Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32322d3232203d3e20323637353037.roa
File:                     3230312e3138322e39362e302f32322d3232203d3e20323637353037.roa (raw, json)
Hash identifier:          kUw3ZqTlnw8QlBDWrXPufaC8SKPw2TsYJMQG8oijQos=
Subject key identifier:   64:6B:92:BD:2F:C1:EB:EC:C0:2B:80:32:3B:1D:AE:49:E5:AA:96:7D
Certificate issuer:       /CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
Certificate serial:       7FF9CBD7A26D46FB02BBBC09030D1FDF65E192F9
Authority key identifier: 0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32322d3232203d3e20323637353037.roa
Signing time:             Mon 17 Apr 2023 14:38:58 +0000
ROA not before:           Mon 17 Apr 2023 14:33:58 +0000
ROA not after:            Mon 15 Apr 2024 14:38:58 +0000
asID:                     267507
IP address blocks:        201.182.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:cb:d7:a2:6d:46:fb:02:bb:bc:09:03:0d:1f:df:65:e1:92:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Validity
            Not Before: Apr 17 14:33:58 2023 GMT
            Not After : Apr 15 14:38:58 2024 GMT
        Subject: CN=646B92BD2FC1EBECC02B80323B1DAE49E5AA967D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fe:8f:b1:26:32:9d:79:d9:04:c3:1c:36:0f:
                    c1:8b:48:46:a5:ed:55:42:fb:7a:9c:d0:b0:51:a6:
                    5d:f5:76:7b:7e:ec:cf:ba:2d:58:3f:2c:69:a0:2b:
                    7a:02:7a:6a:ba:cd:53:e3:46:97:c0:36:f2:ed:e3:
                    aa:3f:2d:d4:64:4f:d1:90:52:06:4a:8d:7b:e6:fd:
                    70:e5:41:79:08:38:d0:16:22:d0:44:52:15:7b:74:
                    b3:2f:92:5d:62:cb:83:cc:ca:3e:ce:66:92:08:e2:
                    9b:b6:a5:ef:e7:6c:7b:9d:17:bd:81:cc:3a:64:09:
                    88:78:e0:cb:f6:56:91:3a:0d:58:18:67:0b:29:08:
                    34:29:60:83:63:21:62:5d:da:4c:cf:cd:fc:74:6b:
                    02:ec:d6:99:b0:a8:d8:c2:a3:3e:f2:a1:98:27:71:
                    6b:e8:8b:5b:a5:e2:de:4a:20:b6:2b:5a:33:42:49:
                    a2:0c:ef:e1:9e:32:52:62:42:05:63:ce:f1:80:4c:
                    9a:f5:57:ad:42:8b:12:77:8b:59:93:08:56:5c:96:
                    c0:75:0a:46:44:88:b5:ac:b8:5f:2e:1d:c3:8c:e2:
                    e3:88:7b:21:24:d5:67:70:83:50:fc:72:81:76:5e:
                    75:c1:0a:b0:eb:b2:06:34:53:ef:7b:b8:f2:55:00:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6B:92:BD:2F:C1:EB:EC:C0:2B:80:32:3B:1D:AE:49:E5:AA:96:7D
            X509v3 Authority Key Identifier:
                keyid:0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32322d3232203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:93:02:78:a4:a9:0b:80:bb:d6:91:92:53:31:11:77:3d:
