Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
File:                     3137302e302e33322e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          ReQCvMPOpegr88Uf/Vy2Mrd2zq57HP8G6hLvm+DJWrE=
Subject key identifier:   76:C9:99:EB:DF:F1:63:58:31:E7:A9:38:AC:A3:06:00:9B:C1:CF:06
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       49E9AE6286CBB04AC1D57A98383410A451BD9D78
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:14 +0000
ROA not before:           Wed 10 Apr 2024 00:16:14 +0000
ROA not after:            Wed 09 Apr 2025 00:21:14 +0000
asID:                     264550
IP address blocks:        170.0.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e9:ae:62:86:cb:b0:4a:c1:d5:7a:98:38:34:10:a4:51:bd:9d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:16:14 2024 GMT
            Not After : Apr  9 00:21:14 2025 GMT
        Subject: CN=76C999EBDFF1635831E7A938ACA306009BC1CF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:eb:21:93:d5:c0:03:b0:69:99:27:c1:a5:
                    26:ac:21:52:41:17:84:06:bd:65:e2:a4:97:eb:eb:
                    db:bd:f6:1b:ab:43:c3:9c:97:9e:91:fe:48:b1:22:
                    2b:c5:79:18:34:df:4d:f0:b0:e7:da:bb:50:75:dc:
                    e2:c5:8d:82:02:b8:a0:b3:1e:42:cf:c7:59:ba:81:
                    c9:fd:53:0f:2e:49:1b:29:63:96:0e:e6:6b:cc:3e:
                    52:e6:f1:4a:9d:75:19:bf:ac:2a:5e:b5:46:fb:a6:
                    bf:b2:75:0a:91:ac:dc:e1:88:32:b3:9e:62:b6:9f:
                    ff:3c:c8:ad:3d:97:23:74:47:bc:3c:ac:b0:45:02:
                    3e:1e:7d:bc:ae:a6:c3:75:6c:be:c6:f7:50:75:9d:
                    9b:bf:1f:0f:c5:65:60:b5:5b:d9:35:5f:a4:52:ff:
                    b0:62:5f:ab:15:c0:12:e7:4b:0d:24:76:35:02:a3:
                    c9:2c:b8:4d:75:71:b2:b1:ec:ee:dd:69:fb:2b:79:
                    73:73:7c:97:26:bf:57:ee:f2:95:d2:f6:a5:da:17:
                    e3:f6:db:4a:f0:4b:0e:c8:c0:5d:15:02:4c:a1:12:
                    9f:7c:b5:58:0f:0c:a6:80:bb:3f:d4:42:36:e3:2b:
                    ae:f2:84:f7:0d:4e:82:fa:61:27:31:ee:6c:80:7d:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:99:EB:DF:F1:63:58:31:E7:A9:38:AC:A3:06:00:9B:C1:CF:06
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33322e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:f7:4c:8c:7e:2c:8d:ca:0a:02:ca:30:b9:1b:2e:d0:fa:
         84:0d:a4:b8:d6:80:54:71:f9:41:d6:81:fe:4a:e0:f2:bd:90:
         c3:b8:dd:3a:7e:a5:b4:e5:8a:15:77:58:14:2a:9e:e4:e2:6d:
         44:5b:18:19:f9:db:15:7a:ac:ca:c9:6b:f9:34:fd:f5:5a:d6:
         07:bc:88:65:44:1d:8e:c9:aa:f0:e8:44:a3:5a:60:f8:e2:66:
         c1:1f:1e:9b:f8:db:b2:ec:aa:4f:a9:9a:a4:2f:61:41:7f:fc:
         6f:2e:b3:94:c6:f7:60:5d:14:0d:f1:91:0b:6e:db:24:e2:8e:
         f6:59:4f:bc:bb:77:62:4e:7b:bc:5b:01:88:ad:ed:ab:09:8b:
         43:3d:63:85:b9:83:e2:2d:c8:2a:2b:9d:7a:91:c4:13:75:e2:
         4c:aa:ca:01:75:92:e7:5e:02:90:a2:77:2a:10:02:5f:f4:38:
         3e:d0:c2:20:f5:b8:c3:10:37:dc:80:bc:c9:08:b0:00:7b:76:
         3a:9e:cf:4e:84:98:ce:1d:df:1f:7b:9f:36:a7:8e:62:93:4d:
         00:f8:77:e4:e1:eb:61:2a:d0:3d:96:ae:9b:6f:e5:59:84:f8:
         98:87:7c:d2:8f:bf:66:1a:93:6e:f4:d4:ae:32:bb:b0:ce:f5:
         b4:ef:d1:c4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSemuYobLsErB1XqYODQQpFG9nXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxOTAxRDQ5QURENEY5QkY4RDhCQTU3MjRGNjAzMERD
MTM5NTc4RTAeFw0yNDA0MTAwMDE2MTRaFw0yNTA0MDkwMDIxMTRaMDMxMTAvBgNV
BAMTKDc2Qzk5OUVCREZGMTYzNTgzMUU3QTkzOEFDQTMwNjAwOUJDMUNGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYeshk9XAA7BpmSfBpSasIVJB
F4QGvWXipJfr69u99hurQ8Ocl56R/kixIivFeRg0303wsOfau1B13OLFjYICuKCz
HkLPx1m6gcn9Uw8uSRspY5YO5mvMPlLm8UqddRm/rCpetUb7pr+ydQqRrNzhiDKz
nmK2n/88yK09lyN0R7w8rLBFAj4efbyupsN1bL7G91B1nZu/Hw/FZWC1W9k1X6RS
/7BiX6sVwBLnSw0kdjUCo8ksuE11cbKx7O7dafsreXNzfJcmv1fu8pXS9qXaF+P2
20rwSw7IwF0VAkyhEp98tVgPDKaAuz/UQjbjK67yhPcNToL6YScx7myAfUKFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdsmZ69/xY1gx56k4rKMGAJvBzwYwHwYDVR0j
BBgwFoAUDxkB1JrdT5v42LpXJPYDDcE5V44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMS8wRjE5MDFENDlBREQ0RjlCRjhEOEJBNTcyNEY2MDMwREMxMzk1NzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGMTkwMUQ0OUFERDRGOUJG
OEQ4QkE1NzI0RjYwMzBEQzEzOTU3OEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzEv
MzEzNzMwMmUzMDJlMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNDM1
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAaoAIDANBgkqhkiG9w0BAQsFAAOCAQEAVl73TIx+LI3K
CgLKMLkbLtD6hA2kuNaAVHH5QdaB/krg8r2Qw7jdOn6ltOWKFXdYFCqe5OJtRFsY
GfnbFXqsyslr+TT99VrWB7yIZUQdjsmq8OhEo1pg+OJmwR8em/jbsuyqT6mapC9h
QX/8by6zlMb3YF0UDfGRC27bJOKO9llPvLt3Yk57vFsBiK3tqwmLQz1jhbmD4i3I
KiudepHEE3XiTKrKAXWS514CkKJ3KhACX/Q4PtDCIPW4wxA33IC8yQiwAHt2Op7P
ToSYzh3fH3ufNqeOYpNNAPh35OHrYSrQPZaum2/lWYT4mId80o+/ZhqTbvTUrjK7
sM71tO/RxA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org