Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa
File:                     3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa (raw, json)
Hash identifier:          Lb0QyCwm3BdvmQlylF7F6WqqNWOIOt9UwLflKsueQCw=
Subject key identifier:   E1:46:00:A7:FD:DB:21:A8:02:61:4A:55:2F:60:3C:82:AC:28:59:39
Certificate issuer:       /CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
Certificate serial:       0F8910A975E440423CC7BF0651027086DDBFDB35
Authority key identifier: BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa
Signing time:             Tue 26 Mar 2024 18:41:23 +0000
ROA not before:           Tue 26 Mar 2024 18:36:23 +0000
ROA not after:            Tue 25 Mar 2025 18:41:23 +0000
asID:                     266648
IP address blocks:        128.201.204.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:10:a9:75:e4:40:42:3c:c7:bf:06:51:02:70:86:dd:bf:db:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
        Validity
            Not Before: Mar 26 18:36:23 2024 GMT
            Not After : Mar 25 18:41:23 2025 GMT
        Subject: CN=E14600A7FDDB21A802614A552F603C82AC285939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:d3:13:20:13:53:4c:5d:79:c0:b4:f1:84:
                    49:74:74:66:ac:05:f6:e4:84:84:0a:19:74:74:53:
                    cd:41:c6:f0:b9:cd:d0:49:87:b5:d2:d6:58:35:e7:
                    28:ec:8e:7a:46:0d:d0:44:0e:0e:1c:c7:eb:28:a2:
                    94:86:9f:b2:e3:e8:02:bb:c5:71:23:9b:f7:95:d4:
                    49:a6:70:48:12:72:91:9f:37:4e:4b:0f:ed:72:1c:
                    b9:28:a5:70:54:3b:35:6d:8c:d0:61:40:ec:cc:01:
                    5f:cd:24:3a:ec:11:af:1c:44:d0:f6:e5:04:05:ca:
                    63:c8:9f:3f:b0:3f:c4:9c:49:e9:b8:bb:86:72:f0:
                    5e:46:2c:bf:52:0a:d8:7c:e8:2e:25:ae:34:ab:5b:
                    2a:cd:93:ad:1d:32:11:36:69:8c:2d:e5:b5:01:ff:
                    11:a8:91:88:05:86:12:ba:ac:58:d0:98:fe:dc:75:
                    db:27:e2:35:45:40:71:47:02:e0:79:7a:a0:5c:20:
                    1d:1d:7d:19:36:73:68:f9:d8:90:10:2c:fa:d9:99:
                    78:f2:a2:5c:c6:ab:62:03:60:ef:90:40:45:2c:6d:
                    5a:26:4f:cd:85:e4:69:26:6e:7c:06:23:76:2e:4c:
                    df:57:73:97:6b:92:5f:f0:a6:e6:e2:d8:06:a7:2d:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:46:00:A7:FD:DB:21:A8:02:61:4A:55:2F:60:3C:82:AC:28:59:39
            X509v3 Authority Key Identifier:
                keyid:BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:43:6d:bd:a0:97:b6:be:69:06:80:bd:3f:d7:b7:72:92:2d:
         cb:61:5f:64:50:8e:cd:e3:5d:ba:74:be:31:e1:e8:75:78:16:
         00:3f:0a:5b:30:9f:8f:0b:5e:e1:10:77:a6:44:5a:fc:b7:c2:
         15:87:2f:27:d7:45:7f:ad:ef:51:1e:96:5a:ca:52:f1:ca:b4:
         bc:16:9f:44:78:95:a7:75:67:82:6f:70:38:c3:db:5f:9e:34:
         f7:01:f2:b1:d7:80:da:1e:36:60:b0:7c:d4:be:2a:0f:d0:f7:
         9c:6f:c8:62:41:64:2e:3c:61:d7:fb:c0:16:a2:67:8d:f8:e4:
         c7:8b:f5:c4:8d:d9:c8:a1:fc:bd:14:de:64:48:6b:34:17:1b:
         7e:d2:16:eb:59:ac:c5:5e:b8:c9:43:22:18:2e:05:49:e2:d9:
         9d:bd:90:bd:e6:9b:01:bc:af:58:81:ce:77:9e:23:a2:25:25:
         40:f0:97:cd:c6:4e:93:21:c4:4b:e8:ab:46:26:fd:68:22:12:
         2e:db:6d:fe:3d:1e:ab:f5:a1:ee:6b:45:b0:d6:db:3c:9b:e0:
         a5:3c:12:d6:0b:f0:8a:bc:2e:66:03:55:48:80:d8:fe:d4:d1:
         d4:03:25:ab:7d:af:89:80:70:8e:45:e0:4b:f9:9f:fd:c9:2b:
         d6:ec:fe:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD4kQqXXkQEI8x78GUQJwht2/2zUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNCNUNENzE5RjQ3QjMyQzg1MDM5RkMxRUI2RjdFREVE
M0NERDVCNDAeFw0yNDAzMjYxODM2MjNaFw0yNTAzMjUxODQxMjNaMDMxMTAvBgNV
BAMTKEUxNDYwMEE3RkREQjIxQTgwMjYxNEE1NTJGNjAzQzgyQUMyODU5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtdMTIBNTTF15wLTxhEl0dGas
BfbkhIQKGXR0U81BxvC5zdBJh7XS1lg15yjsjnpGDdBEDg4cx+soopSGn7Lj6AK7
xXEjm/eV1EmmcEgScpGfN05LD+1yHLkopXBUOzVtjNBhQOzMAV/NJDrsEa8cRND2
5QQFymPInz+wP8ScSem4u4Zy8F5GLL9SCth86C4lrjSrWyrNk60dMhE2aYwt5bUB
/xGokYgFhhK6rFjQmP7cddsn4jVFQHFHAuB5eqBcIB0dfRk2c2j52JAQLPrZmXjy
olzGq2IDYO+QQEUsbVomT82F5GkmbnwGI3YuTN9Xc5drkl/wpubi2AanLWlVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4UYAp/3bIagCYUpVL2A8gqwoWTkwHwYDVR0j
BBgwFoAUvLXNcZ9HsyyFA5/B629+3tPN1bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG42WnBBSmpxTmJFd2JXTXVDa1hGSEQ0amExdjM4S1M4MjlXY0FEcGQy
cG4vMC9CQ0I1Q0Q3MTlGNDdCMzJDODUwMzlGQzFFQjZGN0VERUQzQ0RENUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDQjVDRDcxOUY0N0IzMkM4
NTAzOUZDMUVCNkY3RURFRDNDREQ1QjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuNlpwQUpqcU5iRXdiV011Q2tYRkhENGphMXYzOEtTODI5V2NBRHBkMnBuLzAv
MzEzMjM4MmUzMjMwMzEyZTMyMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjM2MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJzDANBgkqhkiG9w0BAQsFAAOCAQEAWkNt
vaCXtr5pBoC9P9e3cpIty2FfZFCOzeNdunS+MeHodXgWAD8KWzCfjwte4RB3pkRa
/LfCFYcvJ9dFf63vUR6WWspS8cq0vBafRHiVp3Vngm9wOMPbX5409wHysdeA2h42
YLB81L4qD9D3nG/IYkFkLjxh1/vAFqJnjfjkx4v1xI3ZyKH8vRTeZEhrNBcbftIW
61msxV64yUMiGC4FSeLZnb2QveabAbyvWIHOd54joiUlQPCXzcZOkyHES+irRib9
aCISLttt/j0eq/Wh7mtFsNbbPJvgpTwS1gvwirwuZgNVSIDY/tTR1AMlq32viYBw
jkXgS/mf/ckr1uz+Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org