Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa
File:                     3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (raw, json)
Hash identifier:          ZiD9B6WT9JGOCvazmwFeuaCt6Srs6xtmMJsoGGY+87Y=
Subject key identifier:   FA:AE:AA:2D:97:1C:FB:09:9B:D1:AF:50:73:21:4B:68:8E:57:E0:02
Certificate issuer:       /CN=455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A
Certificate serial:       13F95F498942571AF36F7149E82B4F1A4909F574
Authority key identifier: 45:5C:3B:82:FA:E8:2A:8C:44:8B:BE:BB:AD:7E:9F:3C:C2:5F:F6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa
Signing time:             Fri 03 May 2024 14:47:21 +0000
ROA not before:           Fri 03 May 2024 14:42:21 +0000
ROA not after:            Fri 02 May 2025 14:47:21 +0000
asID:                     263526
IP address blocks:        191.253.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:5f:49:89:42:57:1a:f3:6f:71:49:e8:2b:4f:1a:49:09:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A
        Validity
            Not Before: May  3 14:42:21 2024 GMT
            Not After : May  2 14:47:21 2025 GMT
        Subject: CN=FAAEAA2D971CFB099BD1AF5073214B688E57E002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:8b:59:b3:6b:f6:bf:97:0e:a4:90:15:ff:
                    0a:66:b3:8d:7e:a5:91:5b:e6:4a:53:f9:e1:db:13:
                    f6:5e:ca:0b:cd:6d:4e:c3:4d:19:5d:16:48:01:25:
                    3a:b2:a4:97:3e:21:60:4f:d9:cd:64:5d:f9:90:03:
                    cf:e3:97:01:f6:05:03:0f:7a:62:dc:8f:f1:7a:84:
                    1d:2f:75:17:50:9d:4b:e8:44:b1:1a:ae:bc:e5:ca:
                    68:1e:4b:5a:0a:a9:d9:8e:e1:3a:b9:4c:34:d0:27:
                    e5:0d:eb:26:7e:f1:f0:7f:11:39:66:3e:b2:ae:43:
                    c2:ed:1f:1b:6a:44:a1:42:1b:3e:8e:f5:54:fc:b2:
                    df:c4:ff:d2:42:42:6f:db:6f:d5:d4:b4:47:58:53:
                    8a:3f:54:6d:20:f4:66:b6:a3:27:b9:86:23:1c:99:
                    18:a9:f5:c4:88:dd:8b:58:2b:64:79:9c:d4:df:88:
                    b1:a8:b9:95:0b:f1:8c:dc:15:7f:8e:15:6f:6e:b1:
                    0c:6d:c5:fb:a6:32:12:1c:48:b1:7e:4a:44:dc:75:
                    c3:5e:bf:4f:be:e9:31:41:c0:d8:50:17:e2:5c:45:
                    35:f8:d2:f3:c9:54:77:e3:ac:dc:17:52:fb:5b:55:
                    88:7c:14:de:50:fc:09:87:26:12:0c:c5:c7:c2:99:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:AA:2D:97:1C:FB:09:9B:D1:AF:50:73:21:4B:68:8E:57:E0:02
            X509v3 Authority Key Identifier:
                keyid:45:5C:3B:82:FA:E8:2A:8C:44:8B:BE:BB:AD:7E:9F:3C:C2:5F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/455C3B82FAE82A8C448BBEBBAD7E9F3CC25FF63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:62:e2:14:aa:21:70:9a:b6:5a:e5:72:0c:d0:91:31:e6:0f:
