Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3233203d3e20323633333231.roa
File:                     3139312e372e3133362e302f32312d3233203d3e20323633333231.roa (raw, json)
Hash identifier:          RSyUtZrqUX2oBhHN6xf2waQMPVsOZJ6dZZNe+MhRlmE=
Subject key identifier:   FA:B0:DB:B2:4A:D7:44:6F:D4:DE:CE:E4:63:AE:9E:2A:8F:1B:D0:4B
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       73BF1A585038A7955FA3B8032F4FC3AA1F9546C3
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3233203d3e20323633333231.roa
Signing time:             Tue 12 Sep 2023 16:34:43 +0000
ROA not before:           Tue 12 Sep 2023 16:29:43 +0000
ROA not after:            Tue 10 Sep 2024 16:34:43 +0000
asID:                     263321
IP address blocks:        191.7.136.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bf:1a:58:50:38:a7:95:5f:a3:b8:03:2f:4f:c3:aa:1f:95:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Sep 12 16:29:43 2023 GMT
            Not After : Sep 10 16:34:43 2024 GMT
        Subject: CN=FAB0DBB24AD7446FD4DECEE463AE9E2A8F1BD04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:94:2b:c6:3d:03:6d:7e:ea:3d:d7:cc:2e:
                    e8:8a:c7:27:3a:e0:24:08:8d:19:69:92:35:f8:d0:
                    19:e8:63:8b:49:da:f0:96:39:04:51:f3:19:31:14:
                    9b:bb:86:67:05:82:5f:f7:6e:84:b9:2d:49:9e:7a:
                    05:0b:7d:65:f9:28:16:e9:bc:f0:a0:0e:04:fc:9d:
                    53:3f:cb:9e:f5:06:9d:bb:36:3a:fa:5a:c5:0f:0a:
                    46:fa:9d:ec:a5:62:21:ef:b5:84:16:b7:e6:d3:05:
                    29:1f:b4:ac:93:90:78:25:ad:9e:ff:4c:78:67:c3:
                    bb:23:28:f8:3b:c7:4b:80:76:21:00:d8:ed:75:e1:
                    54:14:76:93:59:bf:b4:7e:bd:d5:dd:9c:75:0f:1f:
                    06:f4:09:8e:c3:77:09:23:d1:30:af:6c:1e:68:b8:
                    b6:b1:7f:8f:50:f2:f2:77:50:ef:5c:1b:2c:a6:9a:
                    41:24:2e:2d:4d:69:7f:70:7a:70:d0:d0:2e:22:7f:
                    06:ab:54:cf:cf:a8:da:f7:bb:6b:35:44:d3:8d:28:
                    22:a6:5b:60:d6:1b:4a:7a:ba:7a:77:a0:05:8d:ea:
                    c3:f0:a5:c5:41:1b:75:e8:3e:0b:47:18:0d:96:a2:
                    c4:b1:6d:e9:85:a5:f2:12:cd:29:55:e5:17:c4:a8:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:DB:B2:4A:D7:44:6F:D4:DE:CE:E4:63:AE:9E:2A:8F:1B:D0:4B
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3233203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:c0:d2:21:dd:91:52:61:38:6d:03:31:c9:9a:db:f5:15:
         e6:bc:5b:9b:38:95:26:62:87:8d:bf:b6:39:49:03:9f:ea:8b:
         98:c8:3f:96:9e:72:6d:15:9e:6e:79:bb:51:30:68:88:68:c9:
         4e:1a:be:9a:01:d5:ff:af:cb:d4:31:08:2b:fb:82:5c:13:d7:
         47:3f:97:ec:09:46:ae:39:6e:3d:31:a1:ca:65:94:e8:56:91:
         27:6e:e7:f2:aa:5a:fd:89:85:34:8f:89:05:33:43:7f:fd:5b:
         2e:65:35:a5:67:41:d4:5a:f7:44:e6:4f:ae:ce:f6:dd:f2:03:
         7b:08:ed:ec:59:3e:e8:22:9d:fc:fe:f1:66:5b:f5:89:61:41:
         59:a6:46:23:b5:c6:58:0c:49:37:cc:d4:d3:c7:da:77:3c:cb:
         af:7f:20:d8:58:88:ee:c5:47:e2:32:a6:e7:29:e6:93:48:d1:
         df:00:0c:e5:66:6f:9a:36:33:91:1d:f4:09:8d:7e:90:7c:9e:
         31:c3:77:59:18:23:3d:4e:60:7e:31:42:3f:84:e9:a1:99:89:
         79:65:4e:53:11:da:b9:ea:70:8c:70:54:a2:b4:80:5c:5a:19:
         c2:34:7c:25:11:07:e7:f7:35:e4:e1:0e:71:1e:51:cb:6f:d3:
         d5:51:55:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc78aWFA4p5Vfo7gDL0/Dqh+VRsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzMTc2QUI3MjVENDFGM0JGMjIxQTk3NDlCQzU5QzFE
QzYyRjk4MTAeFw0yMzA5MTIxNjI5NDNaFw0yNDA5MTAxNjM0NDNaMDMxMTAvBgNV
BAMTKEZBQjBEQkIyNEFENzQ0NkZENERFQ0VFNDYzQUU5RTJBOEYxQkQwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EZQrxj0DbX7qPdfMLuiKxyc6
4CQIjRlpkjX40BnoY4tJ2vCWOQRR8xkxFJu7hmcFgl/3boS5LUmeegULfWX5KBbp
vPCgDgT8nVM/y571Bp27Njr6WsUPCkb6neylYiHvtYQWt+bTBSkftKyTkHglrZ7/
THhnw7sjKPg7x0uAdiEA2O114VQUdpNZv7R+vdXdnHUPHwb0CY7Ddwkj0TCvbB5o
uLaxf49Q8vJ3UO9cGyymmkEkLi1NaX9wenDQ0C4ifwarVM/PqNr3u2s1RNONKCKm
W2DWG0p6unp3oAWN6sPwpcVBG3XoPgtHGA2WosSxbemFpfISzSlV5RfEqEBLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+rDbskrXRG/U3s7kY66eKo8b0EswHwYDVR0j
BBgwFoAU1TF2q3JdQfO/IhqXSbxZwdxi+YEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMC9ENTMxNzZBQjcyNUQ0MUYzQkYyMjFBOTc0OUJDNTlDMURDNjJGOTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1MzE3NkFCNzI1RDQxRjNC
RjIyMUE5NzQ5QkM1OUMxREM2MkY5ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzAv
MzEzOTMxMmUzNzJlMzEzMzM2MmUzMDJmMzIzMTJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvweIMA0GCSqGSIb3DQEBCwUAA4IBAQBaScDSId2R
UmE4bQMxyZrb9RXmvFubOJUmYoeNv7Y5SQOf6ouYyD+WnnJtFZ5uebtRMGiIaMlO
Gr6aAdX/r8vUMQgr+4JcE9dHP5fsCUauOW49MaHKZZToVpEnbufyqlr9iYU0j4kF
M0N//VsuZTWlZ0HUWvdE5k+uzvbd8gN7CO3sWT7oIp38/vFmW/WJYUFZpkYjtcZY
DEk3zNTTx9p3PMuvfyDYWIjuxUfiMqbnKeaTSNHfAAzlZm+aNjORHfQJjX6QfJ4x
w3dZGCM9TmB+MUI/hOmhmYl5ZU5TEdq56nCMcFSitIBcWhnCNHwlEQfn9zXk4Q5x
HlHLb9PVUVVE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org