Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
File:                     3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          PI4tiYQjhdRtvamM0cIvntF7oFvMwhQTQE2EMhf7tLI=
Subject key identifier:   52:24:06:E3:B3:AE:C2:E0:D1:26:89:6C:AC:6E:D1:25:C7:2D:68:0B
Certificate issuer:       /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial:       0F45A1FD19A65877A6B747BC79848EDE8E2D97C6
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
Signing time:             Tue 13 Feb 2024 23:58:00 +0000
ROA not before:           Tue 13 Feb 2024 23:53:00 +0000
ROA not after:            Tue 11 Feb 2025 23:58:00 +0000
asID:                     267546
IP address blocks:        191.241.88.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:45:a1:fd:19:a6:58:77:a6:b7:47:bc:79:84:8e:de:8e:2d:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
        Validity
            Not Before: Feb 13 23:53:00 2024 GMT
            Not After : Feb 11 23:58:00 2025 GMT
        Subject: CN=522406E3B3AEC2E0D126896CAC6ED125C72D680B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:1a:83:0a:56:4a:1b:c9:13:e4:b9:9d:0e:
                    a8:ed:64:70:81:77:ae:00:74:92:e5:44:de:f5:5d:
                    46:06:85:ab:7b:cf:ec:4f:54:a6:5b:34:d4:d8:cd:
                    dc:d9:f4:f0:5b:30:0d:af:5d:67:2f:50:70:17:f4:
                    c6:27:9d:8c:52:5c:57:bb:0a:f4:37:8b:28:d6:8d:
                    52:00:dd:e0:de:62:fe:e0:25:37:7f:d1:88:6c:69:
                    b6:5b:08:51:a8:84:f0:dc:a9:a3:5e:6d:b2:d0:fc:
                    a9:52:0d:35:af:79:1a:a3:9d:4e:5e:86:ce:a2:d7:
                    b9:97:ed:42:9c:27:7e:59:d3:9d:ab:3f:c7:df:df:
                    c1:d1:d4:ee:5c:1d:1a:14:9f:57:6e:4d:49:34:c6:
                    91:55:61:37:5b:10:40:6e:be:45:c4:2a:9e:73:b0:
                    6a:38:8f:b8:4f:4d:99:09:ad:8d:18:40:e5:a5:5a:
                    e8:69:eb:c9:cf:33:81:c0:d0:64:da:45:78:86:22:
                    c5:e3:c0:20:31:1d:44:fe:6c:94:d0:df:a9:9c:7a:
                    3a:15:c9:a0:02:fb:32:38:3c:a4:d6:d4:8e:a1:ec:
                    73:81:54:2d:f3:0c:0c:d4:f9:1a:44:53:7b:16:2d:
                    5f:72:7e:b8:54:57:d0:51:d8:6b:a6:1e:e0:b1:30:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:24:06:E3:B3:AE:C2:E0:D1:26:89:6C:AC:6E:D1:25:C7:2D:68:0B
            X509v3 Authority Key Identifier:
                keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:56:47:45:09:63:3f:5d:2c:af:3b:6f:3a:8a:12:03:c9:
         12:e8:63:35:59:cf:9a:e5:ad:af:a4:01:e7:9d:8e:4e:a8:1c:
         6f:e7:0d:06:e9:ae:2e:4e:bb:04:04:7b:7b:2c:40:41:d3:32:
         d9:6b:b7:2d:e0:e1:00:3a:fb:e0:7d:2d:eb:95:6c:9e:9d:8a:
         e4:68:d8:d0:39:8b:09:aa:4c:69:d9:5d:7d:3e:54:51:0a:7f:
         b7:a8:cf:7b:1c:3a:a1:02:4e:31:57:a3:eb:09:c3:9a:93:d2:
         73:dc:98:5c:42:90:13:49:84:cf:6b:00:56:72:60:78:53:02:
         0f:ba:2a:1a:63:47:af:3e:4b:a9:6a:e4:c6:0a:b0:fd:c2:3d:
         e1:c4:c2:20:a8:b0:b9:41:e4:33:72:59:ec:a7:18:61:45:1c:
         ad:9c:ef:58:78:a4:ea:6a:8a:67:c2:48:7b:09:25:6f:41:08:
         b8:90:18:36:b3:f2:a2:c1:8f:18:55:7b:16:c4:39:8a:46:87:
         a6:8d:a9:d9:78:34:83:46:6e:96:c6:07:40:fb:a9:34:b0:49:
         37:d0:fe:82:b0:af:c7:51:5f:5a:83:cf:dc:bc:da:d3:dd:76:
         62:96:77:12:e4:2d:30:f8:7c:9a:61:ed:50:20:5a:4c:f7:4e:
         45:f5:a1:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD0Wh/RmmWHemt0e8eYSO3o4tl8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQUIzQ0VCMDM4NTJFMTY0RDQ3MEE1MkEwNkQwREZB
MDQ5NEM4NjAeFw0yNDAyMTMyMzUzMDBaFw0yNTAyMTEyMzU4MDBaMDMxMTAvBgNV
BAMTKDUyMjQwNkUzQjNBRUMyRTBEMTI2ODk2Q0FDNkVEMTI1QzcyRDY4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZhqDClZKG8kT5LmdDqjtZHCB
d64AdJLlRN71XUYGhat7z+xPVKZbNNTYzdzZ9PBbMA2vXWcvUHAX9MYnnYxSXFe7
CvQ3iyjWjVIA3eDeYv7gJTd/0YhsabZbCFGohPDcqaNebbLQ/KlSDTWveRqjnU5e
hs6i17mX7UKcJ35Z052rP8ff38HR1O5cHRoUn1duTUk0xpFVYTdbEEBuvkXEKp5z
sGo4j7hPTZkJrY0YQOWlWuhp68nPM4HA0GTaRXiGIsXjwCAxHUT+bJTQ36mcejoV
yaAC+zI4PKTW1I6h7HOBVC3zDAzU+RpEU3sWLV9yfrhUV9BR2GumHuCxMM97AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUiQG47OuwuDRJolsrG7RJcctaAswHwYDVR0j
BBgwFoAUssqzzrA4UuFk1HClKgbQ36BJTIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMC9CMkNBQjNDRUIwMzg1MkUxNjRENDcwQTUyQTA2RDBERkEwNDk0Qzg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQ0FCM0NFQjAzODUyRTE2
NEQ0NzBBNTJBMDZEMERGQTA0OTRDODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWGJ2ZFJjbUQ0REZKNnJtN2lXTnE1R0VjVEZrUFZoS3VaQk5aTDI2Z1NNLzAv
MzEzOTMxMmUzMjM0MzEyZTM4MzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzczNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8VgwDQYJKoZIhvcNAQELBQADggEBABPBVkdF
CWM/XSyvO286ihIDyRLoYzVZz5rlra+kAeedjk6oHG/nDQbpri5OuwQEe3ssQEHT
Mtlrty3g4QA6++B9LeuVbJ6diuRo2NA5iwmqTGnZXX0+VFEKf7eoz3scOqECTjFX
o+sJw5qT0nPcmFxCkBNJhM9rAFZyYHhTAg+6KhpjR68+S6lq5MYKsP3CPeHEwiCo
sLlB5DNyWeynGGFFHK2c71h4pOpqimfCSHsJJW9BCLiQGDaz8qLBjxhVexbEOYpG
h6aNqdl4NINGbpbGB0D7qTSwSTfQ/oKwr8dRX1qDz9y82tPddmKWdxLkLTD4fJph
7VAgWkz3TkX1oU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org