Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa
File:                     3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa (raw, json)
Hash identifier:          jOkazTPOnCfQRHhp9CAynz8XbuLXDLdmnf2w7iTYxrQ=
Subject key identifier:   9A:F4:31:FF:B9:6B:2B:4B:E6:0A:95:B3:FB:16:02:00:A0:F5:98:44
Certificate issuer:       /CN=5D77E76260CCABED0891B4ABD8776DDDFCA1C24A
Certificate serial:       59FCB74792CF33CDCC5E202857AF15BB83745782
Authority key identifier: 5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa
Signing time:             Mon 16 Oct 2023 17:00:01 +0000
ROA not before:           Mon 16 Oct 2023 16:55:01 +0000
ROA not after:            Mon 14 Oct 2024 17:00:01 +0000
asID:                     267489
IP address blocks:        192.141.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fc:b7:47:92:cf:33:cd:cc:5e:20:28:57:af:15:bb:83:74:57:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D77E76260CCABED0891B4ABD8776DDDFCA1C24A
        Validity
            Not Before: Oct 16 16:55:01 2023 GMT
            Not After : Oct 14 17:00:01 2024 GMT
        Subject: CN=3082010A0282010100A3D3244DC847C1C5D6BDD2936B50FF763C87B068C594298D9B8168B5A65AB8C48BAAA24604315DE307534B930701F057A75B44F234B04D61A1AA2F4250071216CFBCCDF49C6F2430D5EEA774526FF0F0016F9ECE0F7AD359BF14192380561E4FD1C3C984F06A84ED8F996383E12B6833A2A45E434E895E4B8D145028855B9BC74EB28E8B28A393137A6B8C18CEB7B792918911136C11165AB3951E67040532303B00D2B326142D5A56D84B5ACB72564799D2CFC2B2EEB753EF0DDA648CF4F3D51CD81ED4F41E3D7FD6A0D1451F4BE72A9F484FDA3A2E41EB7C437B21FADAD9DA0B1D12E0C9067C99D5D44BD83C726ED5D1E998FDF6CA487F6EC62150859A52A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:24:4d:c8:47:c1:c5:d6:bd:d2:93:6b:50:
                    ff:76:3c:87:b0:68:c5:94:29:8d:9b:81:68:b5:a6:
                    5a:b8:c4:8b:aa:a2:46:04:31:5d:e3:07:53:4b:93:
                    07:01:f0:57:a7:5b:44:f2:34:b0:4d:61:a1:aa:2f:
                    42:50:07:12:16:cf:bc:cd:f4:9c:6f:24:30:d5:ee:
                    a7:74:52:6f:f0:f0:01:6f:9e:ce:0f:7a:d3:59:bf:
                    14:19:23:80:56:1e:4f:d1:c3:c9:84:f0:6a:84:ed:
                    8f:99:63:83:e1:2b:68:33:a2:a4:5e:43:4e:89:5e:
                    4b:8d:14:50:28:85:5b:9b:c7:4e:b2:8e:8b:28:a3:
                    93:13:7a:6b:8c:18:ce:b7:b7:92:91:89:11:13:6c:
                    11:16:5a:b3:95:1e:67:04:05:32:30:3b:00:d2:b3:
                    26:14:2d:5a:56:d8:4b:5a:cb:72:56:47:99:d2:cf:
                    c2:b2:ee:b7:53:ef:0d:da:64:8c:f4:f3:d5:1c:d8:
                    1e:d4:f4:1e:3d:7f:d6:a0:d1:45:1f:4b:e7:2a:9f:
                    48:4f:da:3a:2e:41:eb:7c:43:7b:21:fa:da:d9:da:
                    0b:1d:12:e0:c9:06:7c:99:d5:d4:4b:d8:3c:72:6e:
                    d5:d1:e9:98:fd:f6:ca:48:7f:6e:c6:21:50:85:9a:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:31:FF:B9:6B:2B:4B:E6:0A:95:B3:FB:16:02:00:A0:F5:98:44
            X509v3 Authority Key Identifier:
                keyid:5D:77:E7:62:60:CC:AB:ED:08:91:B4:AB:D8:77:6D:DD:FC:A1:C2:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D77E76260CCABED0891B4ABD8776DDDFCA1C24A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/0/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:09:83:09:07:e1:5b:17:75:53:fc:ab:94:42:38:34:d4:
