Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35352e302f32342d3234203d3e20323633353332.roa
File:                     3139312e352e35352e302f32342d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          1RV6RasbMvD0GG+oSOsgk0M84zEhSumIwyMrbH2EVw4=
Subject key identifier:   2F:3A:FF:79:7C:D3:64:64:51:79:77:59:9E:83:0D:7D:85:35:3B:7C
Certificate issuer:       /CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
Certificate serial:       121DF23BB41B41D9E4789B7AF1C69F95E697DBE3
Authority key identifier: BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35352e302f32342d3234203d3e20323633353332.roa
Signing time:             Tue 12 Apr 2022 17:49:28 +0000
ROA not before:           Tue 12 Apr 2022 17:44:28 +0000
ROA not after:            Tue 11 Apr 2023 17:49:28 +0000
asID:                     263532
IP address blocks:        191.5.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:f2:3b:b4:1b:41:d9:e4:78:9b:7a:f1:c6:9f:95:e6:97:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
        Validity
            Not Before: Apr 12 17:44:28 2022 GMT
            Not After : Apr 11 17:49:28 2023 GMT
        Subject: CN=2F3AFF797CD36464517977599E830D7D85353B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:e1:e8:54:54:cd:f2:ee:2f:c2:1c:bc:8f:
                    0b:99:0f:38:2b:18:34:f1:3c:67:f9:34:e2:31:70:
                    d2:d4:83:5b:f7:87:65:d1:2c:d3:1f:f5:5e:5b:2d:
                    87:52:7b:24:7c:27:e0:7b:15:0d:34:7f:54:5e:6e:
                    c3:f7:5e:f8:1d:e7:00:ed:61:7d:e7:b8:c3:53:a3:
                    19:b4:59:93:7e:6e:19:42:80:83:ef:18:d7:3b:86:
                    83:d8:b6:0f:7a:f0:2f:14:09:7e:50:cb:cd:26:8e:
                    fb:f2:32:18:b0:1a:34:00:9a:bc:47:ad:1a:f8:46:
                    2e:d3:23:7e:46:eb:90:ff:1e:5f:7e:02:bc:5d:4d:
                    c5:7b:d3:3a:87:0c:e2:85:63:1c:89:43:c5:78:1b:
                    f7:3a:44:c7:eb:45:a9:23:f3:6b:67:7b:52:a8:9d:
                    72:23:16:fc:6c:ce:b7:d4:24:f1:78:27:02:de:61:
                    7a:b3:eb:53:96:b0:e0:64:70:82:3a:ab:4e:5c:45:
                    0f:1e:bb:81:68:1e:eb:55:07:3b:c8:89:b4:d6:ac:
                    c8:2f:db:cf:a7:63:a5:a3:db:14:52:4c:30:49:b3:
                    ba:27:c0:a0:6b:0d:3d:ba:ea:fb:37:71:c9:a1:67:
                    b0:d9:bc:9a:f3:99:8b:12:82:f7:f2:63:75:f4:37:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3A:FF:79:7C:D3:64:64:51:79:77:59:9E:83:0D:7D:85:35:3B:7C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35352e302f32342d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:fa:22:12:79:c9:e4:6e:05:c5:24:ef:73:2c:c3:55:a0:
         c1:e8:49:23:d0:f6:ca:92:f5:92:8e:da:ae:5e:e7:78:15:f2:
         4b:04:4c:99:26:e8:bf:bb:8c:68:31:ab:5f:f3:97:f4:01:88:
         a2:f3:47:c6:6f:ad:6b:36:a4:e8:e9:73:fb:eb:2e:28:77:d7:
         b9:0b:c1:bb:cc:cb:6d:c9:88:67:7c:b0:94:d7:88:d3:f6:e6:
         f6:6d:ee:d1:eb:f8:cf:5e:26:22:27:11:dc:96:d3:da:76:6e:
         3a:26:a6:d0:aa:ac:ef:1e:4d:21:29:96:3e:30:2f:8f:f6:1b:
         85:88:a4:4f:fa:ae:3f:12:2c:af:75:f3:e7:1e:50:76:b1:87:
         7e:8f:ab:05:81:24:06:3b:b9:3a:15:7b:f3:3a:bf:ab:c0:13:
         5c:d1:d5:19:fd:ac:f9:c3:6f:37:46:eb:4a:83:60:63:7d:0b:
         e3:7b:7a:a4:96:0c:0d:78:ad:bc:8d:0f:04:20:ca:eb:2b:bf:
         4f:49:7d:43:c3:89:1c:0c:98:a5:ff:f5:cf:c6:41:9e:9e:79:
         a1:db:e1:7a:22:14:af:79:1d:dd:06:c1:7f:f4:68:ee:ad:64:
         14:2d:62:b1:76:5b:9c:e6:81:78:1c:5b:d4:19:c0:f2:ed:ef:
         6d:03:b8:b8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEh3yO7QbQdnkeJt68cafleaX2+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE4RjJFQUExMDgwRjZGQUM0RjVEQUI2QjlFNDNGOEU2
QUNDNjYzQTAeFw0yMjA0MTIxNzQ0MjhaFw0yMzA0MTExNzQ5MjhaMDMxMTAvBgNV
BAMTKDJGM0FGRjc5N0NEMzY0NjQ1MTc5Nzc1OTlFODMwRDdEODUzNTNCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIeHoVFTN8u4vwhy8jwuZDzgr
GDTxPGf5NOIxcNLUg1v3h2XRLNMf9V5bLYdSeyR8J+B7FQ00f1RebsP3Xvgd5wDt
YX3nuMNToxm0WZN+bhlCgIPvGNc7hoPYtg968C8UCX5Qy80mjvvyMhiwGjQAmrxH
rRr4Ri7TI35G65D/Hl9+ArxdTcV70zqHDOKFYxyJQ8V4G/c6RMfrRakj82tne1Ko
nXIjFvxszrfUJPF4JwLeYXqz61OWsOBkcII6q05cRQ8eu4FoHutVBzvIibTWrMgv
28+nY6Wj2xRSTDBJs7onwKBrDT266vs3ccmhZ7DZvJrzmYsSgvfyY3X0N1RbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULzr/eXzTZGRReXdZnoMNfYU1O3wwHwYDVR0j
BBgwFoAUuo8uqhCA9vrE9dq2ueQ/jmrMZjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRy
VkgvMC9CQThGMkVBQTEwODBGNkZBQzRGNURBQjZCOUU0M0Y4RTZBQ0M2NjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBOEYyRUFBMTA4MEY2RkFD
NEY1REFCNkI5RTQzRjhFNkFDQzY2M0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwb3c3dHlEdlBBNjIxVTdySnBvQ2lFRkY2cFdWNW03Y1doVDltc2o0clZILzAv
MzEzOTMxMmUzNTJlMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM1
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL8FNzANBgkqhkiG9w0BAQsFAAOCAQEAcW36IhJ5yeRu
BcUk73Msw1WgwehJI9D2ypL1ko7arl7neBXySwRMmSbov7uMaDGrX/OX9AGIovNH
xm+tazak6Olz++suKHfXuQvBu8zLbcmIZ3ywlNeI0/bm9m3u0ev4z14mIicR3JbT
2nZuOiam0Kqs7x5NISmWPjAvj/YbhYikT/quPxIsr3Xz5x5QdrGHfo+rBYEkBju5
OhV78zq/q8ATXNHVGf2s+cNvN0brSoNgY30L43t6pJYMDXitvI0PBCDK6yu/T0l9
Q8OJHAyYpf/1z8ZBnp55odvheiIUr3kd3QbBf/Ro7q1kFC1isXZbnOaBeBxb1BnA
8u3vbQO4uA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org