Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa (raw, json)
Hash identifier:          buxoCVkffK6FzZ24JFKUtE2qDmabr5afGCXQ5pV7BiE=
Subject key identifier:   95:CF:2B:EF:08:CA:98:FC:F1:E1:F7:CB:07:E9:14:88:32:D8:45:CB
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       5C67254121EE6545AA0A744AD9038D95287728BF
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa
Signing time:             Mon 12 Feb 2024 17:14:16 +0000
ROA not before:           Mon 12 Feb 2024 17:09:16 +0000
ROA not after:            Mon 10 Feb 2025 17:14:16 +0000
asID:                     263524
IP address blocks:        191.253.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:67:25:41:21:ee:65:45:aa:0a:74:4a:d9:03:8d:95:28:77:28:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 12 17:09:16 2024 GMT
            Not After : Feb 10 17:14:16 2025 GMT
        Subject: CN=95CF2BEF08CA98FCF1E1F7CB07E9148832D845CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:e0:db:f6:01:66:03:08:e8:ca:03:b8:79:
                    f9:9a:86:7e:0a:7e:a5:56:4c:6c:6d:1b:6c:bb:b4:
                    42:37:18:1d:b9:f6:81:26:83:d5:3b:0d:fa:fc:01:
                    40:0f:8b:60:5a:48:47:69:f9:8b:2c:eb:a0:b7:60:
                    53:64:90:6a:9a:d2:c7:9e:e2:5e:c4:c0:5e:7f:4b:
                    47:29:b1:97:82:dc:72:f1:08:d8:89:24:5b:84:8e:
                    32:f6:fc:43:91:e7:02:f5:e9:74:6e:7e:0d:f3:34:
                    dd:09:d1:1a:fc:98:d5:7a:43:c7:e5:c1:c0:ae:34:
                    b7:52:a8:b4:0e:3b:2b:22:c2:fb:65:20:df:3d:a7:
                    cc:df:e9:57:2e:73:4a:0a:27:eb:3d:98:1a:11:f0:
                    46:16:03:ef:71:8d:df:90:37:da:be:da:cf:fa:45:
                    e2:58:94:c0:f9:c7:a9:2d:f2:60:81:1a:e1:f7:ba:
                    d4:4c:c7:b7:90:44:92:0c:dd:0c:6d:c7:d0:71:8b:
                    9a:6e:b1:ea:d4:d6:f4:89:18:4b:2a:1a:de:c0:b4:
                    93:7a:a7:53:68:74:84:4c:7e:81:d6:eb:79:08:da:
                    b9:3d:cb:17:4e:7c:05:4f:12:e0:53:e9:30:7c:03:
                    72:1d:18:b6:69:8c:7d:c8:bd:54:27:89:16:56:1a:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CF:2B:EF:08:CA:98:FC:F1:E1:F7:CB:07:E9:14:88:32:D8:45:CB
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3231203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:b9:4e:92:f2:d1:03:29:4e:ce:e1:4b:0d:09:60:43:b7:
         2a:ba:f5:4b:6a:1d:b5:81:28:1e:26:39:15:7f:0e:c8:51:04:
         a1:ba:4c:d7:05:97:7b:2a:5c:5c:53:b9:87:8c:42:e7:d6:8d:
         79:50:18:6c:65:4a:b9:b9:05:4f:69:f8:c8:93:e0:8b:19:3b:
         c8:03:fc:ab:cd:e4:9a:42:49:3c:4d:3e:83:d2:c1:96:b0:36:
         62:3d:c1:46:cb:ff:2e:f7:7e:28:a1:ca:29:db:12:04:ec:02:
         1e:be:74:57:1d:3b:cb:a4:dd:c7:58:b7:91:a2:34:d7:7e:05:
         b7:62:f9:1a:8f:49:2c:ec:65:3a:30:ae:72:b2:2f:90:1f:b5:
         4f:38:95:24:33:8f:85:a5:3e:f1:2c:07:70:00:33:fb:a5:42:
         97:4a:30:45:63:43:8c:1b:c9:40:a3:ee:45:bc:c8:d9:68:09:
         6d:21:4e:18:c8:72:fd:9a:81:14:44:31:0d:5c:4a:d2:cc:30:
         61:22:34:3c:47:d5:01:45:c7:b2:17:da:43:18:24:bc:d4:86:
         d1:1e:56:5f:2f:4c:cb:25:e9:61:90:1a:1d:33:b4:9c:43:ea:
         e6:f4:db:3e:05:0c:93:dd:cc:e9:34:b9:4e:0c:44:87:ce:5b:
         82:e4:25:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXGclQSHuZUWqCnRK2QONlSh3KL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQTlDQzgwRTRERTRBMUE2ODBENkE0REUzQzcyODBD
MjYyNzI1ODAeFw0yNDAyMTIxNzA5MTZaFw0yNTAyMTAxNzE0MTZaMDMxMTAvBgNV
BAMTKDk1Q0YyQkVGMDhDQTk4RkNGMUUxRjdDQjA3RTkxNDg4MzJEODQ1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6m+Db9gFmAwjoygO4efmahn4K
fqVWTGxtG2y7tEI3GB259oEmg9U7Dfr8AUAPi2BaSEdp+Yss66C3YFNkkGqa0see
4l7EwF5/S0cpsZeC3HLxCNiJJFuEjjL2/EOR5wL16XRufg3zNN0J0Rr8mNV6Q8fl
wcCuNLdSqLQOOysiwvtlIN89p8zf6Vcuc0oKJ+s9mBoR8EYWA+9xjd+QN9q+2s/6
ReJYlMD5x6kt8mCBGuH3utRMx7eQRJIM3Qxtx9Bxi5puserU1vSJGEsqGt7AtJN6
p1NodIRMfoHW63kI2rk9yxdOfAVPEuBT6TB8A3IdGLZpjH3IvVQniRZWGr4tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlc8r7wjKmPzx4ffLB+kUiDLYRcswHwYDVR0j
BBgwFoAUXPqcyA5N5KGmgNak3jxygMJiclgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy
TGkvMC81Q0ZBOUNDODBFNERFNEExQTY4MEQ2QTRERTNDNzI4MEMyNjI3MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDRkE5Q0M4MEU0REU0QTFB
NjgwRDZBNERFM0M3MjgwQzI2MjcyNTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQQzRKUlM5NjlBN3JSd0JONkVNaGo2dzlWY1h1S2YzRVlZSFpUeU5KMkxpLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO//RgwDQYJKoZIhvcNAQELBQADggEBABfLuU6S
8tEDKU7O4UsNCWBDtyq69UtqHbWBKB4mORV/DshRBKG6TNcFl3sqXFxTuYeMQufW
jXlQGGxlSrm5BU9p+MiT4IsZO8gD/KvN5JpCSTxNPoPSwZawNmI9wUbL/y73fiih
yinbEgTsAh6+dFcdO8uk3cdYt5GiNNd+Bbdi+RqPSSzsZTowrnKyL5AftU84lSQz
j4WlPvEsB3AAM/ulQpdKMEVjQ4wbyUCj7kW8yNloCW0hThjIcv2agRREMQ1cStLM
MGEiNDxH1QFFx7IX2kMYJLzUhtEeVl8vTMsl6WGQGh0ztJxD6ub02z4FDJPdzOk0
uU4MRIfOW4LkJTc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org