Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3232203d3e20323633363633.roa
File:                     3139312e3234312e382e302f32322d3232203d3e20323633363633.roa (raw, json)
Hash identifier:          MCG0vYRQUcPkZWxFLk2Zlpo7zUXRifmsTm+tvDwI64U=
Subject key identifier:   45:8F:F2:A3:F5:24:7B:D0:25:BF:C9:B2:5C:FC:4D:BB:4B:1C:FB:6E
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       09836E491D3BFE81A7E62A0F01EAEC313FDF08E7
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3232203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:58 +0000
ROA not before:           Mon 04 Mar 2024 16:13:58 +0000
ROA not after:            Mon 03 Mar 2025 16:18:58 +0000
asID:                     263663
IP address blocks:        191.241.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:83:6e:49:1d:3b:fe:81:a7:e6:2a:0f:01:ea:ec:31:3f:df:08:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:58 2024 GMT
            Not After : Mar  3 16:18:58 2025 GMT
        Subject: CN=458FF2A3F5247BD025BFC9B25CFC4DBB4B1CFB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:e4:de:7d:6d:cd:35:00:7b:a6:bf:0e:20:
                    84:fa:af:d1:d3:5f:e9:90:52:ab:53:0c:6d:9e:c8:
                    91:2b:ad:f8:58:7a:a0:e2:4c:71:b4:42:86:18:2d:
                    92:03:bc:6e:b9:7c:58:49:9e:dc:2e:77:b5:80:a5:
                    27:66:f8:c2:4f:f5:cf:37:21:d0:f3:e9:d2:03:c7:
                    35:df:f0:18:f4:3b:48:1a:6a:5d:ed:61:0b:75:58:
                    90:c2:62:ee:fd:22:56:b3:6f:5e:0a:94:b3:16:d1:
                    9e:1c:50:cf:7c:85:99:27:07:86:56:ef:90:00:a7:
                    22:4b:33:1f:2d:ba:df:9b:c4:1a:60:e0:88:19:29:
                    b0:28:e0:92:37:ce:61:a6:df:8f:97:3e:15:b9:28:
                    60:3b:7c:70:da:72:93:29:c6:a3:f7:c3:69:ef:42:
                    1a:8f:37:8d:d2:ca:3a:c2:68:56:9d:c5:44:c6:38:
                    12:3e:a6:48:f4:dd:fb:84:19:3f:94:f1:b2:af:a2:
                    b8:33:9a:a7:1f:5d:e5:3a:9e:42:6a:2b:1e:60:9a:
                    01:62:89:04:1b:d2:57:0a:0f:85:f1:bf:06:20:a8:
                    e1:80:fe:7b:16:75:ce:d0:3c:c9:4d:f3:0d:c8:f0:
                    32:7c:77:6e:90:aa:09:bc:d0:01:31:df:3b:15:b3:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:F2:A3:F5:24:7B:D0:25:BF:C9:B2:5C:FC:4D:BB:4B:1C:FB:6E
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e382e302f32322d3232203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:2a:a8:f5:da:d9:dd:7f:c9:d1:6e:e6:55:67:55:b8:51:
         92:b2:61:59:2a:31:9c:55:fe:b7:dd:c2:d6:92:29:61:e5:60:
         31:96:4e:ee:d6:66:2a:76:b0:5e:c7:16:d9:ce:d0:84:00:90:
         5f:2e:1c:b9:68:5c:ad:7f:1d:05:fe:40:b8:0a:e0:20:7d:d0:
         94:28:9e:5e:02:54:37:fe:f2:60:51:21:38:d1:91:53:6e:fd:
         b8:83:0f:c8:38:62:d7:e1:35:1d:9e:0f:46:a0:85:b4:bd:8e:
         00:ec:d3:2b:3f:67:f1:2a:e7:d2:cb:f6:61:95:60:fa:15:67:
         e5:d8:c2:44:5a:ee:66:42:25:dd:b7:86:4a:b0:87:aa:22:3b:
         26:dd:13:69:90:32:5b:f8:80:04:22:ec:a5:00:28:ac:9c:8d:
         8a:95:f7:a8:73:19:b9:a8:b9:41:7e:fb:6a:66:31:36:a3:38:
         fc:ec:22:71:e7:3f:95:40:df:37:41:f6:a3:b5:59:a1:d0:a8:
         e9:fd:9c:45:0b:65:9b:73:fa:cf:c4:fb:1f:f5:00:7f:67:f6:
         88:a7:9b:17:66:0e:e6:32:47:df:58:c4:df:65:7e:5b:53:29:
         83:3e:75:13:a8:1e:37:41:62:9a:89:b7:4f:b4:1d:4c:1b:16:
         fd:8b:4b:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCYNuSR07/oGn5ioPAersMT/fCOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM2REYzNEJERTJFNDlFOTY4MjU5QTVEQkFDNTRFQ0Uz
QjE1QTA3ODAeFw0yNDAzMDQxNjEzNThaFw0yNTAzMDMxNjE4NThaMDMxMTAvBgNV
BAMTKDQ1OEZGMkEzRjUyNDdCRDAyNUJGQzlCMjVDRkM0REJCNEIxQ0ZCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+t+TefW3NNQB7pr8OIIT6r9HT
X+mQUqtTDG2eyJErrfhYeqDiTHG0QoYYLZIDvG65fFhJntwud7WApSdm+MJP9c83
IdDz6dIDxzXf8Bj0O0gaal3tYQt1WJDCYu79Ilazb14KlLMW0Z4cUM98hZknB4ZW
75AApyJLMx8tut+bxBpg4IgZKbAo4JI3zmGm34+XPhW5KGA7fHDacpMpxqP3w2nv
QhqPN43SyjrCaFadxUTGOBI+pkj03fuEGT+U8bKvorgzmqcfXeU6nkJqKx5gmgFi
iQQb0lcKD4XxvwYgqOGA/nsWdc7QPMlN8w3I8DJ8d26Qqgm80AEx3zsVs/4DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURY/yo/Uke9Alv8myXPxNu0sc+24wHwYDVR0j
BBgwFoAULG3zS94uSeloJZpdusVOzjsVoHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29WcmNlbTFpUFhISlRjRUVxcTF0YmVEVFZYVHNzNDV4aXpMaDJyUEpl
dUMvMC8yQzZERjM0QkRFMkU0OUU5NjgyNTlBNURCQUM1NEVDRTNCMTVBMDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDNkRGMzRCREUyRTQ5RTk2
ODI1OUE1REJBQzU0RUNFM0IxNUEwNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvVnJjZW0xaVBYSEpUY0VFcXExdGJlRFRWWFRzczQ1eGl6TGgyclBKZXVDLzAv
MzEzOTMxMmUzMjM0MzEyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCv/EIMA0GCSqGSIb3DQEBCwUAA4IBAQB4xyqo9drZ
3X/J0W7mVWdVuFGSsmFZKjGcVf633cLWkilh5WAxlk7u1mYqdrBexxbZztCEAJBf
Lhy5aFytfx0F/kC4CuAgfdCUKJ5eAlQ3/vJgUSE40ZFTbv24gw/IOGLX4TUdng9G
oIW0vY4A7NMrP2fxKufSy/ZhlWD6FWfl2MJEWu5mQiXdt4ZKsIeqIjsm3RNpkDJb
+IAEIuylACisnI2Klfeocxm5qLlBfvtqZjE2ozj87CJx5z+VQN83QfajtVmh0Kjp
/ZxFC2Wbc/rPxPsf9QB/Z/aIp5sXZg7mMkffWMTfZX5bUymDPnUTqB43QWKaibdP
tB1MGxb9i0u3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org