Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32322d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32322d3234203d3e203631393031.roa (raw, json)
Hash identifier:          2Ei3pf2vOMBac0NQUC9fmbNEcQemvKNBHPzvUpJS+5g=
Subject key identifier:   17:61:25:B4:C5:71:1C:BF:60:73:0B:70:FC:7B:5A:74:37:21:7C:3A
Certificate issuer:       /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial:       54633A929ACEAFCB0FAD39FCCE4BAC29C7E7DE44
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32322d3234203d3e203631393031.roa
Signing time:             Tue 12 Mar 2024 18:13:16 +0000
ROA not before:           Tue 12 Mar 2024 18:08:16 +0000
ROA not after:            Tue 11 Mar 2025 18:13:16 +0000
asID:                     61901
IP address blocks:        191.5.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:63:3a:92:9a:ce:af:cb:0f:ad:39:fc:ce:4b:ac:29:c7:e7:de:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
        Validity
            Not Before: Mar 12 18:08:16 2024 GMT
            Not After : Mar 11 18:13:16 2025 GMT
        Subject: CN=176125B4C5711CBF60730B70FC7B5A7437217C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:e6:13:37:2e:57:03:48:39:2c:7d:d6:52:
                    b9:9e:03:a2:98:58:3f:35:6d:9d:24:3a:70:be:b3:
                    b4:30:63:33:70:eb:d6:b1:88:f8:9a:86:25:70:7d:
                    df:9b:23:e7:43:93:93:ea:47:d8:7b:52:03:20:bf:
                    0f:9d:da:dc:5d:aa:1d:b9:77:59:14:66:04:3a:6b:
                    b5:c6:4b:e4:e2:e0:21:38:49:21:59:46:53:74:09:
                    62:52:8c:37:2a:1a:36:81:d8:b6:6e:c9:f8:7a:9c:
                    c1:3c:50:81:7c:49:15:9c:2f:84:f1:fd:d1:01:7d:
                    3d:49:3d:82:11:5c:45:24:49:b6:05:66:1f:13:ca:
                    16:5a:f4:0a:86:78:99:04:5a:be:f7:92:bb:2c:fb:
                    e1:e9:b4:5e:fa:5f:61:b7:03:32:67:e4:bf:66:4f:
                    92:bd:f0:cf:bb:49:17:ae:49:0f:91:49:8f:97:8c:
                    ec:82:a9:3c:a3:55:cd:77:1d:ed:20:ca:10:c3:a8:
                    20:15:af:8f:7a:81:07:00:ea:81:0d:0b:04:1d:ab:
                    8b:6a:e3:e7:d5:9e:d0:4b:c1:34:37:37:37:2e:03:
                    8d:ea:bb:e7:09:d7:2b:f5:74:2a:1f:8e:b8:1b:4d:
                    aa:52:50:98:db:b0:f1:51:51:4d:21:35:24:eb:d2:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:25:B4:C5:71:1C:BF:60:73:0B:70:FC:7B:5A:74:37:21:7C:3A
            X509v3 Authority Key Identifier:
                keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32322d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:f3:04:86:c0:97:74:d4:ac:fa:c8:04:f9:5d:10:4d:31:
         e2:d4:9a:e4:0a:2f:6b:92:05:ab:27:48:70:6a:4e:36:81:8a:
         7b:40:fa:f4:f8:28:74:52:37:7b:c1:47:a3:ef:d8:c8:01:ae:
         4e:33:26:25:7d:e1:5b:ec:e7:40:22:71:6b:54:09:76:d8:91:
         7b:d9:3f:33:65:6f:75:ce:0e:d3:81:52:29:60:48:82:8b:5b:
         93:3f:f7:7b:a3:e0:2d:26:93:bd:c6:ca:04:6e:f6:c0:d3:7b:
         bb:41:8f:ad:b3:fc:1a:36:b0:7c:55:3f:0c:2d:36:d1:59:37:
         1f:7c:ce:9a:06:2a:07:b2:a5:6d:cb:73:43:d7:1b:84:b0:03:
         be:11:b4:50:ee:ff:08:1e:df:c2:e8:b3:78:eb:72:d4:0e:12:
         2e:5b:57:9d:ea:37:cb:1e:82:f6:32:2d:ed:e2:56:cf:59:45:
         5d:2e:7c:be:6b:34:fe:d1:36:f7:6b:64:74:2a:3d:7a:4f:c8:
         2f:d3:63:a0:6e:10:88:b2:d7:22:c1:38:bc:29:74:91:b1:f5:
         3c:7a:ee:95:13:ed:50:47:f4:b8:a2:3d:ea:2a:af:e9:c0:0a:
         6b:05:78:b6:04:1c:3f:4e:3e:df:a7:b0:e5:02:f2:d7:e1:4b:
         d3:e8:77:92
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVGM6kprOr8sPrTn8zkusKcfn3kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdBQkE4NTlDRTZDQkEyMUFENTI5NDc3MjJCMTUxMkVD
RDI1MjAwQjAeFw0yNDAzMTIxODA4MTZaFw0yNTAzMTExODEzMTZaMDMxMTAvBgNV
BAMTKDE3NjEyNUI0QzU3MTFDQkY2MDczMEI3MEZDN0I1QTc0MzcyMTdDM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCza+YTNy5XA0g5LH3WUrmeA6KY
WD81bZ0kOnC+s7QwYzNw69axiPiahiVwfd+bI+dDk5PqR9h7UgMgvw+d2txdqh25
d1kUZgQ6a7XGS+Ti4CE4SSFZRlN0CWJSjDcqGjaB2LZuyfh6nME8UIF8SRWcL4Tx
/dEBfT1JPYIRXEUkSbYFZh8TyhZa9AqGeJkEWr73krss++HptF76X2G3AzJn5L9m
T5K98M+7SReuSQ+RSY+XjOyCqTyjVc13He0gyhDDqCAVr496gQcA6oENCwQdq4tq
4+fVntBLwTQ3NzcuA43qu+cJ1yv1dCofjrgbTapSUJjbsPFRUU0hNSTr0lQvAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUF2EltMVxHL9gcwtw/HtadDchfDowHwYDVR0j
BBgwFoAUZ6uoWc5suiGtUpR3IrFRLs0lIAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC82N0FCQTg1OUNFNkNCQTIxQUQ1Mjk0NzcyMkIxNTEyRUNEMjUyMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3QUJBODU5Q0U2Q0JBMjFB
RDUyOTQ3NzIyQjE1MTJFQ0QyNTIwMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxTFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzAv
MzEzOTMxMmUzNTJlMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzOTMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK/BUAwDQYJKoZIhvcNAQELBQADggEBAMc38wSGwJd01Kz6
yAT5XRBNMeLUmuQKL2uSBasnSHBqTjaBintA+vT4KHRSN3vBR6Pv2MgBrk4zJiV9
4Vvs50AicWtUCXbYkXvZPzNlb3XODtOBUilgSIKLW5M/93uj4C0mk73GygRu9sDT
e7tBj62z/Bo2sHxVPwwtNtFZNx98zpoGKgeypW3Lc0PXG4SwA74RtFDu/wge38Lo
s3jrctQOEi5bV53qN8segvYyLe3iVs9ZRV0ufL5rNP7RNvdrZHQqPXpPyC/TY6Bu
EIiy1yLBOLwpdJGx9Tx67pUT7VBH9LiiPeoqr+nACmsFeLYEHD9OPt+nsOUC8tfh
S9Pod5I=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org