         0c:20:86:9c:39:dd:37:6f:ea:d4:1a:f4:4f:b7:ae:23:f3:bd:
         09:9b:07:6b:3b:2a:fe:14:a5:21:a3:f5:63:0b:e8:92:74:bf:
         01:69:0b:0f:c9:55:d2:d9:1f:86:9b:a3:79:3d:52:03:f9:7b:
         ab:d7:86:ce:df:97:07:dd:91:26:7c:ce:41:b5:27:15:f0:22:
         c5:05:5f:d1:d5:a7:b0:6e:8e:c4:91:33:97:fc:b6:92:4a:45:
         ba:3b:ed:50:73:ea:d7:2c:bd:93:b7:05:97:07:7b:a8:51:ac:
         b8:4a:2d:22:d3:ac:b7:e1:71:f4:c6:23:72:88:ca:3f:2e:f4:
         8e:91:4e:6b:f5:8f:a7:d0:22:23:f4:2b:c2:30:6c:50:f8:81:
         72:27:ac:f3:da:03:24:1e:42:2c:65:6d:eb:4d:c3:61:eb:44:
         e6:cf:c5:8f:5c:72:11:94:b5:1f:08:70:de:c3:cc:33:33:7c:
         6e:7d:bb:c2:3b:99:03:33:5e:8d:bc:04:0a:34:d3:f6:a5:01:
         60:57:05:1f:3e:a4:e5:65:45:18:de:a0:6c:3b:cd:3f:e8:ae:
         04:3c:7a:63:00:a5:4e:5b:db:a9:93:d5:32:ad:ae:4a:c9:29:
         3c:98:a9:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf/nL16JtRvsCu7wJAw0f32XhkvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENENkQzMkQ5MjlCRTk3OTZERTU1QUUwRTQ5RDdBODlE
RkRBOUZFRjAeFw0yMzA0MTcxNDMzNThaFw0yNDA0MTUxNDM4NThaMDMxMTAvBgNV
BAMTKDY0NkI5MkJEMkZDMUVCRUNDMDJCODAzMjNCMURBRTQ5RTVBQTk2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3/o+xJjKdedkEwxw2D8GLSEal
7VVC+3qc0LBRpl31dnt+7M+6LVg/LGmgK3oCemq6zVPjRpfANvLt46o/LdRkT9GQ
UgZKjXvm/XDlQXkIONAWItBEUhV7dLMvkl1iy4PMyj7OZpII4pu2pe/nbHudF72B
zDpkCYh44Mv2VpE6DVgYZwspCDQpYINjIWJd2kzPzfx0awLs1pmwqNjCoz7yoZgn
cWvoi1ul4t5KILYrWjNCSaIM7+GeMlJiQgVjzvGATJr1V61CixJ3i1mTCFZclsB1
CkZEiLWsuF8uHcOM4uOIeyEk1Wdwg1D8coF2XnXBCrDrsgY0U+97uPJVAOOnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZGuSvS/B6+zAK4AyOx2uSeWqln0wHwYDVR0j
BBgwFoAUDNbTLZKb6Xlt5Vrg5J16id/an+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhITExYWERyYWRDd29pNlI0dVNZZW5vS0V2MXJYQnhtSnU4SFFuR25a
N0MvMC8wQ0Q2RDMyRDkyOUJFOTc5NkRFNTVBRTBFNDlEN0E4OURGREE5RkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDRDZEMzJEOTI5QkU5Nzk2
REU1NUFFMEU0OUQ3QTg5REZEQTlGRUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4SExMWFhEcmFkQ3dvaTZSNHVTWWVub0tFdjFyWEJ4bUp1OEhRbkduWjdDLzAv
MzIzMDMxMmUzMTM4MzIyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczNTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJtmAwDQYJKoZIhvcNAQELBQADggEBALWGkwJ4
pKkLgLvWkZJTMRF3PQwghpw53Tdv6tQa9E+3riPzvQmbB2s7Kv4UpSGj9WML6JJ0
vwFpCw/JVdLZH4abo3k9UgP5e6vXhs7flwfdkSZ8zkG1JxXwIsUFX9HVp7BujsSR
M5f8tpJKRbo77VBz6tcsvZO3BZcHe6hRrLhKLSLTrLfhcfTGI3KIyj8u9I6RTmv1
j6fQIiP0K8IwbFD4gXInrPPaAyQeQixlbetNw2HrRObPxY9cchGUtR8IcN7DzDMz
fG59u8I7mQMzXo28BAo00/alAWBXBR8+pOVlRRjeoGw7zT/orgQ8emMApU5b26mT
1TKtrkrJKTyYqTc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org