Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3230203d3e203238313235.roa
File:                     3138372e31392e31362e302f32302d3230203d3e203238313235.roa (raw, json)
Hash identifier:          8FFawRyJ4Iv1DdZnM03gxt4vLbD8bOpmZ8gnBVrSHNc=
Subject key identifier:   A2:50:A7:3F:09:99:90:31:54:B3:B5:8C:8B:BC:85:65:3A:43:42:45
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       461B88917479D294A024227FD11269B21D6EB299
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3230203d3e203238313235.roa
Signing time:             Thu 21 Mar 2024 17:57:08 +0000
ROA not before:           Thu 21 Mar 2024 17:52:08 +0000
ROA not after:            Thu 20 Mar 2025 17:57:08 +0000
asID:                     28125
IP address blocks:        187.19.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1b:88:91:74:79:d2:94:a0:24:22:7f:d1:12:69:b2:1d:6e:b2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 21 17:52:08 2024 GMT
            Not After : Mar 20 17:57:08 2025 GMT
        Subject: CN=A250A73F0999903154B3B58C8BBC85653A434245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:11:36:fc:61:96:72:ff:14:54:37:a8:4f:
                    fc:ce:57:1d:b9:c8:3b:4d:be:b3:df:b6:a7:16:b8:
                    20:b4:30:68:a7:9f:80:99:50:b8:34:0e:76:b9:cd:
                    d9:70:c4:d7:4d:1e:37:71:d7:af:ad:ac:49:29:19:
                    98:20:96:31:b9:d1:3b:e1:25:69:91:86:95:12:18:
                    88:4b:30:72:30:c2:d7:5a:c1:3d:8c:fe:a0:96:3e:
                    b2:31:bb:7f:83:9d:9c:a2:cd:85:ce:1f:b8:82:f4:
                    45:a2:2a:17:db:d3:73:b7:2a:37:8c:73:eb:31:60:
                    10:85:2f:91:ac:1e:d6:8a:ba:66:46:83:88:f4:e2:
                    73:5b:42:27:54:7b:11:55:b9:bc:8d:d4:42:04:97:
                    41:f8:5f:1d:3b:af:66:42:1f:0c:f1:6d:3d:8c:8d:
                    ae:cc:fc:cd:95:96:4b:c1:19:5d:f8:71:96:b8:d7:
                    52:80:39:7d:96:ca:07:dc:fb:9e:fc:f4:10:b7:b3:
                    99:e2:44:63:d6:35:37:6e:d7:26:9f:8a:c8:3f:f1:
                    ee:8c:3d:d9:d3:38:3c:8e:76:17:a9:1c:2d:e0:a0:
                    c4:a5:ee:c4:26:8c:ed:5f:2d:41:ec:81:5a:fc:92:
                    7f:b3:70:be:82:04:47:7b:f1:2b:e4:ec:d3:30:d0:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:50:A7:3F:09:99:90:31:54:B3:B5:8C:8B:BC:85:65:3A:43:42:45
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32302d3230203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:c1:4e:83:9f:e3:72:a0:77:d9:e0:86:e7:c3:e2:2e:85:
         7c:28:27:3c:b3:98:7c:64:10:6c:5f:f4:49:b0:6d:3e:a6:5f:
         71:2a:df:0b:c4:3c:9e:ca:e2:49:24:c7:58:64:e0:3e:7f:6f:
         40:bc:31:8b:7c:5f:1d:50:47:da:7b:98:ed:c1:e9:ba:7a:e8:
         d5:c8:ab:65:db:e4:0f:3a:78:a8:25:5e:27:a0:98:e5:54:6b:
         65:7c:c4:28:47:61:46:b6:f8:08:24:2e:18:36:eb:40:62:2c:
         65:5f:c4:7d:64:4a:5a:e5:fa:c9:07:cb:c4:ed:89:4c:79:aa:
         75:22:f2:35:7a:5e:9d:ca:92:74:05:00:11:70:75:61:dd:d8:
         c6:30:b2:bf:4f:d0:08:12:11:9b:0f:0c:01:fc:d1:6f:98:81:
         84:46:95:31:03:e7:c3:5e:bc:0a:45:4d:5a:72:c6:25:69:43:
         2f:f3:62:d0:6e:c3:d6:c8:52:b1:e0:cf:a3:9a:b6:59:a9:d2:
         fe:1e:45:5d:3b:63:b4:3c:87:16:f0:96:d4:b7:16:a3:35:30:
         e0:66:6e:1e:ed:9d:c0:52:98:17:8e:c4:bd:bb:b6:ae:7f:9e:
         55:3b:15:64:5d:59:59:d0:35:f3:85:5f:ae:b3:34:58:84:a8:
         55:c6:b4:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURhuIkXR50pSgJCJ/0RJpsh1uspkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yNDAzMjExNzUyMDhaFw0yNTAzMjAxNzU3MDhaMDMxMTAvBgNV
BAMTKEEyNTBBNzNGMDk5OTkwMzE1NEIzQjU4QzhCQkM4NTY1M0E0MzQyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOxE2/GGWcv8UVDeoT/zOVx25
yDtNvrPftqcWuCC0MGinn4CZULg0Dna5zdlwxNdNHjdx16+trEkpGZggljG50Tvh
JWmRhpUSGIhLMHIwwtdawT2M/qCWPrIxu3+DnZyizYXOH7iC9EWiKhfb03O3KjeM
c+sxYBCFL5GsHtaKumZGg4j04nNbQidUexFVubyN1EIEl0H4Xx07r2ZCHwzxbT2M
ja7M/M2VlkvBGV34cZa411KAOX2Wygfc+5789BC3s5niRGPWNTdu1yafisg/8e6M
PdnTODyOdhepHC3goMSl7sQmjO1fLUHsgVr8kn+zcL6CBEd78Svk7NMw0Dk7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUolCnPwmZkDFUs7WMi7yFZTpDQkUwHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzODM3MmUzMTM5MmUzMTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsTEDANBgkqhkiG9w0BAQsFAAOCAQEADo/BToOf43Kg
d9nghufD4i6FfCgnPLOYfGQQbF/0SbBtPqZfcSrfC8Q8nsriSSTHWGTgPn9vQLwx
i3xfHVBH2nuY7cHpunro1cirZdvkDzp4qCVeJ6CY5VRrZXzEKEdhRrb4CCQuGDbr
QGIsZV/EfWRKWuX6yQfLxO2JTHmqdSLyNXpencqSdAUAEXB1Yd3YxjCyv0/QCBIR
mw8MAfzRb5iBhEaVMQPnw168CkVNWnLGJWlDL/Ni0G7D1shSseDPo5q2WanS/h5F
XTtjtDyHFvCW1LcWozUw4GZuHu2dwFKYF47Evbu2rn+eVTsVZF1ZWdA184VfrrM0
WISoVca0RA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org