Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
File:                     3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier:          sEUHJZeF0b2u/uefv0ujlrW7ogvnbdManyuDx8pztO0=
Subject key identifier:   F5:8C:1A:D7:BD:81:56:0B:8A:0C:C1:BE:8D:33:44:F7:C6:1A:6F:FF
Certificate issuer:       /CN=DB151ED5EF4B5BC844A4396895B8E881F9676B21
Certificate serial:       267A4B76E04442BCD6BBBB6DE3DD856D1F7148D0
Authority key identifier: DB:15:1E:D5:EF:4B:5B:C8:44:A4:39:68:95:B8:E8:81:F9:67:6B:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB151ED5EF4B5BC844A4396895B8E881F9676B21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
Signing time:             Wed 13 Dec 2023 18:16:57 +0000
ROA not before:           Wed 13 Dec 2023 18:11:57 +0000
ROA not after:            Wed 11 Dec 2024 18:16:57 +0000
asID:                     267469
IP address blocks:        192.141.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7a:4b:76:e0:44:42:bc:d6:bb:bb:6d:e3:dd:85:6d:1f:71:48:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB151ED5EF4B5BC844A4396895B8E881F9676B21
        Validity
            Not Before: Dec 13 18:11:57 2023 GMT
            Not After : Dec 11 18:16:57 2024 GMT
        Subject: CN=F58C1AD7BD81560B8A0CC1BE8D3344F7C61A6FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:aa:50:b9:ae:69:4c:51:66:46:a8:34:83:
                    c4:77:cb:9e:28:67:a7:19:1f:73:37:6c:e1:3f:c0:
                    8d:69:53:4e:5a:b5:ed:52:c3:e1:c7:ad:f4:80:c7:
                    8f:8c:c3:59:b1:a3:ed:e0:6f:2b:98:68:50:9a:e3:
                    93:33:09:81:43:a6:c2:78:6d:57:d9:0f:d1:e4:24:
                    45:20:02:d2:1a:1a:29:9e:f5:b7:92:b8:5a:70:e2:
                    84:de:3a:7f:0c:2f:96:d1:1f:5d:51:f2:a4:be:a0:
                    98:6d:d5:d9:49:ed:57:72:3f:e7:0f:08:c7:66:34:
                    8b:65:21:22:2c:ec:c2:a2:7c:cf:bd:6e:6e:cc:0b:
                    55:68:9a:d6:87:03:93:a1:d9:7d:8f:d6:ed:30:14:
                    40:c6:76:d5:61:3a:c8:c1:bf:ae:bd:75:72:9a:f5:
                    90:05:9a:92:60:4a:8d:29:3d:9f:8e:43:03:b6:27:
                    ea:f6:f6:e9:0e:d6:83:47:c0:8a:76:14:9a:18:dc:
                    41:c7:60:ab:37:e4:26:33:d0:cb:6a:a2:fa:22:11:
                    49:fb:fb:9f:2b:76:40:7a:ac:2f:a5:bc:cd:66:08:
                    f9:7a:45:29:77:d6:23:b5:4c:cb:33:a5:20:3d:7b:
                    7a:08:ea:6c:62:28:5c:b5:f2:74:c1:2c:bf:d5:de:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:1A:D7:BD:81:56:0B:8A:0C:C1:BE:8D:33:44:F7:C6:1A:6F:FF
            X509v3 Authority Key Identifier:
