Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26272.roa
File:                     AS26272.roa (raw, json)
Hash identifier:          ACvp104he1RsetHOlmWrUz0UNTSlW7MzCQEPOFAFZ2o=
Subject key identifier:   CB:C3:E2:1C:DE:81:88:16:71:24:3B:D5:19:21:0A:94:DF:57:DC:BA
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       031E8B895AFB3B649C0A2EEFBCCBAF14AB5119A6
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26272.roa
Signing time:             Wed 13 Mar 2024 05:56:33 +0000
ROA not before:           Wed 13 Mar 2024 05:51:33 +0000
ROA not after:            Wed 12 Mar 2025 05:56:33 +0000
asID:                     26272
IP address blocks:        186.192.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1e:8b:89:5a:fb:3b:64:9c:0a:2e:ef:bc:cb:af:14:ab:51:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 13 05:51:33 2024 GMT
            Not After : Mar 12 05:56:33 2025 GMT
        Subject: CN=CBC3E21CDE81881671243BD519210A94DF57DCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:fb:08:88:8c:05:f9:05:e8:37:d4:6a:ea:
                    77:98:85:f3:62:58:52:33:83:d8:65:93:5c:b1:15:
                    1b:d3:70:b9:0b:e7:35:e3:59:82:d8:75:2a:84:86:
                    43:dd:8e:bf:58:ac:c2:87:b4:5c:5a:5b:01:7b:7a:
                    c6:a9:c9:e6:cb:1d:b1:4a:8d:2f:68:1f:53:89:62:
                    d5:9f:ae:d1:1d:c0:dc:f1:f1:34:1f:df:57:fc:b3:
                    fa:27:24:82:2d:48:d6:07:ca:50:b4:ea:7d:ff:df:
                    7d:d9:a2:5a:ea:79:c9:bd:cc:33:f6:09:60:95:62:
                    4c:ef:d6:d7:0a:d4:bc:8e:ac:09:ee:b9:4b:89:d3:
                    1c:2f:6f:e4:e8:d0:27:85:ec:5e:b2:fc:14:db:7f:
                    75:43:ac:63:13:a3:b0:ef:41:6f:6c:26:60:cc:d8:
                    a7:4a:13:25:49:6b:3b:9c:66:03:57:d5:19:c4:c7:
                    ef:8d:78:8a:c4:04:61:34:70:62:76:2b:6b:f1:b4:
                    21:4a:d7:c1:50:30:cf:c2:62:e7:af:ff:11:23:7f:
                    09:9d:bf:28:96:6f:ba:ef:d7:7f:8a:60:a0:e0:53:
                    6e:60:09:af:64:b4:e0:48:f3:64:da:12:b6:30:69:
                    8d:c1:37:6d:4c:82:49:67:b8:4b:aa:df:14:cb:f1:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:E2:1C:DE:81:88:16:71:24:3B:D5:19:21:0A:94:DF:57:DC:BA
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:61:5a:6b:ed:e3:09:21:9f:74:76:a9:3a:d1:b4:0d:4d:
         ee:13:42:f4:a0:35:87:72:45:b9:af:af:bf:d0:d5:9f:2b:bb:
         0e:09:3e:79:18:cb:a8:ed:48:7b:74:f7:18:f5:7e:29:df:6a:
         24:ac:9e:7b:16:32:dc:15:db:59:2c:06:b3:94:5e:1e:9a:39:
         d3:32:7a:46:c8:27:39:ba:6d:12:a5:33:ac:b5:b4:6d:b0:2e:
         33:51:11:c4:dd:00:6b:c8:7c:0d:fa:63:6b:34:9b:8b:db:d3:
         ed:80:6b:a0:2f:a9:4a:90:7e:25:17:07:fc:b7:48:fe:a9:41:
         2c:af:a2:ed:2b:15:a7:8b:3c:13:71:19:39:93:b4:0d:a9:03:
         eb:da:b5:8a:d1:93:6b:8c:47:2b:dd:96:ff:3f:d2:a4:ab:49:
         b4:20:e2:5d:35:95:8f:08:d8:6e:3c:b8:d3:17:6a:38:bd:56:
         92:14:6c:e5:cf:1a:37:91:ff:c1:a5:fd:39:52:e9:6a:6e:78:
         75:b1:2c:7e:9f:e3:18:cc:4e:ec:4a:2c:97:f9:6b:09:7b:d2:
         fa:f7:e2:a6:a7:5b:98:3e:bf:0e:b7:b4:f5:cf:91:e8:3e:a3:
         0b:39:4e:dd:db:d1:42:88:56:09:d1:f4:21:42:4f:bf:32:02:
         cf:19:ed:94
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUAx6LiVr7O2ScCi7vvMuvFKtRGaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTMwNTUxMzNaFw0yNTAzMTIwNTU2MzNaMDMxMTAvBgNV
BAMTKENCQzNFMjFDREU4MTg4MTY3MTI0M0JENTE5MjEwQTk0REY1N0RDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlPsIiIwF+QXoN9Rq6neYhfNi
WFIzg9hlk1yxFRvTcLkL5zXjWYLYdSqEhkPdjr9YrMKHtFxaWwF7esapyebLHbFK
jS9oH1OJYtWfrtEdwNzx8TQf31f8s/onJIItSNYHylC06n3/333Zolrqecm9zDP2
CWCVYkzv1tcK1LyOrAnuuUuJ0xwvb+To0CeF7F6y/BTbf3VDrGMTo7DvQW9sJmDM
2KdKEyVJazucZgNX1RnEx++NeIrEBGE0cGJ2K2vxtCFK18FQMM/CYuev/xEjfwmd
vyiWb7rv13+KYKDgU25gCa9ktOBI82TaErYwaY3BN21MgklnuEuq3xTL8YYxAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUy8PiHN6BiBZxJDvVGSEKlN9X3LowHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjYy
NzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC6wBEwDQYJKoZIhvcNAQELBQADggEBAD9hYVpr7eMJIZ90
dqk60bQNTe4TQvSgNYdyRbmvr7/Q1Z8ruw4JPnkYy6jtSHt09xj1finfaiSsnnsW
MtwV21ksBrOUXh6aOdMyekbIJzm6bRKlM6y1tG2wLjNREcTdAGvIfA36Y2s0m4vb
0+2Aa6AvqUqQfiUXB/y3SP6pQSyvou0rFaeLPBNxGTmTtA2pA+vatYrRk2uMRyvd
lv8/0qSrSbQg4l01lY8I2G48uNMXaji9VpIUbOXPGjeR/8Gl/TlS6WpueHWxLH6f
4xjMTuxKLJf5awl70vr34qanW5g+vw63tPXPkeg+ows5Tt3b0UKIVgnR9CFCT78y
As8Z7ZQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org