Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139342e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139342e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          cBYu+mIL6F2D8FQur1Xekx0l9zybiYlGJOnPE6WmwzE=
Subject key identifier:   BA:2C:FA:FE:6A:5D:6B:64:A0:B6:86:FB:3F:E4:F4:5B:1B:63:22:CA
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1C7818A9EAEAF98FE93E902F846E8D141138EC30
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139342e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:48 +0000
ROA not before:           Tue 20 Dec 2022 15:04:48 +0000
ROA not after:            Tue 19 Dec 2023 15:09:48 +0000
asID:                     262468
IP address blocks:        191.5.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:78:18:a9:ea:ea:f9:8f:e9:3e:90:2f:84:6e:8d:14:11:38:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:48 2022 GMT
            Not After : Dec 19 15:09:48 2023 GMT
        Subject: CN=BA2CFAFE6A5D6B64A0B686FB3FE4F45B1B6322CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:ff:12:da:0f:b6:20:4d:f9:14:95:4a:3d:
                    cd:7f:48:39:e9:be:3e:9a:01:56:b0:88:16:bc:35:
                    1d:0d:08:3c:2c:f7:fb:af:09:ce:f1:3a:dc:1c:b9:
                    62:e4:c4:71:b6:4e:09:12:a9:bc:c0:5f:40:63:e3:
                    6f:90:2c:aa:9e:53:7b:21:aa:48:52:ca:c2:94:80:
                    72:6a:41:53:73:30:1b:5d:d8:55:21:b3:78:45:13:
                    fd:23:10:e5:19:38:36:a2:40:ab:08:d4:d4:8b:fe:
                    e6:a6:23:88:8c:8a:33:ab:d4:a6:85:49:20:25:c7:
                    7a:fa:ae:af:8b:93:20:26:60:41:3f:7a:5a:59:6d:
                    2d:a0:d0:c6:d0:66:98:c3:5c:16:bd:66:91:98:b1:
                    44:84:ca:c4:3e:c9:38:55:b6:83:ab:e1:af:6a:06:
                    90:1c:cf:39:7a:50:2f:30:58:ad:f4:d3:9f:08:c2:
                    d6:21:7e:ef:ab:c3:c6:48:2c:5e:0f:8c:82:9d:f0:
                    5f:20:9f:c2:27:e5:bc:c1:0a:61:81:9a:23:fb:e0:
                    8e:a9:2b:78:7b:e8:50:bd:3c:50:71:fc:05:8e:f8:
                    0b:40:13:04:ce:40:73:d8:c9:34:08:01:5f:84:3c:
                    69:a8:95:0c:26:52:a3:f6:0d:74:20:82:cd:74:0c:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:FA:FE:6A:5D:6B:64:A0:B6:86:FB:3F:E4:F4:5B:1B:63:22:CA
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139342e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:e3:60:02:c5:f5:7e:c4:f8:6d:4e:66:a0:94:b6:ad:4b:
         29:77:9f:2f:be:1e:e3:6e:bd:ae:0a:b4:94:fa:a1:93:ac:77:
         25:58:e0:30:be:80:b4:4c:f4:39:ca:51:08:b2:c4:1b:7f:22:
         b2:28:93:95:77:aa:c6:0e:39:e2:c6:59:cc:a2:ee:ad:d2:52:
         90:e7:7a:62:07:3f:3b:b6:3f:7a:b3:9a:71:48:1a:0b:fc:af:
         52:9d:b4:d9:41:b0:c2:cc:65:7f:4e:6d:07:d4:50:09:68:0b:
         73:3f:8b:d6:89:0f:b9:6f:89:83:09:d8:f3:64:3c:14:9b:43:
         6c:69:93:1a:44:c7:4c:8b:50:a9:b4:89:5a:b1:b5:19:f2:b6:
         df:3e:d1:14:a8:5e:7f:1f:61:31:f7:f3:c2:6f:64:a0:69:99:
         57:7e:d3:82:ea:67:f8:16:e2:3f:98:90:e1:f0:98:06:07:a4:
         28:7e:b1:c6:24:01:df:96:83:11:b1:20:b2:c3:1c:2d:5a:f6:
         e4:b0:45:98:34:b6:14:57:71:73:e0:fd:f4:fa:c1:ca:af:63:
         85:9e:28:2a:bd:5c:20:02:64:45:a2:1c:6b:26:00:28:bc:6d:
         6c:9e:79:94:6e:0c:97:0e:16:e7:63:b5:d8:f9:90:2b:f1:54:
         92:a3:20:5b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHHgYqerq+Y/pPpAvhG6NFBE47DAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDhaFw0yMzEyMTkxNTA5NDhaMDMxMTAvBgNV
BAMTKEJBMkNGQUZFNkE1RDZCNjRBMEI2ODZGQjNGRTRGNDVCMUI2MzIyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOR/8S2g+2IE35FJVKPc1/SDnp
vj6aAVawiBa8NR0NCDws9/uvCc7xOtwcuWLkxHG2TgkSqbzAX0Bj42+QLKqeU3sh
qkhSysKUgHJqQVNzMBtd2FUhs3hFE/0jEOUZODaiQKsI1NSL/uamI4iMijOr1KaF
SSAlx3r6rq+LkyAmYEE/elpZbS2g0MbQZpjDXBa9ZpGYsUSEysQ+yThVtoOr4a9q
BpAczzl6UC8wWK30058IwtYhfu+rw8ZILF4PjIKd8F8gn8In5bzBCmGBmiP74I6p
K3h76FC9PFBx/AWO+AtAEwTOQHPYyTQIAV+EPGmolQwmUqP2DXQggs10DLxDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuiz6/mpda2Sgtob7P+T0WxtjIsowHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzOTMxMmUzNTJlMzEzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwXCMA0GCSqGSIb3DQEBCwUAA4IBAQAxD+NgAsX1
fsT4bU5moJS2rUspd58vvh7jbr2uCrSU+qGTrHclWOAwvoC0TPQ5ylEIssQbfyKy
KJOVd6rGDjnixlnMou6t0lKQ53piBz87tj96s5pxSBoL/K9SnbTZQbDCzGV/Tm0H
1FAJaAtzP4vWiQ+5b4mDCdjzZDwUm0NsaZMaRMdMi1CptIlasbUZ8rbfPtEUqF5/
H2Ex9/PCb2SgaZlXftOC6mf4FuI/mJDh8JgGB6QofrHGJAHfloMRsSCywxwtWvbk
sEWYNLYUV3Fz4P30+sHKr2OFnigqvVwgAmRFohxrJgAovG1snnmUbgyXDhbnY7XY
+ZAr8VSSoyBb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org