Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130352e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130352e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          HE4gzePHt8zsq5FOf1A+DhpYbrUVVV/fQUpuNgX0yIg=
Subject key identifier:   AF:32:25:F1:C0:84:36:5C:80:66:1C:24:7E:26:AC:FE:65:EC:35:96
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       6086197BB6DF492DC81BB96E72F4B1977C9783FB
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130352e302f32342d3234203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:24 +0000
ROA not before:           Wed 03 Apr 2024 13:48:24 +0000
ROA not after:            Wed 02 Apr 2025 13:53:24 +0000
asID:                     270266
IP address blocks:        200.115.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:19:7b:b6:df:49:2d:c8:1b:b9:6e:72:f4:b1:97:7c:97:83:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:24 2024 GMT
            Not After : Apr  2 13:53:24 2025 GMT
        Subject: CN=AF3225F1C084365C80661C247E26ACFE65EC3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:01:d9:4b:48:a7:b4:75:e8:7f:54:2d:72:
                    d8:f5:bf:b9:d1:fd:1f:0e:ba:a6:27:9f:04:df:86:
                    31:19:37:8c:92:af:0d:e0:de:12:89:81:5a:fd:dd:
                    8b:42:36:31:43:ed:31:ed:55:f0:27:69:52:9b:af:
                    c2:6c:f2:2b:66:ac:be:da:d6:35:35:0e:e7:fb:2b:
                    ab:70:ab:80:5f:6f:65:be:74:ab:04:fe:11:88:3b:
                    07:fc:11:85:0b:aa:96:cd:cb:4b:6f:57:a2:c8:96:
                    88:b8:b4:e8:79:9e:2f:34:c0:41:5a:d9:3b:f3:da:
                    a1:7f:f5:ce:44:22:44:55:76:ec:0b:33:3a:b4:45:
                    b2:37:39:eb:f9:0f:c8:c1:a0:7b:a1:bd:4b:ec:04:
                    56:9f:b7:5a:a2:33:6c:61:c1:06:6f:33:64:7f:3d:
                    70:f8:d1:d7:a4:29:45:17:ee:92:c0:b2:9f:7b:71:
                    67:8e:5e:41:7c:36:5b:48:98:8d:38:42:b2:3b:f4:
                    7e:8d:89:8c:e9:81:3b:85:c0:90:fd:2e:85:54:d6:
                    aa:ec:cb:a7:c5:e8:97:5d:ce:01:a0:c4:bf:e9:68:
                    8d:e1:b1:45:3d:25:a0:99:5b:ac:39:4d:bf:07:eb:
                    65:a4:8d:83:ca:4c:66:19:1b:b1:d3:24:d1:9c:e7:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:25:F1:C0:84:36:5C:80:66:1C:24:7E:26:AC:FE:65:EC:35:96
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130352e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:a9:08:b4:cc:3a:a0:fe:bd:3a:e5:d1:dc:c8:fa:d7:b5:
         c1:49:7c:d8:46:c7:71:14:67:e6:95:a2:17:c2:aa:6d:d7:46:
         e6:0b:9f:e8:5a:0f:56:93:4b:18:ff:4d:26:2d:15:7f:05:21:
         31:89:d5:e3:a3:45:d5:3f:a6:4b:39:da:82:a5:8b:1e:b2:d2:
         2b:27:62:84:9c:16:d8:20:ab:06:3f:a7:93:d9:aa:6d:1a:d3:
         40:2b:1f:19:cc:4d:39:05:bc:c7:18:4f:90:01:c8:1e:ef:01:
         59:7f:42:c0:eb:91:bd:dd:f2:5e:b3:0a:0f:c6:0b:60:6b:2b:
         36:22:2a:c1:89:46:02:70:a5:ac:a0:12:dd:0f:07:54:24:f9:
         64:5d:da:13:5c:c6:ba:90:71:04:7d:be:2f:32:27:41:b4:dd:
         ae:28:4d:02:92:09:82:b0:e7:99:ef:62:e3:0a:8f:e0:e3:81:
         b5:44:84:1d:57:91:79:5b:12:de:e9:ce:17:33:75:75:17:1b:
         10:40:dc:2f:bc:77:ba:7e:bd:38:40:a4:df:d9:51:18:0b:18:
         7c:4a:65:c9:74:51:78:f2:f0:56:09:29:6c:0a:f6:8f:31:93:
         b5:be:98:cb:09:99:87:a7:cc:9b:a4:1c:9b:bf:7d:4b:db:57:
         b0:60:6a:8a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYIYZe7bfSS3IG7lucvSxl3yXg/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg0NzBDMTBBQzY0NEJFRjRERjI2NjkyNEM0RTA4MzJD
OEZCQThBMjAeFw0yNDA0MDMxMzQ4MjRaFw0yNTA0MDIxMzUzMjRaMDMxMTAvBgNV
BAMTKEFGMzIyNUYxQzA4NDM2NUM4MDY2MUMyNDdFMjZBQ0ZFNjVFQzM1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZwHZS0intHXof1Qtctj1v7nR
/R8OuqYnnwTfhjEZN4ySrw3g3hKJgVr93YtCNjFD7THtVfAnaVKbr8Js8itmrL7a
1jU1Duf7K6twq4Bfb2W+dKsE/hGIOwf8EYULqpbNy0tvV6LIloi4tOh5ni80wEFa
2Tvz2qF/9c5EIkRVduwLMzq0RbI3Oev5D8jBoHuhvUvsBFaft1qiM2xhwQZvM2R/
PXD40dekKUUX7pLAsp97cWeOXkF8NltImI04QrI79H6NiYzpgTuFwJD9LoVU1qrs
y6fF6JddzgGgxL/paI3hsUU9JaCZW6w5Tb8H62WkjYPKTGYZG7HTJNGc554dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrzIl8cCENlyAZhwkfias/mXsNZYwHwYDVR0j
BBgwFoAUuEcMEKxkS+9N8maSTE4IMsj7qKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMC9CODQ3MEMxMEFDNjQ0QkVGNERGMjY2OTI0QzRFMDgzMkM4RkJBOEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4NDcwQzEwQUM2NDRCRUY0
REYyNjY5MjRDNEUwODMyQzhGQkE4QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzAv
MzIzMDMwMmUzMTMxMzUyZTMxMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhzaTANBgkqhkiG9w0BAQsFAAOCAQEANP+p
CLTMOqD+vTrl0dzI+te1wUl82EbHcRRn5pWiF8KqbddG5guf6FoPVpNLGP9NJi0V
fwUhMYnV46NF1T+mSznagqWLHrLSKydihJwW2CCrBj+nk9mqbRrTQCsfGcxNOQW8
xxhPkAHIHu8BWX9CwOuRvd3yXrMKD8YLYGsrNiIqwYlGAnClrKAS3Q8HVCT5ZF3a
E1zGupBxBH2+LzInQbTdrihNApIJgrDnme9i4wqP4OOBtUSEHVeReVsS3unOFzN1
dRcbEEDcL7x3un69OECk39lRGAsYfEplyXRRePLwVgkpbAr2jzGTtb6YywmZh6fM
m6Qcm799S9tXsGBqig==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org