Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa
File:                     3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa (raw, json)
Hash identifier:          UMtIPLwrtc3T6IpDFqx5zBOpVITfTSHgdqZjLeJxLUI=
Subject key identifier:   A7:04:80:76:39:66:D6:B1:06:E1:78:C5:C7:AA:00:94:DA:36:36:44
Certificate issuer:       /CN=D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6
Certificate serial:       2BB76C449ADA8658CB4F83BD5267F8944BFCF2CE
Authority key identifier: D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa
Signing time:             Thu 14 Mar 2024 15:10:38 +0000
ROA not before:           Thu 14 Mar 2024 15:05:38 +0000
ROA not after:            Thu 13 Mar 2025 15:10:38 +0000
asID:                     266222
IP address blocks:        192.140.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b7:6c:44:9a:da:86:58:cb:4f:83:bd:52:67:f8:94:4b:fc:f2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6
        Validity
            Not Before: Mar 14 15:05:38 2024 GMT
            Not After : Mar 13 15:10:38 2025 GMT
        Subject: CN=A70480763966D6B106E178C5C7AA0094DA363644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:f7:63:28:90:31:75:65:cc:61:4b:e8:f6:
                    c2:62:39:85:e8:5f:fb:d2:9c:09:59:3d:e1:09:7b:
                    0d:52:40:4c:4d:b8:1f:73:53:07:da:a9:90:c5:f2:
                    32:f7:b2:ce:18:74:e2:2e:66:69:ef:8f:53:ac:a1:
                    af:14:35:2f:3c:85:34:a5:5f:5e:e9:86:5d:e2:40:
                    ba:18:68:aa:14:75:7f:8f:52:25:24:1a:be:4b:8a:
                    79:37:9c:bb:bd:b8:ff:b3:56:85:c0:91:40:6a:d9:
                    10:95:3b:f1:f8:e9:64:1e:47:6c:2f:a3:40:0d:f5:
                    77:36:30:ab:dc:03:c8:67:b2:ae:9a:ef:26:0d:2a:
                    90:54:4f:b6:04:6a:82:25:71:3d:96:22:03:24:ca:
                    ac:40:e3:86:71:13:f9:ac:90:8a:dd:6d:7b:82:16:
                    67:b6:81:a1:93:d2:61:dc:cf:1a:3a:94:7b:b7:b7:
                    8d:4e:48:16:00:d4:bf:f4:68:f3:65:e7:5a:81:74:
                    23:28:2d:7c:e1:70:29:41:e4:e4:1c:55:5d:db:4c:
                    bc:84:ac:97:c1:66:cf:b5:00:55:d6:27:52:92:6e:
                    03:5d:5a:c4:cf:ab:b1:36:e5:95:7d:83:74:aa:90:
                    fb:5c:85:1a:8a:ad:6f:20:bf:68:5e:c1:1d:6e:f8:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:80:76:39:66:D6:B1:06:E1:78:C5:C7:AA:00:94:DA:36:36:44
            X509v3 Authority Key Identifier:
                keyid:D2:84:56:6F:CD:D2:FF:AA:4E:66:CF:4D:07:47:C8:DC:08:2D:8C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D284566FCDD2FFAA4E66CF4D0747C8DC082D8CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Z43feyrjbzeqUCm5VHFNuxer6qcfssvsdcUVcCWdPwF/0/3139322e3134302e32342e302f32322d3234203d3e20323636323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:98:9a:66:d0:9a:c5:72:48:13:b9:c7:59:68:0e:57:c1:6a:
         43:ce:c1:17:ef:40:f1:26:11:88:18:f6:84:1a:77:2f:92:7f:
         57:5d:91:05:04:69:70:2b:9e:22:ed:33:fd:a8:02:6f:76:85:
         01:2a:e0:f2:79:ed:41:f4:b1:3a:7c:d4:09:00:4a:53:53:0e:
         8e:ab:99:e9:b7:e1:82:71:67:d3:b5:f4:ff:31:a3:92:92:3f:
         95:1c:3a:43:1f:79:5d:9f:99:8f:e2:8d:b9:75:92:dc:75:78:
         f1:9e:c0:27:8b:a2:d9:d1:eb:22:83:7e:50:9b:47:2d:33:33:
         f3:dc:1d:1b:50:21:15:b0:ab:0b:f1:55:86:ff:0f:d3:4b:37:
         1b:42:50:97:46:cc:eb:f0:8f:e3:51:ca:5b:29:88:bb:f6:eb:
         3a:c1:c3:3a:82:e8:59:51:ca:d1:49:e3:83:66:b0:c2:2c:6f:
         04:fe:8e:4c:cc:04:d1:45:6a:87:1d:b7:71:04:90:55:97:e4:
         5c:3f:e6:87:c2:ce:d1:8b:f9:d0:0d:91:3c:0b:a4:ce:04:97:
         6d:5c:d0:00:60:a6:af:d4:8a:ba:52:15:ab:cd:7a:96:34:03:
         95:48:f9:02:06:96:e0:45:89:91:2e:37:1c:77:22:ba:ab:1d:
         74:7a:af:a5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUK7dsRJrahljLT4O9Umf4lEv88s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI4NDU2NkZDREQyRkZBQTRFNjZDRjREMDc0N0M4REMw
ODJEOENBNjAeFw0yNDAzMTQxNTA1MzhaFw0yNTAzMTMxNTEwMzhaMDMxMTAvBgNV
BAMTKEE3MDQ4MDc2Mzk2NkQ2QjEwNkUxNzhDNUM3QUEwMDk0REEzNjM2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n/djKJAxdWXMYUvo9sJiOYXo
X/vSnAlZPeEJew1SQExNuB9zUwfaqZDF8jL3ss4YdOIuZmnvj1Osoa8UNS88hTSl
X17phl3iQLoYaKoUdX+PUiUkGr5Link3nLu9uP+zVoXAkUBq2RCVO/H46WQeR2wv
o0AN9Xc2MKvcA8hnsq6a7yYNKpBUT7YEaoIlcT2WIgMkyqxA44ZxE/mskIrdbXuC
Fme2gaGT0mHczxo6lHu3t41OSBYA1L/0aPNl51qBdCMoLXzhcClB5OQcVV3bTLyE
rJfBZs+1AFXWJ1KSbgNdWsTPq7E25ZV9g3SqkPtchRqKrW8gv2hewR1u+B23AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUpwSAdjlm1rEG4XjFx6oAlNo2NkQwHwYDVR0j
BBgwFoAU0oRWb83S/6pOZs9NB0fI3AgtjKYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aNDNmZXlyamJ6ZXFVQ201VkhGTnV4ZXI2cWNmc3N2c2RjVVZjQ1dkUHdG
LzAvRDI4NDU2NkZDREQyRkZBQTRFNjZDRjREMDc0N0M4REMwODJEOENBNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EMjg0NTY2RkNERDJGRkFBNEU2
NkNGNEQwNzQ3QzhEQzA4MkQ4Q0E2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9a
NDNmZXlyamJ6ZXFVQ201VkhGTnV4ZXI2cWNmc3N2c2RjVVZjQ1dkUHdGLzAvMzEz
OTMyMmUzMTM0MzAyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYz
MjMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBALAjBgwDQYJKoZIhvcNAQELBQADggEBALiYmmbQmsVy
SBO5x1loDlfBakPOwRfvQPEmEYgY9oQady+Sf1ddkQUEaXArniLtM/2oAm92hQEq
4PJ57UH0sTp81AkASlNTDo6rmem34YJxZ9O19P8xo5KSP5UcOkMfeV2fmY/ijbl1
ktx1ePGewCeLotnR6yKDflCbRy0zM/PcHRtQIRWwqwvxVYb/D9NLNxtCUJdGzOvw
j+NRylspiLv26zrBwzqC6FlRytFJ44NmsMIsbwT+jkzMBNFFaocdt3EEkFWX5Fw/
5ofCztGL+dANkTwLpM4El21c0ABgpq/UirpSFavNepY0A5VI+QIGluBFiZEuNxx3
IrqrHXR6r6U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org