Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139362e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139362e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          Sx8KLxWFSWaDCe+WlBf+gpBS5fDjAS6ZHoMRAOZgCKs=
Subject key identifier:   81:67:E7:CB:65:2C:27:44:5B:B4:82:FA:3E:1D:7E:F4:02:EF:6F:D9
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       239B481DDAAEC9FF555E5E198745D1A2B0A6575F
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139362e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:46 +0000
ROA not before:           Thu 06 Apr 2023 19:15:46 +0000
ROA not after:            Thu 04 Apr 2024 19:20:46 +0000
asID:                     53061
IP address blocks:        191.241.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:48:1d:da:ae:c9:ff:55:5e:5e:19:87:45:d1:a2:b0:a6:57:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:46 2023 GMT
            Not After : Apr  4 19:20:46 2024 GMT
        Subject: CN=8167E7CB652C27445BB482FA3E1D7EF402EF6FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:13:33:d8:0d:62:97:73:3d:e6:06:fe:1c:
                    60:0b:dc:20:44:b0:56:e8:e5:a1:95:a3:a4:34:42:
                    26:6f:b2:6e:a1:2f:20:38:b8:0d:69:aa:5f:bb:aa:
                    b9:f6:74:40:b1:ab:27:c9:ad:b4:d6:83:37:8d:00:
                    2c:8c:7c:be:41:c3:92:8d:bf:5e:2f:c0:43:d6:4f:
                    b1:9a:e0:26:b0:f1:a1:06:ba:26:02:06:35:81:4f:
                    8f:ab:1c:24:76:be:b6:90:6a:71:56:0c:1f:3b:ef:
                    ba:2e:91:29:e3:28:73:eb:fe:aa:d2:b4:1b:b8:c2:
                    56:32:b4:db:92:ae:19:74:76:a6:e3:d1:7b:59:e3:
                    f0:d7:18:0a:a3:11:8d:d5:c7:0f:5a:02:4b:52:7a:
                    99:39:ca:5b:89:0f:29:c7:b2:dc:a9:84:7f:82:62:
                    92:ff:fe:2b:75:74:59:5b:e7:f0:89:f1:3d:72:92:
                    f9:5d:e5:22:d0:59:13:aa:da:26:1c:14:70:d5:53:
                    23:7a:93:0e:22:4e:40:ea:ad:dc:02:96:ca:74:02:
                    69:50:e0:46:a9:51:ac:46:a8:b1:4b:26:b0:9a:c7:
                    2e:19:45:b3:5b:1a:e3:70:25:34:92:db:a8:bc:5f:
                    ce:e0:bb:29:d6:d0:37:90:36:a6:89:7b:89:62:49:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:E7:CB:65:2C:27:44:5B:B4:82:FA:3E:1D:7E:F4:02:EF:6F:D9
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139362e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:9b:6c:c9:4a:52:a6:1c:b3:64:2d:ec:ef:03:3a:32:98:
         e7:f5:25:89:f7:a9:cc:0f:1f:7e:bd:00:1a:f4:2c:49:11:80:
         20:6b:58:35:27:e2:64:fb:9c:f4:10:1b:02:ef:ef:db:d3:88:
         31:de:ea:03:10:b3:ff:0e:66:05:04:5c:d8:ac:0e:ca:d9:b4:
         7a:fb:9a:15:b9:6f:d8:e6:71:82:18:1f:10:5f:27:e7:e9:e9:
         22:43:c0:b9:eb:d3:56:8e:f3:bf:7d:c3:4c:80:bc:1c:0d:b0:
         6b:5f:74:11:b0:f6:04:0c:05:01:d8:c5:be:1c:62:ae:36:72:
         7c:08:15:bf:d6:fd:53:65:f7:18:4d:a0:0e:e3:d7:9b:f2:39:
         03:74:3c:8e:13:9b:89:90:a6:d8:55:6f:21:62:74:99:7c:8b:
         2b:3b:1a:7d:05:2b:7a:64:f6:03:fd:d8:35:d1:9f:c3:af:56:
         36:1c:89:5e:30:0b:aa:b3:d0:47:1c:aa:60:96:8e:3b:a2:0c:
         da:66:ab:99:8d:c3:fe:92:82:f5:fb:76:81:ff:31:04:2d:cd:
         54:4b:de:f4:93:79:97:05:72:c7:15:4e:76:e7:34:68:7c:57:
         96:bb:5f:f6:11:db:b7:61:70:60:b1:06:e3:2d:d1:ce:f4:70:
         41:ec:4b:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI5tIHdquyf9VXl4Zh0XRorCmV18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwOUMwODBFOTBDRDRERjM0QTJCMjc0MDQ0N0U5NTQ5
OUIyREYxNDAeFw0yMzA0MDYxOTE1NDZaFw0yNDA0MDQxOTIwNDZaMDMxMTAvBgNV
BAMTKDgxNjdFN0NCNjUyQzI3NDQ1QkI0ODJGQTNFMUQ3RUY0MDJFRjZGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1BhMz2A1il3M95gb+HGAL3CBE
sFbo5aGVo6Q0QiZvsm6hLyA4uA1pql+7qrn2dECxqyfJrbTWgzeNACyMfL5Bw5KN
v14vwEPWT7Ga4Caw8aEGuiYCBjWBT4+rHCR2vraQanFWDB8777oukSnjKHPr/qrS
tBu4wlYytNuSrhl0dqbj0XtZ4/DXGAqjEY3Vxw9aAktSepk5yluJDynHstyphH+C
YpL//it1dFlb5/CJ8T1ykvld5SLQWROq2iYcFHDVUyN6kw4iTkDqrdwClsp0AmlQ
4EapUaxGqLFLJrCaxy4ZRbNbGuNwJTSS26i8X87guynW0DeQNqaJe4liSSdtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgWfny2UsJ0RbtIL6Ph1+9ALvb9kwHwYDVR0j
BBgwFoAUZAnAgOkM1N80orJ0BEfpVJmy3xQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMC82NDA5QzA4MEU5MENENERGMzRBMkIyNzQwNDQ3RTk1NDk5QjJERjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MDlDMDgwRTkwQ0Q0REYz
NEEyQjI3NDA0NDdFOTU0OTlCMkRGMTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzAv
MzEzOTMxMmUzMjM0MzEyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8cQwDQYJKoZIhvcNAQELBQADggEBAAq/m2zJ
SlKmHLNkLezvAzoymOf1JYn3qcwPH369ABr0LEkRgCBrWDUn4mT7nPQQGwLv79vT
iDHe6gMQs/8OZgUEXNisDsrZtHr7mhW5b9jmcYIYHxBfJ+fp6SJDwLnr01aO8799
w0yAvBwNsGtfdBGw9gQMBQHYxb4cYq42cnwIFb/W/VNl9xhNoA7j15vyOQN0PI4T
m4mQpthVbyFidJl8iys7Gn0FK3pk9gP92DXRn8OvVjYciV4wC6qz0EccqmCWjjui
DNpmq5mNw/6SgvX7doH/MQQtzVRL3vSTeZcFcscVTnbnNGh8V5a7X/YR27dhcGCx
BuMt0c70cEHsSxk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org