Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          kHF4B8SP/fiQAGR4arJwm9WXRH8RIhwMT6zQiCHz4m0=
Subject key identifier:   5D:6D:EE:4E:CD:FC:78:EB:94:F7:00:8D:97:DB:E7:24:58:3B:7D:E3
Certificate issuer:       /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial:       2724E12FAD7817BAF5EEA0FF0D089E4DA0C5FA34
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
Signing time:             Mon 22 Jan 2024 13:46:23 +0000
ROA not before:           Mon 22 Jan 2024 13:41:23 +0000
ROA not after:            Mon 20 Jan 2025 13:46:23 +0000
asID:                     263143
IP address blocks:        191.242.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:e1:2f:ad:78:17:ba:f5:ee:a0:ff:0d:08:9e:4d:a0:c5:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
        Validity
            Not Before: Jan 22 13:41:23 2024 GMT
            Not After : Jan 20 13:46:23 2025 GMT
        Subject: CN=5D6DEE4ECDFC78EB94F7008D97DBE724583B7DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:36:24:e6:17:88:6c:bd:23:c3:cf:d7:2e:
                    bb:eb:8a:64:f3:49:c6:78:0c:53:ae:99:67:9c:bd:
                    a4:29:cd:79:b6:98:41:48:d8:99:28:70:21:1d:06:
                    7e:d5:bc:1c:4b:ff:ac:b8:5a:9a:73:2f:5a:f5:00:
                    dd:58:41:37:56:13:83:db:0d:27:e0:44:a9:27:1b:
                    e3:ed:76:f1:4e:8d:20:b6:ec:32:72:c5:d7:0b:43:
                    4c:ec:a8:3a:ba:5a:37:b0:14:72:da:12:27:9b:fe:
                    4a:8b:60:a8:b1:c5:99:74:92:56:58:cc:ef:5c:cb:
                    b6:f5:3c:59:2e:ad:8b:c8:35:c0:7a:fe:54:66:a2:
                    4b:69:fa:aa:d9:8e:84:b5:fd:da:a3:a3:9e:5d:0d:
                    15:f4:e0:9a:1b:61:a0:34:59:58:d9:fe:3b:4a:5c:
                    5c:71:4a:2a:a1:69:e0:90:01:9c:3b:02:b7:fc:08:
                    e7:b7:a2:10:c5:ef:58:3c:22:c7:9b:14:4a:18:d5:
                    64:a3:f3:e4:9e:3a:a9:3f:69:63:43:9f:11:55:93:
                    7c:6a:b8:ae:0e:41:c5:de:3a:ae:cc:54:09:aa:92:
                    5f:84:ce:82:55:84:76:cc:74:83:33:d9:fc:1a:99:
                    ef:14:b5:61:ba:ce:62:e3:c4:d3:51:5f:60:50:a6:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6D:EE:4E:CD:FC:78:EB:94:F7:00:8D:97:DB:E7:24:58:3B:7D:E3
            X509v3 Authority Key Identifier:
                keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:76:27:da:52:09:7e:37:d5:ac:b6:4b:85:3e:d4:b9:75:59:
         de:01:c3:27:a6:71:0f:03:83:e6:80:c5:ae:37:d2:c1:39:3b:
         1b:6f:8b:0f:4e:f5:2a:0b:14:2f:50:2c:95:b6:3f:d9:02:d8:
         e7:db:85:03:73:25:e9:3f:0c:bc:cf:4e:b0:5e:fa:9f:1c:f6:
         09:de:08:18:26:ca:e6:e4:fc:73:5b:d7:57:d1:f1:09:76:b4:
         dc:7a:a5:51:a4:b5:c2:41:d7:ee:66:8f:97:64:de:aa:87:e2:
         ed:66:fd:66:30:2e:9e:f8:0d:10:18:3c:75:00:c0:c5:77:6e:
         23:e0:b2:98:95:8d:86:9b:aa:4a:6b:a0:fe:52:cd:91:59:65:
         1f:2f:37:6f:a3:ef:12:ac:a4:e3:f7:b9:f4:ae:b9:14:ab:36:
         89:dc:82:cf:95:c9:41:f1:c0:fc:e2:c6:58:7c:b4:f2:dc:1a:
         8e:8d:55:ed:22:c3:c0:d2:91:3e:f2:5f:51:42:be:e2:13:41:
         a6:40:f4:80:64:e1:67:5e:04:8b:fc:35:e3:01:85:67:58:62:
         d3:f6:6f:e6:c0:c4:0d:e6:3b:9f:4b:78:20:0a:81:0e:da:25:
         f5:ab:9d:52:1e:49:1b:25:a7:82:9a:3f:1b:71:ac:f8:2b:3c:
         9e:bf:25:62
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJyThL614F7r17qD/DQieTaDF+jQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcw
OUUzQUQ2RjAeFw0yNDAxMjIxMzQxMjNaFw0yNTAxMjAxMzQ2MjNaMDMxMTAvBgNV
BAMTKDVENkRFRTRFQ0RGQzc4RUI5NEY3MDA4RDk3REJFNzI0NTgzQjdERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlzYk5heIbL0jw8/XLrvrimTz
ScZ4DFOumWecvaQpzXm2mEFI2JkocCEdBn7VvBxL/6y4WppzL1r1AN1YQTdWE4Pb
DSfgRKknG+PtdvFOjSC27DJyxdcLQ0zsqDq6WjewFHLaEieb/kqLYKixxZl0klZY
zO9cy7b1PFkurYvINcB6/lRmoktp+qrZjoS1/dqjo55dDRX04JobYaA0WVjZ/jtK
XFxxSiqhaeCQAZw7Arf8COe3ohDF71g8IsebFEoY1WSj8+SeOqk/aWNDnxFVk3xq
uK4OQcXeOq7MVAmqkl+EzoJVhHbMdIMz2fwame8UtWG6zmLjxNNRX2BQpoFXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXW3uTs38eOuU9wCNl9vnJFg7feMwHwYDVR0j
BBgwFoAUwsdAFKGwE91L1/VJ2x77VwnjrW8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzAvQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcwOUUzQUQ2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DMkM3NDAxNEExQjAxM0RENEJE
N0Y1NDlEQjFFRkI1NzA5RTNBRDZGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3LzAvMzEz
OTMxMmUzMjM0MzIyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzMxMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAL/yxTANBgkqhkiG9w0BAQsFAAOCAQEAAXYn2lIJ
fjfVrLZLhT7UuXVZ3gHDJ6ZxDwOD5oDFrjfSwTk7G2+LD071KgsUL1AslbY/2QLY
59uFA3Ml6T8MvM9OsF76nxz2Cd4IGCbK5uT8c1vXV9HxCXa03HqlUaS1wkHX7maP
l2Teqofi7Wb9ZjAunvgNEBg8dQDAxXduI+CymJWNhpuqSmug/lLNkVllHy83b6Pv
Eqyk4/e59K65FKs2idyCz5XJQfHA/OLGWHy08twajo1V7SLDwNKRPvJfUUK+4hNB
pkD0gGThZ14Ei/w14wGFZ1hi0/Zv5sDEDeY7n0t4IAqBDtol9audUh5JGyWngpo/
G3Gs+Cs8nr8lYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org