Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3234382e302f32332d3233203d3e20323730343232.roa
File:                     3139302e38392e3234382e302f32332d3233203d3e20323730343232.roa (raw, json)
Hash identifier:          oywSQqJ/QGYL+7NdQCOb+Il9qjdVYvjw/W6eSslT3HM=
Subject key identifier:   18:D5:33:DF:52:74:B4:00:6C:7D:4D:E7:3E:83:C9:9A:97:BD:1A:C4
Certificate issuer:       /CN=6B63BBA42510D3769660DEC12024878FF11D4859
Certificate serial:       6ED24B2180A63CEC180EB94B163AB0CBCC18DE15
Authority key identifier: 6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B63BBA42510D3769660DEC12024878FF11D4859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3234382e302f32332d3233203d3e20323730343232.roa
Signing time:             Sat 11 Feb 2023 01:01:34 +0000
ROA not before:           Sat 11 Feb 2023 00:56:34 +0000
ROA not after:            Sat 10 Feb 2024 01:01:34 +0000
asID:                     270422
IP address blocks:        190.89.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:4b:21:80:a6:3c:ec:18:0e:b9:4b:16:3a:b0:cb:cc:18:de:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B63BBA42510D3769660DEC12024878FF11D4859
        Validity
            Not Before: Feb 11 00:56:34 2023 GMT
            Not After : Feb 10 01:01:34 2024 GMT
        Subject: CN=18D533DF5274B4006C7D4DE73E83C99A97BD1AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:c1:18:cf:c7:d4:46:6f:b3:ed:32:9b:c4:
                    a1:46:2d:f8:cb:19:69:81:92:b5:3f:1d:43:6c:8a:
                    75:6e:f5:1f:9a:83:3e:0d:f1:97:83:14:8c:29:19:
                    ef:ce:aa:d2:e8:16:a1:d1:2f:d8:8e:12:29:26:a0:
                    00:01:be:11:77:a6:fd:7c:0c:fd:ea:ed:4e:ca:de:
                    7c:54:ee:36:1c:a8:a1:0e:ea:fe:e2:31:53:83:84:
                    78:03:c2:17:50:c2:0d:6b:cf:0f:16:20:25:d5:45:
                    1c:86:bd:1b:27:4b:9e:fa:b0:5f:cd:81:6c:26:84:
                    3a:5b:e1:22:49:63:48:e2:f1:45:36:55:5f:ac:75:
                    a7:94:fb:f1:ab:b1:ae:4a:ce:26:ce:36:bb:21:23:
                    1c:42:b3:ae:c2:82:1c:04:4a:28:4c:f9:39:8a:7e:
                    f4:23:d4:f4:62:f5:ea:fc:e0:8b:37:67:d8:82:76:
                    38:99:b4:1f:9a:5b:a3:db:e8:26:06:ef:83:0f:ef:
                    95:97:ca:9c:d0:85:7f:d0:0c:bd:0a:42:ef:0f:28:
                    8c:48:6d:55:93:63:97:6f:3d:18:be:d5:43:0d:8e:
                    eb:35:4f:92:80:89:68:42:e5:24:d1:fe:77:ff:08:
                    e7:5b:96:2e:4f:dd:e9:ea:7c:11:cb:c5:a7:a3:7a:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:33:DF:52:74:B4:00:6C:7D:4D:E7:3E:83:C9:9A:97:BD:1A:C4
            X509v3 Authority Key Identifier:
