Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa (raw, json)
Hash identifier:          PteGXABlkD0TOhXQ1OgqmnBKEwEt3ktK7MSuB3kSBpw=
Subject key identifier:   0F:48:41:A7:B6:00:60:55:16:C4:7A:3C:D3:27:0F:4A:E8:D7:FA:6A
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       3361ACD8C7CD556DE869CF880F75CBE477B7D351
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:57 +0000
ROA not before:           Wed 03 Apr 2024 20:12:57 +0000
ROA not after:            Wed 02 Apr 2025 20:17:57 +0000
asID:                     270828
IP address blocks:        190.115.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:ac:d8:c7:cd:55:6d:e8:69:cf:88:0f:75:cb:e4:77:b7:d3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  3 20:12:57 2024 GMT
            Not After : Apr  2 20:17:57 2025 GMT
        Subject: CN=0F4841A7B600605516C47A3CD3270F4AE8D7FA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:67:42:a5:49:70:ba:25:0a:70:7a:43:d5:
                    33:dc:5c:02:80:ff:c0:68:73:c6:e6:5c:f2:23:7a:
                    41:7f:72:7c:d0:bc:86:78:8e:36:f0:48:ae:f2:ea:
                    4b:80:d1:4a:94:fe:e9:68:24:c0:44:2f:3f:21:a9:
                    10:7c:85:25:78:9a:8f:7a:d5:b6:cb:3c:e4:34:ad:
                    7f:8f:54:cf:00:87:90:6a:67:72:31:4d:fd:72:c4:
                    71:d0:90:ce:cd:06:8a:9d:b0:0c:7a:19:e3:86:9b:
                    f8:90:a9:7d:8c:99:4a:2a:a1:fa:a0:24:db:88:f6:
                    a1:b9:db:0c:14:d9:fd:13:c3:04:3f:f2:5d:8e:5c:
                    95:29:0a:0a:fc:84:63:70:79:95:64:50:ee:2c:cb:
                    de:67:42:98:5d:1c:88:fc:57:95:2f:85:bd:43:8d:
                    d0:9b:c4:73:57:b6:cf:72:5d:a6:43:81:9f:7b:70:
                    93:70:f4:07:cf:ec:a4:c3:a3:47:b9:f8:af:1a:82:
                    27:d1:ba:60:8a:a7:32:8d:ab:b5:ba:b1:be:0e:c9:
                    69:ab:f3:29:07:17:d5:20:b2:8e:9e:e9:14:3c:fc:
                    e4:64:51:ce:f7:9a:bd:cc:fe:4d:bd:d8:23:d9:a9:
                    06:b0:4c:6c:c2:1d:0b:a7:47:83:e7:c2:38:7e:d3:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:48:41:A7:B6:00:60:55:16:C4:7A:3C:D3:27:0F:4A:E8:D7:FA:6A
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:34:16:77:4b:dd:9f:6f:89:44:7d:31:e3:cb:0b:f1:c1:
         dc:b8:06:27:d5:ae:41:23:31:1f:03:6d:66:0a:16:13:db:61:
         f2:10:00:ff:f9:eb:96:85:e3:0e:a0:89:5e:f3:84:3f:21:78:
         59:5f:89:a3:7b:13:4b:24:5c:ca:43:d2:b1:1f:65:24:22:40:
         e7:ba:76:05:3a:ac:1f:26:15:39:8b:0e:f7:24:5d:2e:5c:31:
         05:8f:5a:d7:1f:cc:bd:d2:97:b7:86:2d:c1:44:84:4d:01:96:
         0f:80:e2:67:3b:58:25:36:00:76:70:c3:03:0f:a4:1c:e7:f6:
         71:7a:90:d2:c6:67:b1:00:62:f3:48:1a:91:ea:10:a9:28:d0:
         c6:24:b1:5e:20:8a:82:0a:b8:c5:97:f2:61:6f:64:c1:cc:90:
         a6:32:4b:e2:c0:55:6c:d1:21:64:1a:f4:9f:10:e4:8c:b2:11:
         8f:e7:9c:14:07:5d:ac:5b:8c:23:18:36:95:cc:0a:09:95:bd:
         ff:f1:3f:1d:55:9f:8f:59:04:76:6b:ce:63:7f:3a:c1:61:a6:
         b6:7b:6e:40:6c:a5:cd:56:f8:eb:ec:65:cf:07:11:64:82:ab:
         d8:02:5d:cb:77:66:52:40:13:9a:e1:1d:83:e3:aa:51:70:f4:
         de:bc:67:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM2Gs2MfNVW3oac+ID3XL5He301EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyNEVFODQ3MkI1RkM3Qjc5NTQ2Mjc4MDlGNTZDRkVC
NDVFNjMyMzAeFw0yNDA0MDMyMDEyNTdaFw0yNTA0MDIyMDE3NTdaMDMxMTAvBgNV
BAMTKDBGNDg0MUE3QjYwMDYwNTUxNkM0N0EzQ0QzMjcwRjRBRThEN0ZBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2mdCpUlwuiUKcHpD1TPcXAKA
/8Boc8bmXPIjekF/cnzQvIZ4jjbwSK7y6kuA0UqU/uloJMBELz8hqRB8hSV4mo96
1bbLPOQ0rX+PVM8Ah5BqZ3IxTf1yxHHQkM7NBoqdsAx6GeOGm/iQqX2MmUoqofqg
JNuI9qG52wwU2f0TwwQ/8l2OXJUpCgr8hGNweZVkUO4sy95nQphdHIj8V5Uvhb1D
jdCbxHNXts9yXaZDgZ97cJNw9AfP7KTDo0e5+K8agifRumCKpzKNq7W6sb4OyWmr
8ykHF9Ugso6e6RQ8/ORkUc73mr3M/k292CPZqQawTGzCHQunR4Pnwjh+00t/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUD0hBp7YAYFUWxHo80ycPSujX+mowHwYDVR0j
BBgwFoAUlSTuhHK1/Ht5VGJ4CfVs/rReYyMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjhWblVUV3h4S05KbnVrWmZLd3o2SlZXWmpYeUM2dVJ3eHNtU2hGbjZG
ZkcvMS85NTI0RUU4NDcyQjVGQzdCNzk1NDYyNzgwOUY1NkNGRUI0NUU2MzIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MjRFRTg0NzJCNUZDN0I3
OTU0NjI3ODA5RjU2Q0ZFQjQ1RTYzMjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4Vm5VVFd4eEtOSm51a1pmS3d6NkpWV1pqWHlDNnVSd3hzbVNoRm42RmZHLzEv
MzEzOTMwMmUzMTMxMzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5z3DANBgkqhkiG9w0BAQsFAAOCAQEAQK00
FndL3Z9viUR9MePLC/HB3LgGJ9WuQSMxHwNtZgoWE9th8hAA//nrloXjDqCJXvOE
PyF4WV+Jo3sTSyRcykPSsR9lJCJA57p2BTqsHyYVOYsO9yRdLlwxBY9a1x/MvdKX
t4YtwUSETQGWD4DiZztYJTYAdnDDAw+kHOf2cXqQ0sZnsQBi80gakeoQqSjQxiSx
XiCKggq4xZfyYW9kwcyQpjJL4sBVbNEhZBr0nxDkjLIRj+ecFAddrFuMIxg2lcwK
CZW9//E/HVWfj1kEdmvOY386wWGmtntuQGylzVb46+xlzwcRZIKr2AJdy3dmUkAT
muEdg+OqUXD03rxnSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org