                keyid:DB:15:1E:D5:EF:4B:5B:C8:44:A4:39:68:95:B8:E8:81:F9:67:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/DB151ED5EF4B5BC844A4396895B8E881F9676B21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB151ED5EF4B5BC844A4396895B8E881F9676B21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:37:89:b6:78:ee:1d:61:38:f8:fa:36:8c:b6:76:ba:2d:ab:
         c9:22:28:23:49:c6:9b:3f:3f:2a:9f:03:00:1f:d5:bd:aa:bd:
         7d:eb:f7:42:00:63:c3:e8:2d:95:96:d1:53:ec:c1:01:6b:05:
         f1:c5:da:cc:5f:66:1d:73:04:66:cc:4e:59:0e:e5:4a:6d:03:
         91:f0:20:36:d8:ec:9a:8c:c3:f6:c0:3b:b6:15:0e:d0:5e:f4:
         b0:d8:53:57:81:49:0e:b0:b1:a0:55:8b:c0:78:02:21:52:83:
         cb:77:35:80:a1:86:b2:b7:c1:ba:2d:b9:49:50:f9:0a:00:82:
         ce:13:70:79:84:24:4d:a7:df:0e:a6:42:dd:2f:75:42:67:06:
         08:1d:f0:20:11:31:e7:11:13:d8:b2:39:76:4b:64:cf:a5:69:
         b1:d0:fb:56:83:64:19:89:49:3e:85:39:13:74:7d:14:84:be:
         86:c3:55:77:eb:fb:0d:9f:1f:20:30:58:7e:b6:cf:2b:71:2a:
         5c:68:ac:6a:24:f5:0e:7f:c6:15:40:f2:ea:af:0d:f9:c8:ec:
         57:c8:4f:be:b9:3b:67:7a:33:86:9f:b9:a6:83:e1:31:6f:68:
         bf:6e:60:f4:eb:5b:fc:51:3f:19:8a:e3:e7:4c:6d:16:dd:e6:
         53:b2:59:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJnpLduBEQrzWu7tt492FbR9xSNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIxNTFFRDVFRjRCNUJDODQ0QTQzOTY4OTVCOEU4ODFG
OTY3NkIyMTAeFw0yMzEyMTMxODExNTdaFw0yNDEyMTExODE2NTdaMDMxMTAvBgNV
BAMTKEY1OEMxQUQ3QkQ4MTU2MEI4QTBDQzFCRThEMzM0NEY3QzYxQTZGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4KpQua5pTFFmRqg0g8R3y54o
Z6cZH3M3bOE/wI1pU05ate1Sw+HHrfSAx4+Mw1mxo+3gbyuYaFCa45MzCYFDpsJ4
bVfZD9HkJEUgAtIaGime9beSuFpw4oTeOn8ML5bRH11R8qS+oJht1dlJ7VdyP+cP
CMdmNItlISIs7MKifM+9bm7MC1VomtaHA5Oh2X2P1u0wFEDGdtVhOsjBv669dXKa
9ZAFmpJgSo0pPZ+OQwO2J+r29ukO1oNHwIp2FJoY3EHHYKs35CYz0MtqovoiEUn7
+58rdkB6rC+lvM1mCPl6RSl31iO1TMszpSA9e3oI6mxiKFy18nTBLL/V3kwrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9Ywa172BVguKDMG+jTNE98Yab/8wHwYDVR0j
BBgwFoAU2xUe1e9LW8hEpDlolbjogflnayEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvREIxNTFFRDVFRjRCNUJDODQ0QTQzOTY4OTVCOEU4ODFGOTY3NkIyMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjE1MUVENUVGNEI1QkM4NDRB
NDM5Njg5NUI4RTg4MUY5Njc2QjIxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzEz
OTMyMmUzMTM0MzEyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NzM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMCNnDANBgkqhkiG9w0BAQsFAAOCAQEAeDeJtnju
HWE4+Po2jLZ2ui2rySIoI0nGmz8/Kp8DAB/Vvaq9fev3QgBjw+gtlZbRU+zBAWsF
8cXazF9mHXMEZsxOWQ7lSm0DkfAgNtjsmozD9sA7thUO0F70sNhTV4FJDrCxoFWL
wHgCIVKDy3c1gKGGsrfBui25SVD5CgCCzhNweYQkTaffDqZC3S91QmcGCB3wIBEx
5xET2LI5dktkz6VpsdD7VoNkGYlJPoU5E3R9FIS+hsNVd+v7DZ8fIDBYfrbPK3Eq
XGisaiT1Dn/GFUDy6q8N+cjsV8hPvrk7Z3ozhp+5poPhMW9ov25g9Otb/FE/GYrj
50xtFt3mU7JZzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org