Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32332d3233203d3e20323636333139.roa
File:                     3137302e3233382e3132382e302f32332d3233203d3e20323636333139.roa (raw, json)
Hash identifier:          eLdXCVOTZ7TrwILPPVxfp1dcDibh/suxJBBD/8sjlEg=
Subject key identifier:   B3:EC:3E:7F:EF:F9:7F:63:FD:75:77:55:AA:72:8D:4E:6A:70:C7:C4
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       1B25C20F12DC53B725CE21CA539187E189892E20
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32332d3233203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 20:00:00 +0000
ROA not before:           Fri 26 May 2023 19:55:00 +0000
ROA not after:            Fri 24 May 2024 20:00:00 +0000
asID:                     266319
IP address blocks:        170.238.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:c2:0f:12:dc:53:b7:25:ce:21:ca:53:91:87:e1:89:89:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 19:55:00 2023 GMT
            Not After : May 24 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100C3ACB580EBACFF75D692ED292845C1C31A6936DA6799425E139EB19081C794CF9BFE1AF1C631513A871D9F8E45986C561AC4D810F3FC97532DC6B2FE9907DAD711CBC0FCA9672F6C90123205C81B80932CE1BC7409114945DBBE9876E853F9EC279E9B39473145C7E34A3D53B034DDE297AACF4F4A64F2E24D0D34033D5A5C26FD7026567819CA2767056E6ECEA275B6F58CE025E58EAC7415CD11DF89123C6A87672A357C70D5643E90C2932310B266A5D8FED13C1F297DAE12F24D750FE8981B7117B3FEC28CBD2B7B50EFD3128D7927BE9B756CB91879191E6CC5BB301EC45E9DD02B7D51CA2398480338F4CAD703A70AAA7CE9586B78091701C06E69AE650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:b5:80:eb:ac:ff:75:d6:92:ed:29:28:45:
                    c1:c3:1a:69:36:da:67:99:42:5e:13:9e:b1:90:81:
                    c7:94:cf:9b:fe:1a:f1:c6:31:51:3a:87:1d:9f:8e:
                    45:98:6c:56:1a:c4:d8:10:f3:fc:97:53:2d:c6:b2:
                    fe:99:07:da:d7:11:cb:c0:fc:a9:67:2f:6c:90:12:
                    32:05:c8:1b:80:93:2c:e1:bc:74:09:11:49:45:db:
                    be:98:76:e8:53:f9:ec:27:9e:9b:39:47:31:45:c7:
                    e3:4a:3d:53:b0:34:dd:e2:97:aa:cf:4f:4a:64:f2:
                    e2:4d:0d:34:03:3d:5a:5c:26:fd:70:26:56:78:19:
                    ca:27:67:05:6e:6e:ce:a2:75:b6:f5:8c:e0:25:e5:
                    8e:ac:74:15:cd:11:df:89:12:3c:6a:87:67:2a:35:
                    7c:70:d5:64:3e:90:c2:93:23:10:b2:66:a5:d8:fe:
                    d1:3c:1f:29:7d:ae:12:f2:4d:75:0f:e8:98:1b:71:
                    17:b3:fe:c2:8c:bd:2b:7b:50:ef:d3:12:8d:79:27:
                    be:9b:75:6c:b9:18:79:19:1e:6c:c5:bb:30:1e:c4:
                    5e:9d:d0:2b:7d:51:ca:23:98:48:03:38:f4:ca:d7:
                    03:a7:0a:aa:7c:e9:58:6b:78:09:17:01:c0:6e:69:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:3E:7F:EF:F9:7F:63:FD:75:77:55:AA:72:8D:4E:6A:70:C7:C4
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32332d3233203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:1d:11:82:b7:4c:32:8e:ad:d6:25:52:35:b2:b1:fa:f6:
         f3:dd:bf:a7:64:28:f5:96:24:d2:57:2b:ab:f3:71:b3:7b:b2:
         3a:be:4b:aa:a1:50:67:25:d3:05:6a:84:8e:46:80:f2:a3:50:
         d6:4d:df:b4:3a:a2:90:38:6a:97:b6:f0:f4:e0:61:3a:88:8e:
