Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa
File:                     3137302e302e3230322e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          Hf6iKuvgsH/OrtbpKS/zeMYJshpDSWY8bGTzWAkc8QI=
Subject key identifier:   10:68:AF:07:F3:26:04:81:19:7D:B9:0D:BC:37:AB:B0:1B:F2:EB:02
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       284F70FF819036B1596EBA688AE2AAC5A17A9B4E
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:04:52 +0000
ROA not before:           Fri 09 Jun 2023 21:59:52 +0000
ROA not after:            Fri 07 Jun 2024 22:04:52 +0000
asID:                     263427
IP address blocks:        170.0.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:70:ff:81:90:36:b1:59:6e:ba:68:8a:e2:aa:c5:a1:7a:9b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 21:59:52 2023 GMT
            Not After : Jun  7 22:04:52 2024 GMT
        Subject: CN=1068AF07F3260481197DB90DBC37ABB01BF2EB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:38:da:66:9f:9c:e5:bd:e4:81:89:9e:7b:
                    bd:9e:d8:ac:8b:da:fd:ec:e5:56:ec:01:32:a3:f6:
                    8c:0b:24:8f:99:86:4a:2c:25:d5:11:7b:51:9c:e0:
                    ca:84:6e:ac:5a:a0:85:61:51:f0:35:e0:58:fc:7f:
                    0a:aa:aa:bb:c1:75:78:fa:39:07:4f:1b:ca:bb:36:
                    c2:c8:ab:be:55:83:d5:3b:f8:25:5e:b4:ef:f5:26:
                    05:61:fd:83:ba:03:6f:cd:3e:8c:61:c1:93:f0:7a:
                    c3:33:7d:32:6e:fb:bf:6c:2f:48:fe:f5:ed:43:68:
                    6b:7b:eb:8d:f7:a9:70:45:3a:46:ab:a6:2f:b6:3c:
                    84:fb:54:75:77:05:20:31:d7:63:89:f4:af:5d:ed:
                    8c:9e:fc:78:eb:81:be:b6:4d:e7:a0:e2:36:54:c1:
                    eb:d2:5b:fb:57:25:18:c7:11:d6:34:8f:0a:74:13:
                    c3:5e:95:8b:b5:c2:d0:a5:19:fc:c5:82:ad:49:84:
                    06:bc:f1:c5:18:3a:8d:71:4d:eb:21:d7:5e:ab:90:
                    19:1a:e8:e9:bf:8b:ab:d1:e2:61:22:2b:a6:e6:af:
                    03:05:1b:e8:4c:ce:a5:e9:99:e5:58:a9:bd:b8:b1:
                    1f:d7:2a:f0:ca:c5:ee:59:f0:8e:af:28:ff:8f:65:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:AF:07:F3:26:04:81:19:7D:B9:0D:BC:37:AB:B0:1B:F2:EB:02
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:20:09:93:b8:a1:67:c7:30:c7:47:84:c7:5a:1c:c3:32:
         7e:ec:af:5a:8e:81:2d:20:26:f3:99:d4:45:f0:cb:12:ee:a7:
         f3:87:e6:90:78:56:90:87:ca:70:c6:30:8e:41:03:ec:ba:fa:
         f7:bc:fe:5a:e7:f3:3a:f5:0f:72:b1:e4:8f:bc:69:93:fb:be:
         8a:50:88:f8:08:68:c0:7d:a6:3c:59:9d:5d:c4:4c:84:8a:9d:
         ba:a3:85:b7:ae:4c:f8:11:91:64:17:27:6b:b4:70:ce:06:a8:
         4b:95:fb:5a:b4:20:90:72:32:64:3d:38:ca:4b:ad:14:92:38:
         76:96:f7:97:9d:5f:be:0b:41:38:3f:41:36:19:97:31:2c:8c:
         8d:fe:98:01:28:ea:01:b1:6d:a6:c0:d7:9d:da:a6:fd:e1:00:
         f9:87:64:66:92:ce:ab:32:e6:96:77:e9:41:45:5f:bd:e3:d7:
         14:7f:09:4b:b8:df:60:01:90:1b:51:7b:84:cc:e2:e1:e1:e2:
         c0:69:7d:8d:58:2f:34:84:46:7d:55:c6:dc:ac:19:fb:3b:13:
         77:70:5e:b4:d2:22:78:b3:ba:7a:c5:27:ed:f0:5d:f8:55:08:
         04:74:2c:05:8f:7a:75:ef:4e:ca:d1:2e:e6:d5:77:b6:60:36:
         ea:b6:12:8c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKE9w/4GQNrFZbrpoiuKqxaF6m04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0MDVDMEM5OTk3ODQxQzhGOUM2ODgwMURFMDUxOEU1
QUM0QzIwOTAeFw0yMzA2MDkyMTU5NTJaFw0yNDA2MDcyMjA0NTJaMDMxMTAvBgNV
BAMTKDEwNjhBRjA3RjMyNjA0ODExOTdEQjkwREJDMzdBQkIwMUJGMkVCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4TjaZp+c5b3kgYmee72e2KyL
2v3s5VbsATKj9owLJI+ZhkosJdURe1Gc4MqEbqxaoIVhUfA14Fj8fwqqqrvBdXj6
OQdPG8q7NsLIq75Vg9U7+CVetO/1JgVh/YO6A2/NPoxhwZPwesMzfTJu+79sL0j+
9e1DaGt76433qXBFOkarpi+2PIT7VHV3BSAx12OJ9K9d7Yye/Hjrgb62Teeg4jZU
wevSW/tXJRjHEdY0jwp0E8NelYu1wtClGfzFgq1JhAa88cUYOo1xTesh116rkBka
6Om/i6vR4mEiK6bmrwMFG+hMzqXpmeVYqb24sR/XKvDKxe5Z8I6vKP+PZawPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEGivB/MmBIEZfbkNvDersBvy6wIwHwYDVR0j
BBgwFoAUv0BcDJmXhByPnGiAHeBRjlrEwgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC9CRjQwNUMwQzk5OTc4NDFDOEY5QzY4ODAxREUwNTE4RTVBQzRDMjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNDA1QzBDOTk5Nzg0MUM4
RjlDNjg4MDFERTA1MThFNUFDNEMyMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzMwMmUzMDJlMzIzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqgDKMA0GCSqGSIb3DQEBCwUAA4IBAQAIjSAJk7ih
Z8cwx0eEx1ocwzJ+7K9ajoEtICbzmdRF8MsS7qfzh+aQeFaQh8pwxjCOQQPsuvr3
vP5a5/M69Q9yseSPvGmT+76KUIj4CGjAfaY8WZ1dxEyEip26o4W3rkz4EZFkFydr
tHDOBqhLlftatCCQcjJkPTjKS60Ukjh2lveXnV++C0E4P0E2GZcxLIyN/pgBKOoB
sW2mwNed2qb94QD5h2Rmks6rMuaWd+lBRV+949cUfwlLuN9gAZAbUXuEzOLh4eLA
aX2NWC80hEZ9VcbcrBn7OxN3cF600iJ4s7p6xSft8F34VQgEdCwFj3p1707K0S7m
1Xe2YDbqthKM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org