Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33352e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          n9q7jHp+VxpPMKMwpoaKN4z+CrQyFfJipRzr3hJ/q80=
Subject key identifier:   38:CB:D5:0D:1A:BD:BE:11:97:1A:15:9E:BC:60:CA:64:01:ED:04:D0
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       4D5E300E9216AC92F2C6D9C1958055C02424A48B
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:21:27 +0000
ROA not before:           Wed 10 Apr 2024 00:16:27 +0000
ROA not after:            Wed 09 Apr 2025 00:21:27 +0000
asID:                     264550
IP address blocks:        170.0.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5e:30:0e:92:16:ac:92:f2:c6:d9:c1:95:80:55:c0:24:24:a4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:16:27 2024 GMT
            Not After : Apr  9 00:21:27 2025 GMT
        Subject: CN=38CBD50D1ABDBE11971A159EBC60CA6401ED04D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1e:ef:2b:fe:ba:ad:4c:a4:aa:f4:ef:eb:10:
                    10:7f:3c:9a:27:ce:a8:b8:8d:a6:ad:e3:ff:17:59:
                    7a:9d:c0:5c:73:e4:bf:d4:d8:39:fa:93:66:5c:9a:
                    58:6c:52:c3:c0:a5:ba:81:db:82:c9:c5:55:ae:b9:
                    0d:57:55:33:63:49:7d:66:28:73:06:35:03:28:d3:
                    53:c4:28:fd:a8:42:30:71:95:78:b9:4c:7b:e8:b6:
                    fa:6e:72:76:a6:5f:05:82:e4:3b:29:08:84:41:bb:
                    c9:75:67:d9:5f:b3:0b:55:4d:b7:b0:7b:d6:aa:87:
                    d7:65:78:8b:08:08:b4:f3:37:2c:5e:08:e6:cd:53:
                    68:b1:b8:78:75:26:ad:5c:7f:20:d4:75:da:8f:6f:
                    46:13:20:21:fe:c3:5c:34:cb:c4:e8:f1:25:89:d9:
                    7d:99:8e:34:b5:ad:3b:9f:5c:cc:38:82:7a:ab:67:
                    24:1d:86:c1:43:7f:98:bb:51:36:82:9d:2e:5d:a6:
                    20:e4:78:da:14:9e:61:ac:05:92:52:70:1b:dd:e9:
                    8a:a9:1a:16:1d:2b:f4:ef:81:be:9d:00:40:71:23:
                    82:62:fa:9f:6d:5b:56:22:ed:4c:8d:50:49:0b:10:
                    fd:c3:e0:12:32:4a:d9:8d:01:37:91:63:b7:46:f6:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:D5:0D:1A:BD:BE:11:97:1A:15:9E:BC:60:CA:64:01:ED:04:D0
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3137302e302e33352e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:e1:28:b7:a4:f6:1a:5d:53:53:d9:3c:af:a2:ea:62:ff:b0:
         4d:95:45:8c:62:4f:1b:b2:b8:db:d1:06:90:dd:d1:24:47:29:
         fe:7b:b6:8d:77:32:ff:f8:c0:d5:3f:27:2f:17:db:55:1d:c8:
         a8:6a:a3:5f:58:a8:8e:59:97:ed:b5:81:9b:de:ba:52:38:dc:
         f5:3c:75:2a:36:39:ca:c8:3d:66:e5:d5:7c:84:0f:3d:4a:96:
         36:1a:51:a0:c9:f3:1d:c8:87:0c:fe:3e:fe:40:b8:a0:62:c2:
         2d:1b:b9:78:ae:05:3c:ca:cc:9b:2e:05:cc:fc:38:e0:c4:ce:
         f4:93:71:4f:fc:7e:8b:95:df:d4:40:4b:5c:35:a8:6f:dc:18:
         3c:e5:f9:09:a9:59:c3:2e:e7:d1:b0:22:60:4a:b6:77:8a:a9:
         c6:82:50:51:7e:e6:38:10:25:43:20:31:a6:19:f7:1b:19:1c:
         08:a0:39:ab:6f:41:f4:c2:70:52:c2:64:3a:2e:b9:78:bb:76:
         18:cb:76:6d:bd:2c:28:f1:38:9c:e4:45:44:9c:cf:54:3f:3f:
         9f:70:20:df:aa:1f:fb:af:ec:16:28:c9:64:9f:b6:7f:95:2c:
         18:67:b7:e0:a6:d0:6e:2e:1b:2b:56:8e:6f:84:de:80:0e:e0:
         53:67:26:00
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTV4wDpIWrJLyxtnBlYBVwCQkpIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxOTAxRDQ5QURENEY5QkY4RDhCQTU3MjRGNjAzMERD
MTM5NTc4RTAeFw0yNDA0MTAwMDE2MjdaFw0yNTA0MDkwMDIxMjdaMDMxMTAvBgNV
BAMTKDM4Q0JENTBEMUFCREJFMTE5NzFBMTU5RUJDNjBDQTY0MDFFRDA0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHu8r/rqtTKSq9O/rEBB/PJon
zqi4jaat4/8XWXqdwFxz5L/U2Dn6k2ZcmlhsUsPApbqB24LJxVWuuQ1XVTNjSX1m
KHMGNQMo01PEKP2oQjBxlXi5THvotvpucnamXwWC5DspCIRBu8l1Z9lfswtVTbew
e9aqh9dleIsICLTzNyxeCObNU2ixuHh1Jq1cfyDUddqPb0YTICH+w1w0y8To8SWJ
2X2ZjjS1rTufXMw4gnqrZyQdhsFDf5i7UTaCnS5dpiDkeNoUnmGsBZJScBvd6Yqp
GhYdK/Tvgb6dAEBxI4Ji+p9tW1Yi7UyNUEkLEP3D4BIyStmNATeRY7dG9r3DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOMvVDRq9vhGXGhWevGDKZAHtBNAwHwYDVR0j
BBgwFoAUDxkB1JrdT5v42LpXJPYDDcE5V44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMS8wRjE5MDFENDlBREQ0RjlCRjhEOEJBNTcyNEY2MDMwREMxMzk1NzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGMTkwMUQ0OUFERDRGOUJG
OEQ4QkE1NzI0RjYwMzBEQzEzOTU3OEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzEv
MzEzNzMwMmUzMDJlMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM1
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKoAIzANBgkqhkiG9w0BAQsFAAOCAQEAseEot6T2Gl1T
U9k8r6LqYv+wTZVFjGJPG7K429EGkN3RJEcp/nu2jXcy//jA1T8nLxfbVR3IqGqj
X1iojlmX7bWBm966Ujjc9Tx1KjY5ysg9ZuXVfIQPPUqWNhpRoMnzHciHDP4+/kC4
oGLCLRu5eK4FPMrMmy4FzPw44MTO9JNxT/x+i5Xf1EBLXDWob9wYPOX5CalZwy7n
0bAiYEq2d4qpxoJQUX7mOBAlQyAxphn3GxkcCKA5q29B9MJwUsJkOi65eLt2GMt2
bb0sKPE4nORFRJzPVD8/n3Ag36of+6/sFijJZJ+2f5UsGGe34KbQbi4bK1aOb4Te
gA7gU2cmAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org