Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          mTe74+Ybh+BGGnDccDRoRUxBQEiC+Hl+IFfJ8SIRITk=
Subject key identifier:   CD:5D:DE:5A:2C:E7:45:0A:4E:B1:DB:F5:A8:A1:DC:0E:34:DE:5E:F5
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       2538FD4E25A7D746654BDE73F1DF7FF807419EBE
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
Signing time:             Mon 18 Dec 2023 14:49:11 +0000
ROA not before:           Mon 18 Dec 2023 14:44:11 +0000
ROA not after:            Mon 16 Dec 2024 14:49:11 +0000
asID:                     263360
IP address blocks:        191.37.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:38:fd:4e:25:a7:d7:46:65:4b:de:73:f1:df:7f:f8:07:41:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Dec 18 14:44:11 2023 GMT
            Not After : Dec 16 14:49:11 2024 GMT
        Subject: CN=CD5DDE5A2CE7450A4EB1DBF5A8A1DC0E34DE5EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:4f:7a:9a:da:85:c3:3a:8e:0a:d5:48:59:
                    57:7f:89:7c:8c:e0:cd:32:7f:cc:50:aa:fa:4d:95:
                    36:41:f7:4e:61:3d:ff:8b:0d:8d:c8:4b:23:b0:91:
                    29:c3:73:c2:40:c1:13:a4:6f:51:1e:d7:8a:6d:ca:
                    df:f5:fe:b2:24:71:fc:bd:27:57:e5:62:1d:7d:79:
                    de:85:17:36:f1:57:cd:fc:b9:9c:a0:d2:e8:a4:73:
                    bd:fa:50:f3:a8:69:54:2d:80:73:07:5f:26:02:ea:
                    9f:e6:3d:9a:57:41:35:e6:e3:36:66:8e:b7:2c:a6:
                    05:42:31:80:1d:dc:3d:cc:7e:14:77:90:68:2f:40:
                    ff:11:c9:82:2a:54:ed:19:c3:70:8c:27:bd:e4:50:
                    3b:89:32:99:82:15:8a:f1:07:94:2b:13:cc:53:04:
                    eb:73:15:cc:04:3b:71:f7:29:72:8a:7c:53:54:76:
                    b7:17:df:ec:44:96:85:86:07:ee:dd:86:ae:4f:07:
                    9e:24:98:34:03:73:a8:fc:0c:09:02:4d:b1:ca:35:
                    71:22:e7:ca:aa:70:bd:92:05:f2:b5:b2:81:85:ea:
                    51:bd:c3:39:5b:5c:85:6b:ae:67:e7:ab:27:30:a3:
                    d4:a8:8c:0c:18:8a:31:85:5e:de:da:fa:7a:a6:95:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:DE:5A:2C:E7:45:0A:4E:B1:DB:F5:A8:A1:DC:0E:34:DE:5E:F5
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:80:c2:9b:32:c0:a6:a6:fd:19:2b:46:b8:b2:e4:af:d6:cd:
         ca:f8:38:27:eb:99:09:37:ad:5f:30:ad:4b:5a:24:0b:2a:60:
         df:ba:ff:7e:3c:17:61:36:23:4c:cd:0f:0b:b3:33:2b:45:22:
         1d:25:bc:f8:c5:a5:4f:ce:00:7a:5a:d7:23:5b:c6:cf:30:f6:
         24:ab:5c:f8:97:a8:4e:fb:fc:7a:bc:46:c0:c4:df:29:01:b2:
         17:d3:9e:40:b1:7a:e9:f8:d2:8b:59:6f:45:d9:e8:81:b0:d4:
         b6:fb:5e:ec:0a:98:91:a5:78:68:cd:a7:aa:0f:db:b5:f2:3a:
         4c:73:4b:ce:a0:65:2f:73:d4:60:8d:6c:0e:74:77:b2:a7:b3:
         08:21:c5:b9:a9:05:04:4e:de:fa:b0:2f:2f:c3:35:7f:81:da:
         16:05:64:d9:07:5f:33:ea:b4:cf:e2:c5:b2:bd:03:d2:28:25:
         f4:3e:0c:e7:59:52:06:ec:61:c3:ff:2b:fd:7f:8f:9c:ef:9f:
         3c:f8:80:ae:ff:b3:45:16:27:b9:a8:85:e2:70:a6:4f:54:78:
         e1:e3:1c:b1:3d:c2:ee:0a:d4:98:7c:6f:ec:bb:05:d5:d1:bb:
         2e:fe:4b:f8:4e:d0:3f:6a:b8:0f:52:0e:78:e6:63:04:bb:79:
         ea:26:3f:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJTj9TiWn10ZlS95z8d9/+AdBnr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc5NTM0QjkzOUIzNEZBN0Q4NUNCQjJBMDZFMDYxMEVD
MzcyQURDNzAeFw0yMzEyMTgxNDQ0MTFaFw0yNDEyMTYxNDQ5MTFaMDMxMTAvBgNV
BAMTKENENURERTVBMkNFNzQ1MEE0RUIxREJGNUE4QTFEQzBFMzRERTVFRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xk96mtqFwzqOCtVIWVd/iXyM
4M0yf8xQqvpNlTZB905hPf+LDY3ISyOwkSnDc8JAwROkb1Ee14ptyt/1/rIkcfy9
J1flYh19ed6FFzbxV838uZyg0uikc736UPOoaVQtgHMHXyYC6p/mPZpXQTXm4zZm
jrcspgVCMYAd3D3MfhR3kGgvQP8RyYIqVO0Zw3CMJ73kUDuJMpmCFYrxB5QrE8xT
BOtzFcwEO3H3KXKKfFNUdrcX3+xEloWGB+7dhq5PB54kmDQDc6j8DAkCTbHKNXEi
58qqcL2SBfK1soGF6lG9wzlbXIVrrmfnqycwo9SojAwYijGFXt7a+nqmldrFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzV3eWiznRQpOsdv1qKHcDjTeXvUwHwYDVR0j
BBgwFoAUZ5U0uTmzT6fYXLsqBuBhDsNyrccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMC82Nzk1MzRCOTM5QjM0RkE3RDg1Q0JCMkEwNkUwNjEwRUMzNzJBREM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3OTUzNEI5MzlCMzRGQTdE
ODVDQkIyQTA2RTA2MTBFQzM3MkFEQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzAv
MzEzOTMxMmUzMzM3MmUzMTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JYgwDQYJKoZIhvcNAQELBQADggEBAHeAwpsy
wKam/RkrRriy5K/Wzcr4OCfrmQk3rV8wrUtaJAsqYN+6/348F2E2I0zNDwuzMytF
Ih0lvPjFpU/OAHpa1yNbxs8w9iSrXPiXqE77/Hq8RsDE3ykBshfTnkCxeun40otZ
b0XZ6IGw1Lb7XuwKmJGleGjNp6oP27XyOkxzS86gZS9z1GCNbA50d7Knswghxbmp
BQRO3vqwLy/DNX+B2hYFZNkHXzPqtM/ixbK9A9IoJfQ+DOdZUgbsYcP/K/1/j5zv
nzz4gK7/s0UWJ7moheJwpk9UeOHjHLE9wu4K1Jh8b+y7BdXRuy7+S/hO0D9quA9S
DnjmYwS7eeomP7s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org