Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323033.roa
File:                     3139312e3234312e36342e302f32302d3332203d3e20323033.roa (raw, json)
Hash identifier:          CpdrXuSlmJQ9NNlkIwg0Qc1Zdp1Xw/RiWT1/H04mEs0=
Subject key identifier:   C0:39:19:D6:16:A7:89:BA:4E:5E:6B:D2:87:4C:38:32:CB:DC:CB:E1
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       6B1B92325E039BE110AD784BB435BFEE9C67F0B5
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323033.roa
Signing time:             Sat 21 Jan 2023 22:22:35 +0000
ROA not before:           Sat 21 Jan 2023 22:17:35 +0000
ROA not after:            Sat 20 Jan 2024 22:22:35 +0000
asID:                     203
IP address blocks:        191.241.64.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:92:32:5e:03:9b:e1:10:ad:78:4b:b4:35:bf:ee:9c:67:f0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:35 2023 GMT
            Not After : Jan 20 22:22:35 2024 GMT
        Subject: CN=C03919D616A789BA4E5E6BD2874C3832CBDCCBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:b6:69:f3:1f:1b:57:80:6c:10:db:a5:e6:
                    6c:15:b0:a3:d8:73:e4:7e:51:ea:70:f6:ab:49:7e:
                    69:2e:70:cc:f6:49:87:81:e3:c9:1f:a1:f7:53:0f:
                    e1:6a:a0:d2:ef:78:5a:5b:df:14:a6:96:ce:99:b2:
                    ce:63:90:20:2c:07:60:73:a5:21:4c:ee:d9:3c:c4:
                    d1:c4:8a:ec:d3:5f:4c:dc:cd:65:99:80:80:9d:69:
                    b7:dd:ef:3d:4a:48:99:d2:9e:36:8e:03:ba:38:7d:
                    ae:a0:6b:39:b5:2d:b2:1d:29:14:81:f4:f7:24:ee:
                    e9:36:51:e3:c6:bd:31:c8:ab:03:3b:47:85:1e:0c:
                    ea:03:1d:4b:b2:b0:ee:06:2a:19:34:76:de:f1:07:
                    f3:1c:49:ac:db:d4:71:ce:2d:0b:4e:69:55:2d:37:
                    80:75:26:c1:a4:df:02:dc:bf:cb:18:79:99:df:74:
                    77:c8:2d:80:6d:2b:58:a9:77:6a:dc:a3:69:d3:93:
                    19:c8:7f:d7:db:28:9e:98:1d:03:65:94:48:91:61:
                    94:c4:8d:2d:71:e5:ed:95:3e:f2:fb:d7:6b:c8:d1:
                    3d:71:3e:7f:c2:44:92:0c:e4:b3:f0:e5:ad:c3:d0:
                    bf:68:21:4c:50:f5:73:d8:45:36:d2:7a:8e:ff:58:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:19:D6:16:A7:89:BA:4E:5E:6B:D2:87:4C:38:32:CB:DC:CB:E1
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:a0:65:37:e0:7a:63:0f:4d:70:37:a6:f0:f7:22:ee:0b:
         bc:b0:28:9f:fd:b1:33:a0:1e:1d:25:b1:c1:7d:e9:84:cd:99:
         2e:36:27:64:81:d9:a5:66:1a:31:47:da:94:35:07:63:0c:60:
         08:52:5c:09:2e:c9:24:8e:6c:96:c8:e9:17:0a:66:ee:26:65:
         29:f3:ec:16:ec:26:0e:32:d6:a5:84:43:eb:f2:77:49:9d:22:
         c5:2d:9f:60:74:fe:cc:a1:3b:1d:0b:38:b4:8f:dd:25:a6:95:
         35:5a:09:8f:0e:43:31:e3:f5:ff:42:dc:65:09:94:3a:58:5e:
         41:20:b9:60:73:21:64:f8:9b:56:09:58:8c:07:63:d5:f9:d9:
         13:96:d9:07:8e:02:5e:dd:89:5b:f4:1c:2f:65:7b:26:a2:e1:
         0e:fa:71:c0:a8:99:68:3c:39:11:dd:bc:98:c3:98:1b:e5:57:
         4a:4b:25:c4:d7:f2:84:2d:bc:94:b1:bd:d4:6d:01:4a:bc:f4:
         f5:1b:23:8a:f9:39:f5:24:7d:c9:81:75:61:16:97:0f:83:8a:
         a4:1e:fb:9b:c2:cc:0a:cd:0e:5f:b4:39:78:65:1a:2c:e1:37:
         3c:94:c8:6f:7d:7c:e8:54:b3:c6:52:b0:31:e3:c0:93:1d:c4:
         45:71:99:20
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUaxuSMl4Dm+EQrXhLtDW/7pxn8LUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCNUE5NkM3NzQzOTM5QzMwM0VERDdGMkQzQ0M0QUI5
QzVEQjlGQTAeFw0yMzAxMjEyMjE3MzVaFw0yNDAxMjAyMjIyMzVaMDMxMTAvBgNV
BAMTKEMwMzkxOUQ2MTZBNzg5QkE0RTVFNkJEMjg3NEMzODMyQ0JEQ0NCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICrZp8x8bV4BsENul5mwVsKPY
c+R+Uepw9qtJfmkucMz2SYeB48kfofdTD+FqoNLveFpb3xSmls6Zss5jkCAsB2Bz
pSFM7tk8xNHEiuzTX0zczWWZgICdabfd7z1KSJnSnjaOA7o4fa6gazm1LbIdKRSB
9Pck7uk2UePGvTHIqwM7R4UeDOoDHUuysO4GKhk0dt7xB/McSazb1HHOLQtOaVUt
N4B1JsGk3wLcv8sYeZnfdHfILYBtK1ipd2rco2nTkxnIf9fbKJ6YHQNllEiRYZTE
jS1x5e2VPvL712vI0T1xPn/CRJIM5LPw5a3D0L9oIUxQ9XPYRTbSeo7/WKbhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUwDkZ1hanibpOXmvSh0w4Msvcy+EwHwYDVR0j
BBgwFoAUlbWpbHdDk5wwPt1/LTzEq5xdufowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMC85NUI1QTk2Qzc3NDM5MzlDMzAzRUREN0YyRDNDQzRBQjlDNURCOUZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1QjVBOTZDNzc0MzkzOUMz
MDNFREQ3RjJEM0NDNEFCOUM1REI5RkEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzAv
MzEzOTMxMmUzMjM0MzEyZTM2MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjMw
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAS/8UAwDQYJKoZIhvcNAQELBQADggEBAFpioGU34HpjD01w
N6bw9yLuC7ywKJ/9sTOgHh0lscF96YTNmS42J2SB2aVmGjFH2pQ1B2MMYAhSXAku
ySSObJbI6RcKZu4mZSnz7BbsJg4y1qWEQ+vyd0mdIsUtn2B0/syhOx0LOLSP3SWm
lTVaCY8OQzHj9f9C3GUJlDpYXkEguWBzIWT4m1YJWIwHY9X52ROW2QeOAl7diVv0
HC9leyai4Q76ccComWg8ORHdvJjDmBvlV0pLJcTX8oQtvJSxvdRtAUq89PUbI4r5
OfUkfcmBdWEWlw+DiqQe+5vCzArNDl+0OXhlGizhNzyUyG99fOhUs8ZSsDHjwJMd
xEVxmSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org