                keyid:6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/6B63BBA42510D3769660DEC12024878FF11D4859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B63BBA42510D3769660DEC12024878FF11D4859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3234382e302f32332d3233203d3e20323730343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:55:4c:3e:a4:44:17:0c:15:96:bd:d2:7c:46:22:69:52:
         7b:83:82:f3:1b:13:b8:8f:0d:85:8f:1d:fd:c0:83:4d:cd:61:
         da:b8:d3:7f:6b:45:72:8b:d3:43:af:26:50:4f:9a:42:cc:72:
         8b:a9:4c:0a:52:b5:ab:d7:ab:60:bf:08:5c:ca:4f:ed:a2:cd:
         6f:ec:e2:e7:ff:f5:ba:b4:e1:a0:d1:23:e9:45:0c:86:52:b8:
         17:02:0b:7f:2e:3a:54:e3:e3:a6:34:c4:5a:3b:2d:04:99:38:
         a0:14:08:ed:5a:a3:d6:02:b8:46:24:29:2e:ed:77:2e:eb:2b:
         c7:c5:78:02:bb:fd:af:22:43:df:66:ad:88:69:64:fb:30:f6:
         f4:50:81:1c:b2:15:23:0a:82:e0:b8:b4:c5:b7:b8:fd:a7:07:
         22:93:5a:3d:b5:93:c7:02:77:30:29:41:ec:a2:98:53:d9:11:
         c4:07:8e:84:cc:67:bb:4f:e2:3a:40:a2:0a:c3:86:28:ed:e1:
         4a:3c:ae:95:bb:77:45:c1:60:2c:ce:f6:f1:89:b1:05:4d:aa:
         ea:b6:20:dd:af:1e:8f:e8:25:43:6b:02:c1:6c:8e:d0:45:f8:
         e7:66:e4:16:e5:4c:b8:04:4d:e8:02:a6:5b:0f:b0:9d:58:75:
         bd:17:68:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbtJLIYCmPOwYDrlLFjqwy8wY3hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI2M0JCQTQyNTEwRDM3Njk2NjBERUMxMjAyNDg3OEZG
MTFENDg1OTAeFw0yMzAyMTEwMDU2MzRaFw0yNDAyMTAwMTAxMzRaMDMxMTAvBgNV
BAMTKDE4RDUzM0RGNTI3NEI0MDA2QzdENERFNzNFODNDOTlBOTdCRDFBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEsEYz8fURm+z7TKbxKFGLfjL
GWmBkrU/HUNsinVu9R+agz4N8ZeDFIwpGe/OqtLoFqHRL9iOEikmoAABvhF3pv18
DP3q7U7K3nxU7jYcqKEO6v7iMVODhHgDwhdQwg1rzw8WICXVRRyGvRsnS576sF/N
gWwmhDpb4SJJY0ji8UU2VV+sdaeU+/Grsa5KzibONrshIxxCs67CghwESihM+TmK
fvQj1PRi9er84Is3Z9iCdjiZtB+aW6Pb6CYG74MP75WXypzQhX/QDL0KQu8PKIxI
bVWTY5dvPRi+1UMNjus1T5KAiWhC5STR/nf/COdbli5P3enqfBHLxaejeusNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGNUz31J0tABsfU3nPoPJmpe9GsQwHwYDVR0j
BBgwFoAUa2O7pCUQ03aWYN7BICSHj/EdSFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnd1SEpSamdWdEo5aXFYcXE2aTVGTmlmZ3NFZXhkQURtYnhxYThoR0hn
WXIvMC82QjYzQkJBNDI1MTBEMzc2OTY2MERFQzEyMDI0ODc4RkYxMUQ0ODU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCNjNCQkE0MjUxMEQzNzY5
NjYwREVDMTIwMjQ4NzhGRjExRDQ4NTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z3dUhKUmpnVnRKOWlxWHFxNmk1Rk5pZmdzRWV4ZEFEbWJ4cWE4aEdIZ1lyLzAv
MzEzOTMwMmUzODM5MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG+WfgwDQYJKoZIhvcNAQELBQADggEBAEvMVUw+
pEQXDBWWvdJ8RiJpUnuDgvMbE7iPDYWPHf3Ag03NYdq4039rRXKL00OvJlBPmkLM
coupTApStavXq2C/CFzKT+2izW/s4uf/9bq04aDRI+lFDIZSuBcCC38uOlTj46Y0
xFo7LQSZOKAUCO1ao9YCuEYkKS7tdy7rK8fFeAK7/a8iQ99mrYhpZPsw9vRQgRyy
FSMKguC4tMW3uP2nByKTWj21k8cCdzApQeyimFPZEcQHjoTMZ7tP4jpAogrDhijt
4Uo8rpW7d0XBYCzO9vGJsQVNquq2IN2vHo/oJUNrAsFsjtBF+Odm5BblTLgETegC
plsPsJ1Ydb0XaHQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org