Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3234203d3e20323636343932.roa
File:                     3137302e3234342e36342e302f32322d3234203d3e20323636343932.roa (raw, json)
Hash identifier:          gF7zPxpuSFnmqpFvqzqcAnfCoXtBZNSpuuesZH2phI4=
Subject key identifier:   EA:3B:1D:18:BC:97:B6:01:07:31:7F:03:EA:15:52:F3:D3:83:7E:E4
Certificate issuer:       /CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
Certificate serial:       64B9F80C50A42E6CB70E93FADFBAC13933075183
Authority key identifier: 30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3234203d3e20323636343932.roa
Signing time:             Wed 22 Mar 2023 19:09:11 +0000
ROA not before:           Wed 22 Mar 2023 19:04:11 +0000
ROA not after:            Wed 20 Mar 2024 19:09:11 +0000
asID:                     266492
IP address blocks:        170.244.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:f8:0c:50:a4:2e:6c:b7:0e:93:fa:df:ba:c1:39:33:07:51:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
        Validity
            Not Before: Mar 22 19:04:11 2023 GMT
            Not After : Mar 20 19:09:11 2024 GMT
        Subject: CN=EA3B1D18BC97B60107317F03EA1552F3D3837EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:17:01:bd:ab:27:f1:d9:85:41:9a:96:39:
                    bd:8e:3d:b1:0d:64:36:b0:d4:65:c0:d2:79:b5:4f:
                    d5:00:c7:89:ef:fa:46:d7:70:0c:40:6f:58:83:01:
                    10:05:88:bb:e9:42:e9:44:65:b4:14:53:42:55:0d:
                    b6:15:eb:86:86:6e:f9:73:82:f8:d8:2b:76:21:1b:
                    1f:f9:d8:42:4d:fb:20:31:c0:c6:db:bf:25:95:af:
                    10:d0:e2:22:4c:20:5a:dd:d5:70:fd:74:08:04:6d:
                    96:35:c4:0a:60:48:4a:f9:35:c8:f0:de:a0:b0:24:
                    76:70:6a:f2:c7:4a:73:85:16:bf:38:5e:83:16:11:
                    ba:e1:44:03:17:60:29:6a:c4:21:28:e3:57:d1:b0:
                    f7:ba:43:36:52:32:33:0e:d2:7b:d8:27:19:18:41:
                    43:7c:48:d4:4e:f3:48:4c:ce:95:5c:f2:81:bc:7b:
                    62:a3:44:c5:ef:bd:0a:bf:0d:53:74:65:67:d2:3c:
                    07:02:97:1d:8e:cc:36:48:27:05:d5:1c:5f:d6:f9:
                    ca:9e:90:d5:5b:b5:0c:4c:bd:1a:16:3e:04:f8:1f:
                    cc:5c:f2:9e:77:79:50:11:0e:99:76:de:4d:dd:f8:
                    55:96:42:90:7f:d5:60:ce:df:74:75:0b:20:17:5b:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:1D:18:BC:97:B6:01:07:31:7F:03:EA:15:52:F3:D3:83:7E:E4
            X509v3 Authority Key Identifier:
                keyid:30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/3137302e3234342e36342e302f32322d3234203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:f0:5a:8b:b9:08:ff:2e:eb:08:4e:4d:ee:de:fd:7e:f1:
