Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231332e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231332e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          GjGmPDiUi8kgIVJWvB9YE9dZGuFY9b1c+2mIuTm2mrw=
Subject key identifier:   1B:D1:D5:57:16:25:F9:B7:C6:C7:8F:4E:84:7A:68:F3:13:74:43:AC
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       143279882CA9851E5D731E779471E88ED6FE8E4C
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231332e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:08:45 +0000
ROA not before:           Thu 20 Jul 2023 14:03:45 +0000
ROA not after:            Thu 18 Jul 2024 14:08:45 +0000
asID:                     52706
IP address blocks:        170.233.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:79:88:2c:a9:85:1e:5d:73:1e:77:94:71:e8:8e:d6:fe:8e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:03:45 2023 GMT
            Not After : Jul 18 14:08:45 2024 GMT
        Subject: CN=1BD1D5571625F9B7C6C78F4E847A68F3137443AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:23:15:bf:21:e9:60:b1:60:82:e3:eb:6a:
                    6d:b2:c5:c6:6d:b5:27:38:dc:44:b7:be:5d:81:0e:
                    7f:ec:12:d9:99:41:72:dd:f0:20:5c:28:33:9a:6e:
                    01:6b:63:a0:89:4f:72:05:a5:9b:ab:40:7a:c5:b1:
                    19:72:a2:b6:fe:59:60:e3:4f:b3:e5:b0:62:52:f4:
                    c2:15:54:47:a0:05:33:ab:74:37:ba:23:ce:2a:10:
                    06:b5:b0:a7:ed:cb:33:d9:71:30:13:4b:39:71:11:
                    e4:ce:d3:e4:af:75:3b:4c:97:8e:37:ee:ec:cf:39:
                    60:81:98:86:7a:11:57:e7:65:48:0b:33:f1:e5:04:
                    e5:77:51:cb:ec:04:b8:b4:cc:77:c3:fa:d9:a2:9e:
                    d6:19:91:82:a3:ed:d9:17:1c:26:1b:7e:e4:8c:22:
                    af:5d:d6:49:14:c4:f6:b4:34:c1:e3:a3:0d:ea:00:
                    a8:0c:04:86:3c:d3:a2:69:5b:93:df:7d:ae:78:20:
                    24:69:85:9c:1c:0a:8a:f9:ee:b5:cb:f4:48:71:5d:
                    d3:d6:10:58:e9:5f:98:c9:13:5a:84:b6:b8:ec:53:
                    ea:57:49:83:29:11:b3:92:a1:5b:39:cb:b2:1a:43:
                    f4:02:77:d9:e3:7f:79:62:a8:36:45:a5:fa:3f:34:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D1:D5:57:16:25:F9:B7:C6:C7:8F:4E:84:7A:68:F3:13:74:43:AC
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231332e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f3:4b:fc:d9:d9:2d:97:61:df:0f:a9:47:7b:51:bf:8f:ec:
         8d:4d:85:b2:79:2e:44:94:26:ad:5a:56:14:c8:d8:57:38:24:
         68:fa:c2:2f:2f:7f:6f:d7:5a:5c:c9:5d:11:a3:ce:05:39:0a:
         68:05:1c:e8:a6:07:d1:44:d3:1f:52:54:e3:49:34:16:8c:bf:
         47:ba:d4:a3:bb:7e:fe:d5:42:c6:6e:eb:f3:d7:70:7b:4f:f6:
         fe:0d:c3:cf:96:a6:e8:ab:81:37:2b:6f:95:78:55:d9:32:df:
         a9:34:68:72:fe:e6:6d:21:f9:c9:61:51:03:09:d6:53:e6:9a:
         d0:c3:85:6b:0d:d6:08:6d:42:56:68:b8:1c:df:02:3d:5c:76:
         ee:94:b1:a0:85:c5:1f:c3:c1:c5:70:b4:4b:4a:29:8b:77:3c:
         0f:7a:30:7d:27:8d:44:41:21:a2:09:d7:11:99:41:2b:e9:e0:
         98:0f:90:26:5f:8e:ee:15:2a:95:91:93:63:7c:4f:f6:ae:cf:
         a8:50:ee:c4:93:be:d2:7d:2f:85:ac:72:1f:48:db:e1:a3:5a:
         e6:a3:a5:0e:7e:40:d6:3b:ad:20:f7:1e:e7:a6:d9:be:92:ac:
         7d:a0:fd:bb:4a:46:20:14:1c:75:af:2f:27:1e:2e:20:a9:bc:
         d4:08:8d:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFDJ5iCyphR5dcx53lHHojtb+jkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDAzNDVaFw0yNDA3MTgxNDA4NDVaMDMxMTAvBgNV
BAMTKDFCRDFENTU3MTYyNUY5QjdDNkM3OEY0RTg0N0E2OEYzMTM3NDQzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXKyMVvyHpYLFgguPram2yxcZt
tSc43ES3vl2BDn/sEtmZQXLd8CBcKDOabgFrY6CJT3IFpZurQHrFsRlyorb+WWDj
T7PlsGJS9MIVVEegBTOrdDe6I84qEAa1sKftyzPZcTATSzlxEeTO0+SvdTtMl443
7uzPOWCBmIZ6EVfnZUgLM/HlBOV3UcvsBLi0zHfD+tmintYZkYKj7dkXHCYbfuSM
Iq9d1kkUxPa0NMHjow3qAKgMBIY806JpW5Pffa54ICRphZwcCor57rXL9EhxXdPW
EFjpX5jJE1qEtrjsU+pXSYMpEbOSoVs5y7IaQ/QCd9njf3liqDZFpfo/NPRDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG9HVVxYl+bfGx49OhHpo8xN0Q6wwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzMwMmUzMjMzMzMyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq6dUwDQYJKoZIhvcNAQELBQADggEBABnzS/zZ
2S2XYd8PqUd7Ub+P7I1NhbJ5LkSUJq1aVhTI2Fc4JGj6wi8vf2/XWlzJXRGjzgU5
CmgFHOimB9FE0x9SVONJNBaMv0e61KO7fv7VQsZu6/PXcHtP9v4Nw8+WpuirgTcr
b5V4Vdky36k0aHL+5m0h+clhUQMJ1lPmmtDDhWsN1ghtQlZouBzfAj1cdu6UsaCF
xR/DwcVwtEtKKYt3PA96MH0njURBIaIJ1xGZQSvp4JgPkCZfju4VKpWRk2N8T/au
z6hQ7sSTvtJ9L4Wsch9I2+GjWuajpQ5+QNY7rSD3Huem2b6SrH2g/btKRiAUHHWv
LyceLiCpvNQIjdo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org