Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          QXc1sG8sR04E0dOmQXbJgjSRL6AlXrHtu7DOT7O3gOU=
Subject key identifier:   77:A2:59:EC:E6:CF:8E:35:08:A1:A6:0B:29:79:6A:BE:EF:3D:A6:EF
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       52597BE8DACCD3C31C683A1A606F4971B6F6E145
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
Signing time:             Wed 14 Sep 2022 12:46:30 +0000
ROA not before:           Wed 14 Sep 2022 12:41:30 +0000
ROA not after:            Wed 13 Sep 2023 12:46:30 +0000
asID:                     264485
IP address blocks:        189.91.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:59:7b:e8:da:cc:d3:c3:1c:68:3a:1a:60:6f:49:71:b6:f6:e1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Sep 14 12:41:30 2022 GMT
            Not After : Sep 13 12:46:30 2023 GMT
        Subject: CN=77A259ECE6CF8E3508A1A60B29796ABEEF3DA6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:f3:7c:c5:d3:69:6b:df:4e:2d:6f:a4:10:
                    e5:04:66:86:b4:bb:83:63:7f:73:1a:e7:7d:a4:94:
                    a5:7d:b3:b6:fe:af:c1:6c:1e:f6:34:0a:5e:a8:2a:
                    92:ba:4b:22:9a:8a:3c:b7:18:a2:4f:8a:9c:23:2e:
                    b3:bf:41:6a:e3:90:93:09:e2:b9:91:21:b9:a1:e4:
                    21:87:c5:da:90:4f:1f:76:e9:58:e1:a8:7b:7b:e1:
                    c7:c8:cb:4f:31:e6:49:e0:7b:44:0c:60:61:93:9f:
                    2d:0f:c2:80:dd:c8:c4:f2:f9:45:08:a0:27:f6:3d:
                    92:51:54:5b:79:09:7c:77:f3:4e:80:cf:70:40:25:
                    73:18:38:9f:4a:e3:14:92:e9:0f:d4:c3:77:1d:79:
                    14:5c:75:43:02:40:8e:50:2f:8d:57:3d:b2:73:5a:
                    92:a8:05:cf:ad:44:62:11:53:4d:70:18:2d:9a:4c:
                    fe:33:46:1f:db:0b:eb:50:db:7f:33:40:46:df:8f:
                    00:24:9e:5a:53:d7:f9:ed:20:3e:f4:51:d6:b5:f1:
                    d5:77:07:66:de:ab:23:eb:9c:35:b9:4c:6e:d4:1d:
                    69:e9:bc:30:e8:7d:19:ab:55:be:6e:5a:d1:1a:d7:
                    38:7e:6a:e3:3d:c8:25:90:73:bf:43:32:ac:3c:3f:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:59:EC:E6:CF:8E:35:08:A1:A6:0B:29:79:6A:BE:EF:3D:A6:EF
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:99:1e:4a:69:5d:65:9c:f3:1a:ba:42:48:12:43:f5:09:
         a5:9c:38:c5:82:27:d6:d2:c7:48:84:d4:6c:a7:e0:a5:ab:77:
         1c:dd:75:61:87:c3:33:05:79:d3:95:be:6f:4a:6e:89:15:50:
         5d:36:60:4a:e5:9e:cf:1c:6d:b0:2b:22:a5:89:bf:f8:0f:59:
         f2:ef:50:e2:d6:ff:6d:6a:37:87:70:1b:6a:95:7d:0b:c8:b5:
         d1:16:aa:b4:08:11:0a:62:fb:42:5a:7a:78:48:1f:04:29:b3:
         62:64:68:f4:5e:a9:b6:3f:c0:99:c8:09:3e:0d:a5:dd:d2:69:
         ba:aa:1e:b8:e0:2e:5a:02:fb:aa:58:16:5d:23:88:11:1d:92:
         d5:81:14:24:8d:40:77:96:75:5c:e6:ab:37:7c:f6:5f:58:a0:
         28:6b:6e:07:4c:99:c7:8b:f5:51:d6:ae:2e:9a:42:e4:45:da:
         e2:a4:9a:36:2c:ec:cc:94:10:d4:b0:43:39:8f:af:7b:32:13:
         d2:ef:33:8c:b1:79:a6:d0:e6:26:be:b4:89:de:97:90:fb:3d:
         3a:17:f0:ae:88:2c:08:3d:a2:13:e6:5e:01:50:01:4f:8c:6b:
         e8:b4:e1:5a:c0:6b:b9:4d:8a:68:3a:8b:85:8c:92:b8:9b:d6:
         0a:2e:a1:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUll76NrM08McaDoaYG9Jcbb24UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFREVFODMyN0NBNUUyNTRCNjA4NEE2RUVGNjkwOTAw
RkRCRTg4NzAeFw0yMjA5MTQxMjQxMzBaFw0yMzA5MTMxMjQ2MzBaMDMxMTAvBgNV
BAMTKDc3QTI1OUVDRTZDRjhFMzUwOEExQTYwQjI5Nzk2QUJFRUYzREE2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOvN8xdNpa99OLW+kEOUEZoa0
u4Njf3Ma532klKV9s7b+r8FsHvY0Cl6oKpK6SyKaijy3GKJPipwjLrO/QWrjkJMJ
4rmRIbmh5CGHxdqQTx926VjhqHt74cfIy08x5knge0QMYGGTny0PwoDdyMTy+UUI
oCf2PZJRVFt5CXx3806Az3BAJXMYOJ9K4xSS6Q/Uw3cdeRRcdUMCQI5QL41XPbJz
WpKoBc+tRGIRU01wGC2aTP4zRh/bC+tQ238zQEbfjwAknlpT1/ntID70Uda18dV3
B2beqyPrnDW5TG7UHWnpvDDofRmrVb5uWtEa1zh+auM9yCWQc79DMqw8PwT1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd6JZ7ObPjjUIoaYLKXlqvu89pu8wHwYDVR0j
BBgwFoAUbu3ugyfKXiVLYISm7vaQkA/b6IcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC82RUVERUU4MzI3Q0E1RTI1NEI2MDg0QTZFRUY2OTA5MDBGREJFODg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFRURFRTgzMjdDQTVFMjU0
QjYwODRBNkVFRjY5MDkwMEZEQkU4ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzODM5MmUzOTMxMmUzMTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9W5gwDQYJKoZIhvcNAQELBQADggEBAC5PmR5K
aV1lnPMaukJIEkP1CaWcOMWCJ9bSx0iE1Gyn4KWrdxzddWGHwzMFedOVvm9KbokV
UF02YErlns8cbbArIqWJv/gPWfLvUOLW/21qN4dwG2qVfQvItdEWqrQIEQpi+0Ja
enhIHwQps2JkaPReqbY/wJnICT4Npd3SabqqHrjgLloC+6pYFl0jiBEdktWBFCSN
QHeWdVzmqzd89l9YoChrbgdMmceL9VHWri6aQuRF2uKkmjYs7MyUENSwQzmPr3sy
E9LvM4yxeabQ5ia+tInel5D7PToX8K6ILAg9ohPmXgFQAU+Ma+i04VrAa7lNimg6
i4WMkrib1gouof4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org