Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e203238323230.roa
File:                     3139312e3234312e33322e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          S305ExQWVhxmcEPfGjvSnYtZwjEyhH2m0b8yeFactN4=
Subject key identifier:   32:54:85:F9:B6:06:7A:1F:95:61:27:A0:D1:2A:58:00:8D:53:1D:76
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       041BF0F19002AB2085FC362CDD455109FD0F2D6A
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:02:52 +0000
ROA not before:           Fri 16 Dec 2022 19:57:52 +0000
ROA not after:            Fri 15 Dec 2023 20:02:52 +0000
asID:                     28220
IP address blocks:        191.241.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1b:f0:f1:90:02:ab:20:85:fc:36:2c:dd:45:51:09:fd:0f:2d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:57:52 2022 GMT
            Not After : Dec 15 20:02:52 2023 GMT
        Subject: CN=325485F9B6067A1F956127A0D12A58008D531D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:46:c2:e7:64:ea:68:c7:79:30:24:cd:0f:
                    36:45:c5:f2:55:78:6d:96:dc:04:19:2a:4c:77:dc:
                    07:de:70:27:6e:45:01:12:56:be:c5:b3:db:fe:f1:
                    1a:09:43:6c:1d:03:85:14:25:95:01:be:bc:05:f1:
                    16:b9:3d:12:fa:ae:08:58:2e:82:76:10:bb:3a:ea:
                    a0:11:b7:c9:8d:e4:8c:fd:21:3b:ea:88:ed:05:a7:
                    df:9f:54:41:96:12:b0:7f:11:55:b7:7b:f6:66:93:
                    80:4a:57:bb:cf:2e:8d:c2:81:02:b8:60:1f:b6:aa:
                    fa:2f:d2:3c:4d:c2:37:9b:c6:c3:a5:76:32:88:36:
                    f8:11:43:c1:dd:e4:83:50:6f:96:99:42:6c:e2:a4:
                    d1:fe:c4:57:99:97:7a:2d:14:95:d6:7e:0b:bc:63:
                    a8:3f:c6:41:42:11:8b:a9:7e:14:9d:ae:8b:a1:31:
                    f9:5b:a8:2d:10:1d:ee:e9:4b:b9:f9:8d:f1:0c:de:
                    55:bb:76:5f:c4:e4:b1:e5:6a:7b:60:90:1f:d0:0a:
                    2c:cf:12:6f:65:57:7f:2c:d5:46:7f:57:4f:b0:0d:
                    e3:03:b2:52:ca:67:25:e7:cd:b1:d0:cb:ea:14:61:
                    79:77:91:c9:1b:0a:13:61:39:06:72:1e:4c:a3:3f:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:85:F9:B6:06:7A:1F:95:61:27:A0:D1:2A:58:00:8D:53:1D:76
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3139312e3234312e33322e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:7d:61:80:97:aa:02:99:c9:69:c3:22:74:ab:68:cd:ba:48:
         9a:57:60:47:9e:8b:57:be:05:91:9c:e0:a4:82:25:2b:08:5e:
         3c:90:fe:41:43:20:e0:8e:3e:85:b8:a4:34:8d:52:33:ce:2e:
         d3:52:ae:ce:0f:6d:6a:1e:28:f2:c6:e1:40:02:54:fb:f2:2e:
         07:80:cb:1c:2c:01:8a:9e:dd:23:c5:45:dd:d8:b1:99:30:1d:
         c8:9c:76:03:bd:5b:51:73:ea:96:7d:80:18:ab:f0:14:86:d3:
         1a:fd:cd:bd:59:fb:57:a0:9f:d1:e0:1b:6e:35:5f:76:91:78:
         23:72:f9:e6:e6:f5:ca:ca:40:e9:16:a8:eb:84:12:8c:07:b8:
         a4:54:67:a4:a8:c1:e1:16:0f:7b:fd:cf:cc:64:f1:82:fe:44:
         5b:c7:03:e0:c4:6d:ce:fd:b7:cb:b0:28:99:21:bc:5d:3b:62:
         1d:86:79:14:40:f3:55:98:53:6d:9f:4f:9a:42:95:13:20:34:
         67:7a:6c:bf:44:60:48:a1:f7:fa:ab:c7:2c:4c:ce:ae:ea:39:
         33:45:24:60:78:bb:70:c8:6b:c7:29:75:eb:b0:75:25:55:99:
         97:25:60:4f:d6:19:c7:24:aa:0d:3d:fe:01:60:5a:ab:c4:13:
         61:40:03:10
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBBvw8ZACqyCF/DYs3UVRCf0PLWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFNTREMTQ5NzMyMUMzNjVGMjhENTM5RjZGNEY4NUQy
OEYyQjhBNjAeFw0yMjEyMTYxOTU3NTJaFw0yMzEyMTUyMDAyNTJaMDMxMTAvBgNV
BAMTKDMyNTQ4NUY5QjYwNjdBMUY5NTYxMjdBMEQxMkE1ODAwOEQ1MzFENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpekbC52TqaMd5MCTNDzZFxfJV
eG2W3AQZKkx33AfecCduRQESVr7Fs9v+8RoJQ2wdA4UUJZUBvrwF8Ra5PRL6rghY
LoJ2ELs66qARt8mN5Iz9ITvqiO0Fp9+fVEGWErB/EVW3e/Zmk4BKV7vPLo3CgQK4
YB+2qvov0jxNwjebxsOldjKINvgRQ8Hd5INQb5aZQmzipNH+xFeZl3otFJXWfgu8
Y6g/xkFCEYupfhSdrouhMflbqC0QHe7pS7n5jfEM3lW7dl/E5LHlantgkB/QCizP
Em9lV38s1UZ/V0+wDeMDslLKZyXnzbHQy+oUYXl3kckbChNhOQZyHkyjP/4rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMlSF+bYGeh+VYSeg0SpYAI1THXYwHwYDVR0j
BBgwFoAUjuVNFJcyHDZfKNU59vT4XSjyuKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC84RUU1NEQxNDk3MzIxQzM2NUYyOEQ1MzlGNkY0Rjg1RDI4RjJCOEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFRTU0RDE0OTczMjFDMzY1
RjI4RDUzOUY2RjRGODVEMjhGMkI4QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzOTMxMmUzMjM0MzEyZTMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDv/EgMA0GCSqGSIb3DQEBCwUAA4IBAQCNfWGAl6oC
mclpwyJ0q2jNukiaV2BHnotXvgWRnOCkgiUrCF48kP5BQyDgjj6FuKQ0jVIzzi7T
Uq7OD21qHijyxuFAAlT78i4HgMscLAGKnt0jxUXd2LGZMB3InHYDvVtRc+qWfYAY
q/AUhtMa/c29WftXoJ/R4BtuNV92kXgjcvnm5vXKykDpFqjrhBKMB7ikVGekqMHh
Fg97/c/MZPGC/kRbxwPgxG3O/bfLsCiZIbxdO2IdhnkUQPNVmFNtn0+aQpUTIDRn
emy/RGBIoff6q8csTM6u6jkzRSRgeLtwyGvHKXXrsHUlVZmXJWBP1hnHJKoNPf4B
YFqrxBNhQAMQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org