Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa
File:                     3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (raw, json)
Hash identifier:          nV4KUzx9tfj5sA8UTCoTGxu+4McSwSzrdYzOdcGOfYM=
Subject key identifier:   D5:15:6B:4B:A0:1E:65:55:31:A9:5B:BF:ED:49:7B:22:65:9A:07:A1
Certificate issuer:       /CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
Certificate serial:       33F254A596F09B502881D2A5096EA2983ABA2271
Authority key identifier: 75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa
Signing time:             Thu 14 Sep 2023 19:20:50 +0000
ROA not before:           Thu 14 Sep 2023 19:15:49 +0000
ROA not after:            Thu 12 Sep 2024 19:20:49 +0000
asID:                     263486
IP address blocks:        191.242.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f2:54:a5:96:f0:9b:50:28:81:d2:a5:09:6e:a2:98:3a:ba:22:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
        Validity
            Not Before: Sep 14 19:15:49 2023 GMT
            Not After : Sep 12 19:20:49 2024 GMT
        Subject: CN=D5156B4BA01E655531A95BBFED497B22659A07A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:22:84:37:3f:d9:27:aa:a8:38:ca:9e:f1:
                    56:71:91:e5:b7:01:a5:11:1f:b6:c2:46:02:b2:85:
                    49:f1:09:f7:61:ab:38:07:8b:7b:a0:82:1b:67:0e:
                    83:13:ad:2f:cb:67:1c:9b:cd:1a:56:ea:1a:78:67:
                    d0:86:9c:2b:00:20:d7:74:ed:ed:e2:43:50:0c:5c:
                    c0:cc:0d:f5:0d:29:20:03:4c:97:dd:43:e5:42:b6:
                    5e:13:31:a6:f2:34:e6:4e:42:e0:c8:22:61:21:9c:
                    21:4a:57:ae:f9:f3:cf:fd:80:8b:f4:a9:4a:c9:8d:
                    18:06:f1:2c:e8:e6:a3:bf:05:7e:a0:9a:89:7f:af:
                    a0:60:ba:09:43:bf:9a:9a:c2:0b:ad:fa:7d:f0:01:
                    99:05:45:d3:f5:0d:a0:19:e2:1b:a3:f6:42:b7:18:
                    a3:53:e0:02:4c:ab:e9:c9:41:d1:8a:8a:29:37:b7:
                    7a:82:c1:26:bd:df:ab:89:48:ef:9e:8a:35:d2:26:
                    cb:fc:fa:06:56:bd:15:aa:47:c8:69:d8:7e:e2:44:
                    97:85:0f:f9:5b:42:de:2a:85:a4:74:eb:9e:65:71:
                    f9:81:09:f1:c1:60:77:4c:62:21:76:97:3d:44:96:
                    75:33:7d:73:e9:09:fb:03:0b:35:c3:00:e7:b3:e7:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:6B:4B:A0:1E:65:55:31:A9:5B:BF:ED:49:7B:22:65:9A:07:A1
            X509v3 Authority Key Identifier:
                keyid:75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:8f:e3:12:47:0a:4a:05:96:4f:e5:43:c2:da:8f:37:fe:
         fe:2e:c0:89:3e:b4:d4:56:e9:14:2e:9e:7d:40:cd:2f:c5:5b:
         bd:81:68:1d:72:14:2d:39:df:2f:93:c2:78:d7:5e:b8:ce:0a:
         0e:2f:e5:24:80:48:c6:36:7f:b2:d4:a5:35:97:4a:3d:00:05:
         a1:f0:ee:a7:42:8c:32:7d:9e:63:40:62:72:7a:a9:ba:d2:15:
         9b:a2:00:a9:69:39:bd:37:20:8d:e1:76:cd:4c:3c:a2:8c:66:
         f7:35:d4:74:40:64:ef:56:1c:5d:5b:10:81:7d:9b:fd:2c:a6:
         7c:e3:9c:eb:de:85:50:29:bd:52:c7:14:79:56:a3:c8:d2:a0:
         25:95:0b:1d:bb:62:f6:2b:c8:4f:a7:06:17:af:d9:f0:fa:65:
         a1:b0:b3:3b:5b:54:50:da:6c:3f:76:29:bf:18:e2:66:b7:0c:
         45:95:04:25:bd:9c:89:f4:3b:67:88:7e:8f:5d:84:fe:5d:9f:
         82:78:03:c0:ca:19:2e:b9:ea:28:d3:fd:76:c0:57:ce:5f:42:
         6a:47:3d:26:76:f0:7a:a9:03:ce:e3:a8:df:64:e5:38:7e:2d:
         39:48:39:2d:a1:1f:cb:1d:41:41:77:07:52:c8:a5:d6:ec:fd:
         e6:4d:bf:8a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM/JUpZbwm1AogdKlCW6imDq6InEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1RUY5OUE4QkEyQzdGODM2RjY3QzFGNTQ3MUU3N0Ex
MjYzNThCQTAeFw0yMzA5MTQxOTE1NDlaFw0yNDA5MTIxOTIwNDlaMDMxMTAvBgNV
BAMTKEQ1MTU2QjRCQTAxRTY1NTUzMUE5NUJCRkVENDk3QjIyNjU5QTA3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GSKENz/ZJ6qoOMqe8VZxkeW3
AaURH7bCRgKyhUnxCfdhqzgHi3ugghtnDoMTrS/LZxybzRpW6hp4Z9CGnCsAINd0
7e3iQ1AMXMDMDfUNKSADTJfdQ+VCtl4TMabyNOZOQuDIImEhnCFKV67588/9gIv0
qUrJjRgG8Szo5qO/BX6gmol/r6BguglDv5qawgut+n3wAZkFRdP1DaAZ4huj9kK3
GKNT4AJMq+nJQdGKiik3t3qCwSa936uJSO+eijXSJsv8+gZWvRWqR8hp2H7iRJeF
D/lbQt4qhaR0655lcfmBCfHBYHdMYiF2lz1ElnUzfXPpCfsDCzXDAOez54PbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1RVrS6AeZVUxqVu/7Ul7ImWaB6EwHwYDVR0j
BBgwFoAUdV75mouix/g29nwfVHHnehJjWLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz
ZmEvMC83NTVFRjk5QThCQTJDN0Y4MzZGNjdDMUY1NDcxRTc3QTEyNjM1OEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NUVGOTlBOEJBMkM3Rjgz
NkY2N0MxRjU0NzFFNzdBMTI2MzU4QkEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGVEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7/y+DANBgkqhkiG9w0BAQsFAAOCAQEAP0WP
4xJHCkoFlk/lQ8Lajzf+/i7AiT601FbpFC6efUDNL8VbvYFoHXIULTnfL5PCeNde
uM4KDi/lJIBIxjZ/stSlNZdKPQAFofDup0KMMn2eY0BicnqputIVm6IAqWk5vTcg
jeF2zUw8ooxm9zXUdEBk71YcXVsQgX2b/SymfOOc696FUCm9UscUeVajyNKgJZUL
Hbti9ivIT6cGF6/Z8PplobCzO1tUUNpsP3YpvxjiZrcMRZUEJb2cifQ7Z4h+j12E
/l2fgngDwMoZLrnqKNP9dsBXzl9Cakc9JnbweqkDzuOo32TlOH4tOUg5LaEfyx1B
QXcHUsil1uz95k2/ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org