Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3234203d3e203238313235.roa
File:                     3138372e31392e32302e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          3T5/rJiYtnFOQaybkUPyhp8C1T/F6qXTb1XTTrXw5Gc=
Subject key identifier:   B1:88:A0:A2:AD:6D:EC:22:33:BA:F3:A3:83:52:8A:DC:63:BC:C3:8F
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       1FBBB09D91D1841067445996DBF7114027FC2CA9
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3234203d3e203238313235.roa
Signing time:             Tue 26 Mar 2024 13:15:35 +0000
ROA not before:           Tue 26 Mar 2024 13:10:35 +0000
ROA not after:            Tue 25 Mar 2025 13:15:35 +0000
asID:                     28125
IP address blocks:        187.19.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:b0:9d:91:d1:84:10:67:44:59:96:db:f7:11:40:27:fc:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 26 13:10:35 2024 GMT
            Not After : Mar 25 13:15:35 2025 GMT
        Subject: CN=B188A0A2AD6DEC2233BAF3A383528ADC63BCC38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:54:28:10:9f:e5:62:c3:9d:58:64:d9:1b:
                    ed:8c:0c:ea:88:7e:be:01:cc:33:0e:18:20:6a:b2:
                    43:38:2e:ae:9b:bf:32:d7:44:43:af:5d:9e:da:01:
                    52:40:2d:b6:08:a1:96:3e:f3:1d:0d:b6:42:7c:ce:
                    dc:c0:a1:e5:e0:16:ab:b5:ec:39:42:75:34:45:82:
                    dc:37:04:ee:b7:9c:02:07:0a:c8:0e:38:37:9e:73:
                    d7:8e:7a:c0:2f:f9:76:7e:40:96:14:00:cc:17:4e:
                    2e:c7:29:fb:37:46:27:2d:98:da:44:d7:08:c2:a1:
                    53:18:d5:0f:fa:10:72:c7:ff:cc:4a:b6:d2:1a:6a:
                    37:79:b9:f6:b1:c5:a2:bc:0d:2a:54:fa:32:89:8e:
                    6d:23:77:e3:b6:13:25:15:63:c2:da:cf:4b:ea:ab:
                    d3:92:3a:cd:b0:f3:63:dc:75:a0:01:eb:3d:99:5a:
                    e6:c6:c3:9f:43:b2:c5:01:dd:97:d2:7d:b4:81:3d:
                    43:28:dd:82:e6:97:e6:81:bf:db:52:f1:56:a9:79:
                    eb:56:6c:a0:8b:bd:9b:38:5a:b7:6a:6c:77:18:8a:
                    64:a7:6c:cd:e5:79:a5:84:c1:87:8c:19:32:5c:cf:
                    4b:aa:a3:de:58:d5:7c:31:45:98:76:c7:94:ad:17:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:88:A0:A2:AD:6D:EC:22:33:BA:F3:A3:83:52:8A:DC:63:BC:C3:8F
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:f6:d1:a2:4d:8a:e4:59:ea:64:39:9b:6e:c1:7a:9d:d9:
         cc:27:40:59:91:6b:77:7a:84:09:86:fb:27:de:95:43:4a:32:
         16:98:59:4b:6b:b3:8b:4a:90:d1:2c:68:b7:48:30:a6:b3:5c:
         d2:db:17:6d:cb:fd:3b:d1:10:92:9d:fb:96:b0:50:a1:51:93:
         97:48:45:2e:44:78:94:44:b7:4b:a2:0f:72:cb:0a:d4:3c:b5:
         6c:2b:b1:3a:70:a3:64:33:b0:e2:24:61:70:be:1c:2f:f2:8d:
         5d:3a:ca:2d:09:50:88:de:ab:d0:35:96:df:b6:63:94:43:b8:
         7a:a1:4e:19:50:f8:2e:94:f4:89:a3:2e:2f:99:ca:e2:1b:cc:
         81:55:66:55:a0:f6:39:fe:21:b0:cd:60:cf:f1:b7:8d:30:48:
         e3:94:d0:78:ca:f7:94:1f:07:04:18:74:be:74:02:c8:81:9c:
         7e:dd:5a:a4:46:8f:f6:14:5f:10:a1:01:f2:61:84:1d:d4:ee:
         52:88:fa:18:a2:9e:69:3a:13:6c:3c:c4:2a:59:0e:e0:3d:68:
         cc:8b:14:4c:0a:fc:ea:a4:96:ae:0a:ee:10:bd:fe:f7:db:c7:
         fb:24:5a:5d:54:f0:6f:5e:53:c8:b2:1c:68:33:43:32:1d:e6:
         07:c8:30:eb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUH7uwnZHRhBBnRFmW2/cRQCf8LKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yNDAzMjYxMzEwMzVaFw0yNTAzMjUxMzE1MzVaMDMxMTAvBgNV
BAMTKEIxODhBMEEyQUQ2REVDMjIzM0JBRjNBMzgzNTI4QURDNjNCQ0MzOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dFQoEJ/lYsOdWGTZG+2MDOqI
fr4BzDMOGCBqskM4Lq6bvzLXREOvXZ7aAVJALbYIoZY+8x0NtkJ8ztzAoeXgFqu1
7DlCdTRFgtw3BO63nAIHCsgOODeec9eOesAv+XZ+QJYUAMwXTi7HKfs3RictmNpE
1wjCoVMY1Q/6EHLH/8xKttIaajd5ufaxxaK8DSpU+jKJjm0jd+O2EyUVY8Laz0vq
q9OSOs2w82PcdaAB6z2ZWubGw59DssUB3ZfSfbSBPUMo3YLml+aBv9tS8VapeetW
bKCLvZs4WrdqbHcYimSnbM3leaWEwYeMGTJcz0uqo95Y1XwxRZh2x5StFwZ/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUsYigoq1t7CIzuvOjg1KK3GO8w48wHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzODM3MmUzMTM5MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArsTFDANBgkqhkiG9w0BAQsFAAOCAQEANcj20aJNiuRZ
6mQ5m27Bep3ZzCdAWZFrd3qECYb7J96VQ0oyFphZS2uzi0qQ0Sxot0gwprNc0tsX
bcv9O9EQkp37lrBQoVGTl0hFLkR4lES3S6IPcssK1Dy1bCuxOnCjZDOw4iRhcL4c
L/KNXTrKLQlQiN6r0DWW37ZjlEO4eqFOGVD4LpT0iaMuL5nK4hvMgVVmVaD2Of4h
sM1gz/G3jTBI45TQeMr3lB8HBBh0vnQCyIGcft1apEaP9hRfEKEB8mGEHdTuUoj6
GKKeaToTbDzEKlkO4D1ozIsUTAr86qSWrgruEL3+99vH+yRaXVTwb15TyLIcaDND
Mh3mB8gw6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org