Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3232203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          SWrpglgqfC1gsCpgftuObT4C8ULBDa16kd+A6J4FO60=
Subject key identifier:   D1:CD:81:5A:0B:0B:7B:A8:68:B1:D0:42:30:8E:28:B6:BC:DC:AA:AF
Certificate issuer:       /CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
Certificate serial:       21C95D395CA98E7902FD09E13C2F41F0F58064EA
Authority key identifier: C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3232203d3e20323632393031.roa
Signing time:             Thu 10 Aug 2023 20:00:32 +0000
ROA not before:           Thu 10 Aug 2023 19:55:32 +0000
ROA not after:            Thu 08 Aug 2024 20:00:32 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c9:5d:39:5c:a9:8e:79:02:fd:09:e1:3c:2f:41:f0:f5:80:64:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
        Validity
            Not Before: Aug 10 19:55:32 2023 GMT
            Not After : Aug  8 20:00:32 2024 GMT
        Subject: CN=D1CD815A0B0B7BA868B1D042308E28B6BCDCAAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:39:6b:a7:4f:41:23:b1:28:46:f9:94:9e:
                    d4:d5:1e:de:5c:f9:85:b1:aa:95:84:8d:3e:86:54:
                    fd:42:db:88:3d:67:6b:79:d3:8e:a1:b7:43:0d:df:
                    a4:99:69:e0:e7:6a:f6:39:98:5e:18:7d:5b:95:8f:
                    ea:9f:cd:78:9a:18:29:de:7c:2d:84:bf:c5:45:36:
                    d5:16:e2:61:81:4b:2b:3c:38:0c:f8:1a:3f:fa:ea:
                    82:43:4e:1a:55:00:32:22:29:97:12:a7:7d:5c:f3:
                    60:31:37:ca:ae:9a:28:22:de:14:3d:a0:65:0e:d3:
                    de:f3:5d:a5:13:ab:38:0e:a3:30:40:a2:60:55:48:
                    07:b7:7e:c2:32:1a:75:88:74:3a:97:e6:ca:66:de:
                    38:b6:e0:64:ca:bf:b2:09:04:8b:3b:aa:e1:22:c1:
                    72:51:02:5d:e9:7f:70:72:af:fb:9c:87:02:31:41:
                    42:62:59:7f:c3:68:e8:93:c8:1f:bb:0a:f1:6b:17:
                    7d:70:12:19:5a:28:22:5b:d5:26:d2:76:62:b1:04:
                    d9:b5:50:85:32:79:1c:cc:bc:87:4f:ad:ba:ab:69:
                    e9:24:c8:3e:d8:3c:23:99:59:25:78:9c:87:0c:72:
                    a6:03:2a:20:d2:de:10:38:5e:d4:eb:9e:fc:d1:5a:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:81:5A:0B:0B:7B:A8:68:B1:D0:42:30:8E:28:B6:BC:DC:AA:AF
            X509v3 Authority Key Identifier:
                keyid:C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:61:64:82:06:6b:bd:e1:63:cd:f9:2a:82:0f:26:70:fa:6f:
         b7:58:12:bb:7a:a7:21:45:40:8a:8c:b3:b7:f2:1c:92:b9:46:
         01:7d:a9:81:18:8a:aa:19:c9:05:aa:c8:7a:69:1e:bd:b4:9c:
         04:ba:d7:d1:08:ee:11:3f:8f:58:11:2c:5c:f8:8e:25:e7:bf:
         f6:6b:eb:5e:be:f0:69:7f:81:bd:d4:7d:7b:4f:ae:c3:dd:24:
         0b:e9:84:35:d0:da:e8:b4:a9:91:76:91:8f:ad:cc:ab:25:d2:
         d7:48:c4:f2:ca:70:6e:7c:d6:c1:17:0c:29:fe:3a:98:d3:a5:
         ef:64:2f:08:46:02:32:8d:2b:02:4f:a2:fa:67:98:91:1e:be:
         89:bb:53:8a:28:7d:1e:fe:c6:b0:a3:c4:b2:2e:3e:7d:d4:4c:
         1b:21:42:9b:03:b7:e0:a8:33:19:7f:ad:c9:7a:32:11:6d:57:
         ae:e0:5a:26:8c:e1:f5:db:db:5f:3e:b5:a7:2a:ad:5d:4c:cd:
         9a:a0:3f:0b:31:25:38:4b:e0:91:83:42:5a:12:de:7c:49:d8:
         41:f1:87:f9:46:4c:3b:0d:e0:bb:60:be:8a:40:da:fe:d3:9d:
         e2:3a:bd:29:0b:8c:f6:34:d3:64:db:1f:18:80:90:73:ee:b3:
         09:08:d5:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIcldOVypjnkC/QnhPC9B8PWAZOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwNTMzMUYwQTkwN0Y4RDJCOEE0NzE5RUNFMjI4ODk5
M0FGREEzODAeFw0yMzA4MTAxOTU1MzJaFw0yNDA4MDgyMDAwMzJaMDMxMTAvBgNV
BAMTKEQxQ0Q4MTVBMEIwQjdCQTg2OEIxRDA0MjMwOEUyOEI2QkNEQ0FBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJDlrp09BI7EoRvmUntTVHt5c
+YWxqpWEjT6GVP1C24g9Z2t5046ht0MN36SZaeDnavY5mF4YfVuVj+qfzXiaGCne
fC2Ev8VFNtUW4mGBSys8OAz4Gj/66oJDThpVADIiKZcSp31c82AxN8qumigi3hQ9
oGUO097zXaUTqzgOozBAomBVSAe3fsIyGnWIdDqX5spm3ji24GTKv7IJBIs7quEi
wXJRAl3pf3Byr/uchwIxQUJiWX/DaOiTyB+7CvFrF31wEhlaKCJb1SbSdmKxBNm1
UIUyeRzMvIdPrbqraekkyD7YPCOZWSV4nIcMcqYDKiDS3hA4XtTrnvzRWoutAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0c2BWgsLe6hosdBCMI4otrzcqq8wHwYDVR0j
BBgwFoAUxwUzHwqQf40rikcZ7OIoiZOv2jgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC9DNzA1MzMxRjBBOTA3RjhEMkI4QTQ3MTlFQ0UyMjg4OTkzQUZEQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3MDUzMzFGMEE5MDdGOEQy
QjhBNDcxOUVDRTIyODg5OTNBRkRBMzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzIyMDNkM2UyMDMy
MzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL/wsDANBgkqhkiG9w0BAQsFAAOCAQEAEGFk
ggZrveFjzfkqgg8mcPpvt1gSu3qnIUVAioyzt/IckrlGAX2pgRiKqhnJBarIemke
vbScBLrX0QjuET+PWBEsXPiOJee/9mvrXr7waX+BvdR9e0+uw90kC+mENdDa6LSp
kXaRj63MqyXS10jE8spwbnzWwRcMKf46mNOl72QvCEYCMo0rAk+i+meYkR6+ibtT
iih9Hv7GsKPEsi4+fdRMGyFCmwO34KgzGX+tyXoyEW1XruBaJozh9dvbXz61pyqt
XUzNmqA/CzElOEvgkYNCWhLefEnYQfGH+UZMOw3gu2C+ikDa/tOd4jq9KQuM9jTT
ZNsfGICQc+6zCQjVKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org