Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32312d3231203d3e20323633363633.roa
File:                     3139312e3234312e382e302f32312d3231203d3e20323633363633.roa (raw, json)
Hash identifier:          /7UzW33dK9xsSFC99MQWkzcBbTycV/DSHj1JkIQX0jU=
Subject key identifier:   11:3B:93:45:27:C7:D0:A1:5E:80:76:1F:CA:6E:07:77:99:65:0A:1F
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       75EEC4025DF49F82B52692BF28E7EF887E87D811
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32312d3231203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:53 +0000
ROA not before:           Mon 04 Mar 2024 16:13:53 +0000
ROA not after:            Mon 03 Mar 2025 16:18:53 +0000
asID:                     263663
IP address blocks:        191.241.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ee:c4:02:5d:f4:9f:82:b5:26:92:bf:28:e7:ef:88:7e:87:d8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:53 2024 GMT
            Not After : Mar  3 16:18:53 2025 GMT
        Subject: CN=113B934527C7D0A15E80761FCA6E077799650A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:42:68:88:e9:8b:14:d0:72:9a:cd:86:fa:
                    15:6b:f0:32:90:fb:34:db:e0:e5:f6:2c:35:80:83:
                    16:5b:6e:b7:e4:66:1e:96:21:2c:19:45:0b:b1:9b:
                    22:f5:cc:7a:c2:a3:6e:1c:41:00:f7:97:dc:f9:56:
                    fe:a7:43:31:4a:50:f3:47:14:02:a2:ea:ec:93:f0:
                    9e:2a:05:a2:d0:83:f1:45:fb:40:0f:f6:00:3a:5d:
                    63:bf:b7:71:0f:49:c4:6d:bb:9e:70:3c:71:5f:d7:
                    aa:4b:ae:4f:25:78:62:d0:bc:99:c9:ef:3d:28:57:
                    db:ff:6b:a9:7a:5e:44:44:5a:5d:4b:29:b4:d9:53:
                    40:01:cf:d9:bc:f1:10:18:8b:1e:15:ed:d4:46:37:
                    22:72:12:17:a4:11:4e:66:eb:fb:ff:8b:00:2f:8a:
                    26:53:91:f0:01:65:a3:62:6e:cd:14:cf:34:31:0e:
                    0d:b9:3e:1e:b4:18:9b:65:dd:3a:a8:9a:dc:43:40:
                    37:2a:b7:7d:e3:05:73:62:6a:65:6b:b6:35:a8:f7:
                    20:6f:88:23:b8:8e:95:e2:cc:b2:9c:7d:a5:5a:34:
                    5b:45:b1:fa:07:30:45:73:a7:51:52:83:12:31:e6:
                    68:3f:00:a3:dc:f5:a5:8d:63:df:62:ee:cd:ea:f8:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3B:93:45:27:C7:D0:A1:5E:80:76:1F:CA:6E:07:77:99:65:0A:1F
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32312d3231203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:88:0e:fa:9b:d6:72:52:1f:c0:75:3b:d9:c4:c9:7c:44:
         28:c1:c3:e0:32:d3:6d:12:7d:1e:ed:67:c8:72:a1:2f:fe:5a:
         6e:e2:ae:ba:98:66:14:b9:0c:94:33:9b:1c:99:32:19:a3:26:
         04:8d:1f:09:ca:89:f4:d5:8f:07:9d:04:92:71:f9:e7:05:e2:
         14:1d:01:3e:5f:42:cf:a9:d5:3e:d3:cd:3c:d6:fa:1f:e1:71:
         0d:ff:b8:08:bc:a8:06:8f:4a:ac:c7:25:0d:ee:22:03:ae:00:
         78:4a:88:8b:c7:60:57:d6:36:5a:d2:a8:4d:1f:dc:1d:09:21:
         3d:57:3f:f0:44:f2:43:4d:d6:57:29:6e:23:a4:04:7f:f2:6d:
         27:a9:a0:4b:e1:01:5f:0d:d3:ff:95:66:1d:5d:36:2b:53:c6:
         d9:74:3f:e3:56:df:3e:4b:6b:3f:98:9f:7a:58:16:5d:ff:cf:
         b4:3e:0b:27:75:01:bd:d1:3c:b1:24:bc:77:45:eb:a6:9b:c0:
         2a:45:ee:35:5f:2a:30:dd:e9:0b:2c:39:52:21:33:f0:fa:f8:
         7b:29:02:19:7d:93:4c:df:7d:78:b3:e9:af:53:fb:ec:c4:7d:
         3b:08:d3:fc:25:90:2c:d8:c8:5d:e3:66:07:aa:d8:99:82:35:
         db:96:c8:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUde7EAl30n4K1JpK/KOfviH6H2BEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2REYzNEJERTJFNDlFOTY4MjU5QTVEQkFDNTRFQ0Uz
QjE1QTA3ODAeFw0yNDAzMDQxNjEzNTNaFw0yNTAzMDMxNjE4NTNaMDMxMTAvBgNV
BAMTKDExM0I5MzQ1MjdDN0QwQTE1RTgwNzYxRkNBNkUwNzc3OTk2NTBBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPUJoiOmLFNByms2G+hVr8DKQ
+zTb4OX2LDWAgxZbbrfkZh6WISwZRQuxmyL1zHrCo24cQQD3l9z5Vv6nQzFKUPNH
FAKi6uyT8J4qBaLQg/FF+0AP9gA6XWO/t3EPScRtu55wPHFf16pLrk8leGLQvJnJ
7z0oV9v/a6l6XkREWl1LKbTZU0ABz9m88RAYix4V7dRGNyJyEhekEU5m6/v/iwAv
iiZTkfABZaNibs0UzzQxDg25Ph60GJtl3TqomtxDQDcqt33jBXNiamVrtjWo9yBv
iCO4jpXizLKcfaVaNFtFsfoHMEVzp1FSgxIx5mg/AKPc9aWNY99i7s3q+IZFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUETuTRSfH0KFegHYfym4Hd5llCh8wHwYDVR0j
BBgwFoAULG3zS94uSeloJZpdusVOzjsVoHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpl
dUMvMC8yQzZERjM0QkRFMkU0OUU5NjgyNTlBNURCQUM1NEVDRTNCMTVBMDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDNkRGMzRCREUyRTQ5RTk2
ODI1OUE1REJBQzU0RUNFM0IxNUEwNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvVnJjZW0xaVBYSEpUY0VFcXExdGJlRFRWWFRzczQ1eGl6TGgyclBKZXVDLzAv
MzEzOTMxMmUzMjM0MzEyZTM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMz
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDv/EIMA0GCSqGSIb3DQEBCwUAA4IBAQBm3YgO+pvW
clIfwHU72cTJfEQowcPgMtNtEn0e7WfIcqEv/lpu4q66mGYUuQyUM5scmTIZoyYE
jR8Jyon01Y8HnQSScfnnBeIUHQE+X0LPqdU+08081vof4XEN/7gIvKgGj0qsxyUN
7iIDrgB4SoiLx2BX1jZa0qhNH9wdCSE9Vz/wRPJDTdZXKW4jpAR/8m0nqaBL4QFf
DdP/lWYdXTYrU8bZdD/jVt8+S2s/mJ96WBZd/8+0PgsndQG90TyxJLx3Reumm8Aq
Re41Xyow3ekLLDlSITPw+vh7KQIZfZNM3314s+mvU/vsxH07CNP8JZAs2Mhd42YH
qtiZgjXblsi+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org