Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36362e302f32342d3234203d3e20323636353530.roa
File:                     3139322e3134302e36362e302f32342d3234203d3e20323636353530.roa (raw, json)
Hash identifier:          LvBrDd5Ig3p4dpvUTMTWfC62YcrFsRWHc9gGL0Z/shg=
Subject key identifier:   52:16:43:D8:55:6D:23:16:A8:8F:89:6A:0E:22:56:0D:2B:1E:1B:8F
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       0E84270812035FFB0FE00D53758704D4078F6F75
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36362e302f32342d3234203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:10 +0000
ROA not before:           Mon 10 Jul 2023 13:22:10 +0000
ROA not after:            Mon 08 Jul 2024 13:27:10 +0000
asID:                     266550
IP address blocks:        192.140.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:27:08:12:03:5f:fb:0f:e0:0d:53:75:87:04:d4:07:8f:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:10 2023 GMT
            Not After : Jul  8 13:27:10 2024 GMT
        Subject: CN=521643D8556D2316A88F896A0E22560D2B1E1B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:f9:d6:93:44:e3:c0:cd:a6:e7:72:71:6b:
                    2d:e1:37:6e:06:78:dc:49:c4:1a:8b:11:d8:80:3a:
                    6f:52:04:0d:43:a1:b6:76:73:5f:89:1d:60:e6:e1:
                    d4:3d:c9:6a:df:04:19:a3:cc:97:1b:99:e1:0e:34:
                    bf:a4:bf:44:37:fc:e1:7f:06:be:0b:00:fa:04:48:
                    68:5e:85:66:a6:02:f1:a8:d9:b3:4b:81:be:4d:c8:
                    5c:78:d2:7e:33:97:38:90:ff:48:cf:41:46:dd:e6:
                    63:8d:cd:c7:aa:c9:55:50:3b:7c:e8:72:11:b4:0d:
                    32:ba:18:3b:30:e0:a3:64:25:59:3f:ca:47:33:00:
                    3b:c7:ec:2f:cb:d6:e2:79:02:4a:4c:99:d4:5a:d5:
                    86:00:36:37:6a:fc:70:f6:dd:e0:ce:8e:b6:a6:b0:
                    a8:13:37:74:99:64:bb:a6:a7:0a:81:98:c6:81:6f:
                    9c:fb:eb:7f:11:ca:34:32:bb:5a:b6:bc:be:f6:e1:
                    d3:e7:5d:2d:96:3c:49:99:60:ee:26:d8:6e:f1:d9:
                    70:1e:bd:60:e4:79:6d:8f:c8:43:58:3b:e7:12:ed:
                    6f:65:de:ec:59:b2:13:be:69:6a:f7:a0:6f:5a:81:
                    b7:8c:b7:7b:6b:fd:9f:e1:b1:be:b5:50:4d:bb:8a:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:43:D8:55:6D:23:16:A8:8F:89:6A:0E:22:56:0D:2B:1E:1B:8F
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36362e302f32342d3234203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:f3:86:88:9d:30:99:5e:d9:ab:01:5e:0a:a0:30:d0:74:
         44:b5:c9:a3:81:09:a3:53:e9:e9:21:a3:b8:02:47:dd:f7:f8:
         5e:b8:aa:ad:b3:12:3b:6e:67:86:ee:ad:7e:82:ed:15:e5:6b:
         c9:ee:49:0e:28:b9:6f:3c:46:54:dd:6b:36:ff:36:64:0a:94:
         c4:db:03:e5:7f:36:80:ba:03:f1:9d:31:13:1c:a0:94:49:9b:
         43:78:0b:16:47:1f:27:6f:91:41:11:83:47:0e:f8:af:88:16:
         f5:5a:9e:3f:c8:68:9f:2f:66:c9:67:f0:cf:a4:25:4d:ff:e8:
         b1:35:9e:42:b3:1c:18:b8:31:1b:84:e5:e0:05:81:0e:26:65:
         27:e9:17:18:e3:b9:4d:e8:18:45:24:fc:8c:a3:59:98:84:e9:
         0b:82:91:80:ee:4a:54:38:c6:c7:03:ba:9d:22:06:b8:1f:36:
         12:bf:99:c5:92:41:40:66:c4:57:4e:15:0a:eb:77:c6:b1:8e:
         46:9b:8d:95:f7:9f:a7:bd:80:1c:df:06:03:52:d5:46:b3:bd:
         84:7a:a1:fe:80:2b:08:c1:08:b7:f6:ba:f4:ab:22:38:9f:e7:
         d1:ae:d8:3c:c8:2b:2b:46:b4:2f:10:af:82:65:f9:26:51:73:
         bf:78:96:d9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDoQnCBIDX/sP4A1TdYcE1AePb3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzMjA3Qzc1RUIxOEY1ODQ1MzVGQjVBQjg5RjRFRkFG
QkU3RkQzMTAeFw0yMzA3MTAxMzIyMTBaFw0yNDA3MDgxMzI3MTBaMDMxMTAvBgNV
BAMTKDUyMTY0M0Q4NTU2RDIzMTZBODhGODk2QTBFMjI1NjBEMkIxRTFCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsufnWk0TjwM2m53Jxay3hN24G
eNxJxBqLEdiAOm9SBA1DobZ2c1+JHWDm4dQ9yWrfBBmjzJcbmeEONL+kv0Q3/OF/
Br4LAPoESGhehWamAvGo2bNLgb5NyFx40n4zlziQ/0jPQUbd5mONzceqyVVQO3zo
chG0DTK6GDsw4KNkJVk/ykczADvH7C/L1uJ5AkpMmdRa1YYANjdq/HD23eDOjram
sKgTN3SZZLumpwqBmMaBb5z7638RyjQyu1q2vL724dPnXS2WPEmZYO4m2G7x2XAe
vWDkeW2PyENYO+cS7W9l3uxZshO+aWr3oG9agbeMt3tr/Z/hsb61UE27ijLzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUhZD2FVtIxaoj4lqDiJWDSseG48wHwYDVR0j
BBgwFoAUADIHx16xj1hFNftauJ9O+vvn/TEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94bnhQMXZ0Z3l3U3pwdWk1ZHdrVXNlSG5yY2g1UmNpTnkyaGVCQXZhU2sx
LzAvMDAzMjA3Qzc1RUIxOEY1ODQ1MzVGQjVBQjg5RjRFRkFGQkU3RkQzMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wMDMyMDdDNzVFQjE4RjU4NDUz
NUZCNUFCODlGNEVGQUZCRTdGRDMxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
bnhQMXZ0Z3l3U3pwdWk1ZHdrVXNlSG5yY2g1UmNpTnkyaGVCQXZhU2sxLzAvMzEz
OTMyMmUzMTM0MzAyZTM2MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYz
NTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADAjEIwDQYJKoZIhvcNAQELBQADggEBAH5U84aInTCZ
XtmrAV4KoDDQdES1yaOBCaNT6ekho7gCR933+F64qq2zEjtuZ4burX6C7RXla8nu
SQ4ouW88RlTdazb/NmQKlMTbA+V/NoC6A/GdMRMcoJRJm0N4CxZHHydvkUERg0cO
+K+IFvVanj/IaJ8vZsln8M+kJU3/6LE1nkKzHBi4MRuE5eAFgQ4mZSfpFxjjuU3o
GEUk/IyjWZiE6QuCkYDuSlQ4xscDup0iBrgfNhK/mcWSQUBmxFdOFQrrd8axjkab
jZX3n6e9gBzfBgNS1UazvYR6of6AKwjBCLf2uvSrIjif59Gu2DzIKytGtC8Qr4Jl
+SZRc794ltk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org