Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3139312e352e38302e302f32302d3234203d3e203238323031.roa
File:                     3139312e352e38302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          Fqm+njkuN0cFXHX3mSFPRWgf1U/GFFt94pktzRdb5qs=
Subject key identifier:   B1:67:91:3C:26:00:7B:55:05:F2:56:F7:64:EE:6B:62:F5:46:00:BE
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       5FCA075DB78999CB080D54C4BBDC7F6724B429DC
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3139312e352e38302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:32:35 +0000
ROA not before:           Wed 10 Apr 2024 12:27:35 +0000
ROA not after:            Wed 09 Apr 2025 12:32:35 +0000
asID:                     28201
IP address blocks:        191.5.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ca:07:5d:b7:89:99:cb:08:0d:54:c4:bb:dc:7f:67:24:b4:29:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:27:35 2024 GMT
            Not After : Apr  9 12:32:35 2025 GMT
        Subject: CN=B167913C26007B5505F256F764EE6B62F54600BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:4a:44:49:fe:65:94:88:52:90:15:5c:c8:
                    0c:58:66:24:08:6b:79:43:db:1b:5f:24:89:c2:fe:
                    bc:65:e8:27:28:c3:f7:d2:63:23:7c:46:d8:34:9b:
                    ed:61:f9:27:6b:b3:0a:d1:46:54:a0:5c:b6:f4:f6:
                    69:3a:ce:6f:ee:fd:27:69:08:9a:a3:7f:c9:75:87:
                    4f:e5:6e:79:ba:ea:54:cf:ea:38:b8:1e:61:5b:21:
                    7a:96:ec:53:a6:4c:ba:22:f7:c1:92:e1:b5:6a:29:
                    8d:7a:c4:8b:75:17:23:ca:44:66:31:e7:78:a6:5f:
                    56:98:e1:11:af:8a:80:25:df:1f:e9:96:c8:8d:18:
                    ad:4d:d1:03:62:aa:b9:20:f7:21:ea:18:58:a1:7f:
                    06:90:0c:e2:b3:91:0c:a0:0d:be:c5:c3:92:b5:f9:
                    68:f5:87:f1:c5:10:31:89:01:ed:14:39:81:ff:71:
                    da:d2:91:d7:a1:f9:90:c6:62:a5:c4:b9:05:fd:e2:
                    30:10:cf:71:c9:3e:d7:53:f4:a8:1a:c9:d8:8d:3e:
                    fa:fc:76:be:f2:47:4f:4d:2c:60:2e:2e:29:4b:1a:
                    bf:d3:5a:7d:8a:b9:27:54:95:a6:62:a1:39:f0:ac:
                    03:f1:c0:c4:c2:d9:81:16:2d:d6:f1:e3:80:bd:f0:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:67:91:3C:26:00:7B:55:05:F2:56:F7:64:EE:6B:62:F5:46:00:BE
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3139312e352e38302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:a0:81:73:e6:01:cf:3f:4c:7b:cf:fd:35:46:da:5f:97:
         4f:61:e9:35:65:c6:e4:63:2b:71:95:8e:30:eb:9e:f0:24:12:
         26:b1:8a:d4:9b:12:8e:95:92:bc:1d:97:c0:76:44:55:12:9b:
         0a:03:3d:e2:be:f5:3d:60:bc:d3:87:e9:5c:43:4b:58:e2:b9:
         7e:fa:40:f1:5d:45:e7:2e:94:c7:09:11:88:67:48:b7:ea:73:
         5b:0c:d2:d7:1e:3e:23:a0:d8:e2:83:b3:df:81:52:60:81:79:
         ed:71:d1:ae:43:7e:e6:03:b0:e4:22:f4:54:9e:ab:95:1b:4f:
         ad:40:2a:35:9f:b4:a0:bc:34:07:95:13:c0:ee:9c:c5:96:f9:
         7f:dd:7c:6a:f9:5b:2d:a1:03:fa:1d:59:6e:b5:ca:18:cc:e6:
         91:5d:f4:de:cc:7a:33:27:49:57:60:d8:a9:90:e4:34:92:76:
         73:f7:10:69:c5:14:a0:41:4f:59:f6:a8:53:39:97:4e:e8:45:
         e4:b2:ee:a9:82:bd:1c:31:b4:c5:b1:98:7f:c8:0f:35:1c:c5:
         85:b0:9a:44:ba:8f:bb:c4:8f:31:6c:8c:f1:f6:f6:8a:4a:fc:
         96:4d:53:94:aa:c7:f0:9c:b9:99:58:2e:15:0a:4c:fe:ef:25:
         ad:b6:a0:8d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUX8oHXbeJmcsIDVTEu9x/ZyS0KdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjI3MzVaFw0yNTA0MDkxMjMyMzVaMDMxMTAvBgNV
BAMTKEIxNjc5MTNDMjYwMDdCNTUwNUYyNTZGNzY0RUU2QjYyRjU0NjAwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K0pESf5llIhSkBVcyAxYZiQI
a3lD2xtfJInC/rxl6Ccow/fSYyN8Rtg0m+1h+SdrswrRRlSgXLb09mk6zm/u/Sdp
CJqjf8l1h0/lbnm66lTP6ji4HmFbIXqW7FOmTLoi98GS4bVqKY16xIt1FyPKRGYx
53imX1aY4RGvioAl3x/plsiNGK1N0QNiqrkg9yHqGFihfwaQDOKzkQygDb7Fw5K1
+Wj1h/HFEDGJAe0UOYH/cdrSkdeh+ZDGYqXEuQX94jAQz3HJPtdT9KgaydiNPvr8
dr7yR09NLGAuLilLGr/TWn2KuSdUlaZioTnwrAPxwMTC2YEWLdbx44C98ChXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUsWeRPCYAe1UF8lb3ZO5rYvVGAL4wHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzOTMxMmUzNTJlMzgzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMjMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS/BVAwDQYJKoZIhvcNAQELBQADggEBAA+BoIFz5gHPP0x7
z/01Rtpfl09h6TVlxuRjK3GVjjDrnvAkEiaxitSbEo6Vkrwdl8B2RFUSmwoDPeK+
9T1gvNOH6VxDS1jiuX76QPFdReculMcJEYhnSLfqc1sM0tcePiOg2OKDs9+BUmCB
ee1x0a5DfuYDsOQi9FSeq5UbT61AKjWftKC8NAeVE8DunMWW+X/dfGr5Wy2hA/od
WW61yhjM5pFd9N7MejMnSVdg2KmQ5DSSdnP3EGnFFKBBT1n2qFM5l07oReSy7qmC
vRwxtMWxmH/IDzUcxYWwmkS6j7vEjzFsjPH29opK/JZNU5Sqx/CcuZlYLhUKTP7v
Ja22oI0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:11 2025 by rpki-client