Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32322d3232203d3e20323633353336.roa
File:                     3139312e352e3133362e302f32322d3232203d3e20323633353336.roa (raw, json)
Hash identifier:          LxII5PiGidcOQfxy0lEfrP34GCcNIBQst09hg+CyVDI=
Subject key identifier:   F4:F3:06:FA:EA:C2:24:42:D5:E7:30:E9:62:0D:9C:4E:C2:1D:03:0E
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       49637FCA87C7C8D220CA54D8B1BD3E76B6269501
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32322d3232203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:22:11 +0000
ROA not before:           Wed 05 Jul 2023 17:17:11 +0000
ROA not after:            Wed 03 Jul 2024 17:22:11 +0000
asID:                     263536
IP address blocks:        191.5.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:7f:ca:87:c7:c8:d2:20:ca:54:d8:b1:bd:3e:76:b6:26:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:17:11 2023 GMT
            Not After : Jul  3 17:22:11 2024 GMT
        Subject: CN=F4F306FAEAC22442D5E730E9620D9C4EC21D030E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:09:3e:db:d8:28:aa:16:13:3e:fe:3e:a9:
                    42:53:25:eb:e4:84:6a:0e:2b:44:0e:1e:fd:4d:81:
                    fe:15:92:33:89:58:04:35:cf:2b:a9:a3:e1:b7:19:
                    fa:76:33:f2:bd:71:d6:3a:e5:e7:7a:59:98:a9:05:
                    c8:50:46:4f:9f:5a:f6:49:0d:67:d9:4e:a4:b9:44:
                    11:2e:99:9a:1f:8f:4c:61:fb:4b:de:ce:15:f5:bb:
                    d7:32:c4:bf:e9:d3:be:8a:20:57:26:70:bf:7c:ab:
                    f5:59:7f:bb:06:8f:c8:7a:7a:d9:6a:59:3b:5a:e6:
                    b3:b5:3e:21:86:a5:ef:6b:07:0c:34:d1:ae:73:70:
                    c6:f6:fb:f9:92:df:4c:e4:9d:a9:7e:d4:41:e3:01:
                    5f:7a:6d:d5:e4:ba:c0:77:58:9c:92:2a:f3:36:34:
                    ef:33:f5:a7:fa:d8:2a:cb:04:79:ba:f3:aa:a6:fb:
                    58:20:68:8d:d6:b1:ff:41:e0:2b:77:a3:f8:1a:8e:
                    5c:e3:c9:5d:f2:0b:34:27:f4:c9:99:eb:5c:4a:85:
                    2b:c1:a0:92:41:34:6f:7a:65:da:3c:b9:e9:0f:62:
                    f1:a4:a8:59:d9:2a:5d:dc:32:df:e8:d0:29:7c:8f:
                    94:f8:66:67:b3:b0:5b:61:e4:b4:d4:5d:24:0c:29:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:06:FA:EA:C2:24:42:D5:E7:30:E9:62:0D:9C:4E:C2:1D:03:0E
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133362e302f32322d3232203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:22:14:08:57:2f:c4:cd:c0:df:ce:b5:f2:f5:bc:b4:28:
         31:9a:0d:6c:ed:24:13:9d:f8:72:7a:ca:6a:8c:e0:35:6b:e2:
         ff:8e:61:cf:47:41:79:0f:78:42:da:2e:63:c3:7b:b9:59:2a:
         30:67:95:c4:29:29:86:1e:08:5a:32:8c:d3:20:01:4d:ac:1a:
         db:fc:4c:20:92:03:c6:90:f0:0b:1e:0b:48:87:69:c4:07:3e:
         3d:c2:87:49:79:f4:2b:aa:6c:81:82:cc:bd:57:c9:44:1a:de:
         b8:6c:2d:84:41:c6:fb:87:82:3d:0c:46:1b:d2:dd:66:bc:5c:
         33:65:73:6a:e0:10:de:25:4f:d4:8c:42:1c:67:d4:f3:9d:96:
         5c:18:88:99:54:fc:9c:cc:d5:9b:91:48:57:ae:4b:0e:78:15:
         f0:97:32:64:fb:75:8c:7b:d3:64:64:c0:99:23:1f:8d:ed:2c:
         3f:ae:fb:ab:2f:f9:a8:ee:6e:c6:e7:8c:4d:55:f6:c4:42:d0:
         9e:6d:b5:05:04:81:fc:6e:cc:dc:0b:8b:f1:87:4b:10:1e:c9:
         ab:78:84:ba:a3:4b:a8:66:21:41:b7:2a:2d:59:8d:7b:1b:56:
         fb:a6:a5:5e:da:b4:f2:e7:eb:5d:eb:c6:cd:f5:c4:67:11:1c:
         0d:d6:0f:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSWN/yofHyNIgylTYsb0+drYmlQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFDMzY1QUY3OUFEN0JEN0Q5NEEzQTM2RDQ4Mzg0RjhE
RkM2REU4QjAeFw0yMzA3MDUxNzE3MTFaFw0yNDA3MDMxNzIyMTFaMDMxMTAvBgNV
BAMTKEY0RjMwNkZBRUFDMjI0NDJENUU3MzBFOTYyMEQ5QzRFQzIxRDAzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Nwk+29goqhYTPv4+qUJTJevk
hGoOK0QOHv1Ngf4VkjOJWAQ1zyupo+G3Gfp2M/K9cdY65ed6WZipBchQRk+fWvZJ
DWfZTqS5RBEumZofj0xh+0vezhX1u9cyxL/p076KIFcmcL98q/VZf7sGj8h6etlq
WTta5rO1PiGGpe9rBww00a5zcMb2+/mS30zknal+1EHjAV96bdXkusB3WJySKvM2
NO8z9af62CrLBHm686qm+1ggaI3Wsf9B4Ct3o/gajlzjyV3yCzQn9MmZ61xKhSvB
oJJBNG96Zdo8uekPYvGkqFnZKl3cMt/o0Cl8j5T4ZmezsFth5LTUXSQMKV6FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9PMG+urCJELV5zDpYg2cTsIdAw4wHwYDVR0j
BBgwFoAUscNlr3mte9fZSjo21IOE+N/G3oswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMC9CMUMzNjVBRjc5QUQ3QkQ3RDk0QTNBMzZENDgzODRGOERGQzZERThCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxQzM2NUFGNzlBRDdCRDdE
OTRBM0EzNkQ0ODM4NEY4REZDNkRFOEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzAv
MzEzOTMxMmUzNTJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvwWIMA0GCSqGSIb3DQEBCwUAA4IBAQAiLSIUCFcv
xM3A38618vW8tCgxmg1s7SQTnfhyespqjOA1a+L/jmHPR0F5D3hC2i5jw3u5WSow
Z5XEKSmGHghaMozTIAFNrBrb/EwgkgPGkPALHgtIh2nEBz49wodJefQrqmyBgsy9
V8lEGt64bC2EQcb7h4I9DEYb0t1mvFwzZXNq4BDeJU/UjEIcZ9TznZZcGIiZVPyc
zNWbkUhXrksOeBXwlzJk+3WMe9NkZMCZIx+N7Sw/rvurL/mo7m7G54xNVfbEQtCe
bbUFBIH8bszcC4vxh0sQHsmreIS6o0uoZiFBtyotWY17G1b7pqVe2rTy5+td68bN
9cRnERwN1g/U
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org