Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139332e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139332e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          MYlwDKcB/kel/DJmb/CqVjAextYMuGA8aZit/b5BXqI=
Subject key identifier:   3D:25:76:AF:2E:A1:02:96:A3:83:A7:76:11:C4:3E:FB:F3:20:D0:52
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       4F995900A78B8D3E7A3793735916DCD52A6D3470
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139332e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:48 +0000
ROA not before:           Tue 20 Dec 2022 15:04:48 +0000
ROA not after:            Tue 19 Dec 2023 15:09:48 +0000
asID:                     262468
IP address blocks:        191.5.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:99:59:00:a7:8b:8d:3e:7a:37:93:73:59:16:dc:d5:2a:6d:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:48 2022 GMT
            Not After : Dec 19 15:09:48 2023 GMT
        Subject: CN=3D2576AF2EA10296A383A77611C43EFBF320D052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:6a:89:c8:f3:cb:8d:4e:6e:18:fe:ab:e7:
                    8a:e5:9c:36:af:bb:4e:4d:c7:72:1b:49:d6:91:64:
                    a8:57:67:e8:db:b0:52:48:96:86:e9:5f:b5:fc:a1:
                    fa:e4:f3:2e:42:32:dd:6b:7b:1a:b0:16:3e:b5:de:
                    58:de:e1:29:cf:7b:6f:c6:9f:ad:a4:f5:27:94:ba:
                    61:d2:d1:ee:5c:05:4b:b4:6d:74:85:b0:ed:d0:76:
                    ab:48:ef:40:63:39:15:47:bc:d4:cb:9a:7b:b7:47:
                    0f:51:6a:e7:da:87:e2:f2:42:b6:fa:d6:3a:f0:73:
                    31:03:62:6f:43:b8:66:2e:04:4f:d3:ab:97:51:9c:
                    66:ba:f7:22:26:f1:3d:1a:5e:95:cf:9f:09:f4:57:
                    66:7c:f8:d9:2a:8a:a9:0b:fb:94:5b:8a:7a:fd:f3:
                    60:61:c7:6a:fa:c7:0e:90:a6:17:4d:0e:e8:87:84:
                    40:3a:dc:f8:13:1b:a3:af:79:70:b1:50:16:94:7f:
                    66:79:7b:03:dc:ae:1f:70:c7:55:18:2c:22:ef:a5:
                    9d:30:98:47:2e:10:b9:46:b1:f4:23:47:ab:0e:c9:
                    d3:1f:3e:68:f5:65:3b:e3:09:56:1e:6f:db:1e:a5:
                    8c:5c:6e:34:b3:0d:a9:0e:1f:dd:bf:d1:56:0c:80:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:76:AF:2E:A1:02:96:A3:83:A7:76:11:C4:3E:FB:F3:20:D0:52
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139332e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:25:fe:12:46:95:ca:b8:ca:58:f7:be:8d:c1:ff:ca:fe:da:
         f9:92:b9:76:bb:eb:ee:aa:62:4b:18:e5:3d:64:b9:6e:1d:5c:
         b7:5b:55:ee:36:2f:10:a1:07:ca:d5:98:c4:6a:b3:b9:00:5b:
         fe:3b:d8:3a:ee:a6:eb:da:63:cf:1c:be:be:03:db:4f:35:c4:
         2f:67:48:2c:70:f2:ba:0c:e0:0c:97:31:55:c8:47:bc:8b:96:
         fa:7e:6b:0e:98:fa:65:51:98:01:23:df:2a:8a:76:44:b9:04:
         77:b9:b9:3a:02:13:d1:c7:f9:42:01:34:55:72:5d:99:08:e9:
         b2:8a:fc:7f:c5:8a:54:1a:df:8d:4a:2f:e3:48:14:e6:c5:1f:
         45:30:9f:e5:ef:4c:4a:32:51:5e:02:ef:64:c4:1b:66:b6:18:
         ae:4c:cf:ca:9f:2a:f7:9d:39:9c:6f:68:f1:7c:10:f1:92:1b:
         bf:ae:96:80:ab:b3:97:99:4a:9d:9f:31:69:86:1a:75:53:54:
         a8:e8:28:a3:df:f5:cd:fb:09:56:41:52:a7:6d:d9:a4:c2:6f:
         24:f8:c2:d7:73:05:ab:6d:ca:36:5b:b4:93:bc:d8:5a:18:df:
         a7:96:d0:86:b3:05:58:76:c7:86:5f:b3:ea:4d:62:f7:d9:69:
         62:e8:75:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT5lZAKeLjT56N5NzWRbc1SptNHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDhaFw0yMzEyMTkxNTA5NDhaMDMxMTAvBgNV
BAMTKDNEMjU3NkFGMkVBMTAyOTZBMzgzQTc3NjExQzQzRUZCRjMyMEQwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPw2qJyPPLjU5uGP6r54rlnDav
u05Nx3IbSdaRZKhXZ+jbsFJIlobpX7X8ofrk8y5CMt1rexqwFj613lje4SnPe2/G
n62k9SeUumHS0e5cBUu0bXSFsO3QdqtI70BjORVHvNTLmnu3Rw9Raufah+LyQrb6
1jrwczEDYm9DuGYuBE/Tq5dRnGa69yIm8T0aXpXPnwn0V2Z8+NkqiqkL+5Rbinr9
82Bhx2r6xw6QphdNDuiHhEA63PgTG6OveXCxUBaUf2Z5ewPcrh9wx1UYLCLvpZ0w
mEcuELlGsfQjR6sOydMfPmj1ZTvjCVYeb9sepYxcbjSzDakOH92/0VYMgHLXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPSV2ry6hApajg6d2EcQ++/Mg0FIwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzOTMxMmUzNTJlMzEzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwXBMA0GCSqGSIb3DQEBCwUAA4IBAQACJf4SRpXK
uMpY976Nwf/K/tr5krl2u+vuqmJLGOU9ZLluHVy3W1XuNi8QoQfK1ZjEarO5AFv+
O9g67qbr2mPPHL6+A9tPNcQvZ0gscPK6DOAMlzFVyEe8i5b6fmsOmPplUZgBI98q
inZEuQR3ubk6AhPRx/lCATRVcl2ZCOmyivx/xYpUGt+NSi/jSBTmxR9FMJ/l70xK
MlFeAu9kxBtmthiuTM/Knyr3nTmcb2jxfBDxkhu/rpaAq7OXmUqdnzFphhp1U1So
6Cij3/XN+wlWQVKnbdmkwm8k+MLXcwWrbco2W7STvNhaGN+nltCGswVYdseGX7Pq
TWL32Wli6HXm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org