         b2:06:7f:82:d9:a4:44:f0:f3:75:01:3c:37:cd:33:7f:5d:57:
         b3:0f:7a:51:05:c9:fa:9c:34:ca:bb:94:eb:0e:30:79:fa:bd:
         97:05:ee:c5:de:80:82:bd:0a:02:cf:5d:49:56:fe:a7:1e:96:
         4d:ab:1a:73:4d:e8:7e:c8:46:1c:6d:8f:91:0f:ae:9d:04:7b:
         16:90:c1:65:a7:fc:fd:0a:26:be:d2:3d:9d:2f:8f:7d:01:85:
         ca:91:43:ae:4b:c6:5a:9b:d7:77:4a:25:df:04:7b:0a:93:e0:
         b3:a9:46:a7:00:e5:16:1c:dc:46:29:8a:51:b0:b0:19:3d:f5:
         2a:eb:ad:b1:9b:de:c1:86:c1:81:b4:41:58:ec:92:e5:09:44:
         2b:1a:79:45:7d:92:bf:b4:7e:4a:51:e5:9f:f9:66:99:61:c5:
         e3:a3:39:9f:24:ad:52:f8:35:e2:2b:2c:db:03:13:c3:20:0b:
         7e:4d:36:fe
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUGyXCDxLcU7clziHKU5GH4YmJLiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzNzVCOTVFRUU5MjQzQkIxNDIxOUQ2NTI0NTgxQjRD
OTFEMjVDRTAeFw0yMzA1MjYxOTU1MDBaFw0yNDA1MjQyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNBQ0I1ODBFQkFDRkY3NUQ2
OTJFRDI5Mjg0NUMxQzMxQTY5MzZEQTY3OTk0MjVFMTM5RUIxOTA4MUM3OTRDRjlC
RkUxQUYxQzYzMTUxM0E4NzFEOUY4RTQ1OTg2QzU2MUFDNEQ4MTBGM0ZDOTc1MzJE
QzZCMkZFOTkwN0RBRDcxMUNCQzBGQ0E5NjcyRjZDOTAxMjMyMDVDODFCODA5MzJD
RTFCQzc0MDkxMTQ5NDVEQkJFOTg3NkU4NTNGOUVDMjc5RTlCMzk0NzMxNDVDN0Uz
NEEzRDUzQjAzNERERTI5N0FBQ0Y0RjRBNjRGMkUyNEQwRDM0MDMzRDVBNUMyNkZE
NzAyNjU2NzgxOUNBMjc2NzA1NkU2RUNFQTI3NUI2RjU4Q0UwMjVFNThFQUM3NDE1
Q0QxMURGODkxMjNDNkE4NzY3MkEzNTdDNzBENTY0M0U5MEMyOTMyMzEwQjI2NkE1
RDhGRUQxM0MxRjI5N0RBRTEyRjI0RDc1MEZFODk4MUI3MTE3QjNGRUMyOENCRDJC
N0I1MEVGRDMxMjhENzkyN0JFOUI3NTZDQjkxODc5MTkxRTZDQzVCQjMwMUVDNDVF
OUREMDJCN0Q1MUNBMjM5ODQ4MDMzOEY0Q0FENzAzQTcwQUFBN0NFOTU4NkI3ODA5
MTcwMUMwNkU2OUFFNjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw6y1gOus/3XWku0pKEXBwxppNtpnmUJeE56xkIHHlM+b/hrxxjFR
Oocdn45FmGxWGsTYEPP8l1MtxrL+mQfa1xHLwPypZy9skBIyBcgbgJMs4bx0CRFJ
Rdu+mHboU/nsJ56bOUcxRcfjSj1TsDTd4peqz09KZPLiTQ00Az1aXCb9cCZWeBnK
J2cFbm7OonW29YzgJeWOrHQVzRHfiRI8aodnKjV8cNVkPpDCkyMQsmal2P7RPB8p
fa4S8k11D+iYG3EXs/7CjL0re1Dv0xKNeSe+m3VsuRh5GR5sxbswHsRendArfVHK
I5hIAzj0ytcDpwqqfOlYa3gJFwHAbmmuZQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLPsPn/v+X9j/XV3VapyjU5qcMfEMB8GA1UdIwQYMBaAFDw3W5Xu6SQ7sUIZ1lJF
gbTJHSXOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhiSkVxVkY1WG9hdFRM
ZVBjc2dwSjJaUm5kQzRNUUtUYmNWS0tZMjJyN2hNLzAvM0MzNzVCOTVFRUU5MjQz
QkIxNDIxOUQ2NTI0NTgxQjRDOTFEMjVDRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQzM3NUI5NUVFRTkyNDNCQjE0MjE5RDY1MjQ1ODFCNEM5MUQy
NUNFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84YkpFcVZGNVhvYXRUTGVQY3Nn
cEoyWlJuZEM0TVFLVGJjVktLWTIycjdoTS8wLzMxMzczMDJlMzIzMzM4MmUzMTMy
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzYzMzMxMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGq7oAwDQYJKoZIhvcNAQELBQADggEBAF1kHRGCt0wyjq3WJVI1srH69vPdv6dk
KPWWJNJXK6vzcbN7sjq+S6qhUGcl0wVqhI5GgPKjUNZN37Q6opA4ape28PTgYTqI
jrIGf4LZpETw83UBPDfNM39dV7MPelEFyfqcNMq7lOsOMHn6vZcF7sXegIK9CgLP
XUlW/qcelk2rGnNN6H7IRhxtj5EPrp0EexaQwWWn/P0KJr7SPZ0vj30BhcqRQ65L
xlqb13dKJd8EewqT4LOpRqcA5RYc3EYpilGwsBk99SrrrbGb3sGGwYG0QVjskuUJ
RCsaeUV9kr+0fkpR5Z/5ZplhxeOjOZ8krVL4NeIrLNsDE8MgC35NNv4=
-----END CERTIFICATE-----