Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3234203d3e20323632373236.roa
File:                     3139312e3234312e34302e302f32312d3234203d3e20323632373236.roa (raw, json)
Hash identifier:          PWkDQ7BP4RcO2oypRmFYgHnLMXRYlAhn0iqD8bgeHpE=
Subject key identifier:   C0:C8:E5:32:4F:CA:EB:39:AD:C9:14:09:F9:5E:78:C1:D6:6B:77:DD
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       3658659AB5FEF0FCD200DF824F105EB4FD066B92
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3234203d3e20323632373236.roa
Signing time:             Thu 09 Mar 2023 23:00:50 +0000
ROA not before:           Thu 09 Mar 2023 22:55:50 +0000
ROA not after:            Thu 07 Mar 2024 23:00:50 +0000
asID:                     262726
IP address blocks:        191.241.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:58:65:9a:b5:fe:f0:fc:d2:00:df:82:4f:10:5e:b4:fd:06:6b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  9 22:55:50 2023 GMT
            Not After : Mar  7 23:00:50 2024 GMT
        Subject: CN=C0C8E5324FCAEB39ADC91409F95E78C1D66B77DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:23:b2:a7:55:64:b1:db:3d:55:2b:e9:90:
                    38:c0:8b:bf:a0:53:4d:31:64:3e:6a:90:37:cf:f4:
                    30:a1:f6:91:b0:e0:de:b0:43:3f:5e:8b:4a:ed:38:
                    33:23:d4:58:a1:b5:ff:6b:11:c5:9d:d7:43:4c:8e:
                    9c:46:96:b7:36:bf:05:bf:b5:fe:24:2a:8d:36:1b:
                    ac:66:05:92:88:0c:3c:82:20:be:46:ed:ef:72:d4:
                    c5:27:83:7d:ed:4d:16:f5:11:cb:3d:a2:9a:2e:30:
                    d7:51:bf:d7:91:df:b4:8e:db:68:50:63:69:54:aa:
                    9f:d8:28:fe:c8:6d:a0:67:15:50:f0:4c:9b:d9:8a:
                    21:85:02:fd:5a:3b:6d:79:66:ff:10:79:41:60:1a:
                    b1:1b:51:69:08:d0:c9:e3:07:a9:a6:70:dd:f5:73:
                    bf:7d:ae:5c:fa:11:3b:07:81:34:3c:f3:4f:ca:d9:
                    69:6f:a2:4a:d2:f2:12:38:a4:6a:22:76:ac:7a:28:
                    f5:b9:3a:7b:af:9a:9c:ab:13:b4:4d:df:06:c5:72:
                    1a:52:41:b6:39:00:41:ad:cc:ca:d7:fb:fd:9f:99:
                    c5:5d:ab:2d:be:2a:69:a2:5d:4c:97:a3:b9:e2:b3:
                    26:e2:22:1f:27:a2:bb:da:d8:5a:40:fd:3a:31:53:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:E5:32:4F:CA:EB:39:AD:C9:14:09:F9:5E:78:C1:D6:6B:77:DD
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3234203d3e20323632373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:5f:de:b6:1b:c4:dd:28:56:19:d4:f6:4e:af:38:a4:43:
         ba:ef:df:77:4a:ee:0e:6b:e4:45:c9:75:70:60:19:60:75:d2:
         50:85:29:1d:1e:44:ab:1f:d5:64:98:c9:44:a9:3c:28:22:9c:
         9e:bd:e9:7a:99:72:a0:1a:e7:7c:b4:71:6e:de:7e:6c:de:62:
         5d:a3:65:98:ca:ac:fa:11:31:28:2e:85:a4:b5:b4:ca:32:ae:
         95:dc:2c:e5:2b:19:6b:ac:7c:54:c4:69:89:1e:c9:9f:94:bf:
         73:40:41:57:3c:31:21:a0:1c:6e:8e:81:30:86:61:60:f4:c1:
         8f:eb:ed:43:7b:19:0a:f7:9c:f1:4d:4c:d5:39:3a:e4:de:08:
         ca:7f:70:51:17:ed:70:30:22:4a:7e:12:44:4d:bc:db:5e:a4:
         b3:db:a9:9f:68:8b:b5:17:e0:d5:84:39:e4:51:54:99:ed:51:
         9f:3f:d9:9f:78:de:49:39:f0:f4:7d:cb:14:43:00:c9:1e:17:
         66:41:a7:d2:16:81:d1:2f:62:34:76:a3:ea:0f:13:f7:c3:23:
         2d:2a:fc:ea:32:55:8f:cb:f2:c4:92:ad:a7:c8:a1:cb:c9:fa:
         73:f4:69:7f:b6:0f:d8:51:5d:7b:b2:2c:71:9a:7e:4d:2c:72:
         c4:2f:a2:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNlhlmrX+8PzSAN+CTxBetP0Ga5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDkyMjU1NTBaFw0yNDAzMDcyMzAwNTBaMDMxMTAvBgNV
BAMTKEMwQzhFNTMyNEZDQUVCMzlBREM5MTQwOUY5NUU3OEMxRDY2Qjc3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LCOyp1Vksds9VSvpkDjAi7+g
U00xZD5qkDfP9DCh9pGw4N6wQz9ei0rtODMj1Fihtf9rEcWd10NMjpxGlrc2vwW/
tf4kKo02G6xmBZKIDDyCIL5G7e9y1MUng33tTRb1Ecs9opouMNdRv9eR37SO22hQ
Y2lUqp/YKP7IbaBnFVDwTJvZiiGFAv1aO215Zv8QeUFgGrEbUWkI0MnjB6mmcN31
c799rlz6ETsHgTQ880/K2WlvokrS8hI4pGoidqx6KPW5OnuvmpyrE7RN3wbFchpS
QbY5AEGtzMrX+/2fmcVdqy2+KmmiXUyXo7nisybiIh8norva2FpA/ToxU8QrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwMjlMk/K6zmtyRQJ+V54wdZrd90wHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzOTMxMmUzMjM0MzEyZTM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8SgwDQYJKoZIhvcNAQELBQADggEBAC0XX962
G8TdKFYZ1PZOrzikQ7rv33dK7g5r5EXJdXBgGWB10lCFKR0eRKsf1WSYyUSpPCgi
nJ696XqZcqAa53y0cW7efmzeYl2jZZjKrPoRMSguhaS1tMoyrpXcLOUrGWusfFTE
aYkeyZ+Uv3NAQVc8MSGgHG6OgTCGYWD0wY/r7UN7GQr3nPFNTNU5OuTeCMp/cFEX
7XAwIkp+EkRNvNtepLPbqZ9oi7UX4NWEOeRRVJntUZ8/2Z943kk58PR9yxRDAMke
F2ZBp9IWgdEvYjR2o+oPE/fDIy0q/OoyVY/L8sSSrafIocvJ+nP0aX+2D9hRXXuy
LHGafk0scsQvonM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org