Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32332d3233203d3e20323637343430.roa (raw, json)
Hash identifier:          n3RxiL53BksjJeQZnaO+wJZ/itZmemywOVrXx44mezc=
Subject key identifier:   60:80:52:62:EA:81:23:73:F3:14:36:25:B1:B2:77:97:22:45:43:08
Certificate issuer:       /CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
Certificate serial:       07F96E0AA642AF91DB94932D9FA1B017555706E6
Authority key identifier: EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
Signing time:             Mon 01 Apr 2024 13:06:20 +0000
ROA not before:           Mon 01 Apr 2024 13:01:20 +0000
ROA not after:            Mon 31 Mar 2025 13:06:20 +0000
asID:                     267440
IP address blocks:        192.141.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:6e:0a:a6:42:af:91:db:94:93:2d:9f:a1:b0:17:55:57:06:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
        Validity
            Not Before: Apr  1 13:01:20 2024 GMT
            Not After : Mar 31 13:06:20 2025 GMT
        Subject: CN=60805262EA812373F3143625B1B2779722454308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:59:98:44:36:b4:f0:49:05:f9:95:aa:05:
                    ab:e8:fa:11:83:57:74:b1:8b:bf:21:b2:f6:ca:55:
                    7f:2d:23:ac:17:0e:26:e9:74:62:03:3b:7f:5b:ef:
                    ce:20:40:3f:d5:7d:b8:b6:d8:fc:f0:b5:1f:8e:09:
                    c5:4e:7b:64:e6:9e:b0:4a:3e:e5:07:50:db:ad:2a:
                    9b:c8:bb:77:ab:88:04:c0:c1:d4:43:0a:06:d4:60:
                    71:75:56:cc:e8:cf:60:46:77:82:7f:f8:ff:d4:af:
                    40:39:7f:97:2f:a5:60:97:37:64:4c:d7:66:8b:d3:
                    a0:97:1f:66:1b:fe:91:52:12:5b:4a:97:c0:ec:49:
                    17:f8:ca:9d:04:55:9b:2f:83:87:3f:b6:5e:29:45:
                    bf:10:f5:e6:4e:38:29:e9:84:7f:6e:fb:e4:0c:c9:
                    82:89:5f:d2:7a:d3:08:05:37:76:6d:11:af:05:e8:
                    85:33:dd:c2:c9:b4:a8:43:55:ab:16:73:11:ed:bf:
                    57:7d:60:dd:1a:0f:79:96:3b:c3:b9:64:d6:87:e8:
                    9e:1a:52:94:37:f3:30:9d:d9:8f:ec:a5:78:72:ba:
                    c7:8a:9b:15:1a:43:75:ef:05:02:8f:0c:78:28:ed:
                    dc:a1:25:71:28:5b:e5:b2:6f:3b:3f:c8:00:ab:f5:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:80:52:62:EA:81:23:73:F3:14:36:25:B1:B2:77:97:22:45:43:08
            X509v3 Authority Key Identifier:
                keyid:EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:3f:e2:8e:54:70:af:d7:93:1a:13:c2:ce:d9:ff:e2:fd:
         b9:3c:81:05:81:52:7a:3e:36:78:6d:59:6b:0a:ae:7d:89:d2:
         78:44:94:e1:d9:2f:d3:28:6b:5f:92:3a:fb:01:0e:7b:9b:af:
         5f:9e:55:cc:89:aa:6c:7a:23:76:0e:46:74:4a:1a:b8:1a:75:
         2c:86:21:db:65:d0:4a:e0:09:b3:0b:af:ff:a0:bc:94:94:aa:
         8c:7d:2b:74:7f:41:41:68:8a:88:a9:a6:c3:8e:8a:68:5e:e7:
         88:24:72:26:f0:1a:60:42:83:9e:4f:e8:68:9a:46:b5:c2:c5:
         7b:e8:ce:17:ec:74:e8:b9:f0:f2:a0:f9:63:3a:aa:b9:34:66:
         9a:14:1d:ea:d5:4f:a2:48:81:7d:66:ed:23:f3:c2:e5:50:65:
         2c:01:7b:34:c4:ce:63:16:f6:79:59:86:a3:ce:fd:77:a1:88:
         da:9e:f4:3a:8a:a7:b6:b1:56:08:bf:ea:9d:e2:aa:de:96:3b:
         0f:28:24:65:a4:3a:b8:d7:1f:a4:11:d8:5b:76:72:a6:79:4d:
         ff:a1:d2:3d:61:14:ce:eb:86:ad:8f:9b:aa:6d:d1:91:ca:a6:
         71:8d:f6:24:d4:fa:f1:52:f4:2d:b6:e5:ad:2d:3e:26:85:df:
         16:41:10:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB/luCqZCr5HblJMtn6GwF1VXBuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QUVCODAzQ0M0MDNGNDVCOUNCQ0QzRDE5MzE1RjRC
NTgyNTNERDAeFw0yNDA0MDExMzAxMjBaFw0yNTAzMzExMzA2MjBaMDMxMTAvBgNV
BAMTKDYwODA1MjYyRUE4MTIzNzNGMzE0MzYyNUIxQjI3Nzk3MjI0NTQzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslVmYRDa08EkF+ZWqBavo+hGD
V3Sxi78hsvbKVX8tI6wXDibpdGIDO39b784gQD/Vfbi22PzwtR+OCcVOe2TmnrBK
PuUHUNutKpvIu3eriATAwdRDCgbUYHF1Vszoz2BGd4J/+P/Ur0A5f5cvpWCXN2RM
12aL06CXH2Yb/pFSEltKl8DsSRf4yp0EVZsvg4c/tl4pRb8Q9eZOOCnphH9u++QM
yYKJX9J60wgFN3ZtEa8F6IUz3cLJtKhDVasWcxHtv1d9YN0aD3mWO8O5ZNaH6J4a
UpQ38zCd2Y/spXhyuseKmxUaQ3XvBQKPDHgo7dyhJXEoW+Wybzs/yACr9TmtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYIBSYuqBI3PzFDYlsbJ3lyJFQwgwHwYDVR0j
BBgwFoAU72rrgDzEA/RbnLzT0ZMV9LWCU90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC9FRjZBRUI4MDNDQzQwM0Y0NUI5Q0JDRDNEMTkzMTVGNEI1ODI1M0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGNkFFQjgwM0NDNDAzRjQ1
QjlDQkNEM0QxOTMxNUY0QjU4MjUzREQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzEzOTMyMmUzMTM0MzEyZTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBwI0CMA0GCSqGSIb3DQEBCwUAA4IBAQCMCT/ijlRw
r9eTGhPCztn/4v25PIEFgVJ6PjZ4bVlrCq59idJ4RJTh2S/TKGtfkjr7AQ57m69f
nlXMiapseiN2DkZ0Shq4GnUshiHbZdBK4AmzC6//oLyUlKqMfSt0f0FBaIqIqabD
jopoXueIJHIm8BpgQoOeT+homka1wsV76M4X7HToufDyoPljOqq5NGaaFB3q1U+i
SIF9Zu0j88LlUGUsAXs0xM5jFvZ5WYajzv13oYjanvQ6iqe2sVYIv+qd4qreljsP
KCRlpDq41x+kEdhbdnKmeU3/odI9YRTO64atj5uqbdGRyqZxjfYk1PrxUvQttuWt
LT4mhd8WQRB0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org