Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32322d3232203d3e20323633353431.roa
File:                     3139312e3234312e32302e302f32322d3232203d3e20323633353431.roa (raw, json)
Hash identifier:          R5+qktjJhZ6T+LoC5HuHb7y/vKlmnVuElFbNZhkRO/E=
Subject key identifier:   6A:6D:91:86:95:19:66:41:B1:DE:37:EE:96:34:00:A2:10:97:0D:88
Certificate issuer:       /CN=5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4
Certificate serial:       77769DFEB15BF7A295D7A528202F411E59987F03
Authority key identifier: 5B:6F:84:59:FD:B5:62:D8:7F:84:F8:9C:68:6E:F8:B8:6F:5F:D1:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32322d3232203d3e20323633353431.roa
Signing time:             Tue 21 Mar 2023 13:01:57 +0000
ROA not before:           Tue 21 Mar 2023 12:56:57 +0000
ROA not after:            Tue 19 Mar 2024 13:01:57 +0000
asID:                     263541
IP address blocks:        191.241.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:9d:fe:b1:5b:f7:a2:95:d7:a5:28:20:2f:41:1e:59:98:7f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4
        Validity
            Not Before: Mar 21 12:56:57 2023 GMT
            Not After : Mar 19 13:01:57 2024 GMT
        Subject: CN=6A6D918695196641B1DE37EE963400A210970D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:f3:88:34:4b:fb:10:7e:72:86:f5:22:9a:
                    11:ed:bb:01:21:18:b8:47:84:cb:16:d6:ba:3e:8c:
                    75:67:85:64:41:be:f9:68:eb:8c:1b:15:b2:29:65:
                    2d:f3:34:01:88:69:dc:91:ae:ca:dd:90:f6:19:9c:
                    59:42:38:ff:c7:f1:fb:c2:5d:ff:e2:f5:2e:f5:6c:
                    a4:4d:2d:10:26:99:a5:bd:23:20:4e:2e:92:9f:16:
                    20:4e:ad:cb:13:bf:d9:38:78:bf:c0:88:58:8c:48:
                    d2:cd:26:a5:3c:97:72:1b:e5:a8:69:ba:68:fb:18:
                    ac:c6:50:ba:2b:25:64:8e:bd:55:e8:70:8b:bf:26:
                    8b:77:29:ac:04:14:20:9e:f2:eb:8a:9f:b3:52:59:
                    32:12:ce:00:f5:43:42:27:78:df:eb:1c:3a:54:e7:
                    61:24:5e:5f:9d:11:ca:ed:f9:6e:b8:5b:90:4b:2b:
                    d0:16:6f:4b:03:89:9d:bc:3d:51:39:22:4c:37:5b:
                    aa:62:a2:81:67:54:f3:49:48:51:76:c2:07:98:b0:
                    12:ab:da:0d:6f:81:27:65:c5:d9:4c:e5:6f:88:43:
                    4d:12:c4:26:13:5e:b4:59:59:3d:43:d2:ca:ea:9f:
                    31:db:4d:b0:bb:57:8d:41:26:05:86:5b:3b:f8:81:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:91:86:95:19:66:41:B1:DE:37:EE:96:34:00:A2:10:97:0D:88
            X509v3 Authority Key Identifier:
