Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e39362e302f32312d3234203d3e20323633353335.roa
File:                     3139312e352e39362e302f32312d3234203d3e20323633353335.roa (raw, json)
Hash identifier:          tYGpnM/WaZT7kwW6xnDPvBlNCLyOam0ayGcsHgiNsxA=
Subject key identifier:   01:E2:27:6D:E3:B6:F0:DD:CA:A8:6C:F6:E2:23:D5:97:86:23:66:82
Certificate issuer:       /CN=68E2494CADFA72482513CD8E105ECF8FECB726FE
Certificate serial:       7FA9089883758055E893D68D20C63EA6D6025052
Authority key identifier: 68:E2:49:4C:AD:FA:72:48:25:13:CD:8E:10:5E:CF:8F:EC:B7:26:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e39362e302f32312d3234203d3e20323633353335.roa
Signing time:             Tue 22 Feb 2022 14:28:09 +0000
ROA not before:           Tue 22 Feb 2022 14:23:09 +0000
ROA not after:            Tue 21 Feb 2023 14:28:09 +0000
asID:                     263535
IP address blocks:        191.5.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:08:98:83:75:80:55:e8:93:d6:8d:20:c6:3e:a6:d6:02:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E2494CADFA72482513CD8E105ECF8FECB726FE
        Validity
            Not Before: Feb 22 14:23:09 2022 GMT
            Not After : Feb 21 14:28:09 2023 GMT
        Subject: CN=01E2276DE3B6F0DDCAA86CF6E223D59786236682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:8d:82:c7:1e:26:08:65:de:59:f5:a1:f9:
                    81:a4:e7:be:de:27:3f:28:d2:48:a2:f3:62:41:fe:
                    f5:a0:a2:90:31:eb:cd:14:6a:22:28:af:4d:3d:87:
                    e6:3c:8c:68:9e:e2:84:e9:79:0e:37:7a:bf:83:25:
                    00:41:06:9f:5b:2b:90:af:3d:cc:7a:19:8f:50:d2:
                    58:7e:af:27:3a:14:82:1d:6c:7e:ef:2b:8e:50:6d:
                    05:8d:60:0e:06:2d:d3:f8:39:1a:84:f4:52:f4:04:
                    c9:2b:c4:ca:bd:4d:94:af:ab:14:42:2a:2b:38:33:
                    d4:30:cb:ed:de:f5:ea:02:de:11:2d:8b:a8:73:f1:
                    4a:48:89:63:bc:7d:6c:fa:5b:3f:d7:0e:5a:fd:f4:
                    6f:0c:d5:2c:f0:d5:cb:fe:44:d2:13:94:3d:1e:1c:
                    da:eb:09:05:3f:7c:a6:a1:ac:7f:1b:fc:7f:24:4e:
                    4f:b7:27:0a:35:81:11:06:ac:55:72:f1:48:f8:6f:
                    c7:42:cd:84:50:65:bf:a1:e3:cf:2c:02:4e:12:87:
                    22:a0:f6:84:f6:89:11:79:63:be:a9:b3:04:c1:14:
                    ea:f8:0e:a0:5d:62:42:59:e5:0c:1a:ab:e6:2c:e8:
                    11:b0:87:d2:21:7e:a7:1c:3d:16:4a:a5:60:ee:e3:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:27:6D:E3:B6:F0:DD:CA:A8:6C:F6:E2:23:D5:97:86:23:66:82
            X509v3 Authority Key Identifier:
                keyid:68:E2:49:4C:AD:FA:72:48:25:13:CD:8E:10:5E:CF:8F:EC:B7:26:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68E2494CADFA72482513CD8E105ECF8FECB726FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e39362e302f32312d3234203d3e20323633353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:14:1f:22:10:38:ff:bf:56:36:46:88:2d:79:ef:a3:b2:6a:
