Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32312e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e32312e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          f6yvcIF/2eX/900v9CJ9NuzPbS+QXaZIRlN537f74kQ=
Subject key identifier:   18:2B:D8:B6:70:65:67:61:6A:EF:0F:CE:C9:73:5E:BE:EC:BB:57:9B
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       3EEE9B42BA15057596D7ADAB7525DD9864509A02
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32312e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:15 +0000
ROA not before:           Thu 02 Mar 2023 22:34:15 +0000
ROA not after:            Thu 29 Feb 2024 22:39:15 +0000
asID:                     28125
IP address blocks:        187.19.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ee:9b:42:ba:15:05:75:96:d7:ad:ab:75:25:dd:98:64:50:9a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:15 2023 GMT
            Not After : Feb 29 22:39:15 2024 GMT
        Subject: CN=182BD8B6706567616AEF0FCEC9735EBEECBB579B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:1e:46:20:28:61:42:b5:c8:34:40:30:9b:
                    60:09:8e:4b:04:81:7d:a5:f2:21:53:94:a6:e8:66:
                    8a:5a:cf:ff:d1:a5:1a:1f:d5:b4:30:b6:56:bd:5f:
                    c2:d5:12:45:53:f0:fe:0f:bf:b5:bb:61:5a:b5:af:
                    be:e0:bb:15:eb:f6:c7:fd:7d:44:21:d0:69:57:ca:
                    2f:39:61:f4:45:da:9b:b1:4e:01:e2:af:3d:4a:1d:
                    d8:f5:f8:ea:1a:94:17:04:85:c2:e9:e4:d6:b5:9b:
                    ac:d8:2a:d0:ca:2e:ca:11:72:50:1f:8e:23:97:0f:
                    39:ee:1e:18:64:59:81:47:a9:14:e2:7e:a5:0c:24:
                    47:6b:d5:26:7b:4e:3e:61:c6:fc:44:ce:9b:e7:f5:
                    76:4a:eb:9c:c1:bf:0e:f8:43:44:0a:8a:83:b9:40:
                    05:eb:bf:b2:5f:73:02:a4:fa:71:63:98:98:1e:58:
                    57:1a:28:d3:9b:78:11:e5:7a:80:8c:01:e2:8b:4c:
                    ce:21:ad:99:34:b6:b0:4e:b6:3f:b9:18:72:28:8c:
                    92:8f:e9:d0:0d:cd:95:81:80:21:6b:91:cf:91:f5:
                    56:46:1c:bd:e2:e2:b6:55:b9:18:4b:64:cf:a7:06:
                    60:c1:3a:f4:e1:68:f6:89:d3:67:a6:e2:8d:51:99:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:D8:B6:70:65:67:61:6A:EF:0F:CE:C9:73:5E:BE:EC:BB:57:9B
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32312e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:b0:77:d0:47:2f:89:aa:f5:f3:ce:e5:b2:c7:f2:6e:ea:
         5f:26:e6:e3:c2:24:f8:57:d1:3d:05:8e:77:43:c0:cd:1c:f8:
         97:71:04:28:40:78:31:69:84:d1:fd:46:f8:57:87:40:56:07:
         4f:92:3d:11:dc:62:93:91:af:2d:f0:c7:83:91:37:ff:34:30:
         40:55:fc:80:04:a4:67:ea:02:b3:5c:52:6d:77:d4:e7:42:7a:
         9f:73:31:22:b2:09:3f:bd:7a:b9:10:48:4c:70:2f:10:76:ee:
         7f:fa:f5:35:62:17:e7:6f:6e:27:05:ec:ea:b5:d6:6a:6e:8d:
         76:5e:d1:c7:de:75:e3:c3:5a:67:ba:d0:f6:51:5e:af:70:37:
         ee:e1:2c:9d:d1:0c:45:d6:89:fe:c0:49:2e:f4:70:57:c8:ac:
         f7:0c:27:c1:8d:e1:1b:37:42:a1:07:b4:5a:88:d4:80:66:eb:
         16:0e:40:89:1a:7b:78:52:4a:2b:5c:07:05:52:2f:2e:8e:1e:
         ec:65:bd:17:44:72:b8:dd:ef:72:4f:0e:e3:2e:93:44:4e:94:
         9b:96:52:c8:ea:27:89:e9:15:17:37:7b:4c:59:c8:b8:e8:51:
         4b:00:5c:7a:62:7a:9e:c7:d9:16:24:1a:cb:95:73:ce:1c:81:
         01:d2:23:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPu6bQroVBXWW162rdSXdmGRQmgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yMzAzMDIyMjM0MTVaFw0yNDAyMjkyMjM5MTVaMDMxMTAvBgNV
BAMTKDE4MkJEOEI2NzA2NTY3NjE2QUVGMEZDRUM5NzM1RUJFRUNCQjU3OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZh5GIChhQrXINEAwm2AJjksE
gX2l8iFTlKboZopaz//RpRof1bQwtla9X8LVEkVT8P4Pv7W7YVq1r77guxXr9sf9
fUQh0GlXyi85YfRF2puxTgHirz1KHdj1+OoalBcEhcLp5Na1m6zYKtDKLsoRclAf
jiOXDznuHhhkWYFHqRTifqUMJEdr1SZ7Tj5hxvxEzpvn9XZK65zBvw74Q0QKioO5
QAXrv7JfcwKk+nFjmJgeWFcaKNObeBHleoCMAeKLTM4hrZk0trBOtj+5GHIojJKP
6dANzZWBgCFrkc+R9VZGHL3i4rZVuRhLZM+nBmDBOvThaPaJ02em4o1Rmd65AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGCvYtnBlZ2Fq7w/OyXNevuy7V5swHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzODM3MmUzMTM5MmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTFTANBgkqhkiG9w0BAQsFAAOCAQEALCewd9BHL4mq
9fPO5bLH8m7qXybm48Ik+FfRPQWOd0PAzRz4l3EEKEB4MWmE0f1G+FeHQFYHT5I9
Edxik5GvLfDHg5E3/zQwQFX8gASkZ+oCs1xSbXfU50J6n3MxIrIJP716uRBITHAv
EHbuf/r1NWIX529uJwXs6rXWam6Ndl7Rx95148NaZ7rQ9lFer3A37uEsndEMRdaJ
/sBJLvRwV8is9wwnwY3hGzdCoQe0WojUgGbrFg5AiRp7eFJKK1wHBVIvLo4e7GW9
F0RyuN3vck8O4y6TRE6Um5ZSyOoniekVFzd7TFnIuOhRSwBcemJ6nsfZFiQay5Vz
zhyBAdIjAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org