Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa (raw, json)
Hash identifier:          rR8QnVtUebiStL6XhUjLnVGI/fJJUb9S7Rn6PPcbK3A=
Subject key identifier:   20:41:D5:E3:FF:F1:18:D7:7C:44:5C:47:D5:F8:9B:A2:2B:4E:D7:6B
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       33D0D9C0536B124D9BD3317CAD6B5FECA30355CA
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 15:59:58 +0000
ROA not before:           Mon 26 Jun 2023 15:54:58 +0000
ROA not after:            Mon 24 Jun 2024 15:59:58 +0000
asID:                     263474
IP address blocks:        191.242.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d0:d9:c0:53:6b:12:4d:9b:d3:31:7c:ad:6b:5f:ec:a3:03:55:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:54:58 2023 GMT
            Not After : Jun 24 15:59:58 2024 GMT
        Subject: CN=2041D5E3FFF118D77C445C47D5F89BA22B4ED76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:c1:42:1e:29:fc:5c:7c:8b:97:58:02:63:
                    da:0f:89:e5:b4:43:fd:61:d4:50:cc:03:e8:7e:4f:
                    5d:0e:dd:8f:f5:92:91:0b:29:82:e0:43:a8:19:5c:
                    05:9b:26:46:3e:21:af:38:7a:2b:5d:74:bc:21:49:
                    2f:48:ea:a3:5a:92:8a:db:65:c2:fa:1e:6e:a1:fb:
                    57:e9:4b:6d:e4:98:ef:e6:6b:54:20:77:a6:8e:fc:
                    4c:4f:9f:df:ac:6e:1d:52:6f:83:05:d9:c8:22:67:
                    6f:58:7b:34:d7:81:f9:77:5e:38:45:d7:08:0b:de:
                    ad:2a:56:df:9b:95:97:3b:7a:b9:a2:45:f4:ed:97:
                    c0:29:7c:03:ed:18:be:2d:47:63:28:ac:0f:d1:13:
                    7c:55:9b:8c:cc:d2:87:6d:81:97:27:b5:c9:a7:58:
                    f0:c9:dc:2d:c3:5f:32:17:9d:dd:22:3e:0a:5e:a3:
                    aa:a8:21:3e:f1:45:84:99:5e:ed:cb:47:a1:d8:e4:
                    f3:e5:aa:05:dd:1b:e1:90:25:2d:7d:cc:e1:c8:25:
                    9c:80:fa:96:03:c4:2d:ef:cf:5b:f9:0c:68:18:52:
                    1d:0d:c5:ae:ce:8b:e4:66:27:9b:8b:49:f2:00:87:
                    8e:34:a9:18:66:53:5b:73:47:64:94:2a:d1:1a:16:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:41:D5:E3:FF:F1:18:D7:7C:44:5C:47:D5:F8:9B:A2:2B:4E:D7:6B
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:89:4f:47:05:e0:fb:5b:fa:cf:b1:2e:9a:bf:98:42:91:a6:
         8c:42:b6:3f:cd:4f:f5:7f:f6:39:81:5f:89:ab:25:5d:c2:99:
         96:bc:30:bb:bf:2b:37:c5:be:a6:19:ff:22:6e:28:53:bc:e8:
         2d:c2:85:01:07:32:9e:ab:31:13:fa:fe:a8:f9:38:9a:58:ee:
         26:05:1e:26:8a:e9:1a:5a:93:91:8a:df:6d:1d:85:57:86:b9:
         c4:39:de:c8:89:48:6a:04:94:71:d6:f5:ff:6d:9a:c7:96:22:
         bb:e4:46:58:f1:09:67:d6:a0:a3:ac:8e:dd:c6:12:90:b2:3c:
         cf:c3:a4:c7:69:02:57:1e:70:3d:f7:ce:4c:b4:3c:2b:be:bf:
         6c:bb:3d:71:5f:b6:8a:5a:d1:4e:b7:7b:57:06:57:9a:5b:ad:
         27:13:97:4e:00:9f:83:43:23:30:cd:90:bd:07:f4:ca:d0:7d:
         60:af:94:d9:83:43:c1:e5:66:bf:24:08:9c:50:d4:48:c2:b1:
         4e:2f:fd:6e:8b:10:ae:c1:aa:0f:28:dc:67:ee:69:83:26:bf:
         1b:b4:86:8f:5b:ad:78:9f:33:b1:a2:26:5d:3f:d3:a6:36:fe:
         ab:ba:82:21:42:8b:94:74:da:9f:f6:bb:8a:3c:93:d1:f5:9c:
         81:1c:9e:2f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM9DZwFNrEk2b0zF8rWtf7KMDVcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg1OEFDNkQ4NTY3MkE2NkQzRDU1OTlGOTIzNzE2MEY5
QjFCOTQzMzAeFw0yMzA2MjYxNTU0NThaFw0yNDA2MjQxNTU5NThaMDMxMTAvBgNV
BAMTKDIwNDFENUUzRkZGMTE4RDc3QzQ0NUM0N0Q1Rjg5QkEyMkI0RUQ3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMisFCHin8XHyLl1gCY9oPieW0
Q/1h1FDMA+h+T10O3Y/1kpELKYLgQ6gZXAWbJkY+Ia84eitddLwhSS9I6qNakorb
ZcL6Hm6h+1fpS23kmO/ma1Qgd6aO/ExPn9+sbh1Sb4MF2cgiZ29YezTXgfl3XjhF
1wgL3q0qVt+blZc7ermiRfTtl8ApfAPtGL4tR2MorA/RE3xVm4zM0odtgZcntcmn
WPDJ3C3DXzIXnd0iPgpeo6qoIT7xRYSZXu3LR6HY5PPlqgXdG+GQJS19zOHIJZyA
+pYDxC3vz1v5DGgYUh0Nxa7Oi+RmJ5uLSfIAh440qRhmU1tzR2SUKtEaFiFtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIEHV4//xGNd8RFxH1fiboitO12swHwYDVR0j
BBgwFoAUyFisbYVnKmbT1VmfkjcWD5sblDMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tvdkZaYXg1VWg5VzlqNGE3akZuQWUzNGhHcm9mTjVvWjZDeEFzQWhi
ek4vMC9DODU4QUM2RDg1NjcyQTY2RDNENTU5OUY5MjM3MTYwRjlCMUI5NDMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4NThBQzZEODU2NzJBNjZE
M0Q1NTk5RjkyMzcxNjBGOUIxQjk0MzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLb3ZGWmF4NVVoOVc5ajRhN2pGbkFlMzRoR3JvZk41b1o2Q3hBc0FoYnpOLzAv
MzEzOTMxMmUzMjM0MzIyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK/8kgwDQYJKoZIhvcNAQELBQADggEBAGiJT0cF
4Ptb+s+xLpq/mEKRpoxCtj/NT/V/9jmBX4mrJV3CmZa8MLu/KzfFvqYZ/yJuKFO8
6C3ChQEHMp6rMRP6/qj5OJpY7iYFHiaK6Rpak5GK320dhVeGucQ53siJSGoElHHW
9f9tmseWIrvkRljxCWfWoKOsjt3GEpCyPM/DpMdpAlcecD33zky0PCu+v2y7PXFf
topa0U63e1cGV5pbrScTl04An4NDIzDNkL0H9MrQfWCvlNmDQ8HlZr8kCJxQ1EjC
sU4v/W6LEK7Bqg8o3GfuaYMmvxu0ho9brXifM7GiJl0/06Y2/qu6giFCi5R02p/2
u4o8k9H1nIEcni8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org