Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3232203d3e20323633343237.roa
File:                     3137302e302e3230302e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          gcxua49gcEy9Fo4Q007X1jLJNdZOH8xf7EY2Ame2nFQ=
Subject key identifier:   5B:03:3C:2B:41:62:99:E3:5A:97:F0:85:B3:48:98:3D:D8:B6:4B:BE
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       1727234E82AD7141074E8CF0BD501193F032B067
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3232203d3e20323633343237.roa
Signing time:             Sat 29 Jul 2023 23:14:41 +0000
ROA not before:           Sat 29 Jul 2023 23:09:41 +0000
ROA not after:            Sat 27 Jul 2024 23:14:41 +0000
asID:                     263427
IP address blocks:        170.0.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:27:23:4e:82:ad:71:41:07:4e:8c:f0:bd:50:11:93:f0:32:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jul 29 23:09:41 2023 GMT
            Not After : Jul 27 23:14:41 2024 GMT
        Subject: CN=5B033C2B416299E35A97F085B348983DD8B64BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:3c:42:ba:d9:7d:6e:f3:45:14:da:ad:1e:
                    e8:1c:cb:35:86:b6:bf:5a:75:fa:6f:bd:d9:94:97:
                    1e:bc:09:95:a5:b3:09:05:fd:de:f7:51:b2:f7:63:
                    9e:25:34:2c:f0:db:9d:f1:81:75:18:cb:26:f0:ad:
                    3b:be:81:2c:52:30:9f:2d:eb:a5:6d:9b:13:b1:1a:
                    e9:1b:5d:fe:88:98:12:35:c2:c9:a5:35:0e:ea:f2:
                    9e:e6:3c:f0:e7:cd:5b:ae:c9:79:8e:fc:ff:e1:60:
                    ca:08:3f:69:2c:e2:20:26:c7:26:76:1c:a1:a2:50:
                    b1:f6:24:3d:d6:7c:b8:4b:40:bc:eb:59:e9:0c:fa:
                    0b:73:79:61:52:c8:e4:22:a0:fc:b3:c2:cf:25:47:
                    cd:aa:75:d7:9d:26:4c:c2:1c:34:39:8a:19:66:a5:
                    f7:36:56:4f:59:39:58:a6:bd:b1:d9:20:dd:bb:4d:
                    31:08:a5:34:46:51:b3:b0:c6:a6:da:a0:66:86:69:
                    1a:3e:ac:a8:42:b1:fe:ae:e0:09:4d:ee:81:c4:92:
                    46:11:a6:c3:da:9f:0c:58:f1:10:21:41:06:2d:9f:
                    40:04:7b:b3:cb:d5:4b:21:34:d3:49:f3:06:60:8e:
                    57:2c:f7:dd:af:4c:a2:38:52:14:a2:cb:32:80:11:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:3C:2B:41:62:99:E3:5A:97:F0:85:B3:48:98:3D:D8:B6:4B:BE
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:45:7c:ec:1b:b5:ab:c8:bc:70:56:9f:0e:9e:ae:7d:a2:10:
         a4:cd:6b:ae:3f:aa:d4:95:62:56:ed:57:64:5d:6b:e0:d1:8f:
         b3:2a:13:a7:80:0a:4a:49:62:30:3b:61:bb:26:66:64:f2:42:
         44:30:8e:86:66:70:24:3b:15:c7:14:f2:09:3e:e3:c7:6f:61:
         7a:33:84:6a:fe:8f:fb:ca:5d:54:ea:ab:2a:ac:77:1f:94:3e:
         6f:41:f7:ba:0c:bf:6f:f7:86:82:bb:30:ea:95:22:22:6f:7e:
         63:e6:d6:46:b4:41:6a:ba:1e:e0:cd:42:c0:58:b0:27:41:6c:
         ab:f1:56:87:38:ee:23:16:e1:78:34:01:c8:ff:1a:33:88:01:
         95:5a:cb:6f:3a:44:19:da:45:91:63:41:ab:f4:d0:45:97:ff:
         78:46:9a:6c:a9:e8:52:16:9f:66:e0:74:ba:2b:f0:82:ca:65:
         f8:02:30:53:60:b0:ab:ee:a7:cd:54:0a:56:22:45:18:9e:a1:
         a4:fa:7b:26:1d:57:65:69:52:98:fc:95:26:9b:c8:4a:d8:81:
         e8:15:90:b4:2f:fc:f9:6f:ec:ef:46:0e:a5:8d:8e:0a:37:e2:
         71:52:81:23:64:99:d3:57:3d:5d:50:44:e5:b9:5f:03:f1:88:
         a2:03:ff:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFycjToKtcUEHTozwvVARk/AysGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0MDVDMEM5OTk3ODQxQzhGOUM2ODgwMURFMDUxOEU1
QUM0QzIwOTAeFw0yMzA3MjkyMzA5NDFaFw0yNDA3MjcyMzE0NDFaMDMxMTAvBgNV
BAMTKDVCMDMzQzJCNDE2Mjk5RTM1QTk3RjA4NUIzNDg5ODNERDhCNjRCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaDxCutl9bvNFFNqtHugcyzWG
tr9adfpvvdmUlx68CZWlswkF/d73UbL3Y54lNCzw253xgXUYyybwrTu+gSxSMJ8t
66VtmxOxGukbXf6ImBI1wsmlNQ7q8p7mPPDnzVuuyXmO/P/hYMoIP2ks4iAmxyZ2
HKGiULH2JD3WfLhLQLzrWekM+gtzeWFSyOQioPyzws8lR82qddedJkzCHDQ5ihlm
pfc2Vk9ZOVimvbHZIN27TTEIpTRGUbOwxqbaoGaGaRo+rKhCsf6u4AlN7oHEkkYR
psPanwxY8RAhQQYtn0AEe7PL1UshNNNJ8wZgjlcs992vTKI4UhSiyzKAEVF/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWwM8K0FimeNal/CFs0iYPdi2S74wHwYDVR0j
BBgwFoAUv0BcDJmXhByPnGiAHeBRjlrEwgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC9CRjQwNUMwQzk5OTc4NDFDOEY5QzY4ODAxREUwNTE4RTVBQzRDMjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNDA1QzBDOTk5Nzg0MUM4
RjlDNjg4MDFERTA1MThFNUFDNEMyMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzMwMmUzMDJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDIMA0GCSqGSIb3DQEBCwUAA4IBAQDMRXzsG7Wr
yLxwVp8Onq59ohCkzWuuP6rUlWJW7VdkXWvg0Y+zKhOngApKSWIwO2G7JmZk8kJE
MI6GZnAkOxXHFPIJPuPHb2F6M4Rq/o/7yl1U6qsqrHcflD5vQfe6DL9v94aCuzDq
lSIib35j5tZGtEFquh7gzULAWLAnQWyr8VaHOO4jFuF4NAHI/xoziAGVWstvOkQZ
2kWRY0Gr9NBFl/94RppsqehSFp9m4HS6K/CCymX4AjBTYLCr7qfNVApWIkUYnqGk
+nsmHVdlaVKY/JUmm8hK2IHoFZC0L/z5b+zvRg6ljY4KN+JxUoEjZJnTVz1dUETl
uV8D8YiiA/9f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org