Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          UpwD7jolwqpi6qn0listzPWLWHX61lmeltToCRCwsuM=
Subject key identifier:   06:E6:FB:A6:37:00:9D:4F:86:AB:C6:0B:E7:FA:EA:44:FF:5B:C1:64
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       7168E334D495B7CFC92EFA86DB0DE9BDD4DC3397
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
Signing time:             Wed 14 Sep 2022 12:46:34 +0000
ROA not before:           Wed 14 Sep 2022 12:41:34 +0000
ROA not after:            Wed 13 Sep 2023 12:46:34 +0000
asID:                     264485
IP address blocks:        189.91.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:e3:34:d4:95:b7:cf:c9:2e:fa:86:db:0d:e9:bd:d4:dc:33:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Sep 14 12:41:34 2022 GMT
            Not After : Sep 13 12:46:34 2023 GMT
        Subject: CN=06E6FBA637009D4F86ABC60BE7FAEA44FF5BC164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:56:a4:e3:ee:ed:e1:00:42:eb:ea:ae:2a:
                    a9:63:de:8b:e8:ec:f6:e2:4a:d9:b9:6e:51:76:ab:
                    1b:d3:df:68:18:21:64:aa:0e:44:71:5d:45:66:5a:
                    1f:f5:83:c4:92:cf:77:8e:61:be:0c:d8:44:aa:60:
                    b6:0d:b8:96:e9:50:70:99:6d:d8:a0:72:62:24:9e:
                    0e:e4:6b:1e:4b:f2:0b:21:3d:35:03:2e:c9:d7:79:
                    ee:b2:a2:d9:87:c5:af:7f:9f:fc:c5:08:c1:90:32:
                    a7:de:54:b9:cb:be:10:8e:6a:91:b6:19:76:b4:6c:
                    49:26:db:12:6f:9c:52:68:1f:a4:a1:c3:b1:a8:a9:
                    bd:75:94:f8:73:7c:a6:30:ab:eb:70:26:98:5c:61:
                    b6:d6:96:71:10:6b:27:a9:60:c2:c0:db:f6:60:ac:
                    6e:da:5e:96:f1:f4:b2:fa:89:82:88:98:c8:57:0f:
                    be:44:ed:a2:50:fd:ec:5c:8b:2d:89:16:79:f8:9a:
                    c8:5b:bb:e7:73:58:52:54:39:f5:7f:39:14:31:57:
                    f8:c2:a2:7d:16:23:59:1f:fa:28:be:d2:2d:06:79:
                    47:44:49:91:e5:1c:66:a6:0e:fc:ff:d0:38:d5:3c:
                    b7:f6:37:c1:fb:4b:7c:dd:ce:81:92:af:94:89:7a:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E6:FB:A6:37:00:9D:4F:86:AB:C6:0B:E7:FA:EA:44:FF:5B:C1:64
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:55:68:d3:92:d7:67:39:9a:5f:8b:ea:2e:df:b8:12:f6:
         e4:b0:42:25:e7:8a:6d:68:6c:5b:05:39:12:6a:89:8f:d8:e0:
         11:37:e9:4d:c1:7f:c9:e7:92:67:8b:2c:6f:52:34:93:c9:38:
         12:4f:eb:9e:90:11:27:7f:a6:d5:43:1c:f6:88:0d:b2:02:e5:
         2a:44:43:d6:32:d8:d4:e7:89:64:5d:5b:1b:48:3f:a2:f9:54:
         0d:04:dd:71:30:88:38:1c:ca:99:50:84:cc:cb:3a:10:c8:b9:
         c8:ea:c0:1a:f2:de:be:39:d2:af:f7:b9:88:fe:04:62:63:6e:
         ae:63:21:fd:9e:76:87:f6:ba:bf:e5:ee:d1:f7:64:ad:a5:09:
         5c:f4:2f:12:54:25:72:65:91:3a:b6:d9:88:ad:db:ed:47:5d:
         29:68:25:b0:14:52:7f:da:bd:dd:48:5b:d7:5d:de:ee:07:5c:
         b1:30:8c:49:24:6a:64:f7:58:00:51:04:d6:1b:7b:ad:67:30:
         2b:a0:b2:ea:07:67:83:f0:54:26:32:bc:eb:96:fa:dd:4d:89:
         32:df:af:72:dd:df:27:c4:df:d8:c0:7c:26:9f:fd:de:5c:29:
         27:4c:5b:c6:74:57:a7:f5:a2:33:fc:0b:44:36:d8:ff:da:20:
         62:c4:1b:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcWjjNNSVt8/JLvqG2w3pvdTcM5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFREVFODMyN0NBNUUyNTRCNjA4NEE2RUVGNjkwOTAw
RkRCRTg4NzAeFw0yMjA5MTQxMjQxMzRaFw0yMzA5MTMxMjQ2MzRaMDMxMTAvBgNV
BAMTKDA2RTZGQkE2MzcwMDlENEY4NkFCQzYwQkU3RkFFQTQ0RkY1QkMxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfVak4+7t4QBC6+quKqlj3ovo
7PbiStm5blF2qxvT32gYIWSqDkRxXUVmWh/1g8SSz3eOYb4M2ESqYLYNuJbpUHCZ
bdigcmIkng7kax5L8gshPTUDLsnXee6yotmHxa9/n/zFCMGQMqfeVLnLvhCOapG2
GXa0bEkm2xJvnFJoH6Shw7Goqb11lPhzfKYwq+twJphcYbbWlnEQayepYMLA2/Zg
rG7aXpbx9LL6iYKImMhXD75E7aJQ/exciy2JFnn4mshbu+dzWFJUOfV/ORQxV/jC
on0WI1kf+ii+0i0GeUdESZHlHGamDvz/0DjVPLf2N8H7S3zdzoGSr5SJeuvRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBub7pjcAnU+Gq8YL5/rqRP9bwWQwHwYDVR0j
BBgwFoAUbu3ugyfKXiVLYISm7vaQkA/b6IcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC82RUVERUU4MzI3Q0E1RTI1NEI2MDg0QTZFRUY2OTA5MDBGREJFODg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFRURFRTgzMjdDQTVFMjU0
QjYwODRBNkVFRjY5MDkwMEZEQkU4ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzODM5MmUzOTMxMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9W50wDQYJKoZIhvcNAQELBQADggEBAF2BVWjT
ktdnOZpfi+ou37gS9uSwQiXnim1obFsFORJqiY/Y4BE36U3Bf8nnkmeLLG9SNJPJ
OBJP656QESd/ptVDHPaIDbIC5SpEQ9Yy2NTniWRdWxtIP6L5VA0E3XEwiDgcyplQ
hMzLOhDIucjqwBry3r450q/3uYj+BGJjbq5jIf2edof2ur/l7tH3ZK2lCVz0LxJU
JXJlkTq22Yit2+1HXSloJbAUUn/avd1IW9dd3u4HXLEwjEkkamT3WABRBNYbe61n
MCugsuoHZ4PwVCYyvOuW+t1NiTLfr3Ld3yfE39jAfCaf/d5cKSdMW8Z0V6f1ojP8
C0Q22P/aIGLEG0o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org