Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137382e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3137382e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          kMrTPgLxFMzzJa/JO3YaaJDpw+8mvu7ddGUMob5dO6A=
Subject key identifier:   99:75:61:2F:B3:A2:62:C2:02:09:44:EF:9E:A9:89:DF:F1:C2:64:49
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       25CD975484840F7C72069E121525122512682D2A
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137382e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:51 +0000
ROA not before:           Wed 28 Feb 2024 20:10:51 +0000
ROA not after:            Wed 26 Feb 2025 20:15:51 +0000
asID:                     271466
IP address blocks:        201.49.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cd:97:54:84:84:0f:7c:72:06:9e:12:15:25:12:25:12:68:2d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:51 2024 GMT
            Not After : Feb 26 20:15:51 2025 GMT
        Subject: CN=9975612FB3A262C2020944EF9EA989DFF1C26449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:bf:92:e6:7b:04:cf:77:84:ad:7b:28:0c:
                    0a:44:ec:0f:a9:d1:b6:0b:0c:4f:35:be:5a:e6:1a:
                    62:8d:d7:c5:6d:04:fa:5d:c5:61:77:bc:d1:21:5f:
                    b3:d4:84:0b:55:7d:d8:12:f7:a4:76:b3:62:2a:2a:
                    ab:72:e3:27:26:c6:4b:a8:ff:53:76:1c:65:1b:3e:
                    51:94:77:f9:fd:3c:7a:f0:f5:92:08:b7:c6:35:b6:
                    4d:ce:0c:30:11:e1:ed:b2:c5:a6:c5:8b:32:f9:93:
                    94:59:40:fa:df:62:1f:10:61:7d:d6:53:dd:55:53:
                    91:90:7e:1a:ef:23:61:99:99:20:0a:8c:50:eb:57:
                    3b:52:26:16:7b:37:79:ea:64:0a:2f:8f:54:53:0f:
                    85:ee:8b:67:57:5d:1f:d4:48:11:20:8c:18:f0:f9:
                    8c:44:b0:28:10:60:4e:83:94:c2:9d:0e:8e:14:e0:
                    76:f5:f2:4a:5f:73:f7:a7:83:e1:6a:50:43:64:6c:
                    21:9e:63:e6:2c:1d:61:a0:05:cf:6f:fd:5b:9d:1f:
                    a1:c1:78:7b:84:d4:f4:5d:7b:44:6b:66:d6:4b:ec:
                    09:8c:62:25:b0:39:2d:54:87:a9:47:0f:1d:a4:82:
                    a3:da:4e:55:ec:96:11:bb:ce:4c:33:e2:4d:40:ab:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:75:61:2F:B3:A2:62:C2:02:09:44:EF:9E:A9:89:DF:F1:C2:64:49
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137382e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:90:4d:bb:6b:4e:ec:87:56:06:4a:1a:f8:0c:96:9d:36:
         2e:b8:d1:17:cd:62:4e:53:00:da:7e:13:dc:78:ec:46:df:3a:
         ca:e7:11:f1:79:91:22:89:5f:79:84:73:07:54:0a:7f:75:b4:
         6f:4e:50:b4:95:f7:15:29:c6:5b:f2:27:e9:05:4f:99:a6:57:
         03:2a:ab:6f:d2:82:63:a3:43:3c:92:35:2f:6b:c2:53:a0:8a:
         26:01:59:03:fd:79:4a:5a:a0:0f:e7:02:1e:2e:62:18:0a:fe:
         8d:4e:11:42:b9:49:15:a1:d3:6a:e6:ab:e9:ed:8c:4f:ef:41:
         e3:ac:07:e4:8b:25:b1:8c:e7:20:d8:65:64:22:0b:69:43:74:
         73:c1:73:ff:e8:3c:17:e4:6d:b0:0a:a3:1c:a1:c7:64:33:4a:
         dc:73:9c:ac:0f:38:c6:81:ac:9c:f3:cf:66:05:fe:1a:ab:f9:
         ff:d9:e0:be:c9:d2:1c:a0:b7:c9:cf:a7:4e:0d:5a:d4:dd:4f:
         cf:f8:e2:44:e3:32:a6:d6:4e:e3:22:c7:29:d5:b4:82:f2:6d:
         57:44:33:49:6e:6f:b4:28:20:55:78:ac:ab:ea:43:27:bc:f8:
         77:9f:d0:4b:e2:d1:a4:05:8f:59:17:6d:c2:5f:f0:0e:c4:af:
         af:f9:a8:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJc2XVISED3xyBp4SFSUSJRJoLSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGNTc2MzVGM0E2NTA4MTJFNEI3RkEyMEQzNDlFRUM0
QjNDMjVFNTAeFw0yNDAyMjgyMDEwNTFaFw0yNTAyMjYyMDE1NTFaMDMxMTAvBgNV
BAMTKDk5NzU2MTJGQjNBMjYyQzIwMjA5NDRFRjlFQTk4OURGRjFDMjY0NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUr+S5nsEz3eErXsoDApE7A+p
0bYLDE81vlrmGmKN18VtBPpdxWF3vNEhX7PUhAtVfdgS96R2s2IqKqty4ycmxkuo
/1N2HGUbPlGUd/n9PHrw9ZIIt8Y1tk3ODDAR4e2yxabFizL5k5RZQPrfYh8QYX3W
U91VU5GQfhrvI2GZmSAKjFDrVztSJhZ7N3nqZAovj1RTD4Xui2dXXR/USBEgjBjw
+YxEsCgQYE6DlMKdDo4U4Hb18kpfc/eng+FqUENkbCGeY+YsHWGgBc9v/VudH6HB
eHuE1PRde0RrZtZL7AmMYiWwOS1Uh6lHDx2kgqPaTlXslhG7zkwz4k1Aq0/ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmXVhL7OiYsICCUTvnqmJ3/HCZEkwHwYDVR0j
BBgwFoAUAPV2NfOmUIEuS3+iDTSe7Es8JeUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMC8wMEY1NzYzNUYzQTY1MDgxMkU0QjdGQTIwRDM0OUVFQzRCM0MyNUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwRjU3NjM1RjNBNjUwODEy
RTRCN0ZBMjBEMzQ5RUVDNEIzQzI1RTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzAv
MzIzMDMxMmUzNDM5MmUzMTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJMbIwDQYJKoZIhvcNAQELBQADggEBAGpIkE27
a07sh1YGShr4DJadNi640RfNYk5TANp+E9x47EbfOsrnEfF5kSKJX3mEcwdUCn91
tG9OULSV9xUpxlvyJ+kFT5mmVwMqq2/SgmOjQzySNS9rwlOgiiYBWQP9eUpaoA/n
Ah4uYhgK/o1OEUK5SRWh02rmq+ntjE/vQeOsB+SLJbGM5yDYZWQiC2lDdHPBc//o
PBfkbbAKoxyhx2QzStxznKwPOMaBrJzzz2YF/hqr+f/Z4L7J0hygt8nPp04NWtTd
T8/44kTjMqbWTuMixynVtILybVdEM0lub7QoIFV4rKvqQye8+Hef0Evi0aQFj1kX
bcJf8A7Er6/5qMo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org