         22:d3:9c:b2:42:d3:1d:7b:41:23:1f:63:6b:7e:25:bf:e7:8a:
         31:fb:b3:e6:b9:54:5d:fa:e7:8c:1a:42:84:f1:3d:e7:57:7f:
         a8:2f:69:60:f7:77:31:5b:d4:f2:7e:29:b6:30:73:c7:84:09:
         20:0e:b2:76:d9:d8:70:44:47:d6:51:a8:0b:7e:ca:86:a5:6c:
         8c:ed:3a:5d:16:ac:b5:7a:fe:f8:95:2d:95:c2:76:42:20:1e:
         3c:7c:44:b3:e3:a3:70:02:a4:ff:34:d7:7b:fe:04:92:e5:77:
         5f:35:ea:ac:b5:4b:11:c2:df:e9:3c:e4:0a:3d:ad:a5:2c:66:
         74:7f:7e:d3:41:64:75:6f:a8:11:89:53:5c:87:4a:08:80:b1:
         91:a4:52:91:03:ef:31:07:83:7e:d4:a7:aa:c7:1e:22:ff:0f:
         9d:a6:e9:1b:55:bd:a2:aa:78:64:a4:f0:9c:b5:e0:cf:12:ba:
         be:f7:ef:20:85:1b:26:d0:38:6c:6d:b5:20:37:05:8d:08:c7:
         01:11:b8:d6:86:9c:ee:45:96:c9:e1:77:6c:45:a3:bf:dc:16:
         2e:cd:cf:b2:fa:5c:9c:e7:33:9d:ed:1b:cf:02:0a:b8:9d:11:
         1b:81:7d:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZLn4DFCkLmy3DpP637rBOTMHUYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAyRkNGNEUwODZEQUY2OEIxOTNEMzBGMzU4Q0M4QjVF
MjlFOUY0QTAeFw0yMzAzMjIxOTA0MTFaFw0yNDAzMjAxOTA5MTFaMDMxMTAvBgNV
BAMTKEVBM0IxRDE4QkM5N0I2MDEwNzMxN0YwM0VBMTU1MkYzRDM4MzdFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJhcBvasn8dmFQZqWOb2OPbEN
ZDaw1GXA0nm1T9UAx4nv+kbXcAxAb1iDARAFiLvpQulEZbQUU0JVDbYV64aGbvlz
gvjYK3YhGx/52EJN+yAxwMbbvyWVrxDQ4iJMIFrd1XD9dAgEbZY1xApgSEr5Ncjw
3qCwJHZwavLHSnOFFr84XoMWEbrhRAMXYClqxCEo41fRsPe6QzZSMjMO0nvYJxkY
QUN8SNRO80hMzpVc8oG8e2KjRMXvvQq/DVN0ZWfSPAcClx2OzDZIJwXVHF/W+cqe
kNVbtQxMvRoWPgT4H8xc8p53eVARDpl23k3d+FWWQpB/1WDO33R1CyAXW/0FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6jsdGLyXtgEHMX8D6hVS89ODfuQwHwYDVR0j
BBgwFoAUMC/PTghtr2ixk9MPNYzIteKen0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFERnhLRzZUOXRlaXV5cENIVnE5cWd4YW9uRW9LVThXYnJFdFZKSDZu
aXIvMS8zMDJGQ0Y0RTA4NkRBRjY4QjE5M0QzMEYzNThDQzhCNUUyOUU5RjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMkZDRjRFMDg2REFGNjhC
MTkzRDMwRjM1OENDOEI1RTI5RTlGNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRREZ4S0c2VDl0ZWl1eXBDSFZxOXFneGFvbkVvS1U4V2JyRXRWSkg2bmlyLzEv
MzEzNzMwMmUzMjM0MzQyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9EAwDQYJKoZIhvcNAQELBQADggEBAFCl8FqL
uQj/LusITk3u3v1+8SLTnLJC0x17QSMfY2t+Jb/nijH7s+a5VF3654waQoTxPedX
f6gvaWD3dzFb1PJ+KbYwc8eECSAOsnbZ2HBER9ZRqAt+yoalbIztOl0WrLV6/viV
LZXCdkIgHjx8RLPjo3ACpP8013v+BJLld1816qy1SxHC3+k85Ao9raUsZnR/ftNB
ZHVvqBGJU1yHSgiAsZGkUpED7zEHg37Up6rHHiL/D52m6RtVvaKqeGSk8Jy14M8S
ur737yCFGybQOGxttSA3BY0IxwERuNaGnO5Flsnhd2xFo7/cFi7Nz7L6XJznM53t
G88CCridERuBfT0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org