Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38342e302f32342d3234203d3e20323632363132.roa
File:                     3139312e3234322e38342e302f32342d3234203d3e20323632363132.roa (raw, json)
Hash identifier:          PbJKPuA93UA1StJUvkILMwoU152TAyYiZPvXmkSpV8A=
Subject key identifier:   3E:8D:38:BB:AF:CB:F6:9F:1B:07:1E:15:A7:9B:9D:0F:E3:E8:B6:10
Certificate issuer:       /CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
Certificate serial:       71F26647990B58425238EB82B369019C3983359F
Authority key identifier: A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38342e302f32342d3234203d3e20323632363132.roa
Signing time:             Sat 24 Dec 2022 16:49:16 +0000
ROA not before:           Sat 24 Dec 2022 16:44:16 +0000
ROA not after:            Sat 23 Dec 2023 16:49:16 +0000
asID:                     262612
IP address blocks:        191.242.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f2:66:47:99:0b:58:42:52:38:eb:82:b3:69:01:9c:39:83:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94A599704715D29A27EB08841A9EF2E8D361EE6
        Validity
            Not Before: Dec 24 16:44:16 2022 GMT
            Not After : Dec 23 16:49:16 2023 GMT
        Subject: CN=3E8D38BBAFCBF69F1B071E15A79B9D0FE3E8B610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:7b:cd:a2:6d:12:18:91:09:67:93:49:23:
                    72:b8:60:47:35:65:21:f9:ea:47:f5:73:08:94:87:
                    9c:c2:3d:64:1c:25:ef:44:0f:c1:c0:25:03:98:5b:
                    87:18:66:a1:cf:d6:6d:d9:35:98:dd:0d:67:fc:ef:
                    26:5a:5e:6a:73:9b:e7:80:ae:4a:56:8a:a9:c0:12:
                    97:aa:90:68:3b:e6:92:59:ec:7c:5e:da:0b:bb:12:
                    68:a9:bc:56:a5:b0:0f:9d:a9:a4:f8:9d:8e:42:dc:
                    82:62:d7:c8:46:90:39:74:a1:7d:f2:23:b5:a8:88:
                    27:35:26:24:3e:61:67:b0:18:18:ac:c2:e9:b9:16:
                    a8:99:6f:e0:a7:97:7e:b5:6d:af:22:de:46:5d:47:
                    4f:5b:b8:fe:d8:9e:56:a1:fe:58:32:10:65:d8:0f:
                    a0:25:41:59:fe:40:ae:87:82:58:d9:5a:14:25:48:
                    87:57:48:b9:73:e9:c4:ff:ba:07:50:68:ca:b9:12:
                    e1:e4:35:12:29:ed:fa:4c:b2:f7:76:ec:46:c9:e0:
                    f5:9b:fb:96:e2:5a:64:e6:e9:aa:c2:c1:29:2b:45:
                    38:9f:38:88:e6:44:a1:45:8b:ae:48:bc:3e:61:e1:
                    ec:b2:c5:c8:b0:42:df:dc:7a:10:e7:4c:f5:44:e6:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8D:38:BB:AF:CB:F6:9F:1B:07:1E:15:A7:9B:9D:0F:E3:E8:B6:10
            X509v3 Authority Key Identifier:
                keyid:A9:4A:59:97:04:71:5D:29:A2:7E:B0:88:41:A9:EF:2E:8D:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A94A599704715D29A27EB08841A9EF2E8D361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/0/3139312e3234322e38342e302f32342d3234203d3e20323632363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:e6:e4:55:2d:c2:11:73:a2:2f:e9:b4:59:d2:85:6c:1c:
