Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa
File:                     3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa (raw, json)
Hash identifier:          8AEND4JoIMD4I1AI0Vq9QxaQs7d1Nks6N45Fa+GTVzE=
Subject key identifier:   57:43:56:EE:8D:59:4C:25:A6:01:0E:81:85:91:45:8F:5D:7A:06:5B
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       341E0EAEF8F1187D1585B97964C55E7A5F9214E6
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa
Signing time:             Thu 04 Jan 2024 22:00:01 +0000
ROA not before:           Thu 04 Jan 2024 21:55:01 +0000
ROA not after:            Thu 02 Jan 2025 22:00:01 +0000
asID:                     263512
IP address blocks:        191.243.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1e:0e:ae:f8:f1:18:7d:15:85:b9:79:64:c5:5e:7a:5f:92:14:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan  4 21:55:01 2024 GMT
            Not After : Jan  2 22:00:01 2025 GMT
        Subject: CN=574356EE8D594C25A6010E818591458F5D7A065B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:96:4c:a3:e6:e6:f2:c8:4b:1a:a3:b0:b6:
                    b5:68:a1:ee:3c:97:aa:d7:13:0e:2e:be:51:1c:29:
                    34:da:aa:ad:0c:d9:43:90:f0:39:58:a0:e9:6c:90:
                    90:25:68:4c:29:e3:fc:8a:06:01:db:8e:c9:59:32:
                    91:ac:b7:b0:fa:e3:da:11:28:e0:5a:ad:a4:ff:c2:
                    9b:29:a5:f7:79:02:f2:8e:6c:d3:7a:a5:35:ce:5a:
                    89:8c:2d:1e:80:de:01:7f:83:14:04:4d:f5:e8:29:
                    86:61:80:e8:0f:1a:23:89:0d:5b:96:98:b7:ef:a4:
                    40:5e:cc:60:7a:24:cd:d1:ec:75:45:6b:1e:a0:c8:
                    80:fd:e1:22:11:ed:16:04:9e:6b:94:e1:c2:b5:44:
                    0a:ce:aa:71:f6:31:b6:98:56:53:35:15:ce:ef:d6:
                    e4:fb:63:3a:ab:cc:f4:08:fd:36:c4:1b:0e:5d:73:
                    73:b3:7a:b6:da:20:e3:a9:2e:2a:6b:ee:90:41:06:
                    d9:4c:9c:10:43:ea:d1:40:82:dc:df:27:8f:d1:f4:
                    20:3e:90:48:93:e9:e3:43:a4:6a:09:6d:3a:90:60:
                    95:40:bd:b2:d9:82:6c:73:f2:ad:63:2f:1a:46:fb:
                    0b:ad:a3:e5:b5:b4:9b:8b:37:25:de:6e:68:81:9e:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:56:EE:8D:59:4C:25:A6:01:0E:81:85:91:45:8F:5D:7A:06:5B
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32322d3232203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:de:26:80:4a:b5:e2:7b:2c:b3:74:2b:83:e9:41:3f:13:8f:
         a1:73:c8:3e:f7:f0:6b:3e:14:15:f6:54:01:29:9f:0f:a9:76:
         d0:87:4c:2d:1f:c1:60:f9:a7:87:61:a2:e5:87:4e:87:cd:e1:
         1a:3a:3e:19:12:8a:c7:5f:32:98:11:7b:f5:59:7e:b0:68:30:
         78:81:52:97:d9:db:d0:a1:0d:f3:82:1c:b4:70:3f:b7:d6:62:
         b1:fb:7c:19:17:73:f7:2a:95:2f:9b:47:14:5f:38:14:f8:63:
         b0:ed:9e:6e:d2:1c:93:e5:59:6c:70:87:16:d3:3c:3e:d6:87:
         46:84:6e:fb:cd:f5:b1:eb:7e:05:51:50:7a:c8:b8:a7:da:23:
         68:49:e1:fd:85:68:b9:72:a7:1c:9f:2c:28:1a:af:ba:cf:25:
         57:89:21:66:8f:18:26:44:16:bb:fe:6a:8a:57:3f:97:cd:29:
         6d:39:48:3c:13:6b:d4:ba:98:8e:5c:fd:76:23:f5:e8:9b:e7:
         89:3b:e8:3e:9a:29:e6:7c:0b:cf:3b:11:5e:ca:7f:95:f2:52:
         9d:71:fb:57:94:07:c0:64:66:af:af:d6:84:66:a4:ac:42:07:
         e6:ae:34:c9:1b:b2:9b:4c:d8:06:03:4a:37:23:55:53:d8:18:
         7b:0e:97:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNB4OrvjxGH0Vhbl5ZMVeel+SFOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE1RjY2ODBFMjlEQzg4NkI1MkFEQkUzOTNDMDMxM0Uz
QzMxMEQzMjAeFw0yNDAxMDQyMTU1MDFaFw0yNTAxMDIyMjAwMDFaMDMxMTAvBgNV
BAMTKDU3NDM1NkVFOEQ1OTRDMjVBNjAxMEU4MTg1OTE0NThGNUQ3QTA2NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzZZMo+bm8shLGqOwtrVooe48
l6rXEw4uvlEcKTTaqq0M2UOQ8DlYoOlskJAlaEwp4/yKBgHbjslZMpGst7D649oR
KOBaraT/wpsppfd5AvKObNN6pTXOWomMLR6A3gF/gxQETfXoKYZhgOgPGiOJDVuW
mLfvpEBezGB6JM3R7HVFax6gyID94SIR7RYEnmuU4cK1RArOqnH2MbaYVlM1Fc7v
1uT7YzqrzPQI/TbEGw5dc3OzerbaIOOpLipr7pBBBtlMnBBD6tFAgtzfJ4/R9CA+
kEiT6eNDpGoJbTqQYJVAvbLZgmxz8q1jLxpG+wuto+W1tJuLNyXebmiBnpzTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV0NW7o1ZTCWmAQ6BhZFFj116BlswHwYDVR0j
BBgwFoAUil9mgOKdyIa1Ktvjk8AxPjwxDTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMC84QTVGNjY4MEUyOURDODg2QjUyQURCRTM5M0MwMzEzRTNDMzEwRDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNUY2NjgwRTI5REM4ODZC
NTJBREJFMzkzQzAzMTNFM0MzMTBEMzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/zyDANBgkqhkiG9w0BAQsFAAOCAQEAgd4m
gEq14nsss3Qrg+lBPxOPoXPIPvfwaz4UFfZUASmfD6l20IdMLR/BYPmnh2Gi5YdO
h83hGjo+GRKKx18ymBF79Vl+sGgweIFSl9nb0KEN84IctHA/t9Zisft8GRdz9yqV
L5tHFF84FPhjsO2ebtIck+VZbHCHFtM8PtaHRoRu+831set+BVFQesi4p9ojaEnh
/YVouXKnHJ8sKBqvus8lV4khZo8YJkQWu/5qilc/l80pbTlIPBNr1LqYjlz9diP1
6JvniTvoPpop5nwLzzsRXsp/lfJSnXH7V5QHwGRmr6/WhGakrEIH5q40yRuym0zY
BgNKNyNVU9gYew6XYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org