Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135362e302f32322d3232203d3e203238363035.roa
File:                     3230312e32302e3135362e302f32322d3232203d3e203238363035.roa (raw, json)
Hash identifier:          85WjcxHsmGjYueadR0cA0HQbZC40A5Fp0IhY0+jY2lE=
Subject key identifier:   A7:F3:E6:E6:9F:AE:31:00:CC:8B:78:00:FE:AB:DA:5C:74:C6:1F:EB
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       3E3F1929F2627332011C3216A5C5BF513D1C4352
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135362e302f32322d3232203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:38 +0000
ROA not before:           Fri 16 Dec 2022 21:11:38 +0000
ROA not after:            Fri 15 Dec 2023 21:16:38 +0000
asID:                     28605
IP address blocks:        201.20.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3f:19:29:f2:62:73:32:01:1c:32:16:a5:c5:bf:51:3d:1c:43:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:38 2022 GMT
            Not After : Dec 15 21:16:38 2023 GMT
        Subject: CN=A7F3E6E69FAE3100CC8B7800FEABDA5C74C61FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:5d:74:38:72:e1:09:3d:3d:a8:12:55:e1:
                    dc:aa:6b:c3:01:70:06:4b:f6:21:41:34:06:c9:33:
                    6c:04:ac:49:66:bb:e4:f9:4b:01:1f:36:a5:39:00:
                    75:d4:82:12:56:69:3c:b4:f9:fc:e7:21:81:3b:9c:
                    66:0f:f6:5c:96:70:30:32:f8:cc:3e:84:a2:09:8d:
                    f6:04:39:92:aa:c2:97:16:75:39:8d:6b:06:c9:4e:
                    06:bc:7e:97:01:de:bc:39:88:76:5d:52:df:98:fb:
                    b4:5a:82:6f:ec:65:10:44:80:6a:b8:65:a1:00:3e:
                    f4:35:e8:b9:89:9a:14:e3:af:0e:b2:d1:e6:ce:f1:
                    ac:5e:1b:91:e3:4f:2c:6f:8a:6b:ee:6d:b6:f2:d5:
                    d8:07:fe:65:5c:06:87:0f:c0:04:5c:fe:73:44:2e:
                    d4:42:9f:d3:19:1e:e3:25:b0:79:6b:c9:f5:1a:2a:
                    5b:70:a6:b8:53:7a:fd:2f:1e:1a:7e:76:60:74:00:
                    3d:03:08:d5:f7:13:c6:c4:78:1f:96:03:af:a4:14:
                    46:aa:0a:25:31:84:23:32:4f:1a:cf:8d:a5:56:1e:
                    d1:66:d5:5e:bb:db:47:df:4c:4d:62:a5:6a:ac:93:
                    b1:9e:e9:25:db:41:ee:b3:09:1d:7e:c9:d6:f7:89:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F3:E6:E6:9F:AE:31:00:CC:8B:78:00:FE:AB:DA:5C:74:C6:1F:EB
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135362e302f32322d3232203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:88:c5:ab:b5:28:0b:9a:78:3d:c6:2a:6f:6c:4f:a1:40:42:
         f8:09:af:8e:89:22:b3:12:55:2f:14:86:68:c4:a6:45:c6:53:
         10:f8:cf:2b:6d:4b:fe:0c:ea:c9:a1:b0:7b:3c:34:a0:cb:3e:
         6f:5b:5d:5b:3f:5e:95:1c:7a:fd:1d:44:18:90:41:f0:3b:c5:
         36:85:56:f2:61:d8:4a:d5:04:9f:46:83:f0:f3:f4:1e:d1:d3:
         39:2b:36:7d:01:e5:0f:c3:4b:70:28:0d:1a:e6:a7:90:03:0d:
         e1:3c:b3:a2:0d:6f:e8:c6:56:ea:3a:80:b2:0c:bb:aa:a7:73:
         d3:37:28:0f:eb:69:43:39:98:71:93:7a:62:31:96:cb:14:e9:
         bf:b9:5a:8d:4d:f5:18:76:91:6a:5c:d8:2a:a5:6e:b9:92:dd:
         47:03:5d:c7:0c:f9:f6:bf:e2:71:c6:58:13:da:1f:e7:26:45:
         10:a6:22:80:74:50:c9:22:02:50:0f:0e:52:b7:06:bc:67:7d:
         f9:67:a8:bd:78:f1:0d:79:48:a4:ae:59:65:e7:b3:9a:b8:1b:
         aa:83:0d:11:69:7e:5c:fa:5f:d9:8f:39:a1:88:c9:dd:80:8a:
         d6:df:d1:53:99:a6:a7:58:fd:d1:41:04:23:b2:11:b6:e7:93:
         a4:79:9b:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPj8ZKfJiczIBHDIWpcW/UT0cQ1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA5MDlFM0ZFMzUzNzk1NkEwMEY5OEE2ODJEOEU1NzhE
RUY4MkNFRjAeFw0yMjEyMTYyMTExMzhaFw0yMzEyMTUyMTE2MzhaMDMxMTAvBgNV
BAMTKEE3RjNFNkU2OUZBRTMxMDBDQzhCNzgwMEZFQUJEQTVDNzRDNjFGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTT110OHLhCT09qBJV4dyqa8MB
cAZL9iFBNAbJM2wErElmu+T5SwEfNqU5AHXUghJWaTy0+fznIYE7nGYP9lyWcDAy
+Mw+hKIJjfYEOZKqwpcWdTmNawbJTga8fpcB3rw5iHZdUt+Y+7Ragm/sZRBEgGq4
ZaEAPvQ16LmJmhTjrw6y0ebO8axeG5HjTyxvimvubbby1dgH/mVcBocPwARc/nNE
LtRCn9MZHuMlsHlryfUaKltwprhTev0vHhp+dmB0AD0DCNX3E8bEeB+WA6+kFEaq
CiUxhCMyTxrPjaVWHtFm1V6720ffTE1ipWqsk7Ge6SXbQe6zCR1+ydb3iafrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp/Pm5p+uMQDMi3gA/qvaXHTGH+swHwYDVR0j
BBgwFoAUEJCeP+NTeVagD5imgtjleN74LO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC8xMDkwOUUzRkUzNTM3OTU2QTAwRjk4QTY4MkQ4RTU3OERFRjgyQ0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwOTA5RTNGRTM1Mzc5NTZB
MDBGOThBNjgyRDhFNTc4REVGODJDRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzMDMxMmUzMjMwMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyRScMA0GCSqGSIb3DQEBCwUAA4IBAQBxiMWrtSgL
mng9xipvbE+hQEL4Ca+OiSKzElUvFIZoxKZFxlMQ+M8rbUv+DOrJobB7PDSgyz5v
W11bP16VHHr9HUQYkEHwO8U2hVbyYdhK1QSfRoPw8/Qe0dM5KzZ9AeUPw0twKA0a
5qeQAw3hPLOiDW/oxlbqOoCyDLuqp3PTNygP62lDOZhxk3piMZbLFOm/uVqNTfUY
dpFqXNgqpW65kt1HA13HDPn2v+JxxlgT2h/nJkUQpiKAdFDJIgJQDw5Stwa8Z335
Z6i9ePENeUikrlll57OauBuqgw0RaX5c+l/ZjzmhiMndgIrW39FTmaanWP3RQQQj
shG255OkeZvU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org