                keyid:5B:6F:84:59:FD:B5:62:D8:7F:84:F8:9C:68:6E:F8:B8:6F:5F:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32322d3232203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:ba:7c:d8:41:c5:23:c9:a7:4b:60:2a:e4:c7:42:26:21:
         1e:1f:aa:f2:67:40:55:94:42:02:c8:49:7a:03:fa:c2:d7:1c:
         d0:92:54:fa:b6:f4:65:51:2a:72:b8:0c:bb:fa:bb:55:5a:3e:
         56:2b:fd:42:29:7b:7c:87:84:16:c5:49:00:14:f3:fe:9d:ba:
         40:b2:10:a6:8e:7b:eb:7a:58:b3:3d:12:f3:d1:6c:43:3c:c7:
         7b:63:3c:54:5d:80:88:5d:e2:5f:4f:10:97:d9:f6:54:ee:9a:
         5d:48:b3:d8:cb:e7:3c:4d:37:42:38:ef:0d:1c:65:29:1c:95:
         1b:f2:0b:c4:31:6a:b1:cc:51:5d:3e:76:26:07:f2:9f:b6:b0:
         8b:cf:62:a4:87:af:58:7e:0d:91:47:99:30:e3:7b:c9:43:a1:
         1e:a7:c6:83:48:91:d0:2b:f2:d2:23:c8:3d:c6:b3:98:cb:45:
         9e:4d:64:26:c8:dd:4b:81:fb:92:d2:89:f1:84:81:67:ef:c6:
         e4:0e:5a:e9:e8:32:c1:30:9b:80:c8:7b:8f:50:c3:ec:47:a6:
         71:16:38:34:16:e1:21:5b:a2:e3:a3:eb:95:25:ce:8a:70:d6:
         24:b9:d9:83:b5:b0:e9:1a:63:4d:68:eb:a8:04:40:27:f2:e0:
         06:19:c0:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd3ad/rFb96KV16UoIC9BHlmYfwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI2Rjg0NTlGREI1NjJEODdGODRGODlDNjg2RUY4Qjg2
RjVGRDFDNDAeFw0yMzAzMjExMjU2NTdaFw0yNDAzMTkxMzAxNTdaMDMxMTAvBgNV
BAMTKDZBNkQ5MTg2OTUxOTY2NDFCMURFMzdFRTk2MzQwMEEyMTA5NzBEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbPOINEv7EH5yhvUimhHtuwEh
GLhHhMsW1ro+jHVnhWRBvvlo64wbFbIpZS3zNAGIadyRrsrdkPYZnFlCOP/H8fvC
Xf/i9S71bKRNLRAmmaW9IyBOLpKfFiBOrcsTv9k4eL/AiFiMSNLNJqU8l3Ib5ahp
umj7GKzGULorJWSOvVXocIu/Jot3KawEFCCe8uuKn7NSWTISzgD1Q0IneN/rHDpU
52EkXl+dEcrt+W64W5BLK9AWb0sDiZ28PVE5Ikw3W6piooFnVPNJSFF2wgeYsBKr
2g1vgSdlxdlM5W+IQ00SxCYTXrRZWT1D0srqnzHbTbC7V41BJgWGWzv4gfnjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUam2RhpUZZkGx3jfuljQAohCXDYgwHwYDVR0j
BBgwFoAUW2+EWf21Yth/hPicaG74uG9f0cQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC81QjZGODQ1OUZEQjU2MkQ4N0Y4NEY4OUM2ODZFRjhCODZGNUZEMUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNkY4NDU5RkRCNTYyRDg3
Rjg0Rjg5QzY4NkVGOEI4NkY1RkQxQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzEzOTMxMmUzMjM0MzEyZTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK/8RQwDQYJKoZIhvcNAQELBQADggEBAA50unzY
QcUjyadLYCrkx0ImIR4fqvJnQFWUQgLISXoD+sLXHNCSVPq29GVRKnK4DLv6u1Va
PlYr/UIpe3yHhBbFSQAU8/6dukCyEKaOe+t6WLM9EvPRbEM8x3tjPFRdgIhd4l9P
EJfZ9lTuml1Is9jL5zxNN0I47w0cZSkclRvyC8QxarHMUV0+diYH8p+2sIvPYqSH
r1h+DZFHmTDje8lDoR6nxoNIkdAr8tIjyD3Gs5jLRZ5NZCbI3UuB+5LSifGEgWfv
xuQOWunoMsEwm4DIe49Qw+xHpnEWODQW4SFbouOj65Ulzopw1iS52YO1sOkaY01o
66gEQCfy4AYZwCY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org