Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32332e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e32332e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          sWy9qjwHN6Q7jedNGI4rQsOvMyguPxqkr3YaEzIpcjA=
Subject key identifier:   20:89:A4:38:2A:BD:18:82:05:3B:2B:1E:66:AF:7A:E8:5D:C4:29:E5
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       04A39F2A66FB6EFCC1F2DCBF8E1D02594140E13F
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32332e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:16 +0000
ROA not before:           Thu 02 Mar 2023 22:34:16 +0000
ROA not after:            Thu 29 Feb 2024 22:39:16 +0000
asID:                     28125
IP address blocks:        187.19.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a3:9f:2a:66:fb:6e:fc:c1:f2:dc:bf:8e:1d:02:59:41:40:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:16 2023 GMT
            Not After : Feb 29 22:39:16 2024 GMT
        Subject: CN=2089A4382ABD1882053B2B1E66AF7AE85DC429E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:d7:f1:48:45:70:df:40:dc:17:be:6f:c7:
                    4b:e4:9a:60:0a:2c:85:10:8f:be:52:13:cd:4a:23:
                    61:f3:f1:7d:74:3f:98:9e:76:19:41:e5:7a:2a:37:
                    5c:06:04:c7:48:3e:de:c0:57:d7:2c:04:ae:7f:9b:
                    46:3c:0a:45:3d:84:bb:46:7d:3f:fa:bd:1d:29:e7:
                    e5:20:b5:11:5c:f1:bd:20:12:ef:65:c8:bf:93:87:
                    d4:f1:29:3b:a5:90:fc:bb:a2:1e:e7:7d:d6:07:93:
                    f3:f5:5c:3a:41:c0:f9:49:be:e0:35:b3:3d:c4:6c:
                    3d:cc:4b:d7:82:21:61:2c:e1:2a:c8:3d:86:25:2f:
                    60:1c:a1:12:08:da:d5:b0:92:c2:86:0d:cd:8a:1a:
                    94:dd:f7:0b:fd:c6:18:84:2e:02:0e:e7:bc:d4:d6:
                    89:e8:e2:8f:7e:c0:b1:8e:ff:b7:ee:31:1b:aa:1d:
                    38:92:67:d9:94:f0:a5:ff:d0:d8:b4:92:86:14:67:
                    24:ee:e1:32:64:1e:6e:27:ad:31:d1:91:fa:d2:5a:
                    46:c9:14:dc:e7:ce:e1:9a:5f:02:ca:6b:1b:6f:fc:
                    97:19:49:88:f5:45:a9:30:c1:bf:11:28:fc:64:e6:
                    e2:29:e1:be:d9:c7:d3:b2:71:26:41:4a:61:a9:18:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:89:A4:38:2A:BD:18:82:05:3B:2B:1E:66:AF:7A:E8:5D:C4:29:E5
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32332e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:68:ad:34:b6:b4:2f:f8:f9:56:70:e0:7f:48:2c:b6:15:93:
         52:6b:d2:bd:fb:91:a6:f9:ac:e9:c6:40:d1:5f:1d:75:eb:82:
         39:8f:a6:3a:30:49:44:94:26:c9:84:14:da:ed:96:cb:ff:40:
         1f:84:e8:f8:ff:f7:a5:61:b6:5d:20:78:d2:0b:d3:60:35:89:
         0c:44:7b:87:ae:c7:08:df:b7:52:1d:19:76:41:51:dc:2c:47:
         9e:9a:60:db:21:83:78:25:b0:62:9f:f0:43:ae:b7:53:1d:29:
         a2:a6:05:cc:09:f3:bb:bc:7a:94:22:e6:d4:d1:02:40:35:c8:
         af:ca:0a:5e:b1:e1:56:c1:5d:ec:56:82:ed:35:bc:1c:f2:82:
         a7:05:83:19:9b:2c:98:0f:50:96:a4:9c:2f:da:9e:cd:1e:ed:
         5e:7f:f7:b5:f7:2e:08:be:d4:61:e2:e0:b1:a4:f3:32:37:a0:
         53:e2:e4:d9:56:be:4d:c6:69:9a:66:f0:6e:b3:b5:8c:74:15:
         43:bc:fa:1a:c1:cd:db:35:80:2a:f3:13:8d:c8:d0:09:f1:59:
         ae:c4:f7:a9:07:80:90:96:c2:5f:94:f0:43:ee:8d:ea:72:03:
         2f:35:83:83:29:9e:69:cd:8f:ea:0a:f7:40:3f:37:54:12:a1:
         85:b6:5f:5a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBKOfKmb7bvzB8ty/jh0CWUFA4T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yMzAzMDIyMjM0MTZaFw0yNDAyMjkyMjM5MTZaMDMxMTAvBgNV
BAMTKDIwODlBNDM4MkFCRDE4ODIwNTNCMkIxRTY2QUY3QUU4NURDNDI5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMdfxSEVw30DcF75vx0vkmmAK
LIUQj75SE81KI2Hz8X10P5iedhlB5XoqN1wGBMdIPt7AV9csBK5/m0Y8CkU9hLtG
fT/6vR0p5+UgtRFc8b0gEu9lyL+Th9TxKTulkPy7oh7nfdYHk/P1XDpBwPlJvuA1
sz3EbD3MS9eCIWEs4SrIPYYlL2AcoRII2tWwksKGDc2KGpTd9wv9xhiELgIO57zU
1ono4o9+wLGO/7fuMRuqHTiSZ9mU8KX/0Ni0koYUZyTu4TJkHm4nrTHRkfrSWkbJ
FNznzuGaXwLKaxtv/JcZSYj1Rakwwb8RKPxk5uIp4b7Zx9OycSZBSmGpGEzBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUIImkOCq9GIIFOyseZq966F3EKeUwHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzODM3MmUzMTM5MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTFzANBgkqhkiG9w0BAQsFAAOCAQEAVWitNLa0L/j5
VnDgf0gsthWTUmvSvfuRpvms6cZA0V8ddeuCOY+mOjBJRJQmyYQU2u2Wy/9AH4To
+P/3pWG2XSB40gvTYDWJDER7h67HCN+3Uh0ZdkFR3CxHnppg2yGDeCWwYp/wQ663
Ux0poqYFzAnzu7x6lCLm1NECQDXIr8oKXrHhVsFd7FaC7TW8HPKCpwWDGZssmA9Q
lqScL9qezR7tXn/3tfcuCL7UYeLgsaTzMjegU+Lk2Va+TcZpmmbwbrO1jHQVQ7z6
GsHN2zWAKvMTjcjQCfFZrsT3qQeAkJbCX5TwQ+6N6nIDLzWDgymeac2P6gr3QD83
VBKhhbZfWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org