Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
File:                     3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa (raw, json)
Hash identifier:          JynU/FyKUcj41943AY0DnhPN0E5MRdGC666KuObyEd0=
Subject key identifier:   4D:FA:7C:CA:A8:6D:53:F6:C0:E2:D8:59:4A:DB:44:94:27:61:F7:41
Certificate issuer:       /CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
Certificate serial:       66C5A5FB5BC6672F4F5124E207EA0A4660C59E3C
Authority key identifier: 9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa
Signing time:             Wed 20 Mar 2024 11:45:35 +0000
ROA not before:           Wed 20 Mar 2024 11:40:35 +0000
ROA not after:            Wed 19 Mar 2025 11:45:35 +0000
asID:                     271311
IP address blocks:        181.232.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c5:a5:fb:5b:c6:67:2f:4f:51:24:e2:07:ea:0a:46:60:c5:9e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Validity
            Not Before: Mar 20 11:40:35 2024 GMT
            Not After : Mar 19 11:45:35 2025 GMT
        Subject: CN=4DFA7CCAA86D53F6C0E2D8594ADB44942761F741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:f4:13:bf:2d:1e:cc:81:84:72:b7:3f:da:
                    71:34:15:c3:f2:19:9e:04:91:47:ba:87:9b:09:5a:
                    d6:34:51:82:23:e1:5e:c5:42:ef:24:53:f5:f8:ff:
                    12:8a:a4:d8:3c:7a:d8:27:5d:be:50:77:72:a4:f9:
                    63:da:ab:1c:14:ef:8d:32:56:fd:3d:0b:2d:40:f0:
                    00:24:00:6b:07:05:62:d3:9f:c5:f1:9a:d7:da:67:
                    11:b2:58:07:a4:f9:89:3a:58:bf:7c:19:fc:9d:cb:
                    97:b5:7d:0e:a3:f0:c0:a5:3c:82:d8:d5:8f:c0:24:
                    54:0e:0e:03:b6:54:c4:61:88:d8:9d:d7:dd:90:62:
                    c3:90:4e:d9:43:eb:bf:ca:64:fd:d8:12:8c:a9:60:
                    65:38:a6:a8:97:b3:02:32:01:ab:74:a8:1e:ab:34:
                    30:f5:37:ba:61:20:6f:42:5a:dd:8f:33:8c:16:b5:
                    8a:63:b2:a9:8d:87:03:7e:3a:b6:35:59:b7:10:e0:
                    39:4d:57:8d:b9:54:cf:de:d9:93:96:f3:63:e0:8d:
                    27:f8:80:6e:db:a0:93:66:29:50:98:8b:aa:3d:99:
                    9a:ac:b3:c3:4c:4c:bc:3c:3d:0d:50:33:1b:86:69:
                    c1:fa:7f:02:04:e9:b7:fe:e2:44:97:87:54:86:3c:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FA:7C:CA:A8:6D:53:F6:C0:E2:D8:59:4A:DB:44:94:27:61:F7:41
            X509v3 Authority Key Identifier:
                keyid:9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32342d3234203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:c5:70:ea:35:8e:ec:ff:21:16:66:dc:20:8a:62:2b:b3:
