Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File:                     3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier:          +c+grYiKiF5A/39fZxT7/SSDw7O1KfooIEojiMnlLFs=
Subject key identifier:   3F:91:B4:65:68:1E:02:FA:FB:FB:1A:6C:62:36:06:C6:C7:DC:AB:46
Certificate issuer:       /CN=BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365
Certificate serial:       39BFA265CEED470C13C2CC1749BA94E2CE885BA3
Authority key identifier: BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time:             Fri 09 Feb 2024 15:45:37 +0000
ROA not before:           Fri 09 Feb 2024 15:40:37 +0000
ROA not after:            Fri 07 Feb 2025 15:45:37 +0000
asID:                     28605
IP address blocks:        201.20.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bf:a2:65:ce:ed:47:0c:13:c2:cc:17:49:ba:94:e2:ce:88:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365
        Validity
            Not Before: Feb  9 15:40:37 2024 GMT
            Not After : Feb  7 15:45:37 2025 GMT
        Subject: CN=3F91B465681E02FAFBFB1A6C623606C6C7DCAB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:40:32:6e:cb:6f:18:55:d9:cb:0f:66:23:
                    7d:27:57:e2:19:97:e5:d6:b5:c7:6d:3f:cb:49:ca:
                    4d:b8:d4:b0:d0:3c:f6:68:18:93:83:2a:38:de:90:
                    b8:13:99:29:c9:4d:7b:ec:61:67:71:13:69:0c:19:
                    c5:b0:be:6a:43:af:88:e6:de:9c:50:2d:d6:fc:99:
                    23:7e:88:0e:c0:d5:83:63:7b:80:67:96:04:7d:6d:
                    3a:83:8c:67:10:22:5f:05:d4:ff:7c:eb:9a:53:b3:
                    03:bd:7d:42:fa:a5:c9:a8:d2:81:aa:ef:cb:0b:0a:
                    34:4f:fe:e5:1d:e6:61:95:0f:bf:24:66:ff:ce:72:
                    e2:c8:57:a0:e0:63:f0:5b:a7:47:36:b9:17:2f:67:
                    84:fe:94:5a:a8:d6:72:73:74:1b:e6:08:7c:f6:a6:
                    07:12:99:f8:25:5c:72:3f:38:b0:41:36:41:e0:f2:
                    29:9b:8b:72:44:1f:fe:a0:04:f6:03:2b:3b:e1:3f:
                    e6:26:61:d1:41:ca:a9:b0:84:6c:b0:86:79:8a:0f:
                    9d:4b:9b:20:b0:07:3a:06:30:4e:87:e5:5c:1a:31:
                    87:a9:2a:f4:cd:b1:e2:ff:15:7b:b5:84:89:a2:c2:
                    00:3f:54:34:ba:1e:d0:c8:f7:bf:11:0f:89:14:6d:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:91:B4:65:68:1E:02:FA:FB:FB:1A:6C:62:36:06:C6:C7:DC:AB:46
            X509v3 Authority Key Identifier:
                keyid:BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:b6:19:c0:26:be:cd:89:1d:ee:21:6f:f4:c4:e2:5e:13:
         92:dd:f8:9e:ee:fb:48:6d:2c:95:88:b4:c9:b2:33:1e:cf:75:
         15:0f:01:18:22:b3:7d:6f:93:ce:7f:e8:7a:8a:bd:ae:bc:d8:
         5f:02:f0:bc:61:7b:0c:90:e3:a2:63:4c:32:c7:8c:61:40:a1:
         08:6a:8a:65:42:68:77:0e:e3:61:28:0c:61:83:3e:fe:82:dd:
         f9:07:7c:cd:cc:f5:23:39:eb:60:c8:88:4d:6e:dc:2d:26:40:
         c1:b2:29:e5:99:48:f6:40:1d:ea:3d:3b:1e:e1:08:91:90:74:
         9d:dd:8f:7f:1b:33:c9:c9:3b:65:29:37:28:2f:4f:aa:f6:47:
         66:2c:a3:a7:d3:5c:4d:a6:10:ed:0c:3d:99:f5:e9:27:70:7a:
         5e:ce:29:87:95:b1:28:2c:57:21:91:fd:59:64:89:d9:b0:e2:
         99:e0:61:33:1b:10:1c:60:4d:81:77:ba:dd:c4:3d:68:2c:7e:
         57:4e:c1:af:0f:97:55:bb:ea:8a:aa:e0:f0:56:5e:f9:d9:1d:
         d5:ae:88:01:82:ea:0e:6f:25:f1:a6:3f:63:9e:9a:25:cc:1d:
         0f:d2:3f:17:f2:09:d1:10:83:0a:3c:72:98:18:82:c9:83:09:
         fa:40:17:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOb+iZc7tRwwTwswXSbqU4s6IW6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYxNkRFRUZENjlBNzJGQzdDQUFDOUNFMUIxOTBBMURE
MkRDRTM2NTAeFw0yNDAyMDkxNTQwMzdaFw0yNTAyMDcxNTQ1MzdaMDMxMTAvBgNV
BAMTKDNGOTFCNDY1NjgxRTAyRkFGQkZCMUE2QzYyMzYwNkM2QzdEQ0FCNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWm0AybstvGFXZyw9mI30nV+IZ
l+XWtcdtP8tJyk241LDQPPZoGJODKjjekLgTmSnJTXvsYWdxE2kMGcWwvmpDr4jm
3pxQLdb8mSN+iA7A1YNje4BnlgR9bTqDjGcQIl8F1P9865pTswO9fUL6pcmo0oGq
78sLCjRP/uUd5mGVD78kZv/OcuLIV6DgY/Bbp0c2uRcvZ4T+lFqo1nJzdBvmCHz2
pgcSmfglXHI/OLBBNkHg8imbi3JEH/6gBPYDKzvhP+YmYdFByqmwhGywhnmKD51L
myCwBzoGME6H5VwaMYepKvTNseL/FXu1hImiwgA/VDS6HtDI978RD4kUbRMVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUP5G0ZWgeAvr7+xpsYjYGxsfcq0YwHwYDVR0j
BBgwFoAUvxbe79aacvx8qsnOGxkKHdLc42UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC9CRjE2REVFRkQ2OUE3MkZDN0NBQUM5Q0UxQjE5MEExREQyRENFMzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGMTZERUVGRDY5QTcyRkM3
Q0FBQzlDRTFCMTkwQTFERDJEQ0UzNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzMDMxMmUzMjMwMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyRSQMA0GCSqGSIb3DQEBCwUAA4IBAQAz17YZwCa+
zYkd7iFv9MTiXhOS3fie7vtIbSyViLTJsjMez3UVDwEYIrN9b5POf+h6ir2uvNhf
AvC8YXsMkOOiY0wyx4xhQKEIaoplQmh3DuNhKAxhgz7+gt35B3zNzPUjOetgyIhN
btwtJkDBsinlmUj2QB3qPTse4QiRkHSd3Y9/GzPJyTtlKTcoL0+q9kdmLKOn01xN
phDtDD2Z9ekncHpezimHlbEoLFchkf1ZZInZsOKZ4GEzGxAcYE2Bd7rdxD1oLH5X
TsGvD5dVu+qKquDwVl752R3VrogBguoObyXxpj9jnpolzB0P0j8X8gnREIMKPHKY
GILJgwn6QBdE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org