Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
File:                     3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (raw, json)
Hash identifier:          3QQ29mZInqV+w615C1LcM4GhH5MP1vovCiSI5WYErZc=
Subject key identifier:   CA:5F:85:43:2D:1D:58:E5:DF:CC:F9:46:D1:5E:62:EC:6F:5D:22:17
Certificate issuer:       /CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
Certificate serial:       04EEC58748FF17FB6617388348A47A03BD521A91
Authority key identifier: 09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
Signing time:             Fri 22 Sep 2023 02:52:38 +0000
ROA not before:           Fri 22 Sep 2023 02:47:38 +0000
ROA not after:            Fri 20 Sep 2024 02:52:38 +0000
asID:                     270293
IP address blocks:        201.71.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ee:c5:87:48:ff:17:fb:66:17:38:83:48:a4:7a:03:bd:52:1a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
        Validity
            Not Before: Sep 22 02:47:38 2023 GMT
            Not After : Sep 20 02:52:38 2024 GMT
        Subject: CN=CA5F85432D1D58E5DFCCF946D15E62EC6F5D2217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:9b:83:00:5c:4c:aa:6a:99:3d:c7:43:64:
                    49:98:fb:70:a9:f6:cb:e3:ea:a2:c2:d7:e2:d8:62:
                    95:ce:15:1f:78:02:e4:e0:b1:eb:50:05:b2:34:5b:
                    d4:31:40:a8:6e:86:db:0c:9c:11:8e:26:cd:01:63:
                    c0:d9:7b:57:b2:63:34:02:b6:b8:b5:84:3a:84:8f:
                    80:7f:d8:ba:fd:74:d1:12:b6:c6:98:a0:0c:de:59:
                    d5:9a:5f:5c:b3:70:e9:07:71:0d:05:92:52:50:fb:
                    8c:69:89:ea:1a:2b:0e:5c:81:9a:9c:97:6b:37:32:
                    9a:57:2c:f1:bd:b1:62:fd:97:52:7d:5f:14:3f:fd:
                    2d:ed:45:79:ce:55:43:59:5c:4b:1c:c3:26:50:59:
                    c0:0b:be:a9:d4:ca:b1:20:32:fa:53:65:c2:6a:0f:
                    e7:ec:cc:9d:e5:23:3b:63:b4:cc:e1:37:c0:6b:5c:
                    4a:dd:6e:3c:8a:33:d8:88:eb:e5:d7:1f:dc:6a:c2:
                    9e:8c:30:2d:73:42:7e:31:d3:d5:90:f8:0d:d9:e1:
                    70:e3:29:c1:84:ef:3b:fc:1a:c6:08:89:18:d4:3b:
                    0c:7b:23:7f:b4:d6:3d:77:ca:6f:72:8c:18:39:18:
                    dc:0a:f8:63:9d:98:43:0f:bc:81:de:d3:d4:64:b5:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:85:43:2D:1D:58:E5:DF:CC:F9:46:D1:5E:62:EC:6F:5D:22:17
            X509v3 Authority Key Identifier:
                keyid:09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:70:ae:16:18:b9:77:f5:ec:05:87:e9:55:9c:a5:7c:8a:a9:
