Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3233203d3e20323634323330.roa
File:                     3139302e3130392e38382e302f32322d3233203d3e20323634323330.roa (raw, json)
Hash identifier:          CN9kD1qpfk+5W7vNVhGeBcRAI0jKY31r9cG96nxREK0=
Subject key identifier:   A8:97:DF:53:D9:35:C3:4F:A7:5C:04:86:7B:AF:6B:16:C1:85:FB:A8
Certificate issuer:       /CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
Certificate serial:       433E68BCCE0768C81191CC4EE135243C3F93519C
Authority key identifier: FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3233203d3e20323634323330.roa
Signing time:             Fri 26 Jan 2024 12:08:31 +0000
ROA not before:           Fri 26 Jan 2024 12:03:31 +0000
ROA not after:            Fri 24 Jan 2025 12:08:31 +0000
asID:                     264230
IP address blocks:        190.109.88.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:68:bc:ce:07:68:c8:11:91:cc:4e:e1:35:24:3c:3f:93:51:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
        Validity
            Not Before: Jan 26 12:03:31 2024 GMT
            Not After : Jan 24 12:08:31 2025 GMT
        Subject: CN=A897DF53D935C34FA75C04867BAF6B16C185FBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:90:e2:e3:8b:97:31:af:3f:57:34:89:94:
                    54:21:02:7c:65:65:95:1d:1d:84:a0:51:a0:ed:ac:
                    95:57:6f:6b:55:b2:54:0f:69:ac:8a:4c:8d:20:88:
                    73:4e:d9:34:b5:f1:a9:ab:ed:ed:34:36:02:72:4b:
                    97:45:6d:2f:e2:8f:97:1e:19:a3:e2:36:73:bb:d0:
                    9b:af:cf:43:3f:97:8b:c6:62:67:0d:54:b1:6e:38:
                    8b:f3:1d:3a:aa:3e:10:92:e5:a4:0f:42:16:41:ff:
                    60:fe:24:72:3e:10:2a:f9:7a:fd:22:da:56:0c:07:
                    66:74:e1:e2:82:4b:05:05:ba:a0:e3:f1:03:62:62:
                    7c:4c:5c:92:84:23:4b:54:82:2e:42:ca:f6:c1:94:
                    93:15:b9:42:f9:0a:ed:9e:05:d6:15:ce:70:7e:bb:
                    f7:e0:25:17:b2:de:ff:ca:51:f8:41:92:fe:63:68:
                    b4:81:d7:a5:e3:3a:ae:98:dd:45:d0:85:12:7a:77:
                    c0:f6:38:8e:72:f6:a5:e5:4b:a1:e8:c0:72:85:ad:
                    a8:e9:8a:3f:1b:0b:af:fb:62:b4:c0:82:50:4f:1b:
                    e4:ba:9e:ec:25:be:1b:66:9d:63:60:29:e0:76:cb:
                    97:de:16:19:86:8b:83:a2:cc:fb:a5:66:27:f2:41:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:DF:53:D9:35:C3:4F:A7:5C:04:86:7B:AF:6B:16:C1:85:FB:A8
            X509v3 Authority Key Identifier:
                keyid:FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3233203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:c9:5a:7f:34:64:63:30:9f:7e:1c:2a:ea:47:70:30:ba:
         b7:d0:e4:bd:03:e5:3c:4f:2b:0f:4c:bf:ac:49:e9:38:1d:9f:
         d0:25:18:fa:f5:bb:07:23:6a:6d:02:f8:f7:52:56:a9:53:17:
         d2:44:b7:70:8c:9a:51:0e:82:d1:da:64:dd:4d:61:76:36:57:
         d5:6a:c2:d0:8d:f0:25:1d:54:0c:ec:e0:f5:58:47:20:b9:73:
         10:c5:63:80:03:55:c0:8c:33:09:7b:86:15:90:51:98:78:fe:
         ce:e6:0a:fa:3e:fb:ea:48:39:ff:1d:43:f2:2b:b2:ae:cb:21:
         08:ce:b8:d0:d5:df:c8:73:ca:55:66:bb:32:9a:4e:6c:4a:4a:
         07:42:a2:64:07:d6:c6:ee:fb:87:56:10:ca:6f:79:d3:c4:02:
         b4:dd:24:78:bd:35:f2:7e:89:97:4b:d2:7f:af:23:15:22:d2:
         0d:d5:8f:a7:53:d3:f8:a7:45:87:59:61:be:f8:e0:34:33:b8:
         61:83:f2:b2:42:5b:75:88:05:b7:17:06:9a:03:d1:3d:dc:a9:
         54:de:45:f6:56:e7:4f:36:9b:b4:2e:bd:1f:0d:60:c1:19:f4:
         9f:01:19:c8:fc:36:d4:df:3e:c2:7f:30:b2:34:dc:c1:65:fb:
         54:0e:52:43
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQz5ovM4HaMgRkcxO4TUkPD+TUZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5NkVCQjZBMEEyOTY4RjcxNzMwQUNCNEMwMDQxOTRB
RkQxMDg1RTAeFw0yNDAxMjYxMjAzMzFaFw0yNTAxMjQxMjA4MzFaMDMxMTAvBgNV
BAMTKEE4OTdERjUzRDkzNUMzNEZBNzVDMDQ4NjdCQUY2QjE2QzE4NUZCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaZDi44uXMa8/VzSJlFQhAnxl
ZZUdHYSgUaDtrJVXb2tVslQPaayKTI0giHNO2TS18amr7e00NgJyS5dFbS/ij5ce
GaPiNnO70Juvz0M/l4vGYmcNVLFuOIvzHTqqPhCS5aQPQhZB/2D+JHI+ECr5ev0i
2lYMB2Z04eKCSwUFuqDj8QNiYnxMXJKEI0tUgi5CyvbBlJMVuUL5Cu2eBdYVznB+
u/fgJRey3v/KUfhBkv5jaLSB16XjOq6Y3UXQhRJ6d8D2OI5y9qXlS6HowHKFrajp
ij8bC6/7YrTAglBPG+S6nuwlvhtmnWNgKeB2y5feFhmGi4OizPulZifyQUxRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqJffU9k1w0+nXASGe69rFsGF+6gwHwYDVR0j
BBgwFoAU/JbrtqCilo9xcwrLTABBlK/RCF4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9TdnRvcGVrUVVSN2dHcnhBQ3lWUTVadVVGcjZZN3NISkJybzh6WlllNVVk
LzAvRkM5NkVCQjZBMEEyOTY4RjcxNzMwQUNCNEMwMDQxOTRBRkQxMDg1RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GQzk2RUJCNkEwQTI5NjhGNzE3
MzBBQ0I0QzAwNDE5NEFGRDEwODVFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
dnRvcGVrUVVSN2dHcnhBQ3lWUTVadVVGcjZZN3NISkJybzh6WlllNVVkLzAvMzEz
OTMwMmUzMTMwMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2MzQz
MjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK+bVgwDQYJKoZIhvcNAQELBQADggEBACeeyVp/NGRj
MJ9+HCrqR3AwurfQ5L0D5TxPKw9Mv6xJ6Tgdn9AlGPr1uwcjam0C+PdSVqlTF9JE
t3CMmlEOgtHaZN1NYXY2V9VqwtCN8CUdVAzs4PVYRyC5cxDFY4ADVcCMMwl7hhWQ
UZh4/s7mCvo+++pIOf8dQ/Irsq7LIQjOuNDV38hzylVmuzKaTmxKSgdComQH1sbu
+4dWEMpvedPEArTdJHi9NfJ+iZdL0n+vIxUi0g3Vj6dT0/inRYdZYb744DQzuGGD
8rJCW3WIBbcXBpoD0T3cqVTeRfZW5082m7QuvR8NYMEZ9J8BGcj8NtTfPsJ/MLI0
3MFl+1QOUkM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:54 2025 by rpki-client