Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32342d3234203d3e20323637343438.roa
File:                     3139322e3134312e36302e302f32342d3234203d3e20323637343438.roa (raw, json)
Hash identifier:          Q7BBc5Mg7XyRyGX0GVaPV+Xnnq0evUnYFI0BlBvp48Y=
Subject key identifier:   7A:8A:33:29:6E:54:34:59:AC:0F:2A:BC:A8:3E:36:2A:2E:46:15:9A
Certificate issuer:       /CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
Certificate serial:       322BBA6AC0D580F81D60237170B5089E03D2AB78
Authority key identifier: B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32342d3234203d3e20323637343438.roa
Signing time:             Tue 28 Nov 2023 23:04:16 +0000
ROA not before:           Tue 28 Nov 2023 22:59:16 +0000
ROA not after:            Tue 26 Nov 2024 23:04:16 +0000
asID:                     267448
IP address blocks:        192.141.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2b:ba:6a:c0:d5:80:f8:1d:60:23:71:70:b5:08:9e:03:d2:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
        Validity
            Not Before: Nov 28 22:59:16 2023 GMT
            Not After : Nov 26 23:04:16 2024 GMT
        Subject: CN=7A8A33296E543459AC0F2ABCA83E362A2E46159A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:66:25:a9:c9:a4:cc:a4:bc:97:bb:13:6f:
                    2a:8d:50:45:13:a7:68:c3:c9:08:4a:73:b4:c9:d7:
                    65:47:9d:de:2e:18:7b:12:32:10:52:6f:04:d7:78:
                    d4:fb:e4:9b:cd:62:ee:84:2f:e1:19:3d:05:d5:6d:
                    2a:c9:37:b8:40:b4:51:d1:82:87:1a:31:90:f6:53:
                    ad:d6:e7:31:c8:d5:05:b0:b4:02:1b:a1:ac:46:a7:
                    fb:b4:54:5f:2c:d4:bd:75:6b:f2:4e:f7:b0:34:6c:
                    69:91:bf:21:e5:34:8b:dc:4a:81:e6:e3:2f:f6:63:
                    bf:1a:54:a2:88:eb:8f:c6:33:c5:43:f3:0c:f3:63:
                    b5:14:4a:94:0a:fd:3e:c3:4f:da:e9:39:35:9a:9d:
                    8e:86:18:ba:7f:1a:2a:cc:e1:28:98:0e:e7:d2:3a:
                    e9:82:7e:39:62:32:25:38:c2:1b:53:8c:4a:9d:8e:
                    0b:44:7b:16:82:3c:1d:cc:12:46:6d:29:0c:ec:fa:
                    01:f4:5e:50:a4:30:e8:c0:74:3b:7f:9a:7f:ce:c7:
                    7d:bb:a9:a7:b5:af:7c:fa:b7:9e:14:f9:c2:31:ba:
                    c4:15:a5:f4:2d:b5:a3:6b:6e:e3:00:ea:87:af:38:
                    f0:7a:dd:7e:5c:7d:71:21:15:74:3b:58:50:54:84:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8A:33:29:6E:54:34:59:AC:0F:2A:BC:A8:3E:36:2A:2E:46:15:9A
            X509v3 Authority Key Identifier:
                keyid:B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32342d3234203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:2c:62:02:a5:87:46:da:0b:44:ee:91:36:67:46:ba:19:
