Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa
File:                     3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          o92uzU6paPQed7C+OgMFiq1V7XDoL5AB+YNlqe1gY5o=
Subject key identifier:   94:10:C9:28:3C:A5:B0:7E:87:3F:1E:48:63:67:6A:CB:9E:94:1A:AE
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       0A5F5A0AA051F1449BC8F6730648E9A652BCE369
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:07 +0000
ROA not before:           Wed 03 Apr 2024 21:34:07 +0000
ROA not after:            Wed 02 Apr 2025 21:39:07 +0000
asID:                     262391
IP address blocks:        190.89.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5f:5a:0a:a0:51:f1:44:9b:c8:f6:73:06:48:e9:a6:52:bc:e3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:07 2024 GMT
            Not After : Apr  2 21:39:07 2025 GMT
        Subject: CN=9410C9283CA5B07E873F1E4863676ACB9E941AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:8e:3c:4f:fc:7d:59:ab:59:38:4a:08:5c:
                    01:46:34:1c:ce:92:9e:bf:78:dc:0c:1d:a7:77:9c:
                    9e:5a:fa:fc:2c:9d:33:9e:7d:c8:69:2b:3f:8d:a1:
                    6f:8c:36:14:eb:01:02:ef:e1:60:88:64:c1:08:09:
                    5f:3e:aa:f0:dc:19:1e:1a:20:cc:06:f3:0a:c9:67:
                    79:af:5d:b6:c9:32:98:f9:2a:8f:cd:0e:99:71:04:
                    94:57:56:98:a1:28:2a:d2:59:7c:c6:7d:08:7f:90:
                    ad:5a:37:27:b8:f6:39:a3:91:ff:10:dd:dc:3b:b2:
                    c9:6c:74:cb:08:d3:e1:c8:86:51:11:58:c5:4d:75:
                    79:ea:94:0e:39:f7:65:a9:b0:b7:59:34:7d:62:1e:
                    74:e9:17:99:aa:da:8f:17:0b:aa:21:cb:3a:4c:c1:
                    51:78:2e:d7:77:8a:d3:79:c4:52:96:60:63:2e:7a:
                    17:89:99:3c:47:bf:85:5e:bb:a2:52:32:ea:57:4b:
                    8f:d5:37:30:81:b7:16:ea:3e:02:84:c5:92:05:29:
                    5f:0f:49:cf:04:86:08:18:33:ec:f1:d2:20:6b:8a:
                    e0:1e:06:8d:9b:60:9a:b5:32:a9:06:2b:db:b9:ba:
                    6d:16:da:a4:db:b8:ad:55:96:cc:85:80:c9:2c:51:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:10:C9:28:3C:A5:B0:7E:87:3F:1E:48:63:67:6A:CB:9E:94:1A:AE
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:3a:d6:3d:bc:af:5b:0d:ba:14:cd:06:3c:4c:29:be:c5:
         45:a5:56:96:39:da:d0:44:1c:f7:f4:3c:43:61:75:d1:7d:f7:
         51:d7:33:c9:63:10:af:5f:67:14:be:75:98:ff:bb:be:49:45:
         fa:d8:36:2b:6a:b9:ee:ab:bd:cd:7a:f3:86:2d:33:84:ca:a6:
         a6:88:8c:81:47:41:a4:af:7b:c9:5f:53:7c:46:e6:55:ed:da:
         44:a6:0a:98:af:ca:6e:33:83:eb:37:02:8c:5c:82:3c:1f:75:
         b6:e3:3a:5f:23:34:cf:47:8c:04:90:46:63:0a:3a:df:c7:d0:
         cb:c6:98:70:5b:eb:b2:85:a6:60:6f:7f:4c:f3:6e:86:2a:54:
         4b:54:4e:65:52:e8:fe:8a:79:57:2e:e3:f6:e1:03:49:7c:90:
         2a:ab:61:d0:87:4c:75:1c:ed:8d:7c:60:d3:50:6b:07:4d:0c:
         86:ac:6a:15:07:fe:92:8b:86:eb:a0:ec:3b:55:5d:7a:fa:0c:
         81:f3:15:d2:e4:91:a6:e9:0d:d4:68:e9:27:e5:e1:8e:68:ed:
         ec:e6:10:ca:c0:41:c1:fb:49:da:c7:1b:5b:79:e2:4d:39:67:
         57:9d:ee:e2:18:16:2b:63:97:6e:7c:c4:ca:fe:c0:c9:b1:cd:
         ce:26:5c:9b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCl9aCqBR8USbyPZzBkjpplK842kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFQzVCNTNBODQzMEYxQTYzOTM4M0RGQTgzRTU2QTM3
RDNBN0EwRDAeFw0yNDA0MDMyMTM0MDdaFw0yNTA0MDIyMTM5MDdaMDMxMTAvBgNV
BAMTKDk0MTBDOTI4M0NBNUIwN0U4NzNGMUU0ODYzNjc2QUNCOUU5NDFBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAY48T/x9WatZOEoIXAFGNBzO
kp6/eNwMHad3nJ5a+vwsnTOefchpKz+NoW+MNhTrAQLv4WCIZMEICV8+qvDcGR4a
IMwG8wrJZ3mvXbbJMpj5Ko/NDplxBJRXVpihKCrSWXzGfQh/kK1aNye49jmjkf8Q
3dw7sslsdMsI0+HIhlERWMVNdXnqlA4592WpsLdZNH1iHnTpF5mq2o8XC6ohyzpM
wVF4Ltd3itN5xFKWYGMueheJmTxHv4Veu6JSMupXS4/VNzCBtxbqPgKExZIFKV8P
Sc8EhggYM+zx0iBriuAeBo2bYJq1MqkGK9u5um0W2qTbuK1VlsyFgMksUdTrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUlBDJKDylsH6HPx5IY2dqy56UGq4wHwYDVR0j
BBgwFoAU8OxbU6hDDxpjk4PfqD5Wo306eg0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzEvRjBFQzVCNTNBODQzMEYxQTYzOTM4M0RGQTgzRTU2QTM3RDNBN0EwRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEVDNUI1M0E4NDMwRjFBNjM5
MzgzREZBODNFNTZBMzdEM0E3QTBELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzEvMzEz
OTMwMmUzODM5MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIz
MzM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK+WWgwDQYJKoZIhvcNAQELBQADggEBADxqOtY9vK9b
DboUzQY8TCm+xUWlVpY52tBEHPf0PENhddF991HXM8ljEK9fZxS+dZj/u75JRfrY
Nitque6rvc1684YtM4TKpqaIjIFHQaSve8lfU3xG5lXt2kSmCpivym4zg+s3Aoxc
gjwfdbbjOl8jNM9HjASQRmMKOt/H0MvGmHBb67KFpmBvf0zzboYqVEtUTmVS6P6K
eVcu4/bhA0l8kCqrYdCHTHUc7Y18YNNQawdNDIasahUH/pKLhuug7DtVXXr6DIHz
FdLkkabpDdRo6Sfl4Y5o7ezmEMrAQcH7SdrHG1t54k05Z1ed7uIYFitjl258xMr+
wMmxzc4mXJs=
-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org