         28:bd:3c:12:d0:df:3e:b5:3e:fd:9a:21:0b:db:29:01:62:80:
         8d:e2:30:3f:1e:a3:e5:ac:17:ab:13:14:3f:a9:1b:fc:f6:5a:
         0a:08:a8:5b:7e:ed:d8:20:60:f3:45:56:3d:ae:0d:26:5b:62:
         e0:f5:7c:e9:04:22:6f:4f:2e:93:37:ac:fe:3d:ea:8f:c7:4a:
         69:9b:db:64:d5:cb:e2:a6:a0:7d:69:55:7b:10:d1:e5:00:09:
         fb:23:ce:96:26:cf:cc:15:bf:4f:1d:f9:ec:e1:cd:3d:1c:d6:
         c5:b9:2b:5a:e4:98:d9:cd:8f:8c:0a:8b:f4:46:97:62:eb:47:
         27:4f:da:5e:71:a3:1f:59:9e:06:f1:8e:28:ea:12:c4:d2:70:
         11:a2:77:7f:04:b7:52:ca:03:88:2d:02:46:9a:f2:9e:94:62:
         fc:9f:8a:9d:de:c4:56:b5:b6:a5:89:a4:94:e5:55:36:14:c6:
         a7:f1:36:40:32:bc:11:ba:28:0e:37:f3:9e:e3:31:dd:bd:1a:
         e6:ec:5d:ff:09:81:72:63:30:af:ef:c0:93:17:37:63:59:ee:
         ad:47:cb:d1:b4:d2:f6:0b:c4:ac:4b:5c:9b:1b:a8:40:84:78:
         bf:7f:09:03
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUWfy3R5LPM83MXiAoV68Vu4N0V4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3N0U3NjI2MENDQUJFRDA4OTFCNEFCRDg3NzZERERG
Q0ExQzI0QTAeFw0yMzEwMTYxNjU1MDFaFw0yNDEwMTQxNzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNEMzI0NERDODQ3QzFDNUQ2
QkREMjkzNkI1MEZGNzYzQzg3QjA2OEM1OTQyOThEOUI4MTY4QjVBNjVBQjhDNDhC
QUFBMjQ2MDQzMTVERTMwNzUzNEI5MzA3MDFGMDU3QTc1QjQ0RjIzNEIwNEQ2MUEx
QUEyRjQyNTAwNzEyMTZDRkJDQ0RGNDlDNkYyNDMwRDVFRUE3NzQ1MjZGRjBGMDAx
NkY5RUNFMEY3QUQzNTlCRjE0MTkyMzgwNTYxRTRGRDFDM0M5ODRGMDZBODRFRDhG
OTk2MzgzRTEyQjY4MzNBMkE0NUU0MzRFODk1RTRCOEQxNDUwMjg4NTVCOUJDNzRF
QjI4RThCMjhBMzkzMTM3QTZCOEMxOENFQjdCNzkyOTE4OTExMTM2QzExMTY1QUIz
OTUxRTY3MDQwNTMyMzAzQjAwRDJCMzI2MTQyRDVBNTZEODRCNUFDQjcyNTY0Nzk5
RDJDRkMyQjJFRUI3NTNFRjBEREE2NDhDRjRGM0Q1MUNEODFFRDRGNDFFM0Q3RkQ2
QTBEMTQ1MUY0QkU3MkE5RjQ4NEZEQTNBMkU0MUVCN0M0MzdCMjFGQURBRDlEQTBC
MUQxMkUwQzkwNjdDOTlENUQ0NEJEODNDNzI2RUQ1RDFFOTk4RkRGNkNBNDg3RjZF
QzYyMTUwODU5QTUyQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo9MkTchHwcXWvdKTa1D/djyHsGjFlCmNm4FotaZauMSLqqJGBDFd
4wdTS5MHAfBXp1tE8jSwTWGhqi9CUAcSFs+8zfScbyQw1e6ndFJv8PABb57OD3rT
Wb8UGSOAVh5P0cPJhPBqhO2PmWOD4StoM6KkXkNOiV5LjRRQKIVbm8dOso6LKKOT
E3prjBjOt7eSkYkRE2wRFlqzlR5nBAUyMDsA0rMmFC1aVthLWstyVkeZ0s/Csu63
U+8N2mSM9PPVHNge1PQePX/WoNFFH0vnKp9IT9o6LkHrfEN7Ifra2doLHRLgyQZ8
mdXUS9g8cm7V0emY/fbKSH9uxiFQhZpSowIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJr0Mf+5aytL5gqVs/sWAgCg9ZhEMB8GA1UdIwQYMBaAFF1352JgzKvtCJG0q9h3
bd38ocJKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2
NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzAvNUQ3N0U3NjI2MENDQUJF
RDA4OTFCNEFCRDg3NzZERERGQ0ExQzI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81RDc3RTc2MjYwQ0NBQkVEMDg5MUI0QUJEODc3NkREREZDQTFD
MjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84NXMxeEJFdHg4QkdTdjZ3UEhO
cGJ5cjJMcFhYcFBDR2t0SGlKdll1eDI3dC8wLzMxMzkzMjJlMzEzNDMxMmUzMTM2
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzczNDM4Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALAjaAwDQYJKoZIhvcNAQELBQADggEBAHJqCYMJB+FbF3VT/KuUQjg01Ci9PBLQ
3z61Pv2aIQvbKQFigI3iMD8eo+WsF6sTFD+pG/z2WgoIqFt+7dggYPNFVj2uDSZb
YuD1fOkEIm9PLpM3rP496o/HSmmb22TVy+KmoH1pVXsQ0eUACfsjzpYmz8wVv08d
+ezhzT0c1sW5K1rkmNnNj4wKi/RGl2LrRydP2l5xox9ZngbxjijqEsTScBGid38E
t1LKA4gtAkaa8p6UYvyfip3exFa1tqWJpJTlVTYUxqfxNkAyvBG6KA43857jMd29
GubsXf8JgXJjMK/vwJMXN2NZ7q1Hy9G00vYLxKxLXJsbqECEeL9/CQM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org