Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa
File:                     3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa (raw, json)
Hash identifier:          8goM3VRBruaYH0uGC+HurCsPUAPT3hqn2L345M+QiWY=
Subject key identifier:   E0:BF:B9:DF:B5:73:19:9C:02:D8:20:A1:AA:BE:C7:71:F7:BA:5B:74
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       532614EB4A8B85EA239328B09F091A60F5C43855
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:21 +0000
ROA not before:           Mon 11 Mar 2024 17:33:21 +0000
ROA not after:            Mon 10 Mar 2025 17:38:21 +0000
asID:                     271309
IP address blocks:        207.248.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:26:14:eb:4a:8b:85:ea:23:93:28:b0:9f:09:1a:60:f5:c4:38:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:21 2024 GMT
            Not After : Mar 10 17:38:21 2025 GMT
        Subject: CN=E0BFB9DFB573199C02D820A1AABEC771F7BA5B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:32:73:66:90:1c:a1:1c:f8:a8:1d:38:fe:30:
                    90:4f:46:5d:6a:ab:09:61:0f:f9:79:28:48:ad:02:
                    3a:a3:eb:34:86:87:0b:62:ef:15:c9:cd:26:a5:9e:
                    ab:ca:1a:7e:82:03:f6:b4:6f:0c:7a:89:3b:3c:65:
                    bc:4b:f1:4d:4e:d0:70:e9:8e:e6:c7:e6:25:98:06:
                    b9:97:3b:ed:b9:d6:ec:61:9d:dc:36:e3:f6:48:7c:
                    3c:c3:21:7b:c9:b5:70:1b:1f:f5:1e:29:77:98:8f:
                    f6:6a:d3:c5:f5:3b:0d:55:9f:bc:f9:77:de:34:f4:
                    0c:41:67:e7:a7:c8:3f:ad:1b:c5:10:f1:92:2d:62:
                    df:77:dd:68:86:dc:91:b1:69:19:20:23:63:fa:0a:
                    6f:63:8d:22:8f:1d:d1:6b:b0:ea:fa:7f:cb:09:64:
                    3a:c3:92:ce:e2:8c:53:08:34:80:38:7a:aa:41:80:
                    1d:45:9e:b0:d0:13:a2:40:58:09:41:69:f3:91:71:
                    95:61:26:ca:41:8e:be:d9:57:0a:53:e2:7a:5c:a9:
                    2c:5f:40:1e:1e:2d:7d:9c:25:6f:d3:b1:b5:9a:8c:
                    58:3e:d6:66:c4:fb:c0:1e:e1:90:c9:ba:f4:e0:a8:
                    d7:30:b7:a0:07:93:63:7a:85:ff:53:01:70:c2:da:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:B9:DF:B5:73:19:9C:02:D8:20:A1:AA:BE:C7:71:F7:BA:5B:74
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/3230372e3234382e32342e302f32322d3232203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:a4:67:df:b4:f8:92:14:6e:a1:da:e2:53:2c:c1:3f:49:4a:
         76:3d:7b:f3:ad:be:92:b9:f1:de:2c:3f:83:29:6a:23:66:4f:
         d3:a1:e0:9e:f9:4a:66:7c:1e:35:e9:b5:6c:79:19:52:de:8d:
         3c:b6:cb:d0:c4:3c:a2:71:06:e6:10:b2:c6:9f:e3:c7:5e:0b:
         94:0c:dd:b6:47:dc:54:dd:15:f4:81:1e:5c:5c:dc:6d:48:83:
         55:50:1c:96:da:33:82:04:22:b4:b0:39:9c:5e:af:82:40:cf:
         fa:59:98:96:2d:fe:25:ef:87:44:a5:81:01:f1:91:0b:44:04:
         14:c9:33:7b:82:d7:20:69:46:aa:b8:53:e9:1e:73:43:a5:4f:
         5b:94:81:54:e6:17:1f:14:f6:6a:ff:31:b6:df:01:82:ff:02:
         e4:c6:81:69:40:16:c8:4d:29:26:f6:1a:12:08:1b:e4:47:f1:
         2e:fc:ca:a3:fe:e0:fc:8e:4e:f7:ba:04:be:d9:bf:de:0c:c6:
         ba:0c:2c:41:57:30:bc:c3:46:0f:0a:40:56:11:49:fa:f7:00:
         f3:da:2d:dc:f9:5f:d1:03:80:49:7a:bb:dc:10:10:0b:a4:36:
         8f:d5:17:c8:4b:28:6a:eb:2b:8a:31:eb:4c:89:79:4b:fe:5a:
         02:46:d8:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUyYU60qLheojkyiwnwkaYPXEOFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzQTA1REU0NTdEQTYxMDMwQzUwQjcxRDY1NUIzODFD
RTc5M0M3MzAeFw0yNDAzMTExNzMzMjFaFw0yNTAzMTAxNzM4MjFaMDMxMTAvBgNV
BAMTKEUwQkZCOURGQjU3MzE5OUMwMkQ4MjBBMUFBQkVDNzcxRjdCQTVCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwMnNmkByhHPioHTj+MJBPRl1q
qwlhD/l5KEitAjqj6zSGhwti7xXJzSalnqvKGn6CA/a0bwx6iTs8ZbxL8U1O0HDp
jubH5iWYBrmXO+251uxhndw24/ZIfDzDIXvJtXAbH/UeKXeYj/Zq08X1Ow1Vn7z5
d9409AxBZ+enyD+tG8UQ8ZItYt933WiG3JGxaRkgI2P6Cm9jjSKPHdFrsOr6f8sJ
ZDrDks7ijFMINIA4eqpBgB1FnrDQE6JAWAlBafORcZVhJspBjr7ZVwpT4npcqSxf
QB4eLX2cJW/TsbWajFg+1mbE+8Ae4ZDJuvTgqNcwt6AHk2N6hf9TAXDC2jdtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4L+537VzGZwC2CChqr7Hcfe6W3QwHwYDVR0j
BBgwFoAURDoF3kV9phAwxQtx1lWzgc55PHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQyWUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NORXBCd290Nk1u
YmYvMC80NDNBMDVERTQ1N0RBNjEwMzBDNTBCNzFENjU1QjM4MUNFNzkzQzczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0M0EwNURFNDU3REE2MTAz
MEM1MEI3MUQ2NTVCMzgxQ0U3OTNDNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUMllCbWFUenp4RUdlUUNQR3c0aXM4Y3NkS0g5bzdzTkVwQndvdDZNbmJmLzAv
MzIzMDM3MmUzMjM0MzgyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALP+BgwDQYJKoZIhvcNAQELBQADggEBANGkZ9+0
+JIUbqHa4lMswT9JSnY9e/OtvpK58d4sP4MpaiNmT9Oh4J75SmZ8HjXptWx5GVLe
jTy2y9DEPKJxBuYQssaf48deC5QM3bZH3FTdFfSBHlxc3G1Ig1VQHJbaM4IEIrSw
OZxer4JAz/pZmJYt/iXvh0SlgQHxkQtEBBTJM3uC1yBpRqq4U+kec0OlT1uUgVTm
Fx8U9mr/MbbfAYL/AuTGgWlAFshNKSb2GhIIG+RH8S78yqP+4PyOTve6BL7Zv94M
xroMLEFXMLzDRg8KQFYRSfr3APPaLdz5X9EDgEl6u9wQEAukNo/VF8hLKGrrK4ox
60yJeUv+WgJG2JU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org