Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e20323635323634.roa
File:                     3230302e3136392e36342e302f32312d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          +fIbULE2JHIisFPBFJ3Viw4nBQhDdpLeExFCQO6sawE=
Subject key identifier:   91:3F:25:F9:0F:E7:4D:0E:87:CA:B6:B3:0C:34:7E:08:A4:4F:76:00
Certificate issuer:       /CN=9F56E183EE065A36D830C9D35441B87388A72126
Certificate serial:       05113384D945CA4E26B4E2B4EA0D6AD69CD80210
Authority key identifier: 9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F56E183EE065A36D830C9D35441B87388A72126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e20323635323634.roa
Signing time:             Thu 23 May 2024 18:59:23 +0000
ROA not before:           Thu 23 May 2024 18:54:23 +0000
ROA not after:            Thu 22 May 2025 18:59:23 +0000
asID:                     265264
IP address blocks:        200.169.64.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:11:33:84:d9:45:ca:4e:26:b4:e2:b4:ea:0d:6a:d6:9c:d8:02:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56E183EE065A36D830C9D35441B87388A72126
        Validity
            Not Before: May 23 18:54:23 2024 GMT
            Not After : May 22 18:59:23 2025 GMT
        Subject: CN=913F25F90FE74D0E87CAB6B30C347E08A44F7600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:61:09:d7:6c:b4:23:d3:0b:ff:2e:b1:93:
                    43:98:e6:de:d5:fd:ae:3e:47:5a:d5:1d:ec:f2:7e:
                    a0:9e:1b:5e:05:be:e6:4a:31:b8:33:6c:82:ea:81:
                    03:dd:ce:89:c1:e9:74:f7:28:1e:3c:a1:da:c3:94:
                    57:66:7f:43:53:4b:d8:10:df:5b:3f:8c:47:67:90:
                    34:9a:e1:2f:15:3b:74:7f:13:3c:7e:80:9f:fd:b7:
                    31:f7:94:71:4c:c8:57:c3:b9:60:61:62:e4:52:59:
                    81:98:33:80:7f:b9:fe:0a:a1:6d:a6:c1:b2:b7:68:
                    a0:6d:1d:cb:b3:e0:57:49:13:67:78:fa:9b:a2:1c:
                    da:62:73:95:f4:04:d9:1d:a4:bb:d9:97:18:b4:4a:
                    70:fb:ef:ee:e3:22:8e:2b:b6:dc:0e:51:86:94:66:
                    3d:8f:a8:b4:47:ab:40:3c:90:59:ae:e4:e4:b6:7c:
                    c2:f3:d4:c3:9e:59:71:fc:7f:a7:e9:6a:5b:55:5a:
                    f3:3f:08:6d:fc:7f:d8:b2:38:bd:af:81:02:60:48:
                    91:eb:17:ea:28:1d:76:48:ea:d4:bc:60:3f:60:15:
                    4d:a5:1e:71:c0:c0:6e:bc:a3:ab:39:e5:5e:b8:3c:
                    8f:b8:e9:7a:bf:df:db:56:14:76:a8:9c:44:7f:95:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3F:25:F9:0F:E7:4D:0E:87:CA:B6:B3:0C:34:7E:08:A4:4F:76:00
            X509v3 Authority Key Identifier:
                keyid:9F:56:E1:83:EE:06:5A:36:D8:30:C9:D3:54:41:B8:73:88:A7:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/9F56E183EE065A36D830C9D35441B87388A72126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F56E183EE065A36D830C9D35441B87388A72126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:33:d6:6a:31:64:4d:a5:63:ea:e3:7f:61:47:e2:d9:96:9e:
         9b:91:9e:b1:32:6a:2d:94:ef:e3:6e:fe:1b:39:b5:af:4c:44:
         c4:4b:92:1c:8b:1d:0c:2b:67:9e:a6:9d:b2:69:f2:4c:b7:e4:
         33:da:9a:e7:fe:78:16:39:e3:73:c2:69:5a:4b:e6:0d:96:23:
         a4:3d:3a:ca:51:95:b0:6a:de:bf:a6:e2:53:e2:fd:8d:46:78:
         97:95:ef:8f:30:d3:b9:12:41:5e:39:20:03:16:77:20:3a:70:
         bc:b2:a5:90:d2:d2:d4:71:e5:2c:b0:64:76:24:d1:15:54:ea:
         25:3c:61:a3:4d:2d:59:7e:4f:f3:8f:dc:f7:87:fb:77:16:a6:
         0a:25:a8:7b:9f:a2:60:02:33:32:fd:52:c4:38:69:1c:e3:ab:
         4f:0c:c4:fa:96:2a:16:36:55:94:2d:d8:3b:88:3a:e9:0c:6c:
         f8:bf:03:34:d6:43:c9:e9:fb:67:72:c5:96:d4:fe:24:c4:94:
         7c:59:08:cb:0c:d1:49:f5:8b:a5:44:b8:6e:c6:1a:d5:64:e5:
         5b:4b:89:e9:81:5e:b1:ba:0b:4a:15:71:ba:d5:81:0d:ba:b3:
         e4:a5:ef:6e:9e:db:46:fa:91:57:dd:21:e1:38:f8:b7:af:f9:
         9d:79:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----