         1c:d4:bf:1e:7b:2d:ec:db:57:f8:c1:69:bf:cb:c0:ab:2d:80:
         88:11:a8:54:f5:8c:2e:1a:0d:fc:1b:db:8e:96:76:56:95:e4:
         4c:95:67:f4:1c:df:ec:86:06:69:c4:fa:7d:f4:ab:b3:8a:30:
         3e:53:08:ad:28:58:9b:aa:47:43:ac:2a:d4:3a:f0:77:90:04:
         0f:d7:b3:a9:f8:ce:e9:42:9f:09:e7:72:e0:0c:02:4b:1c:c6:
         9c:76:33:e1:9b:13:c4:19:b6:ca:5e:8d:cb:cf:54:b6:e3:84:
         69:17:e5:a0:45:9f:03:26:bc:b5:b5:57:ec:85:1d:8b:de:be:
         49:4e:5d:49:01:26:d6:62:11:9a:60:ed:49:48:66:8c:fd:b1:
         4e:ee:d8:46:c7:e2:a8:b0:f3:fa:62:5f:1a:cf:99:52:f3:7e:
         8e:84:96:91:90:d8:4f:6a:8e:79:e7:61:b0:2e:bb:61:47:fa:
         84:8a:1c:db:ef:f2:96:01:f2:be:82:d8:0e:2a:8b:c4:c5:05:
         ef:8a:1f:3c:1e:ae:df:59:74:3d:6e:82:24:c5:ac:44:bc:3e:
         40:c7:06:23:44:97:ae:c7:80:48:4a:24:98:66:c4:31:fd:0c:
         0e:fc:28:82
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUf6kImIN1gFXok9aNIMY+ptYCUFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFMjQ5NENBREZBNzI0ODI1MTNDRDhFMTA1RUNGOEZF
Q0I3MjZGRTAeFw0yMjAyMjIxNDIzMDlaFw0yMzAyMjExNDI4MDlaMDMxMTAvBgNV
BAMTKDAxRTIyNzZERTNCNkYwRERDQUE4NkNGNkUyMjNENTk3ODYyMzY2ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZo2Cxx4mCGXeWfWh+YGk577e
Jz8o0kii82JB/vWgopAx680UaiIor009h+Y8jGie4oTpeQ43er+DJQBBBp9bK5Cv
Pcx6GY9Q0lh+ryc6FIIdbH7vK45QbQWNYA4GLdP4ORqE9FL0BMkrxMq9TZSvqxRC
Kis4M9Qwy+3e9eoC3hEti6hz8UpIiWO8fWz6Wz/XDlr99G8M1Szw1cv+RNITlD0e
HNrrCQU/fKahrH8b/H8kTk+3Jwo1gREGrFVy8Uj4b8dCzYRQZb+h488sAk4ShyKg
9oT2iRF5Y76pswTBFOr4DqBdYkJZ5Qwaq+Ys6BGwh9IhfqccPRZKpWDu4x/DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAeInbeO28N3KqGz24iPVl4YjZoIwHwYDVR0j
BBgwFoAUaOJJTK36ckglE82OEF7Pj+y3Jv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hDSlBkY2dqTVpBTDIzUmRENTZRZFo5UVdLYzJjdVd4ZHJ3NzhjSnp4
NmcvMC82OEUyNDk0Q0FERkE3MjQ4MjUxM0NEOEUxMDVFQ0Y4RkVDQjcyNkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4RTI0OTRDQURGQTcyNDgy
NTEzQ0Q4RTEwNUVDRjhGRUNCNzI2RkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4Q0pQZGNnak1aQUwyM1JkRDU2UWRaOVFXS2MyY3VXeGRydzc4Y0p6eDZnLzAv
MzEzOTMxMmUzNTJlMzkzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMzM1
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA78FYDANBgkqhkiG9w0BAQsFAAOCAQEAchQfIhA4/79W
NkaILXnvo7JqHNS/Hnst7NtX+MFpv8vAqy2AiBGoVPWMLhoN/BvbjpZ2VpXkTJVn
9Bzf7IYGacT6ffSrs4owPlMIrShYm6pHQ6wq1Drwd5AED9ezqfjO6UKfCedy4AwC
SxzGnHYz4ZsTxBm2yl6Ny89UtuOEaRfloEWfAya8tbVX7IUdi96+SU5dSQEm1mIR
mmDtSUhmjP2xTu7YRsfiqLDz+mJfGs+ZUvN+joSWkZDYT2qOeedhsC67YUf6hIoc
2+/ylgHyvoLYDiqLxMUF74ofPB6u31l0PW6CJMWsRLw+QMcGI0SXrseASEokmGbE
Mf0MDvwogg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org