Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa
File:                     3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa (raw, json)
Hash identifier:          SHOWfmieIz7kFDxk+mHaWdwNeiEFre0z0oTHkADLgcg=
Subject key identifier:   2A:C3:D9:56:9D:3B:BD:23:7B:32:84:73:46:B8:FC:B9:6B:0E:F9:B3
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       7A054E3E06A920EACA2003C7EE9D99A07F2AD210
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa
Signing time:             Fri 27 Oct 2023 18:45:22 +0000
ROA not before:           Fri 27 Oct 2023 18:40:22 +0000
ROA not after:            Fri 25 Oct 2024 18:45:22 +0000
asID:                     271008
IP address blocks:        170.254.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:05:4e:3e:06:a9:20:ea:ca:20:03:c7:ee:9d:99:a0:7f:2a:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Oct 27 18:40:22 2023 GMT
            Not After : Oct 25 18:45:22 2024 GMT
        Subject: CN=2AC3D9569D3BBD237B32847346B8FCB96B0EF9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:fd:a0:65:25:d9:c4:04:14:3a:39:0c:32:
                    f0:2d:a5:44:ea:3d:4b:58:32:ef:0f:6d:22:cc:d1:
                    22:3b:a1:dd:64:f6:78:b0:c3:89:ed:99:43:5e:d7:
                    6c:15:f3:04:e3:cb:b8:6f:2c:73:39:2a:12:96:68:
                    eb:ac:5b:b7:1b:87:f6:6d:ef:20:6f:9b:20:79:2a:
                    80:fa:ee:eb:06:6b:0a:97:68:1c:4b:08:9e:c4:29:
                    c1:a9:9e:7a:e1:9c:e1:6a:1b:43:5a:37:41:e0:22:
                    84:90:95:d7:1f:92:05:79:c8:52:a7:05:79:26:ab:
                    c0:39:9d:d5:4b:1a:48:7e:20:e4:f6:4a:79:b1:c4:
                    b4:cc:c7:d7:c1:0a:9f:80:7b:66:41:d4:c7:e4:ad:
                    e2:7e:91:04:77:7c:b9:d5:9d:22:c1:8e:11:4a:51:
                    7d:da:85:9d:a1:ef:86:d3:33:ff:3b:57:62:71:6c:
                    50:d6:fa:a4:34:d1:f6:2b:01:cc:a3:27:fd:04:27:
                    f4:38:95:31:23:6d:d8:0c:ee:1e:b9:bc:ec:f4:4b:
                    f5:b7:99:c4:b1:fe:52:f5:19:da:10:44:2b:87:17:
                    81:1f:4f:8a:ce:76:d4:7d:e8:9f:22:7e:a9:ac:22:
                    cd:b8:3f:c0:ce:cc:ea:fb:ed:c9:da:79:99:bd:03:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:D9:56:9D:3B:BD:23:7B:32:84:73:46:B8:FC:B9:6B:0E:F9:B3
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:e1:19:06:89:fe:e0:53:13:ff:61:f8:ce:35:da:7c:0e:d5:
         1b:1d:5b:89:24:7a:55:00:c9:d1:0e:83:e0:cf:c9:46:e0:fa:
         b2:52:1c:78:e8:e2:fe:09:ab:c5:ce:d9:91:06:18:17:b0:59:
         37:dc:44:55:3e:48:02:7b:58:a7:c0:48:47:b5:00:b2:2f:66:
         33:b2:e4:e3:b9:c7:33:47:ce:57:bf:03:34:64:3e:21:12:13:
         f3:19:d3:8f:9d:2d:26:64:84:69:65:8e:a5:43:a8:05:ff:7b:
         38:1d:8b:7b:ae:5d:4d:65:af:38:41:55:31:94:d4:9a:e3:40:
         c8:c5:c5:3e:df:8f:50:59:ce:f3:31:e4:bc:ba:13:a5:ae:5c:
         64:12:01:d2:05:74:d7:85:67:28:81:2f:61:a7:07:07:f0:09:
         a6:bf:d9:3a:eb:c1:cf:84:ef:c4:84:0e:b7:8f:b8:ec:54:7b:
         f1:d9:6c:33:e2:44:f6:f2:a1:67:12:27:05:6b:b3:84:4d:69:
         fb:ce:80:96:7c:e1:ed:81:fc:3b:65:e3:95:49:0f:7e:98:ff:
         f4:01:23:f8:57:aa:81:3b:55:e5:db:9a:6a:4b:ec:f0:3b:79:
         b6:cb:af:1f:99:fb:ad:d7:ba:94:d8:2c:b0:6e:53:f1:df:a9:
         c9:58:91:a6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUegVOPgapIOrKIAPH7p2ZoH8q0hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FGRTQ2OUZGRjBGQzYwQzBFNUU4ODI0RTA5NURFMzU5
ODVDN0NEMDAeFw0yMzEwMjcxODQwMjJaFw0yNDEwMjUxODQ1MjJaMDMxMTAvBgNV
BAMTKDJBQzNEOTU2OUQzQkJEMjM3QjMyODQ3MzQ2QjhGQ0I5NkIwRUY5QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRv2gZSXZxAQUOjkMMvAtpUTq
PUtYMu8PbSLM0SI7od1k9niww4ntmUNe12wV8wTjy7hvLHM5KhKWaOusW7cbh/Zt
7yBvmyB5KoD67usGawqXaBxLCJ7EKcGpnnrhnOFqG0NaN0HgIoSQldcfkgV5yFKn
BXkmq8A5ndVLGkh+IOT2SnmxxLTMx9fBCp+Ae2ZB1MfkreJ+kQR3fLnVnSLBjhFK
UX3ahZ2h74bTM/87V2JxbFDW+qQ00fYrAcyjJ/0EJ/Q4lTEjbdgM7h65vOz0S/W3
mcSx/lL1GdoQRCuHF4EfT4rOdtR96J8ifqmsIs24P8DOzOr77cnaeZm9AzpDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKsPZVp07vSN7MoRzRrj8uWsO+bMwHwYDVR0j
BBgwFoAUev5Gn/8PxgwOXogk4JXeNZhcfNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJp
V0IvMC83QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4NUM3Q0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBRkU0NjlGRkYwRkM2MEMw
RTVFODgyNEUwOTVERTM1OTg1QzdDRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5ckVRaFZqaXNLOFEyN3IxM3paSkszMnNYUTRDUkZCUFZTOEtOaFpCaVdCLzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMwMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+ezANBgkqhkiG9w0BAQsFAAOCAQEAkOEZ
Bon+4FMT/2H4zjXafA7VGx1biSR6VQDJ0Q6D4M/JRuD6slIceOji/gmrxc7ZkQYY
F7BZN9xEVT5IAntYp8BIR7UAsi9mM7Lk47nHM0fOV78DNGQ+IRIT8xnTj50tJmSE
aWWOpUOoBf97OB2Le65dTWWvOEFVMZTUmuNAyMXFPt+PUFnO8zHkvLoTpa5cZBIB
0gV014VnKIEvYacHB/AJpr/ZOuvBz4TvxIQOt4+47FR78dlsM+JE9vKhZxInBWuz
hE1p+86Alnzh7YH8O2XjlUkPfpj/9AEj+FeqgTtV5duaakvs8Dt5tsuvH5n7rde6
lNgssG5T8d+pyViRpg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org