Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa
File:                     3139312e352e3133362e302f32312d3231203d3e20323633353336.roa (raw, json)
Hash identifier:          Lf/HGIa32nU1wVN6PdIe5D28PqJyf3XQaC+o9Obt0bg=
Subject key identifier:   1A:8C:CA:9E:75:82:54:6A:A2:3B:D8:BF:66:FA:B8:35:4E:9A:44:6F
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       776A1B12EC04BE74E263FA1DE5096D1F1E939CAF
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:22:08 +0000
ROA not before:           Wed 05 Jul 2023 17:17:08 +0000
ROA not after:            Wed 03 Jul 2024 17:22:08 +0000
asID:                     263536
IP address blocks:        191.5.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:1b:12:ec:04:be:74:e2:63:fa:1d:e5:09:6d:1f:1e:93:9c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:17:08 2023 GMT
            Not After : Jul  3 17:22:08 2024 GMT
        Subject: CN=1A8CCA9E7582546AA23BD8BF66FAB8354E9A446F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:2b:67:2e:75:25:a8:ed:dc:cb:db:80:60:
                    db:b9:aa:96:77:57:f8:75:2c:86:c1:e1:f6:99:25:
                    10:c2:1c:c6:3b:8e:53:11:09:c6:20:7a:af:6a:a8:
                    7e:81:a5:08:1f:ea:68:a6:56:de:13:e1:fb:92:c9:
                    95:3f:5a:89:f6:26:7c:48:d7:fc:dd:c7:90:99:7b:
                    19:67:fd:f1:84:a9:27:63:39:81:b6:7f:0d:65:bf:
                    29:bf:34:e7:f0:f4:24:8d:15:ff:45:44:f8:0f:7c:
                    6b:69:e7:50:5d:70:b1:a9:a7:30:91:ce:c2:01:8e:
                    76:87:25:5a:2e:13:46:a4:58:e6:cc:21:8f:9c:32:
                    a8:ee:36:b0:83:0e:9a:3a:8c:2b:91:ee:5d:73:29:
                    67:20:ac:a0:d9:40:b9:20:ee:69:c1:83:bf:5e:00:
                    4b:a1:45:58:5e:a1:08:36:bb:26:23:3a:2f:46:9c:
                    28:12:0c:c9:6a:72:6e:a1:a2:25:98:ca:2e:2d:4f:
                    a4:ea:bc:9d:13:59:93:80:2c:14:68:9f:34:1b:b7:
                    ed:0d:a9:4b:9d:80:d0:94:6f:ef:ac:82:fe:a1:e7:
                    8a:16:1c:36:43:c8:09:38:95:be:aa:c8:5a:76:f7:
                    18:90:1d:e4:e1:1e:5a:0e:47:d7:81:bf:e3:9b:a1:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:CA:9E:75:82:54:6A:A2:3B:D8:BF:66:FA:B8:35:4E:9A:44:6F
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:6d:83:81:8f:96:a6:c9:b2:dc:54:b0:aa:46:24:fa:fa:ea:
         60:cf:d2:1e:c8:09:50:0e:b1:18:0d:5d:51:87:78:e3:0c:d5:
         91:75:14:2c:b4:07:e8:1d:64:13:b3:0c:3f:f4:17:27:98:1a:
         7b:ee:4a:97:51:89:21:ce:ab:7d:e3:ec:35:04:5e:47:05:d3:
         3b:ce:6e:c8:72:aa:45:ae:31:4c:c9:a3:d9:08:ee:27:91:af:
         20:73:8e:5f:e7:b4:71:f3:f8:f8:f6:89:45:6b:20:c8:39:89:
         de:85:59:cd:4d:7a:26:ea:91:b9:3b:a5:e8:e4:2a:ef:a6:7d:
         c1:1f:05:8b:46:78:7a:92:72:ea:62:0a:29:c3:16:2b:5e:c5:
         34:02:d9:87:f0:64:4d:ee:25:bb:4a:f7:d1:68:a7:28:a6:a4:
         2d:c6:d7:3b:a9:51:fb:41:d0:a3:84:68:67:fe:5e:69:8f:82:
         ce:59:ef:0b:21:ac:78:b4:80:1f:d8:aa:13:86:7e:a5:05:4b:
         be:1b:56:3c:66:fe:bc:22:3b:ff:aa:e6:a7:6c:cc:b1:e3:fe:
         6a:57:b6:d2:35:b8:68:e0:3c:80:67:3c:8f:b9:51:9f:f8:a2:
         aa:39:8c:0b:b3:19:bc:8c:7c:76:e1:69:e8:08:72:f5:9a:51:
         46:9d:37:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd2obEuwEvnTiY/od5QltHx6TnK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDMzY1QUY3OUFEN0JEN0Q5NEEzQTM2RDQ4Mzg0RjhE
RkM2REU4QjAeFw0yMzA3MDUxNzE3MDhaFw0yNDA3MDMxNzIyMDhaMDMxMTAvBgNV
BAMTKDFBOENDQTlFNzU4MjU0NkFBMjNCRDhCRjY2RkFCODM1NEU5QTQ0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXytnLnUlqO3cy9uAYNu5qpZ3
V/h1LIbB4faZJRDCHMY7jlMRCcYgeq9qqH6BpQgf6mimVt4T4fuSyZU/Won2JnxI
1/zdx5CZexln/fGEqSdjOYG2fw1lvym/NOfw9CSNFf9FRPgPfGtp51BdcLGppzCR
zsIBjnaHJVouE0akWObMIY+cMqjuNrCDDpo6jCuR7l1zKWcgrKDZQLkg7mnBg79e
AEuhRVheoQg2uyYjOi9GnCgSDMlqcm6hoiWYyi4tT6TqvJ0TWZOALBRonzQbt+0N
qUudgNCUb++sgv6h54oWHDZDyAk4lb6qyFp29xiQHeThHloOR9eBv+OboU1tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGozKnnWCVGqiO9i/Zvq4NU6aRG8wHwYDVR0j
BBgwFoAUscNlr3mte9fZSjo21IOE+N/G3oswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMC9CMUMzNjVBRjc5QUQ3QkQ3RDk0QTNBMzZENDgzODRGOERGQzZERThCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxQzM2NUFGNzlBRDdCRDdE
OTRBM0EzNkQ0ODM4NEY4REZDNkRFOEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzAv
MzEzOTMxMmUzNTJlMzEzMzM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMz
MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvwWIMA0GCSqGSIb3DQEBCwUAA4IBAQCWbYOBj5am
ybLcVLCqRiT6+upgz9IeyAlQDrEYDV1Rh3jjDNWRdRQstAfoHWQTsww/9BcnmBp7
7kqXUYkhzqt94+w1BF5HBdM7zm7IcqpFrjFMyaPZCO4nka8gc45f57Rx8/j49olF
ayDIOYnehVnNTXom6pG5O6Xo5Crvpn3BHwWLRnh6knLqYgopwxYrXsU0AtmH8GRN
7iW7SvfRaKcopqQtxtc7qVH7QdCjhGhn/l5pj4LOWe8LIax4tIAf2KoThn6lBUu+
G1Y8Zv68Ijv/quanbMyx4/5qV7bSNbho4DyAZzyPuVGf+KKqOYwLsxm8jHx24Wno
CHL1mlFGnTd4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org