Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          UPD45caPJu0sup9ERy12NQrbHq5NhsggxQaVaX+VHIU=
Subject key identifier:   BA:AC:A8:87:14:88:B7:15:06:3F:D1:67:14:BE:48:A7:D7:B2:97:B1
Certificate issuer:       /CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
Certificate serial:       6648249DF68708702B271667BA58649EF9F4AC35
Authority key identifier: 5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa
Signing time:             Fri 02 Dec 2022 01:50:15 +0000
ROA not before:           Fri 02 Dec 2022 01:45:15 +0000
ROA not after:            Fri 01 Dec 2023 01:50:15 +0000
asID:                     270359
IP address blocks:        190.89.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:24:9d:f6:87:08:70:2b:27:16:67:ba:58:64:9e:f9:f4:ac:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
        Validity
            Not Before: Dec  2 01:45:15 2022 GMT
            Not After : Dec  1 01:50:15 2023 GMT
        Subject: CN=BAACA8871488B715063FD16714BE48A7D7B297B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e2:a0:9d:ec:ca:90:37:7a:9e:17:7f:fe:bc:
                    d0:da:24:cd:4f:5c:30:ab:d3:0d:5c:32:ce:c4:a8:
                    3a:49:15:d1:9f:24:16:10:83:6f:c3:9b:18:b2:ab:
                    a5:14:1e:93:79:d2:62:55:bf:40:1e:2a:a2:c9:c9:
                    ee:cb:ed:3d:99:0b:b3:aa:c7:17:8b:33:14:ca:2b:
                    c1:94:ae:cb:46:03:4f:2d:d5:de:4d:83:90:90:d7:
                    fd:83:0b:51:c6:3f:b6:29:1d:f6:b7:f6:50:65:ef:
                    44:9c:e6:56:c9:29:7c:8f:12:2b:5d:04:51:bc:9e:
                    16:64:0e:52:7c:d8:f0:a5:c7:1a:96:0e:48:84:4f:
                    a6:e3:86:04:24:42:7c:d9:ed:b5:57:44:17:53:8e:
                    d2:86:64:a0:f1:60:17:49:68:36:68:88:60:b6:e9:
                    0a:2c:a3:6d:f7:6e:60:de:82:6f:b8:18:6e:55:ce:
                    76:9e:7f:69:2b:e3:d8:69:0a:8f:05:ed:f8:ff:f9:
                    41:75:80:80:0d:bf:70:fe:54:8b:a6:fc:d3:45:08:
                    c3:7f:6c:e9:f4:a5:b0:90:39:a6:9d:f4:e2:63:0f:
                    17:aa:d4:b7:a6:4a:58:7e:f8:fd:d3:7e:c9:9b:b8:
                    4a:64:8d:cf:07:76:d5:59:ee:49:52:4e:64:76:6f:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:A8:87:14:88:B7:15:06:3F:D1:67:14:BE:48:A7:D7:B2:97:B1
            X509v3 Authority Key Identifier:
                keyid:5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:16:a1:7a:46:00:61:ab:16:ed:36:c7:96:91:2d:95:4f:c2:
         a3:5e:bd:0f:00:62:92:88:c8:15:f4:25:cb:81:b4:9b:71:85:
         7e:e6:d3:2f:52:9b:38:ac:45:47:81:ce:b9:8f:77:eb:6c:e1:
         6c:6f:49:ba:df:4b:9b:f4:7c:b6:75:b9:c4:2d:90:13:15:79:
         36:98:5b:ef:7e:91:b3:32:a9:e1:94:06:eb:8b:75:0a:91:59:
         85:3c:c4:12:f3:28:d8:14:e3:74:b6:88:1c:0a:76:3b:63:b3:
         4b:a9:bd:aa:c6:85:e1:2d:2a:ab:8b:5d:5d:c1:87:39:38:00:
         a7:0f:09:60:44:e6:5c:51:aa:ae:25:4c:5f:38:4f:c0:1f:4e:
         1f:f5:00:cc:2c:d4:d1:10:6c:46:f4:64:7a:01:61:76:38:fc:
         93:4a:7d:8c:81:70:28:29:63:b7:d4:d7:73:98:22:f3:5e:9c:
         55:ab:53:4f:f8:be:24:c6:39:d6:b6:94:52:40:01:7f:77:cc:
         cd:c8:f7:08:63:05:c4:4f:17:53:7e:85:43:7e:94:e0:2c:db:
         ab:0e:7e:e7:73:bb:3a:a8:1f:1f:43:9d:f5:c3:e2:44:b1:10:
         7f:77:8f:26:19:05:08:ad:cc:9b:74:8c:ae:4b:da:a6:2e:aa:
         ae:2c:44:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZkgknfaHCHArJxZnulhknvn0rDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI2RDVDQkY5ODlGRjcwOTI1RTcwNThFQUI3RERBMjgx
NkUxNkY1RjAeFw0yMjEyMDIwMTQ1MTVaFw0yMzEyMDEwMTUwMTVaMDMxMTAvBgNV
BAMTKEJBQUNBODg3MTQ4OEI3MTUwNjNGRDE2NzE0QkU0OEE3RDdCMjk3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs4qCd7MqQN3qeF3/+vNDaJM1P
XDCr0w1cMs7EqDpJFdGfJBYQg2/Dmxiyq6UUHpN50mJVv0AeKqLJye7L7T2ZC7Oq
xxeLMxTKK8GUrstGA08t1d5Ng5CQ1/2DC1HGP7YpHfa39lBl70Sc5lbJKXyPEitd
BFG8nhZkDlJ82PClxxqWDkiET6bjhgQkQnzZ7bVXRBdTjtKGZKDxYBdJaDZoiGC2
6Qoso233bmDegm+4GG5Vznaef2kr49hpCo8F7fj/+UF1gIANv3D+VIum/NNFCMN/
bOn0pbCQOaad9OJjDxeq1LemSlh++P3TfsmbuEpkjc8HdtVZ7klSTmR2b2ljAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuqyohxSItxUGP9FnFL5Ip9eyl7EwHwYDVR0j
BBgwFoAUW21cv5if9wkl5wWOq33aKBbhb18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtSTWo3NFRTd1REdzZHS2RMcG5IMjd6c3pOTXNjVnNaY3pEd3ZZcWIx
Um0vMC81QjZENUNCRjk4OUZGNzA5MjVFNzA1OEVBQjdEREEyODE2RTE2RjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNkQ1Q0JGOTg5RkY3MDky
NUU3MDU4RUFCN0REQTI4MTZFMTZGNUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrUk1qNzRUU3dURHc2R0tkTHBuSDI3enN6Tk1zY1ZzWmN6RHd2WXFiMVJtLzAv
MzEzOTMwMmUzODM5MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvllNMA0GCSqGSIb3DQEBCwUAA4IBAQBoFqF6RgBh
qxbtNseWkS2VT8KjXr0PAGKSiMgV9CXLgbSbcYV+5tMvUps4rEVHgc65j3frbOFs
b0m630ub9Hy2dbnELZATFXk2mFvvfpGzMqnhlAbri3UKkVmFPMQS8yjYFON0togc
CnY7Y7NLqb2qxoXhLSqri11dwYc5OACnDwlgROZcUaquJUxfOE/AH04f9QDMLNTR
EGxG9GR6AWF2OPyTSn2MgXAoKWO31NdzmCLzXpxVq1NP+L4kxjnWtpRSQAF/d8zN
yPcIYwXETxdTfoVDfpTgLNurDn7nc7s6qB8fQ531w+JEsRB/d48mGQUIrcybdIyu
S9qmLqquLER/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org