Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32322d3232203d3e20323633343133.roa (raw, json)
Hash identifier:          vpQXBxxCAfiNZmspwCpt6Kaf6FxA2c7m68pk5UTaIA0=
Subject key identifier:   6E:BF:44:16:46:40:82:70:1B:AB:E2:43:76:2D:98:C0:DC:2D:CD:BD
Certificate issuer:       /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial:       5B4BFC3520A28C975A9CC7BD6362CE74CC5C7450
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
Signing time:             Mon 05 Feb 2024 11:59:52 +0000
ROA not before:           Mon 05 Feb 2024 11:54:52 +0000
ROA not after:            Mon 03 Feb 2025 11:59:52 +0000
asID:                     263413
IP address blocks:        179.97.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4b:fc:35:20:a2:8c:97:5a:9c:c7:bd:63:62:ce:74:cc:5c:74:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
        Validity
            Not Before: Feb  5 11:54:52 2024 GMT
            Not After : Feb  3 11:59:52 2025 GMT
        Subject: CN=6EBF4416464082701BABE243762D98C0DC2DCDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:15:ec:82:dd:c6:2f:08:b0:20:d0:37:29:
                    b4:ac:90:8d:93:10:d8:af:50:cb:40:2b:bd:1b:11:
                    bb:0d:f2:a3:cf:0f:32:10:63:e9:83:29:36:a6:87:
                    f9:ca:99:70:8a:19:bb:bd:63:d2:62:bc:cf:9a:28:
                    95:cf:5c:e3:f4:a6:17:1f:20:44:05:e0:d8:7c:ae:
                    0f:94:b6:3b:22:07:ea:81:9a:aa:99:8b:53:a7:58:
                    7d:c5:9e:11:51:32:eb:e1:03:34:f7:e7:30:82:9a:
                    77:3b:fc:93:bf:17:61:03:88:63:75:45:27:3c:83:
                    18:9e:e5:b0:02:6b:16:89:be:75:3e:ad:50:04:8b:
                    1f:7c:dc:12:3d:ca:b2:77:8a:49:6c:6a:3f:7c:6a:
                    14:2f:88:af:c5:a7:7d:ea:8f:05:a4:a9:c7:c3:89:
                    e8:26:02:64:a9:e1:b6:c3:bf:33:33:22:cc:b1:cc:
                    be:c2:9c:90:79:80:4b:96:ce:4c:c3:0d:f2:88:c2:
                    68:59:16:32:53:07:8d:67:90:9b:4b:6b:00:6e:2a:
                    93:d7:bf:56:71:4e:5a:e0:f4:76:91:9c:ba:3d:c3:
                    01:bb:d4:5c:29:06:db:8a:54:23:70:20:30:7f:e1:
                    a4:35:ae:1f:ed:f5:36:db:c7:a0:41:7a:aa:a4:88:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:44:16:46:40:82:70:1B:AB:E2:43:76:2D:98:C0:DC:2D:CD:BD
            X509v3 Authority Key Identifier:
                keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b1:f2:cb:bc:ed:91:0b:f2:98:ef:e6:8e:f1:17:81:05:0d:
         7c:95:8e:4a:ec:8b:0a:e2:b1:70:2b:b5:b5:21:b4:78:f8:3b:
         42:93:04:49:5c:ee:cb:2c:84:d0:a1:a2:98:1b:1b:f8:5f:96:
         4d:44:27:54:4e:8c:6a:d8:89:13:e6:2b:aa:6b:3f:07:c6:2f:
         dc:90:97:42:cd:ce:70:72:03:75:f7:38:c3:d0:8b:50:d1:38:
         0c:f1:78:72:30:0e:2c:2d:b3:3a:47:14:b8:d7:bb:7b:06:32:
         2b:ee:48:fc:e3:cc:b9:30:b1:f0:33:fc:a1:e7:a9:8e:38:74:
         a0:fe:9e:9a:a8:01:f9:f9:a1:41:6a:23:4f:45:db:30:1c:91:
         d8:7b:6c:03:85:d4:90:57:28:b8:7b:c5:eb:14:8d:ad:6f:ad:
         07:bf:ca:05:23:65:0f:82:5a:d5:74:ca:d7:f9:ec:ca:ae:f2:
         7e:a1:1b:05:c1:df:50:d1:f9:df:bc:4e:20:6d:55:57:93:13:
         84:51:28:05:f8:1c:79:6d:bf:d6:c7:5f:5a:86:2c:6e:08:52:
         f5:9f:1f:48:67:f9:ba:36:2e:7c:b3:a0:d9:53:67:50:79:2f:
         e9:9f:18:1a:48:a6:1e:d6:54:d0:0c:2f:00:f3:03:8a:ba:e6:
         b3:2b:dd:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW0v8NSCijJdanMe9Y2LOdMxcdFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY5RUJBMUMyNTY3RUEwRjlBQkM4MzlCRDVERUZBQjBD
QzRBNEFENjAeFw0yNDAyMDUxMTU0NTJaFw0yNTAyMDMxMTU5NTJaMDMxMTAvBgNV
BAMTKDZFQkY0NDE2NDY0MDgyNzAxQkFCRTI0Mzc2MkQ5OEMwREMyRENEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7RXsgt3GLwiwINA3KbSskI2T
ENivUMtAK70bEbsN8qPPDzIQY+mDKTamh/nKmXCKGbu9Y9JivM+aKJXPXOP0phcf
IEQF4Nh8rg+UtjsiB+qBmqqZi1OnWH3FnhFRMuvhAzT35zCCmnc7/JO/F2EDiGN1
RSc8gxie5bACaxaJvnU+rVAEix983BI9yrJ3iklsaj98ahQviK/Fp33qjwWkqcfD
iegmAmSp4bbDvzMzIsyxzL7CnJB5gEuWzkzDDfKIwmhZFjJTB41nkJtLawBuKpPX
v1ZxTlrg9HaRnLo9wwG71FwpBtuKVCNwIDB/4aQ1rh/t9Tbbx6BBeqqkiOXfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbr9EFkZAgnAbq+JDdi2YwNwtzb0wHwYDVR0j
BBgwFoAUH566HCVn6g+avIOb1d76sMxKStYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFy
UUUvMC8xRjlFQkExQzI1NjdFQTBGOUFCQzgzOUJENURFRkFCMENDNEE0QUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGOUVCQTFDMjU2N0VBMEY5
QUJDODM5QkQ1REVGQUIwQ0M0QTRBRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTRjNFTHp6YkJOVzJiMXVmNkdLOGM1b1NHUUF0eEhYQ1FvTlpudkJhclFFLzAv
MzEzNzM5MmUzOTM3MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCs2FcMA0GCSqGSIb3DQEBCwUAA4IBAQAgsfLLvO2R
C/KY7+aO8ReBBQ18lY5K7IsK4rFwK7W1IbR4+DtCkwRJXO7LLITQoaKYGxv4X5ZN
RCdUToxq2IkT5iuqaz8Hxi/ckJdCzc5wcgN19zjD0ItQ0TgM8XhyMA4sLbM6RxS4
17t7BjIr7kj848y5MLHwM/yh56mOOHSg/p6aqAH5+aFBaiNPRdswHJHYe2wDhdSQ
Vyi4e8XrFI2tb60Hv8oFI2UPglrVdMrX+ezKrvJ+oRsFwd9Q0fnfvE4gbVVXkxOE
USgF+Bx5bb/Wx19ahixuCFL1nx9IZ/m6Ni58s6DZU2dQeS/pnxgaSKYe1lTQDC8A
8wOKuuazK93j
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org