         29:27:b0:59:46:e5:7e:7f:19:26:c9:89:d6:b8:95:e4:ea:99:
         f1:37:77:f8:59:41:83:47:47:a2:0d:d7:9c:03:5b:10:de:7f:
         d7:8a:59:ea:11:a2:de:4c:66:97:9e:3d:24:21:25:c4:3b:59:
         c4:1b:c4:81:61:e5:de:68:58:44:63:36:20:b6:56:5f:70:06:
         27:0b:38:24:b7:45:cd:66:54:0f:c4:31:9e:f0:26:e5:06:00:
         93:8e:7f:ce:ff:a5:32:38:b0:62:2e:aa:a3:be:fe:f6:7b:92:
         06:09:91:81:79:ef:7e:16:48:60:d3:95:b0:fd:8d:fb:79:67:
         11:44:7b:32:34:ee:02:a6:d7:8f:be:f0:0f:a9:db:0a:c3:9c:
         e2:ef:99:76:f8:61:4f:57:86:8a:f5:3a:f7:bc:94:82:ea:da:
         98:de:6c:f1:bf:f2:b8:e9:68:59:92:bf:c3:7a:7b:2f:7d:0a:
         7f:08:65:01:2c:e7:2d:b9:7f:fa:e0:e9:25:d8:e3:4b:1c:86:
         b7:28:de:e8:d2:8c:a9:4c:1a:2d:05:a0:96:39:3e:be:0b:fb:
         2a:42:5f:9b:61:2e:09:19:22:27:3c:88:ae:14:b2:7e:b8:09:
         c5:5c:08:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcfJmR5kLWEJSOOuCs2kBnDmDNZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0QTU5OTcwNDcxNUQyOUEyN0VCMDg4NDFBOUVGMkU4
RDM2MUVFNjAeFw0yMjEyMjQxNjQ0MTZaFw0yMzEyMjMxNjQ5MTZaMDMxMTAvBgNV
BAMTKDNFOEQzOEJCQUZDQkY2OUYxQjA3MUUxNUE3OUI5RDBGRTNFOEI2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+HvNom0SGJEJZ5NJI3K4YEc1
ZSH56kf1cwiUh5zCPWQcJe9ED8HAJQOYW4cYZqHP1m3ZNZjdDWf87yZaXmpzm+eA
rkpWiqnAEpeqkGg75pJZ7Hxe2gu7EmipvFalsA+dqaT4nY5C3IJi18hGkDl0oX3y
I7WoiCc1JiQ+YWewGBiswum5FqiZb+Cnl361ba8i3kZdR09buP7Ynlah/lgyEGXY
D6AlQVn+QK6HgljZWhQlSIdXSLlz6cT/ugdQaMq5EuHkNRIp7fpMsvd27EbJ4PWb
+5biWmTm6arCwSkrRTifOIjmRKFFi65IvD5h4eyyxciwQt/cehDnTPVE5pOvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPo04u6/L9p8bBx4Vp5udD+PothAwHwYDVR0j
BBgwFoAUqUpZlwRxXSmifrCIQanvLo02HuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnBrSmQxMk56eXhuWlB2Um83RzREM1NKcjdOQjdUYXhpUVpXZGdEOUNO
OVQvMC9BOTRBNTk5NzA0NzE1RDI5QTI3RUIwODg0MUE5RUYyRThEMzYxRUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5NEE1OTk3MDQ3MTVEMjlB
MjdFQjA4ODQxQTlFRjJFOEQzNjFFRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZwa0pkMTJOenl4blpQdlJvN0c0RDNTSnI3TkI3VGF4aVFaV2RnRDlDTjlULzAv
MzEzOTMxMmUzMjM0MzIyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8lQwDQYJKoZIhvcNAQELBQADggEBAB8F5uRV
LcIRc6Iv6bRZ0oVsHCknsFlG5X5/GSbJida4leTqmfE3d/hZQYNHR6IN15wDWxDe
f9eKWeoRot5MZpeePSQhJcQ7WcQbxIFh5d5oWERjNiC2Vl9wBicLOCS3Rc1mVA/E
MZ7wJuUGAJOOf87/pTI4sGIuqqO+/vZ7kgYJkYF5734WSGDTlbD9jft5ZxFEezI0
7gKm14++8A+p2wrDnOLvmXb4YU9Xhor1Ove8lILq2pjebPG/8rjpaFmSv8N6ey99
Cn8IZQEs5y25f/rg6SXY40schrco3ujSjKlMGi0FoJY5Pr4L+ypCX5thLgkZIic8
iK4Usn64CcVcCK4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org