Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
File:                     3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa (raw, json)
Hash identifier:          hUB+ytQL0rZLwIvpEPMWhCZoOMFsCj2D+gbUcAynoXI=
Subject key identifier:   F1:CE:36:20:0B:53:91:80:C8:B7:04:20:88:76:AE:BA:D6:19:E8:62
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       7C3A7FFFE6F60B25C136D80A56E7B447AD5B9FFB
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:31 +0000
ROA not before:           Mon 08 Apr 2024 20:06:31 +0000
ROA not after:            Mon 07 Apr 2025 20:11:31 +0000
asID:                     263665
IP address blocks:        191.241.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:7f:ff:e6:f6:0b:25:c1:36:d8:0a:56:e7:b4:47:ad:5b:9f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:31 2024 GMT
            Not After : Apr  7 20:11:31 2025 GMT
        Subject: CN=F1CE36200B539180C8B704208876AEBAD619E862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:50:90:3e:8a:b0:18:55:c4:fa:6b:e4:c0:
                    16:2b:00:90:b2:e7:2b:19:aa:0c:dd:b7:b2:71:da:
                    2d:a8:a5:0f:29:88:5d:25:88:91:78:d8:64:7e:38:
                    1f:e9:73:dd:f6:e4:61:8f:01:ab:b4:de:56:43:a6:
                    71:dd:f3:f8:d6:d4:e0:5a:8d:5f:5b:e7:d8:69:a8:
                    30:c2:fe:53:89:69:05:73:b0:1d:44:0d:47:b6:25:
                    05:e3:10:72:36:4c:60:70:3c:d0:ee:b7:53:e1:32:
                    6e:87:39:cb:f6:72:06:e4:bc:9f:dc:eb:01:6a:27:
                    dd:17:74:df:c3:aa:03:09:92:0f:76:b1:f3:20:ff:
                    07:5c:7d:4f:29:64:47:d5:55:1b:27:84:5a:eb:78:
                    f2:b0:d9:de:7c:5c:0f:9b:8a:0e:3b:de:44:f2:74:
                    ce:6c:33:7b:da:46:c1:14:f2:5c:71:99:8b:58:04:
                    e7:74:91:b6:b8:8e:c0:a1:61:a0:7d:e5:66:96:13:
                    c6:0b:df:4a:98:8d:fc:b6:f0:a6:3c:d4:b0:e6:8a:
                    10:dc:4d:cc:f1:17:fe:b1:e5:ab:02:14:92:73:ef:
                    25:01:72:d3:f5:8d:8d:97:f4:cc:25:ee:fc:a2:f9:
                    2a:d4:c4:c6:23:d2:78:e9:ea:27:72:ad:09:9b:3c:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CE:36:20:0B:53:91:80:C8:B7:04:20:88:76:AE:BA:D6:19:E8:62
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3139312e3234312e33322e302f32312d3231203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:81:f0:3d:05:c8:b3:4d:47:2a:85:13:ad:d6:0a:4c:03:f5:
         af:43:5f:f6:1a:73:b2:64:39:b7:6e:86:f6:25:92:25:da:48:
         06:4b:ea:b2:95:39:d8:0c:1e:63:77:28:58:c3:3a:d4:5f:27:
         8b:fd:89:9a:e1:5f:7f:8e:a1:a7:2e:d7:02:ea:90:24:a9:8b:
         2e:0c:57:ae:4b:47:6e:bb:d7:e1:21:4f:d9:ed:8a:0a:bb:78:
         f9:85:7f:d7:7e:75:c6:14:9b:2d:ad:4c:8d:b1:16:ff:11:ff:
         58:d7:8a:95:9e:00:0f:d8:65:c9:c8:d7:4d:b3:6f:d8:ef:5b:
         42:e9:75:53:ee:10:7e:f9:60:14:6d:5d:bc:61:88:b7:c4:dc:
         fc:72:eb:c1:06:b1:1d:43:69:68:99:5d:13:82:a7:51:90:44:
         e1:b1:43:bf:24:ee:62:a6:e2:80:5f:c2:03:cb:32:1c:a6:86:
         7f:ea:35:84:4e:a2:2c:3b:1c:e6:ed:5f:e6:c8:6e:be:dc:8f:
         76:2e:0e:55:ee:b3:e0:88:02:66:41:4c:a0:0a:3a:2a:ee:21:
         7e:b0:3a:2d:c0:fa:59:0a:18:83:2a:f5:87:c5:cd:60:38:97:
         a3:50:09:86:9e:f3:36:db:a5:d4:96:36:1e:be:ee:ce:b3:6b:
         d7:b9:d4:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfDp//+b2CyXBNtgKVue0R61bn/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGODNENzZCM0RDMzI2RENDRTg0NjM1MDhEREIwMDVE
QzU0NTg5NjAeFw0yNDA0MDgyMDA2MzFaFw0yNTA0MDcyMDExMzFaMDMxMTAvBgNV
BAMTKEYxQ0UzNjIwMEI1MzkxODBDOEI3MDQyMDg4NzZBRUJBRDYxOUU4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAVCQPoqwGFXE+mvkwBYrAJCy
5ysZqgzdt7Jx2i2opQ8piF0liJF42GR+OB/pc9325GGPAau03lZDpnHd8/jW1OBa
jV9b59hpqDDC/lOJaQVzsB1EDUe2JQXjEHI2TGBwPNDut1PhMm6HOcv2cgbkvJ/c
6wFqJ90XdN/DqgMJkg92sfMg/wdcfU8pZEfVVRsnhFrrePKw2d58XA+big473kTy
dM5sM3vaRsEU8lxxmYtYBOd0kba4jsChYaB95WaWE8YL30qYjfy28KY81LDmihDc
TczxF/6x5asCFJJz7yUBctP1jY2X9Mwl7vyi+SrUxMYj0njp6idyrQmbPKFNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8c42IAtTkYDItwQgiHauutYZ6GIwHwYDVR0j
BBgwFoAUnvg9drPcMm3M6EY1CN2wBdxUWJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMS85RUY4M0Q3NkIzREMzMjZEQ0NFODQ2MzUwOEREQjAwNURDNTQ1ODk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFRjgzRDc2QjNEQzMyNkRD
Q0U4NDYzNTA4RERCMDA1REM1NDU4OTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzEv
MzEzOTMxMmUzMjM0MzEyZTMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8SAwDQYJKoZIhvcNAQELBQADggEBAMaB8D0F
yLNNRyqFE63WCkwD9a9DX/Yac7JkObduhvYlkiXaSAZL6rKVOdgMHmN3KFjDOtRf
J4v9iZrhX3+Ooacu1wLqkCSpiy4MV65LR2671+EhT9ntigq7ePmFf9d+dcYUmy2t
TI2xFv8R/1jXipWeAA/YZcnI102zb9jvW0LpdVPuEH75YBRtXbxhiLfE3Pxy68EG
sR1DaWiZXROCp1GQROGxQ78k7mKm4oBfwgPLMhymhn/qNYROoiw7HObtX+bIbr7c
j3YuDlXus+CIAmZBTKAKOiruIX6wOi3A+lkKGIMq9YfFzWA4l6NQCYae8zbbpdSW
Nh6+7s6za9e51Mo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org