Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32312d3231203d3e203238363035.roa
File:                     3230312e32302e3134342e302f32312d3231203d3e203238363035.roa (raw, json)
Hash identifier:          qOsqKMTiWciJNVh2TJ9j9IwXv9tmPxzJiBV/YV/rvBw=
Subject key identifier:   17:80:EB:4B:0C:4F:74:60:AE:BD:8F:FA:D5:7C:D2:14:43:97:6E:02
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       29F0D0AFDDA216585550BDF0E9514E8D7410BBB6
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32312d3231203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:01 +0000
ROA not before:           Fri 16 Dec 2022 21:11:01 +0000
ROA not after:            Fri 15 Dec 2023 21:16:01 +0000
asID:                     28605
IP address blocks:        201.20.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f0:d0:af:dd:a2:16:58:55:50:bd:f0:e9:51:4e:8d:74:10:bb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:01 2022 GMT
            Not After : Dec 15 21:16:01 2023 GMT
        Subject: CN=1780EB4B0C4F7460AEBD8FFAD57CD21443976E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:57:42:ab:f5:a2:fd:b0:2c:f7:14:88:ea:
                    ab:3a:c6:85:1a:31:1e:fa:fe:25:c8:22:94:34:9e:
                    ca:47:02:de:a7:da:46:7b:f9:88:3d:7c:60:bf:00:
                    e4:19:ba:57:97:3a:b3:ff:4d:3e:2b:18:36:12:e5:
                    ea:2e:ae:74:0d:e2:39:e2:36:01:29:e9:8a:68:70:
                    f9:d7:a2:86:b0:95:bd:00:18:e8:3f:29:82:47:a0:
                    44:b9:b2:83:0c:fd:7a:49:71:89:31:68:b8:af:60:
                    3a:cc:93:08:51:71:56:66:d7:88:6f:aa:93:d1:7e:
                    8f:2e:6e:07:89:9a:3f:5b:4d:66:a9:95:05:68:b5:
                    3b:9d:8d:df:43:da:bf:d6:9d:6b:35:57:86:8f:5f:
                    d8:24:14:25:2b:1b:fa:c0:67:58:45:17:47:7d:07:
                    55:bc:fa:6c:bf:1d:70:ea:20:c7:e1:18:bc:f1:e1:
                    8c:42:15:ed:27:b5:ad:9f:38:0a:6a:f3:3b:72:37:
                    23:80:99:b3:67:5b:e8:05:d0:0d:52:ae:9a:f7:c8:
                    d5:2c:35:ee:ce:a3:3b:e1:33:78:6b:e1:6c:f6:82:
                    48:97:fd:cb:33:12:e2:40:95:93:7a:b5:b3:eb:62:
                    24:2a:f5:5b:d6:81:0f:2d:a4:de:df:43:4f:b8:b3:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:80:EB:4B:0C:4F:74:60:AE:BD:8F:FA:D5:7C:D2:14:43:97:6E:02
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32312d3231203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:bc:ef:d9:3f:03:e9:14:ac:47:76:ab:46:c7:73:23:47:
         c9:b5:28:d0:63:29:6a:13:a2:84:d7:c4:74:0d:a6:3e:16:65:
         94:bb:74:c0:c3:a3:28:2c:84:d9:c4:2c:35:c1:1c:82:2c:33:
         b1:50:5e:64:87:4e:80:21:85:d7:99:c6:5b:4f:92:f3:45:cd:
         14:c7:41:dc:1e:a3:4d:82:d6:da:48:ff:e8:69:3d:33:94:78:
         50:8d:9e:39:c1:f1:4b:f7:a0:49:cf:7e:f9:77:73:1a:d5:6a:
         fc:23:ee:79:2f:7e:a6:07:7d:0b:a7:1f:f4:c6:7c:e7:be:94:
         bb:33:42:bf:9a:32:9f:29:20:45:00:c9:ed:fd:9e:fc:2c:6f:
         31:cc:0a:aa:b1:fb:a6:50:75:a6:88:69:07:82:10:ab:84:ab:
         08:9d:8d:f2:71:f0:7c:6b:58:b0:3d:c2:3c:87:e0:e8:18:72:
         56:ed:81:2f:f1:de:65:0f:04:0e:72:d0:96:4b:13:bd:a3:2b:
         77:72:7e:3a:c8:d3:26:4d:53:de:7f:ef:d2:7e:b5:ef:30:6f:
         ce:86:70:38:1a:66:ab:72:48:6b:4a:36:4b:55:40:bb:09:1c:
         40:95:32:14:9a:51:f5:e4:8e:e5:52:c1:a3:53:af:d5:c3:54:
         24:12:f5:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKfDQr92iFlhVUL3w6VFOjXQQu7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA5MDlFM0ZFMzUzNzk1NkEwMEY5OEE2ODJEOEU1NzhE
RUY4MkNFRjAeFw0yMjEyMTYyMTExMDFaFw0yMzEyMTUyMTE2MDFaMDMxMTAvBgNV
BAMTKDE3ODBFQjRCMEM0Rjc0NjBBRUJEOEZGQUQ1N0NEMjE0NDM5NzZFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ81dCq/Wi/bAs9xSI6qs6xoUa
MR76/iXIIpQ0nspHAt6n2kZ7+Yg9fGC/AOQZuleXOrP/TT4rGDYS5eournQN4jni
NgEp6YpocPnXooawlb0AGOg/KYJHoES5soMM/XpJcYkxaLivYDrMkwhRcVZm14hv
qpPRfo8ubgeJmj9bTWaplQVotTudjd9D2r/WnWs1V4aPX9gkFCUrG/rAZ1hFF0d9
B1W8+my/HXDqIMfhGLzx4YxCFe0nta2fOApq8ztyNyOAmbNnW+gF0A1Srpr3yNUs
Ne7OozvhM3hr4Wz2gkiX/cszEuJAlZN6tbPrYiQq9VvWgQ8tpN7fQ0+4s5T9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUF4DrSwxPdGCuvY/61XzSFEOXbgIwHwYDVR0j
BBgwFoAUEJCeP+NTeVagD5imgtjleN74LO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC8xMDkwOUUzRkUzNTM3OTU2QTAwRjk4QTY4MkQ4RTU3OERFRjgyQ0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwOTA5RTNGRTM1Mzc5NTZB
MDBGOThBNjgyRDhFNTc4REVGODJDRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzMDMxMmUzMjMwMmUzMTM0MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyRSQMA0GCSqGSIb3DQEBCwUAA4IBAQA74rzv2T8D
6RSsR3arRsdzI0fJtSjQYylqE6KE18R0DaY+FmWUu3TAw6MoLITZxCw1wRyCLDOx
UF5kh06AIYXXmcZbT5LzRc0Ux0HcHqNNgtbaSP/oaT0zlHhQjZ45wfFL96BJz375
d3Ma1Wr8I+55L36mB30Lpx/0xnznvpS7M0K/mjKfKSBFAMnt/Z78LG8xzAqqsfum
UHWmiGkHghCrhKsInY3ycfB8a1iwPcI8h+DoGHJW7YEv8d5lDwQOctCWSxO9oyt3
cn46yNMmTVPef+/SfrXvMG/OhnA4GmarckhrSjZLVUC7CRxAlTIUmlH15I7lUsGj
U6/Vw1QkEvU/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org