Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa
File:                     3139312e372e37322e302f32312d3234203d3e203533313330.roa (raw, json)
Hash identifier:          smhAmgPQVJBlJn19u02V1iDZyz7cwnxglUfl6rB1YTY=
Subject key identifier:   89:1F:9F:DB:AA:9E:0C:19:86:8C:4A:CD:80:24:73:B5:5D:82:10:BB
Certificate issuer:       /CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
Certificate serial:       078B0CB0205153DBD44193C7E29B34F14C22D40F
Authority key identifier: 6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa
Signing time:             Thu 24 Aug 2023 15:04:07 +0000
ROA not before:           Thu 24 Aug 2023 14:59:07 +0000
ROA not after:            Thu 22 Aug 2024 15:04:07 +0000
asID:                     53130
IP address blocks:        191.7.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8b:0c:b0:20:51:53:db:d4:41:93:c7:e2:9b:34:f1:4c:22:d4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
        Validity
            Not Before: Aug 24 14:59:07 2023 GMT
            Not After : Aug 22 15:04:07 2024 GMT
        Subject: CN=891F9FDBAA9E0C19868C4ACD802473B55D8210BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:2a:94:92:4a:7f:1f:3d:8d:79:38:74:78:
                    e7:92:75:33:e8:26:2c:00:ec:92:fc:e5:a6:c2:51:
                    2c:20:97:5f:cc:41:ee:82:be:27:a7:16:be:53:d1:
                    80:50:06:76:a2:26:e2:2e:48:94:a0:2b:0e:c1:0f:
                    98:8c:be:c4:22:4d:3f:e0:1e:11:57:56:27:7f:5e:
                    15:62:b4:0a:18:5d:f3:61:f7:68:16:5c:09:ed:a2:
                    6d:fe:3d:3a:86:84:5e:98:ab:d2:c5:ff:4f:80:31:
                    90:93:83:c8:3c:da:84:6d:ae:1c:ed:1a:85:1f:18:
                    af:5f:6f:e6:43:3f:df:1e:ba:10:6f:9a:c7:e9:a6:
                    29:29:91:ae:d4:6b:d3:64:62:f0:e7:40:1c:ba:ae:
                    cf:ce:ab:c7:ae:aa:70:7d:6e:72:01:b3:f4:c4:78:
                    c0:86:3e:65:85:5c:77:45:62:c5:52:02:4a:70:03:
                    48:9d:fe:74:eb:9e:7b:21:88:dd:c0:58:a7:48:71:
                    eb:fb:39:f3:e8:12:fa:49:55:3d:9c:bf:fb:d5:7d:
                    a7:f2:ad:ea:75:57:37:46:9e:a1:c3:2d:e7:11:5f:
                    98:d3:86:cd:af:cf:42:50:31:d9:d0:5b:f8:1b:8f:
                    1f:da:17:34:91:04:0e:a0:84:28:2f:49:17:2f:81:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1F:9F:DB:AA:9E:0C:19:86:8C:4A:CD:80:24:73:B5:5D:82:10:BB
            X509v3 Authority Key Identifier:
                keyid:6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3139312e372e37322e302f32312d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:ec:c7:e6:b2:57:c6:c2:c6:ea:79:50:50:2b:16:a6:4a:
         d2:84:08:4a:87:d0:77:2a:b8:57:38:56:90:9c:5a:ad:78:a8:
         85:65:d2:7f:5b:db:1b:b2:c6:c9:38:c7:a4:83:f1:86:94:b8:
         bb:fd:27:71:09:d6:da:fa:ca:ef:81:a0:36:71:ed:15:81:9d:
         16:ee:b7:62:ea:0c:b2:73:92:d7:d2:87:77:aa:1c:a0:25:bb:
         d8:ac:42:10:66:42:9a:b0:7d:de:f3:c2:5c:03:72:85:75:88:
         3f:a8:34:93:5a:39:a2:10:ca:c9:29:a1:65:af:38:ab:e1:bf:
         25:88:aa:85:4a:58:1a:53:cf:a8:03:3d:05:39:e1:55:d4:79:
         f9:d7:1d:74:2f:14:a6:51:7e:db:46:fd:56:2d:c4:7b:6c:ec:
         6e:63:6f:51:9b:7a:9f:dd:cf:9b:a9:c2:96:57:91:0a:6c:24:
         db:16:f5:1e:a3:54:e2:a9:3b:fd:75:2f:f0:06:26:38:1d:8b:
         72:2a:3f:24:3c:d4:36:d9:25:68:67:ce:f8:be:0e:e9:0c:20:
         71:82:cb:4a:25:46:5b:5b:a5:74:4c:45:8d:d5:69:5f:52:ea:
         12:92:81:63:05:d7:ec:59:b6:78:57:53:37:d4:82:f0:10:02:
         87:8d:f1:c4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUB4sMsCBRU9vUQZPH4ps08Uwi1A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYwN0RBMDQxMjQ1Q0VCRDVGMDBDQkQ0QUREQTVDRENB
N0VFREU1QzAeFw0yMzA4MjQxNDU5MDdaFw0yNDA4MjIxNTA0MDdaMDMxMTAvBgNV
BAMTKDg5MUY5RkRCQUE5RTBDMTk4NjhDNEFDRDgwMjQ3M0I1NUQ4MjEwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFCqUkkp/Hz2NeTh0eOeSdTPo
JiwA7JL85abCUSwgl1/MQe6CvienFr5T0YBQBnaiJuIuSJSgKw7BD5iMvsQiTT/g
HhFXVid/XhVitAoYXfNh92gWXAntom3+PTqGhF6Yq9LF/0+AMZCTg8g82oRtrhzt
GoUfGK9fb+ZDP98euhBvmsfppikpka7Ua9NkYvDnQBy6rs/Oq8euqnB9bnIBs/TE
eMCGPmWFXHdFYsVSAkpwA0id/nTrnnshiN3AWKdIcev7OfPoEvpJVT2cv/vVfafy
rep1VzdGnqHDLecRX5jThs2vz0JQMdnQW/gbjx/aFzSRBA6ghCgvSRcvgVhTAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUiR+f26qeDBmGjErNgCRztV2CELswHwYDVR0j
BBgwFoAUbwfaBBJFzr1fAMvUrdpc3Kfu3lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM
NlovMC82RjA3REEwNDEyNDVDRUJENUYwMENCRDRBRERBNUNEQ0E3RUVERTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGMDdEQTA0MTI0NUNFQkQ1
RjAwQ0JENEFEREE1Q0RDQTdFRURFNUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RSOEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzAv
MzEzOTMxMmUzNzJlMzczMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzMzMTMz
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO/B0gwDQYJKoZIhvcNAQELBQADggEBAKXV7MfmslfGwsbq
eVBQKxamStKECEqH0HcquFc4VpCcWq14qIVl0n9b2xuyxsk4x6SD8YaUuLv9J3EJ
1tr6yu+BoDZx7RWBnRbut2LqDLJzktfSh3eqHKAlu9isQhBmQpqwfd7zwlwDcoV1
iD+oNJNaOaIQyskpoWWvOKvhvyWIqoVKWBpTz6gDPQU54VXUefnXHXQvFKZRfttG
/VYtxHts7G5jb1Gbep/dz5upwpZXkQpsJNsW9R6jVOKpO/11L/AGJjgdi3IqPyQ8
1DbZJWhnzvi+DukMIHGCy0olRltbpXRMRY3VaV9S6hKSgWMF1+xZtnhXUzfUgvAQ
AoeN8cQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org