         92:c7:9e:d4:02:14:11:1f:ea:36:c3:b6:20:b3:18:96:52:19:
         ef:62:9c:4d:a1:bc:f4:13:f5:e5:95:06:c6:1d:ac:6f:6d:16:
         ad:2b:f5:2d:ad:39:18:5d:79:36:e7:c8:be:d8:08:d2:cb:d3:
         a2:21:b8:c9:91:6f:ce:a1:c4:1e:e4:43:2d:49:cd:24:a5:6e:
         1f:72:30:64:ef:0d:6f:dd:87:5c:2e:d2:b9:89:ae:48:b4:37:
         52:db:f4:ef:30:3f:d6:d7:3f:56:c2:55:e6:be:1d:60:03:bd:
         a3:a9:b3:e2:1e:99:99:3e:c3:97:40:2f:d8:85:f9:f2:98:20:
         86:bc:19:bb:e4:7f:e7:a9:dd:96:38:5e:0a:3f:e0:e5:0e:c7:
         f5:f3:6b:f8:95:f3:5d:7a:0a:05:80:f7:77:6f:8c:57:45:cc:
         cf:bb:0b:48:98:60:1c:5c:55:36:43:8d:80:81:f9:de:6f:93:
         3d:f7:42:e6:ac:53:b4:70:fa:35:15:f3:59:a4:f1:39:cb:01:
         81:f2:ba:c1:7f:82:f9:26:7f:49:bb:73:8c:91:66:66:b6:6c:
         de:a6:d1:ec:40:2b:c9:e6:0a:08:3f:11:57:98:94:81:9a:12:
         ba:b2:13:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBO7Fh0j/F/tmFziDSKR6A71SGpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkzNDdFNEY5Q0JBOEM3NDQ4NTZGMjVFNDlCRkFCODA0
RTczOUNDRTAeFw0yMzA5MjIwMjQ3MzhaFw0yNDA5MjAwMjUyMzhaMDMxMTAvBgNV
BAMTKENBNUY4NTQzMkQxRDU4RTVERkNDRjk0NkQxNUU2MkVDNkY1RDIyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFZuDAFxMqmqZPcdDZEmY+3Cp
9svj6qLC1+LYYpXOFR94AuTgsetQBbI0W9QxQKhuhtsMnBGOJs0BY8DZe1eyYzQC
tri1hDqEj4B/2Lr9dNEStsaYoAzeWdWaX1yzcOkHcQ0FklJQ+4xpieoaKw5cgZqc
l2s3MppXLPG9sWL9l1J9XxQ//S3tRXnOVUNZXEscwyZQWcALvqnUyrEgMvpTZcJq
D+fszJ3lIztjtMzhN8BrXErdbjyKM9iI6+XXH9xqwp6MMC1zQn4x09WQ+A3Z4XDj
KcGE7zv8GsYIiRjUOwx7I3+01j13ym9yjBg5GNwK+GOdmEMPvIHe09RktZMTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyl+FQy0dWOXfzPlG0V5i7G9dIhcwHwYDVR0j
BBgwFoAUCTR+T5y6jHRIVvJeSb+rgE5znM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHVMcHNiRnRQblFNWkdOREZZcWJIZDFrUktLRnFvSmhMYWU5NTd0UVF0
UHgvMC8wOTM0N0U0RjlDQkE4Qzc0NDg1NkYyNUU0OUJGQUI4MDRFNzM5Q0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA5MzQ3RTRGOUNCQThDNzQ0
ODU2RjI1RTQ5QkZBQjgwNEU3MzlDQ0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh1THBzYkZ0UG5RTVpHTkRGWXFiSGQxa1JLS0Zxb0poTGFlOTU3dFFRdFB4LzAv
MzIzMDMxMmUzNzMxMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJR8QwDQYJKoZIhvcNAQELBQADggEBAIlwrhYY
uXf17AWH6VWcpXyKqZLHntQCFBEf6jbDtiCzGJZSGe9inE2hvPQT9eWVBsYdrG9t
Fq0r9S2tORhdeTbnyL7YCNLL06IhuMmRb86hxB7kQy1JzSSlbh9yMGTvDW/dh1wu
0rmJrki0N1Lb9O8wP9bXP1bCVea+HWADvaOps+IemZk+w5dAL9iF+fKYIIa8Gbvk
f+ep3ZY4Xgo/4OUOx/Xza/iV8116CgWA93dvjFdFzM+7C0iYYBxcVTZDjYCB+d5v
kz33QuasU7Rw+jUV81mk8TnLAYHyusF/gvkmf0m7c4yRZma2bN6m0exAK8nmCgg/
EVeYlIGaErqyE6o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org