b2:78:7e:f2:f6:7f:
         a0:02:58:a8:fd:79:9c:ef:7d:cc:f4:3d:c1:05:89:ba:c2:89:
         8d:79:07:f2:52:07:a9:32:40:7d:0b:c1:f7:0a:61:2f:e2:55:
         ea:19:ea:8a:96:d1:25:e2:ab:83:15:e2:18:a7:0f:b9:5a:8b:
         da:d7:bc:cd:9f:96:de:4a:88:d0:52:1d:22:b3:48:ba:4b:35:
         49:ac:f6:23:e7:27:05:87:7f:d0:f9:02:ea:34:11:7f:6d:82:
         2e:85:e8:66:46:e6:af:52:86:82:2f:29:83:89:77:d6:f5:70:
         94:1e:bd:0f:ea:8a:16:5f:46:35:db:b2:43:3f:82:04:6a:fd:
         2e:b3:55:e5:41:13:da:9e:4b:63:c0:6a:22:c0:2b:63:1a:a0:
         1d:34:d5:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPAp8ea+E3jmcmYlhH9RSou+ViUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBNTlEN0ZDNThERDkzRkQ4MzlFMzZCNjY2RjBBNTI5
NUY5OEU1RjAeFw0yNDA0MDMyMDEyMzlaFw0yNTA0MDIyMDE3MzlaMDMxMTAvBgNV
BAMTKEIxODY2RTczNTdGNDI0MTdENDkyQTNCNUFDNTUyRDgyM0U3ODIzMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5WvNkyNnCuJAAw8L9D2S8G3Q
DXulClPWuFbvnirVyuDKJa6vcKS2kheezW/Z+j+8nWZE4oRFASuspQ7tgmUEt1Wi
yTWXC2nKMQk9O0+W6+rBVurx/5sWf8CXmjG33TOkMrOY241szgMpbFGfAUED2VFZ
9bhHH/v2Zd0MpsUHOtwU3UKYn1EuJDE2hR0sMJleSP+JKvWybmM4nQJ4vLnF7akB
bmSiE6IBoY70d7i7buSM5Jj8Vl10IGtfWbHja1s9OkeAK2ic6STUXJi8orc6ZKN4
mdU3Upc+BnOW1Swnnnu6FMxmEQT6yPccVr2G1wjbYhcoogp9/SPffs3AoPpdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsYZuc1f0JBfUkqO1rFUtgj54IwAwHwYDVR0j
BBgwFoAUEaWdf8WN2T/YOeNrZm8KUpX5jl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjhWblVUV3h4S05KbnVrWmZLd3o2SlZXWmpYeUM2dVJ3eHNtU2hGbjZG
ZkcvMC8xMUE1OUQ3RkM1OEREOTNGRDgzOUUzNkI2NjZGMEE1Mjk1Rjk4RTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQTU5RDdGQzU4REQ5M0ZE
ODM5RTM2QjY2NkYwQTUyOTVGOThFNUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4Vm5VVFd4eEtOSm51a1pmS3d6NkpWV1pqWHlDNnVSd3hzbVNoRm42RmZHLzAv
MzEzOTMwMmUzMTMxMzUyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5z3TANBgkqhkiG9w0BAQsFAAOCAQEAR4KE
kvmXTpvy39airjztft2si+6xIQb/5V1f+cZFq0l1tV/UpDGsQts18nDpBaEF8K6F
YLVC3krBFsF20el4y/O7ANIKTeu4f87IIYpotnUiOMQWA+9Znd9eK4tR1A/3SzRj
onQJsnh+8vZ/oAJYqP15nO99zPQ9wQWJusKJjXkH8lIHqTJAfQvB9wphL+JV6hnq
ipbRJeKrgxXiGKcPuVqL2te8zZ+W3kqI0FIdIrNIuks1Saz2I+cnBYd/0PkC6jQR
f22CLoXoZkbmr1KGgi8pg4l31vVwlB69D+qKFl9GNduyQz+CBGr9LrNV5UET2p5L
Y8BqIsArYxqgHTTVqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org