Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33352e302f32342d3234203d3e20323637343538.roa
File:                     3139322e3134312e33352e302f32342d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          xmqSCrLs8vHDufiwvFrcE2NuSonfIxq2r/K0ANYbvLg=
Subject key identifier:   4E:10:4E:D1:DA:42:62:4E:92:74:8E:6B:BF:EE:33:B6:2B:7B:EA:C0
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       074C59BF3CD53FA964F55E9E09505CAB76643E9E
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33352e302f32342d3234203d3e20323637343538.roa
Signing time:             Wed 14 Jun 2023 17:55:24 +0000
ROA not before:           Wed 14 Jun 2023 17:50:24 +0000
ROA not after:            Wed 12 Jun 2024 17:55:24 +0000
asID:                     267458
IP address blocks:        192.141.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4c:59:bf:3c:d5:3f:a9:64:f5:5e:9e:09:50:5c:ab:76:64:3e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jun 14 17:50:24 2023 GMT
            Not After : Jun 12 17:55:24 2024 GMT
        Subject: CN=4E104ED1DA42624E92748E6BBFEE33B62B7BEAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:f5:2c:c1:e2:bc:95:e4:5b:b3:f4:10:5b:
                    70:cb:7b:4d:4c:37:2c:74:fa:c6:9d:1c:db:2a:60:
                    85:85:1b:df:8c:f9:91:4d:f0:fd:be:ca:ae:96:58:
                    f3:77:31:67:13:91:d4:7b:7c:15:8b:36:58:e4:11:
                    06:ba:13:ae:e6:f6:7b:d6:53:8e:eb:08:cf:d2:0d:
                    a3:85:76:c2:0b:79:00:79:2a:5a:74:4d:da:c1:ea:
                    13:67:57:45:ae:c5:6e:78:55:ea:8b:4c:9b:18:ed:
                    86:2b:c0:c1:10:2a:e2:e7:93:23:dc:44:53:7c:6f:
                    c5:39:f9:a4:ab:55:5a:41:e8:8f:e3:37:be:5f:ba:
                    53:be:52:14:44:2b:3f:7b:b0:46:b4:f8:a1:a2:23:
                    e3:88:84:2b:02:9a:2c:c2:5b:99:c8:39:3d:8d:f4:
                    08:02:7d:fc:70:3e:54:c7:b4:f5:a8:69:39:ad:ce:
                    68:5f:e2:83:de:04:01:87:dd:e2:1b:1f:d3:b6:71:
                    05:e3:47:76:37:00:20:41:84:f0:b3:31:95:97:4e:
                    11:c4:6c:21:15:98:85:c1:75:9d:06:0a:7a:8b:ae:
                    27:4d:6d:15:ad:21:ba:a2:7b:57:66:ff:2b:ef:e5:
                    d0:bf:97:68:fd:24:92:f1:1a:9d:72:8e:26:6a:37:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:10:4E:D1:DA:42:62:4E:92:74:8E:6B:BF:EE:33:B6:2B:7B:EA:C0
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33352e302f32342d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:0c:e4:69:d4:d9:1e:76:c4:58:77:c0:f6:5c:95:c0:ec:
         9a:13:8a:96:eb:6d:5f:c0:95:7e:08:79:10:47:d3:e8:d7:61:
         a8:1e:02:b9:58:78:56:7d:28:7c:2d:85:cc:14:be:dd:7c:53:
         e8:a7:e7:7c:c9:5d:ad:8f:19:f6:c4:20:3e:47:e1:0a:30:14:
         12:a8:0a:01:8d:d4:32:60:12:bb:2c:45:41:da:6d:8b:17:4d:
         fd:7a:d3:b9:c8:4a:96:ea:62:ff:98:5b:74:bf:31:c2:b9:10:
         33:27:23:59:9d:23:32:e2:49:e2:dd:29:e5:4c:0e:33:55:4b:
         01:a4:7b:a7:7b:0d:0d:50:21:d8:32:84:1d:00:ea:18:9c:4a:
         2c:a9:a1:26:c7:48:5d:15:2a:88:1c:ff:54:e1:5d:f9:50:d5:
         c1:93:04:36:f1:d4:f5:fc:7f:a3:e8:5c:9c:0c:dd:f3:12:87:
         cd:e7:ea:3a:45:8b:2e:45:77:16:8b:c6:50:52:d8:fd:a5:16:
         4f:b9:9d:9f:6b:91:5c:4d:68:11:a4:63:fc:87:4a:d6:7b:35:
         a8:b1:ec:99:5a:76:04:d5:5a:a6:3c:41:37:c8:4b:9f:18:05:
         bb:f2:f3:93:bd:dc:11:d1:73:e3:29:15:5b:6f:a0:13:1d:fa:
         4a:52:69:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB0xZvzzVP6lk9V6eCVBcq3ZkPp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIzMjBDMkU3MkJCNEM2QzQxQjZEOUEzOUZERDRBQTU5
MEM5OUJGMzAeFw0yMzA2MTQxNzUwMjRaFw0yNDA2MTIxNzU1MjRaMDMxMTAvBgNV
BAMTKDRFMTA0RUQxREE0MjYyNEU5Mjc0OEU2QkJGRUUzM0I2MkI3QkVBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmPUsweK8leRbs/QQW3DLe01M
Nyx0+sadHNsqYIWFG9+M+ZFN8P2+yq6WWPN3MWcTkdR7fBWLNljkEQa6E67m9nvW
U47rCM/SDaOFdsILeQB5Klp0TdrB6hNnV0WuxW54VeqLTJsY7YYrwMEQKuLnkyPc
RFN8b8U5+aSrVVpB6I/jN75fulO+UhREKz97sEa0+KGiI+OIhCsCmizCW5nIOT2N
9AgCffxwPlTHtPWoaTmtzmhf4oPeBAGH3eIbH9O2cQXjR3Y3ACBBhPCzMZWXThHE
bCEVmIXBdZ0GCnqLridNbRWtIbqie1dm/yvv5dC/l2j9JJLxGp1yjiZqN1jLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUThBO0dpCYk6SdI5rv+4ztit76sAwHwYDVR0j
BBgwFoAUCzIMLnK7TGxBttmjn91KpZDJm/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC8wQjMyMEMyRTcyQkI0QzZDNDFCNkQ5QTM5RkRENEFBNTkwQzk5QkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCMzIwQzJFNzJCQjRDNkM0
MUI2RDlBMzlGREQ0QUE1OTBDOTlCRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzEzOTMyMmUzMTM0MzEyZTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjSMwDQYJKoZIhvcNAQELBQADggEBAKVqDORp
1NkedsRYd8D2XJXA7JoTipbrbV/AlX4IeRBH0+jXYageArlYeFZ9KHwthcwUvt18
U+in53zJXa2PGfbEID5H4QowFBKoCgGN1DJgErssRUHabYsXTf1607nISpbqYv+Y
W3S/McK5EDMnI1mdIzLiSeLdKeVMDjNVSwGke6d7DQ1QIdgyhB0A6hicSiypoSbH
SF0VKogc/1ThXflQ1cGTBDbx1PX8f6PoXJwM3fMSh83n6jpFiy5FdxaLxlBS2P2l
Fk+5nZ9rkVxNaBGkY/yHStZ7Naix7JladgTVWqY8QTfIS58YBbvy85O93BHRc+Mp
FVtvoBMd+kpSaZg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org