Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
File:                     3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa (raw, json)
Hash identifier:          z7bIoGB1Bz9mmGWQiFst23uykcGeeNhowwLb+UOoFqA=
Subject key identifier:   40:D6:9A:15:72:D0:C5:84:77:8D:FB:0A:77:AE:CC:CE:F6:2A:62:FB
Certificate issuer:       /CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
Certificate serial:       4B0513EB826714F1BD5D47ABC64A0A567A85E506
Authority key identifier: 2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
Signing time:             Mon 18 Dec 2023 20:27:04 +0000
ROA not before:           Mon 18 Dec 2023 20:22:04 +0000
ROA not after:            Mon 16 Dec 2024 20:27:04 +0000
asID:                     266359
IP address blocks:        170.239.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:13:eb:82:67:14:f1:bd:5d:47:ab:c6:4a:0a:56:7a:85:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
        Validity
            Not Before: Dec 18 20:22:04 2023 GMT
            Not After : Dec 16 20:27:04 2024 GMT
        Subject: CN=40D69A1572D0C584778DFB0A77AECCCEF62A62FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:d7:cb:6a:3a:43:89:59:95:0c:a5:ff:06:
                    e5:67:08:31:3a:35:ef:ef:6f:d7:7c:84:66:5a:78:
                    76:16:46:f1:bf:45:61:94:79:8d:5c:73:78:6c:03:
                    c5:5d:bf:2e:34:2d:d6:d6:66:c9:53:2c:4a:08:0d:
                    8b:6f:72:b4:ad:5c:2c:50:94:39:b4:db:9b:a9:b6:
                    e5:b8:ba:1f:11:84:ba:04:81:ae:fc:71:d3:a6:b8:
                    9d:0a:f4:d4:a4:c9:72:00:9c:e8:1b:c4:70:5e:a5:
                    a0:16:07:2c:ef:94:3c:45:f2:b7:dd:30:95:89:d8:
                    ab:ed:d8:82:2f:f0:b0:bd:a4:77:04:69:1a:27:54:
                    2f:0a:16:d8:b8:c9:15:b3:f3:b0:8f:1b:0f:e6:ab:
                    a2:3e:58:92:2b:00:ec:c6:8a:c5:c7:bd:23:04:bf:
                    ac:e6:dc:0b:0c:89:ba:09:1d:33:9c:18:5d:6e:93:
                    bb:31:56:ad:71:ef:81:ec:10:e7:5f:70:a1:50:c4:
                    47:1d:ee:9f:4a:ca:65:9c:f9:00:fd:ee:df:77:2a:
                    5a:2e:31:94:01:5c:c8:a6:8f:0d:03:a1:2b:d3:e2:
                    79:b5:27:4d:90:e6:a7:56:70:a3:56:36:52:18:78:
                    5e:7c:9f:d6:b5:fb:7a:11:29:cd:8b:3c:f1:eb:6b:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D6:9A:15:72:D0:C5:84:77:8D:FB:0A:77:AE:CC:CE:F6:2A:62:FB
            X509v3 Authority Key Identifier:
                keyid:2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:fe:6d:d8:97:3b:7e:9c:32:46:d6:d2:43:25:f7:22:59:
