Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          dGCqmmOkAozq3fD/i/rizxaO8CVD/sRBRlyx3MvvtmQ=
Subject key identifier:   3E:FF:0A:57:A6:4A:53:8D:D5:99:C4:60:0D:13:A7:DF:00:58:E9:80
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       46BBFD802463A0691E5386D022D989D3FC5B25A6
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:56 +0000
ROA not before:           Wed 20 Mar 2024 19:23:56 +0000
ROA not after:            Wed 19 Mar 2025 19:28:56 +0000
asID:                     271111
IP address blocks:        192.140.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:fd:80:24:63:a0:69:1e:53:86:d0:22:d9:89:d3:fc:5b:25:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:56 2024 GMT
            Not After : Mar 19 19:28:56 2025 GMT
        Subject: CN=3EFF0A57A64A538DD599C4600D13A7DF0058E980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:8e:90:d1:97:7b:92:69:d2:bd:3d:86:c6:
                    98:12:80:58:f1:74:09:41:4f:0a:9c:81:66:07:54:
                    d2:15:d2:4b:40:f3:38:a3:9b:45:78:10:96:e4:4d:
                    d3:92:1f:b8:1e:1a:0a:ed:27:26:5e:8b:37:16:bd:
                    6a:0d:1f:f7:54:38:be:26:b5:2b:a4:83:5e:0d:54:
                    f6:89:5d:bb:45:f6:6e:47:33:6b:16:4c:c4:b8:94:
                    ea:de:46:78:d2:dd:3b:e5:71:5d:fa:d7:42:cb:24:
                    2e:b6:c3:ba:df:48:f0:46:59:64:d5:47:47:83:47:
                    e9:92:2e:91:78:53:52:17:59:01:b7:13:00:19:1b:
                    43:e5:65:ba:f0:60:5c:08:67:1d:44:e1:00:9b:86:
                    d7:6b:4d:0d:03:a6:a9:13:33:0f:ee:d2:3a:96:44:
                    22:21:02:73:4f:8f:35:73:bc:93:01:0e:c0:1f:d1:
                    9d:73:8f:b0:c9:c6:e5:92:0f:9c:7d:68:41:e2:9b:
                    29:17:80:88:2b:72:45:a2:56:d2:f2:56:a6:f2:27:
                    db:b0:5a:2f:e8:97:ab:f3:28:1d:54:c2:fd:32:cb:
                    f1:9f:64:09:7c:8f:3a:87:6b:25:9a:03:5e:18:5f:
                    eb:ef:65:39:00:8a:0f:e3:02:63:fd:e0:76:38:b6:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FF:0A:57:A6:4A:53:8D:D5:99:C4:60:0D:13:A7:DF:00:58:E9:80
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:4e:a0:d3:5e:f5:0f:f9:0e:e5:da:0e:09:01:6f:a7:8f:11:
         5a:5f:b5:c3:a7:09:51:e6:a6:3d:1d:0b:82:fd:8c:2a:60:bb:
         5a:fe:cc:99:46:6d:0e:76:ab:16:c3:ee:18:8e:1f:17:89:d2:
         50:9d:c3:78:35:f9:2e:33:23:f3:4a:1e:5e:e9:70:8c:94:94:
         28:fb:13:e7:6a:6a:db:77:c3:9c:89:96:1b:07:66:69:d1:b5:
         3d:6d:40:fd:e6:6f:e4:19:a2:12:62:05:4d:ba:34:01:ce:2f:
         36:17:46:a8:44:34:e9:cb:fd:fc:05:d4:42:1c:e3:d8:2e:c5:
         73:82:06:48:59:42:ab:54:08:32:22:0a:36:2f:93:0a:99:eb:
         42:f1:5f:fa:6c:3b:77:ec:0f:d0:a4:b6:a6:21:5a:ca:0f:d1:
         e7:23:3d:50:5e:91:2a:8c:11:d6:a5:78:d4:b4:95:9d:d7:c5:
         69:62:d4:20:e6:52:ca:2e:ad:1c:e3:60:3e:84:d7:b8:e1:02:
         03:d4:17:75:c8:e9:f1:f2:aa:04:27:17:43:cd:d7:6a:8a:44:
         d6:be:5f:4e:26:b3:82:55:2e:65:f5:14:82:d8:02:28:cc:63:
         b1:96:d5:4a:9c:f8:c2:f7:7e:f1:fb:15:52:b1:ac:ae:7d:8b:
         f8:48:48:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURrv9gCRjoGkeU4bQItmJ0/xbJaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FENTk3MjI5MDU4NkI1QkVCOTEwNkRDMTc1NDMwMTE1
MEE2M0M4NzAeFw0yNDAzMjAxOTIzNTZaFw0yNTAzMTkxOTI4NTZaMDMxMTAvBgNV
BAMTKDNFRkYwQTU3QTY0QTUzOERENTk5QzQ2MDBEMTNBN0RGMDA1OEU5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6o6Q0Zd7kmnSvT2GxpgSgFjx
dAlBTwqcgWYHVNIV0ktA8zijm0V4EJbkTdOSH7geGgrtJyZeizcWvWoNH/dUOL4m
tSukg14NVPaJXbtF9m5HM2sWTMS4lOreRnjS3TvlcV3610LLJC62w7rfSPBGWWTV
R0eDR+mSLpF4U1IXWQG3EwAZG0PlZbrwYFwIZx1E4QCbhtdrTQ0DpqkTMw/u0jqW
RCIhAnNPjzVzvJMBDsAf0Z1zj7DJxuWSD5x9aEHimykXgIgrckWiVtLyVqbyJ9uw
Wi/ol6vzKB1Uwv0yy/GfZAl8jzqHayWaA14YX+vvZTkAig/jAmP94HY4thm1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPv8KV6ZKU43VmcRgDROn3wBY6YAwHwYDVR0j
BBgwFoAUOtWXIpBYa1vrkQbcF1QwEVCmPIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5
NmIvMC8zQUQ1OTcyMjkwNTg2QjVCRUI5MTA2REMxNzU0MzAxMTUwQTYzQzg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBRDU5NzIyOTA1ODZCNUJF
QjkxMDZEQzE3NTQzMDExNTBBNjNDODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv
MzEzOTMyMmUzMTM0MzAyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjFcwDQYJKoZIhvcNAQELBQADggEBAF9OoNNe
9Q/5DuXaDgkBb6ePEVpftcOnCVHmpj0dC4L9jCpgu1r+zJlGbQ52qxbD7hiOHxeJ
0lCdw3g1+S4zI/NKHl7pcIyUlCj7E+dqatt3w5yJlhsHZmnRtT1tQP3mb+QZohJi
BU26NAHOLzYXRqhENOnL/fwF1EIc49guxXOCBkhZQqtUCDIiCjYvkwqZ60LxX/ps
O3fsD9CktqYhWsoP0ecjPVBekSqMEdaleNS0lZ3XxWli1CDmUsourRzjYD6E17jh
AgPUF3XI6fHyqgQnF0PN12qKRNa+X04ms4JVLmX1FILYAijMY7GW1Uqc+ML3fvH7
FVKxrK59i/hISBw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org