Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          NzdstInOZmKPuImf/JfQoNOADYdifIFvguktmqGAHv4=
Subject key identifier:   34:63:A1:87:C5:99:51:65:68:61:B1:41:5E:7E:67:A8:EF:9E:97:24
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       19C978B68918011EDC216DC6E1FF10D2F7E1E215
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:56 +0000
ROA not before:           Wed 03 Apr 2024 20:12:56 +0000
ROA not after:            Wed 02 Apr 2025 20:17:56 +0000
asID:                     270828
IP address blocks:        190.115.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:78:b6:89:18:01:1e:dc:21:6d:c6:e1:ff:10:d2:f7:e1:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  3 20:12:56 2024 GMT
            Not After : Apr  2 20:17:56 2025 GMT
        Subject: CN=3463A187C59951656861B1415E7E67A8EF9E9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:f0:b8:f5:75:a2:23:66:02:ee:f1:c1:5d:
                    85:31:70:50:38:db:d3:f9:94:fe:15:b3:77:09:ec:
                    25:bb:30:33:91:4e:e8:ea:28:cb:b6:eb:b1:aa:f7:
                    fa:6d:47:4d:44:68:4a:bc:41:15:70:15:25:83:9c:
                    4f:35:6f:76:6f:60:83:f5:aa:1f:ab:3a:d5:19:cd:
                    34:ac:f7:4f:eb:f8:7f:fc:3c:79:6d:f0:bf:5b:36:
                    a4:60:9b:2e:47:97:15:d3:f5:f7:6d:8f:62:fc:db:
                    66:22:97:c3:61:43:30:6e:30:0f:a2:17:53:f1:49:
                    67:e2:7e:39:da:ba:09:cf:af:bc:82:c9:6e:8c:de:
                    bd:52:a5:c0:db:78:a4:20:7d:8d:82:e7:1b:32:dd:
                    38:85:22:5d:53:05:59:05:b3:b4:a9:29:53:0c:a9:
                    05:02:18:8f:75:a7:1b:e8:a3:94:7e:17:a6:b7:66:
                    6d:5b:e6:9b:c8:c5:65:67:f2:8b:28:ee:61:8a:0c:
                    b1:64:14:e3:4d:d9:01:48:67:ca:52:45:6c:c6:e9:
                    ca:08:e8:97:94:a7:96:64:8a:68:bd:be:e2:af:dc:
                    0d:f0:6d:02:5a:0d:07:9e:23:b4:da:d7:97:ac:8b:
                    4c:b4:a5:6c:6d:cd:26:6c:70:39:f7:61:64:95:fe:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:63:A1:87:C5:99:51:65:68:61:B1:41:5E:7E:67:A8:EF:9E:97:24
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:e0:da:f1:bc:8a:34:75:41:c8:df:06:9e:ec:a0:46:87:
         3e:5c:a9:39:16:22:f8:6b:b2:66:5d:0c:b4:3a:f0:27:39:2e:
         39:ee:c1:01:fb:81:25:21:14:67:88:21:07:c1:38:18:14:67:
         b0:95:e2:df:e8:44:93:ad:0d:cb:9e:b9:33:e4:97:6e:88:10:
         8d:d0:1a:9f:b4:e4:bd:76:21:8d:fc:22:85:84:95:cb:6f:21:
         4f:38:4f:74:3b:d9:65:d6:0b:06:28:20:19:37:16:b4:0f:16:
         54:6c:bc:0a:5c:ef:67:b0:9a:6c:b0:b8:11:86:81:18:bb:bd:
         83:75:8e:3d:49:97:43:87:9c:1a:b1:23:d8:53:83:6b:bd:a9:
         f6:63:f9:4f:0f:b6:90:3a:e2:35:a0:96:91:fb:38:de:d0:6b:
         43:e2:c1:42:b2:da:18:2d:ad:35:66:35:ec:0b:ae:26:80:84:
         98:ef:fb:d2:bb:f1:00:8d:14:4f:f6:09:b6:97:8b:a2:27:a8:
         2e:64:ae:b8:21:c9:75:98:03:93:f8:74:25:b2:24:67:73:40:
         eb:61:dc:61:db:eb:f4:49:05:5c:7c:9c:37:78:00:58:7b:59:
         65:52:12:0c:93:44:38:eb:da:0a:ff:71:f5:01:d9:2c:d7:b0:
         54:48:9f:e3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGcl4tokYAR7cIW3G4f8Q0vfh4hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyNEVFODQ3MkI1RkM3Qjc5NTQ2Mjc4MDlGNTZDRkVC
NDVFNjMyMzAeFw0yNDA0MDMyMDEyNTZaFw0yNTA0MDIyMDE3NTZaMDMxMTAvBgNV
BAMTKDM0NjNBMTg3QzU5OTUxNjU2ODYxQjE0MTVFN0U2N0E4RUY5RTk3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK0fC49XWiI2YC7vHBXYUxcFA4
29P5lP4Vs3cJ7CW7MDORTujqKMu267Gq9/ptR01EaEq8QRVwFSWDnE81b3ZvYIP1
qh+rOtUZzTSs90/r+H/8PHlt8L9bNqRgmy5HlxXT9fdtj2L822Yil8NhQzBuMA+i
F1PxSWfifjnaugnPr7yCyW6M3r1SpcDbeKQgfY2C5xsy3TiFIl1TBVkFs7SpKVMM
qQUCGI91pxvoo5R+F6a3Zm1b5pvIxWVn8oso7mGKDLFkFONN2QFIZ8pSRWzG6coI
6JeUp5Zkimi9vuKv3A3wbQJaDQeeI7Ta15esi0y0pWxtzSZscDn3YWSV/qNVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNGOhh8WZUWVoYbFBXn5nqO+elyQwHwYDVR0j
BBgwFoAUlSTuhHK1/Ht5VGJ4CfVs/rReYyMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjhWblVUV3h4S05KbnVrWmZLd3o2SlZXWmpYeUM2dVJ3eHNtU2hGbjZG
ZkcvMS85NTI0RUU4NDcyQjVGQzdCNzk1NDYyNzgwOUY1NkNGRUI0NUU2MzIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MjRFRTg0NzJCNUZDN0I3
OTU0NjI3ODA5RjU2Q0ZFQjQ1RTYzMjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4Vm5VVFd4eEtOSm51a1pmS3d6NkpWV1pqWHlDNnVSd3hzbVNoRm42RmZHLzEv
MzEzOTMwMmUzMTMxMzUyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5z3DANBgkqhkiG9w0BAQsFAAOCAQEAG5ng
2vG8ijR1QcjfBp7soEaHPlypORYi+GuyZl0MtDrwJzkuOe7BAfuBJSEUZ4ghB8E4
GBRnsJXi3+hEk60Ny565M+SXbogQjdAan7TkvXYhjfwihYSVy28hTzhPdDvZZdYL
BiggGTcWtA8WVGy8ClzvZ7CabLC4EYaBGLu9g3WOPUmXQ4ecGrEj2FODa72p9mP5
Tw+2kDriNaCWkfs43tBrQ+LBQrLaGC2tNWY17AuuJoCEmO/70rvxAI0UT/YJtpeL
oieoLmSuuCHJdZgDk/h0JbIkZ3NA62HcYdvr9EkFXHycN3gAWHtZZVISDJNEOOva
Cv9x9QHZLNewVEif4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org