         45:16:55:2c:67:cc:6b:ca:4a:f4:57:18:3c:18:4b:32:af:ae:
         8e:c2:1c:51:93:cb:6f:ce:56:7a:48:29:bd:02:29:d7:73:87:
         fe:d2:97:83:8d:a7:1f:ec:57:a3:51:59:3f:5a:9a:69:4a:2a:
         f1:11:8f:b3:ae:13:37:5c:4c:5f:81:13:46:d4:70:2a:cc:ed:
         a9:14:04:ac:6a:1c:ad:09:8c:42:d1:50:6c:84:d7:25:a6:48:
         60:61:79:ed:ff:03:a3:95:16:56:2a:f5:27:db:ce:2c:f1:a1:
         ec:5b:31:87:a8:84:01:29:d1:d6:e8:11:b0:d1:f1:51:24:93:
         85:67:76:68:af:ac:5f:3d:41:6a:21:2c:15:74:16:e4:cd:5a:
         99:91:4f:ab:cd:45:de:33:ad:d1:3f:1f:e0:5a:f4:28:f5:80:
         3b:b1:4a:76:30:0f:e6:02:c2:3f:9a:00:8b:51:5c:f5:c8:65:
         cc:72:97:65:54:4b:9c:84:14:6d:fa:32:a1:7d:da:9a:4d:ac:
         d2:15:f3:94:87:b2:93:97:d2:6e:ef:73:39:6a:be:0b:7c:d4:
         ca:3a:6f:50:68:d9:52:ca:6e:87:78:f2:7a:a2:65:0f:5d:3b:
         88:42:42:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMiu6asDVgPgdYCNxcLUIngPSq3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE3RDhEQTQ1OTlCNUZENTkyREU0NEI2QUI5NDI3MTEw
RjFGRTBCMjAeFw0yMzExMjgyMjU5MTZaFw0yNDExMjYyMzA0MTZaMDMxMTAvBgNV
BAMTKDdBOEEzMzI5NkU1NDM0NTlBQzBGMkFCQ0E4M0UzNjJBMkU0NjE1OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTSGYlqcmkzKS8l7sTbyqNUEUT
p2jDyQhKc7TJ12VHnd4uGHsSMhBSbwTXeNT75JvNYu6EL+EZPQXVbSrJN7hAtFHR
gocaMZD2U63W5zHI1QWwtAIboaxGp/u0VF8s1L11a/JO97A0bGmRvyHlNIvcSoHm
4y/2Y78aVKKI64/GM8VD8wzzY7UUSpQK/T7DT9rpOTWanY6GGLp/GirM4SiYDufS
OumCfjliMiU4whtTjEqdjgtEexaCPB3MEkZtKQzs+gH0XlCkMOjAdDt/mn/Ox327
qae1r3z6t54U+cIxusQVpfQttaNrbuMA6oevOPB63X5cfXEhFXQ7WFBUhDSVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeoozKW5UNFmsDyq8qD42Ki5GFZowHwYDVR0j
BBgwFoAUsX2NpFmbX9WS3kS2q5QnEQ8f4LIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFvNzhYM1A0VWJtajdjZlBRV1JMYnRUQWJLN0RHdGNCVjlnQUNIRTJr
Y0ovMC9CMTdEOERBNDU5OUI1RkQ1OTJERTQ0QjZBQjk0MjcxMTBGMUZFMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxN0Q4REE0NTk5QjVGRDU5
MkRFNDRCNkFCOTQyNzExMEYxRkUwQjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zxbzc4WDNQNFVibWo3Y2ZQUVdSTGJ0VEFiSzdER3RjQlY5Z0FDSEUya2NKLzAv
MzEzOTMyMmUzMTM0MzEyZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAjTwwDQYJKoZIhvcNAQELBQADggEBACRrLGIC
pYdG2gtE7pE2Z0a6GUUWVSxnzGvKSvRXGDwYSzKvro7CHFGTy2/OVnpIKb0CKddz
h/7Sl4ONpx/sV6NRWT9ammlKKvERj7OuEzdcTF+BE0bUcCrM7akUBKxqHK0JjELR
UGyE1yWmSGBhee3/A6OVFlYq9SfbzizxoexbMYeohAEp0dboEbDR8VEkk4Vndmiv
rF89QWohLBV0FuTNWpmRT6vNRd4zrdE/H+Ba9Cj1gDuxSnYwD+YCwj+aAItRXPXI
Zcxyl2VUS5yEFG36MqF92ppNrNIV85SHspOX0m7vczlqvgt81Mo6b1Bo2VLKbod4
8nqiZQ9dO4hCQsU=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:23 2024 by rpki-client on console.sobornost.net