         d9:a7:46:2d:4a:30:94:fa:9a:49:e4:7d:57:ea:df:5a:e5:f5:
         15:57:5e:a7:af:da:db:53:3f:72:60:c4:9c:b8:ba:53:e4:a1:
         a2:0b:ef:82:df:43:30:c9:c1:5b:2e:fb:53:4a:13:ad:c5:04:
         d8:aa:aa:e1:67:c5:d8:37:be:5e:0b:b5:1d:d6:ed:25:ec:2a:
         72:a9:83:f9:89:12:7a:28:85:1e:94:27:56:cb:f5:11:2b:c4:
         7d:bc:3c:03:09:0d:a5:f0:11:04:6f:46:a8:4c:6f:f8:34:cb:
         36:b1:b4:b4:3a:8a:0d:69:f5:74:de:45:1e:a4:da:f1:3e:4a:
         92:c9:bf:9c:5e:12:99:19:1d:be:ef:26:35:89:d4:ce:05:95:
         13:b8:5f:73:41:2e:86:d6:f2:ad:bf:5e:d5:b2:52:d1:a4:fd:
         bd:3c:6f:c9:4b:9b:75:54:0a:50:da:a8:10:41:8b:dd:2f:da:
         0f:1b:5c:c7:ee:36:30:07:2e:83:1f:d1:66:6d:a5:aa:f1:77:
         4b:78:ef:be:b0:a7:5a:48:ea:d6:40:3f:55:ad:80:18:51:f4:
         92:30:f4:7d:14:e9:96:a5:e7:67:9e:2f:64:d8:78:1b:c4:4a:
         f9:e2:a5:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSwUT64JnFPG9XUerxkoKVnqF5QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJGRDFDMEQ4OEY2M0Y3Njk1QUZFMkQ0RkIwNjQ2QkUz
QTYxRDJCRTAeFw0yMzEyMTgyMDIyMDRaFw0yNDEyMTYyMDI3MDRaMDMxMTAvBgNV
BAMTKDQwRDY5QTE1NzJEMEM1ODQ3NzhERkIwQTc3QUVDQ0NFRjYyQTYyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vdfLajpDiVmVDKX/BuVnCDE6
Ne/vb9d8hGZaeHYWRvG/RWGUeY1cc3hsA8Vdvy40LdbWZslTLEoIDYtvcrStXCxQ
lDm025uptuW4uh8RhLoEga78cdOmuJ0K9NSkyXIAnOgbxHBepaAWByzvlDxF8rfd
MJWJ2Kvt2IIv8LC9pHcEaRonVC8KFti4yRWz87CPGw/mq6I+WJIrAOzGisXHvSME
v6zm3AsMiboJHTOcGF1uk7sxVq1x74HsEOdfcKFQxEcd7p9KymWc+QD97t93Klou
MZQBXMimjw0DoSvT4nm1J02Q5qdWcKNWNlIYeF58n9a1+3oRKc2LPPHra26PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQNaaFXLQxYR3jfsKd67MzvYqYvswHwYDVR0j
BBgwFoAUK/0cDYj2P3aVr+LU+wZGvjph0r4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm4yVUdITWNZSGprQ3NQcEFBaGhwR2NTOXVpVmdDM3ZleDFSVFhLeHJM
VzYvMC8yQkZEMUMwRDg4RjYzRjc2OTVBRkUyRDRGQjA2NDZCRTNBNjFEMkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCRkQxQzBEODhGNjNGNzY5
NUFGRTJENEZCMDY0NkJFM0E2MUQyQkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuMlVHSE1jWUhqa0NzUHBBQWhocEdjUzl1aVZnQzN2ZXgxUlRYS3hyTFc2LzAv
MzEzNzMwMmUzMjMzMzkyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrv2DANBgkqhkiG9w0BAQsFAAOCAQEAf0P+
bdiXO36cMkbW0kMl9yJZ2adGLUowlPqaSeR9V+rfWuX1FVdep6/a21M/cmDEnLi6
U+Shogvvgt9DMMnBWy77U0oTrcUE2Kqq4WfF2De+Xgu1HdbtJewqcqmD+YkSeiiF
HpQnVsv1ESvEfbw8AwkNpfARBG9GqExv+DTLNrG0tDqKDWn1dN5FHqTa8T5Kksm/
nF4SmRkdvu8mNYnUzgWVE7hfc0Euhtbyrb9e1bJS0aT9vTxvyUubdVQKUNqoEEGL
3S/aDxtcx+42MAcugx/RZm2lqvF3S3jvvrCnWkjq1kA/Va2AGFH0kjD0fRTplqXn
Z54vZNh4G8RK+eKltw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org