         fd:87:ee:a9:9b:af:2f:0a:82:1b:81:f0:0e:a2:7d:e7:1d:9f:
         cd:2b:21:63:79:be:5a:d8:ad:71:6e:4f:6f:38:6b:87:75:da:
         87:d9:30:cf:77:ae:2d:6c:ec:7d:29:91:f6:1f:36:a5:93:8b:
         a1:c8:34:8e:39:3d:19:39:2c:e7:33:c7:f5:a1:ed:b9:68:76:
         8d:8a:d7:5d:5d:e5:f5:b2:39:50:a2:74:08:3b:db:77:65:b0:
         69:3a:ca:e9:36:7d:c4:cb:2f:dc:ab:e2:d3:13:69:33:4c:1c:
         dd:93:97:0d:e0:ee:23:26:9d:7b:0c:95:aa:92:f5:09:9c:20:
         77:ae:f4:9e:d5:93:77:8e:11:24:18:bd:c8:0b:26:e6:a1:6c:
         bb:00:ec:5b:93:cf:2c:3d:b3:3a:05:17:08:e9:04:a6:8b:f6:
         9b:40:d6:f0:51:49:b1:18:2a:a8:78:c1:03:75:c3:33:48:bc:
         36:22:39:7f:21:d9:8e:be:37:a4:86:52:13:18:10:7a:8d:e3:
         33:f9:e1:70:73:89:9c:e8:c0:1d:6c:6b:8a:24:e6:ca:a9:bf:
         83:9b:89:00:12:fa:6e:8f:3f:99:24:4d:6f:33:9f:dc:73:22:
         b7:cc:1b:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE/lfSYlCVxrzb3FJ6CtPGkkJ9XQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1QzNCODJGQUU4MkE4QzQ0OEJCRUJCQUQ3RTlGM0ND
MjVGRjYzQTAeFw0yNDA1MDMxNDQyMjFaFw0yNTA1MDIxNDQ3MjFaMDMxMTAvBgNV
BAMTKEZBQUVBQTJEOTcxQ0ZCMDk5QkQxQUY1MDczMjE0QjY4OEU1N0UwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT/4tZs2v2v5cOpJAV/wpms41+
pZFb5kpT+eHbE/ZeygvNbU7DTRldFkgBJTqypJc+IWBP2c1kXfmQA8/jlwH2BQMP
emLcj/F6hB0vdRdQnUvoRLEarrzlymgeS1oKqdmO4Tq5TDTQJ+UN6yZ+8fB/ETlm
PrKuQ8LtHxtqRKFCGz6O9VT8st/E/9JCQm/bb9XUtEdYU4o/VG0g9Ga2oye5hiMc
mRip9cSI3YtYK2R5nNTfiLGouZUL8YzcFX+OFW9usQxtxfumMhIcSLF+SkTcdcNe
v0++6TFBwNhQF+JcRTX40vPJVHfjrNwXUvtbVYh8FN5Q/AmHJhIMxcfCmZTBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+q6qLZcc+wmb0a9QcyFLaI5X4AIwHwYDVR0j
BBgwFoAURVw7gvroKoxEi767rX6fPMJf9jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj
YXEvMC80NTVDM0I4MkZBRTgyQThDNDQ4QkJFQkJBRDdFOUYzQ0MyNUZGNjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NUMzQjgyRkFFODJBOEM0
NDhCQkVCQkFEN0U5RjNDQzI1RkY2M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqamZNeHFLVU1LNDZlYnlkVkFqclRYVGV4aUVHbkhqQmhHVmFVV1ZwY2FxLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK//RQwDQYJKoZIhvcNAQELBQADggEBAFhi4hSq
IXCatlrlcgzQkTHmD/2H7qmbry8KghuB8A6ifecdn80rIWN5vlrYrXFuT284a4d1
2ofZMM93ri1s7H0pkfYfNqWTi6HINI45PRk5LOczx/Wh7blodo2K111d5fWyOVCi
dAg723dlsGk6yuk2fcTLL9yr4tMTaTNMHN2Tlw3g7iMmnXsMlaqS9QmcIHeu9J7V
k3eOESQYvcgLJuahbLsA7FuTzyw9szoFFwjpBKaL9ptA1vBRSbEYKqh4wQN1wzNI
vDYiOX8h2Y6+N6SGUhMYEHqN4zP54XBziZzowB1sa4ok5sqpv4ObiQAS+m6PP5kk
TW8zn9xzIrfMG50=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org