         c7:d8:55:3b:89:bb:1e:ef:d8:4c:54:62:6a:8d:38:c0:c6:4e:
         17:a9:55:72:e5:23:d8:76:d4:37:d2:99:b8:c0:59:fe:56:6d:
         b9:48:f1:b4:a1:47:7c:ba:23:52:23:10:d9:ab:46:ef:d5:e3:
         d3:db:48:73:0c:0d:2f:0e:91:12:31:0f:a0:ae:51:03:db:6a:
         93:54:ac:a6:ae:b3:f0:f2:6f:30:69:85:ac:d0:3f:7f:43:6f:
         90:2b:8d:e6:9f:f1:60:3e:c8:80:dd:33:1a:dc:15:bc:7d:c4:
         99:4b:06:53:41:fc:f2:33:df:69:2b:8b:6b:6d:0c:d7:5d:30:
         42:68:b0:3a:f4:65:b8:b5:12:13:c0:37:72:cf:b4:bc:d8:79:
         17:40:d5:e4:0f:e9:4c:d2:76:ab:9d:e7:fb:c1:fd:e6:2e:9a:
         25:06:c1:ed:e8:1a:b1:e2:bb:df:85:d4:54:26:f3:63:5f:cd:
         98:b9:c2:50:2d:b7:4c:f0:e6:3c:6b:d7:32:eb:50:ae:1e:ad:
         59:b0:a2:5e:d9:27:a7:13:2d:25:3b:3e:9b:a3:c4:3f:c8:03:
         cb:95:ff:06:28:5f:2f:34:1a:d6:26:22:bf:22:39:0d:89:ac:
         3e:ec:fa:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZsWl+1vGZy9PUSTiB+oKRmDFnjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMyMTI2MTBFNEIzNjc4QUU1OTgyNDgyQThCQjk1OTRB
MTA5QkRFMTAeFw0yNDAzMjAxMTQwMzVaFw0yNTAzMTkxMTQ1MzVaMDMxMTAvBgNV
BAMTKDRERkE3Q0NBQTg2RDUzRjZDMEUyRDg1OTRBREI0NDk0Mjc2MUY3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x/QTvy0ezIGEcrc/2nE0FcPy
GZ4EkUe6h5sJWtY0UYIj4V7FQu8kU/X4/xKKpNg8etgnXb5Qd3Kk+WPaqxwU740y
Vv09Cy1A8AAkAGsHBWLTn8XxmtfaZxGyWAek+Yk6WL98Gfydy5e1fQ6j8MClPILY
1Y/AJFQODgO2VMRhiNid192QYsOQTtlD67/KZP3YEoypYGU4pqiXswIyAat0qB6r
NDD1N7phIG9CWt2PM4wWtYpjsqmNhwN+OrY1WbcQ4DlNV425VM/e2ZOW82PgjSf4
gG7boJNmKVCYi6o9mZqss8NMTLw8PQ1QMxuGacH6fwIE6bf+4kSXh1SGPPfFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTfp8yqhtU/bA4thZSttElCdh90EwHwYDVR0j
BBgwFoAUnCEmEOSzZ4rlmCSCqLuVlKEJveEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2dnU1hYbjdXRHBxMXFxNmh6Ync5WThzemJtWDdEV0VxVDM1YnRoN0NX
VkUvMC85QzIxMjYxMEU0QjM2NzhBRTU5ODI0ODJBOEJCOTU5NEExMDlCREUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDMjEyNjEwRTRCMzY3OEFF
NTk4MjQ4MkE4QkI5NTk0QTEwOUJERTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdnZ1NYWG43V0RwcTFxcTZoemJ3OVk4c3pibVg3RFdFcVQzNWJ0aDdDV1ZFLzAv
MzEzODMxMmUzMjMzMzIyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALXopjANBgkqhkiG9w0BAQsFAAOCAQEAfgzF
cOo1juz/IRZm3CCKYiuzx9hVO4m7Hu/YTFRiao04wMZOF6lVcuUj2HbUN9KZuMBZ
/lZtuUjxtKFHfLojUiMQ2atG79Xj09tIcwwNLw6REjEPoK5RA9tqk1Sspq6z8PJv
MGmFrNA/f0NvkCuN5p/xYD7IgN0zGtwVvH3EmUsGU0H88jPfaSuLa20M110wQmiw
OvRluLUSE8A3cs+0vNh5F0DV5A/pTNJ2q53n+8H95i6aJQbB7egaseK734XUVCbz
Y1/NmLnCUC23TPDmPGvXMutQrh6tWbCiXtknpxMtJTs+m6PEP8gDy5X/BihfLzQa
1iYivyI5DYmsPuz60Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org