Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa
File:                     3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          q8+gj4HwLphKI3QiMtW1KoHnv6IxneubPgJ1Hphwn+E=
Subject key identifier:   8C:A0:A1:E0:DE:28:10:39:8C:C5:8D:5E:24:42:8A:62:55:48:59:E9
Certificate issuer:       /CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
Certificate serial:       37A761B98D9D53A9EB937E22423D39962B914ABC
Authority key identifier: A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 22 Feb 2024 21:18:55 +0000
ROA not before:           Thu 22 Feb 2024 21:13:55 +0000
ROA not after:            Thu 20 Feb 2025 21:18:55 +0000
asID:                     264552
IP address blocks:        201.148.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a7:61:b9:8d:9d:53:a9:eb:93:7e:22:42:3d:39:96:2b:91:4a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
        Validity
            Not Before: Feb 22 21:13:55 2024 GMT
            Not After : Feb 20 21:18:55 2025 GMT
        Subject: CN=8CA0A1E0DE2810398CC58D5E24428A62554859E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:92:86:44:08:f3:b9:e1:27:4b:0c:d6:9c:
                    56:ab:47:4b:0e:ac:e1:d4:8f:0e:78:c8:30:04:22:
                    ff:82:65:c1:c7:a1:e7:b6:c9:2c:81:58:4d:d5:ed:
                    c3:3c:d6:e0:6e:43:40:00:5f:e0:64:fe:2c:47:75:
                    b0:13:46:69:46:13:8c:97:01:0d:2f:ed:4e:90:72:
                    b0:f9:88:94:7b:df:fe:98:35:49:3e:82:93:cf:cc:
                    71:ed:58:ea:28:7c:2b:a6:38:3d:35:47:88:b2:25:
                    62:4c:71:6b:2d:a6:7f:70:10:98:bd:a4:e8:e7:8a:
                    f1:56:35:27:cc:d7:2d:e2:17:23:bf:cc:95:4c:73:
                    02:92:86:b0:97:4e:f8:63:df:84:42:e2:8c:6e:0a:
                    01:af:f4:9b:42:0e:69:9b:ba:f0:b4:ad:5e:70:d5:
                    2e:a8:f9:28:93:f5:20:12:d6:a9:95:2f:5e:7c:79:
                    0b:98:b5:46:2d:f1:9d:ae:a5:9c:7c:41:ee:cb:1e:
                    5d:05:cd:70:f9:51:3b:d1:4b:10:e8:02:c3:cd:11:
                    0f:e7:31:84:c7:25:fc:8a:6f:9f:f5:d2:59:61:f3:
                    ea:86:bb:71:f6:83:08:49:3f:ea:a3:e0:3f:ef:3f:
                    e3:ab:ee:77:b1:ed:8f:b4:8c:4f:ef:7c:e1:9f:60:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A0:A1:E0:DE:28:10:39:8C:C5:8D:5E:24:42:8A:62:55:48:59:E9
            X509v3 Authority Key Identifier:
                keyid:A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:72:ca:02:4b:6f:fa:4a:7e:13:46:21:be:c9:f3:e8:ad:cd:
         4a:59:3e:64:bc:ac:5b:f9:29:bf:e4:bb:31:84:48:41:48:c7:
         b5:be:9f:2b:90:fe:44:49:d7:6b:9a:30:c6:79:3a:98:d7:0c:
         03:4f:7f:36:ed:c8:97:e0:81:58:88:45:26:a6:82:89:96:7b:
         6a:39:f4:62:98:56:98:fb:23:ce:c8:2e:52:36:b5:22:c3:1c:
         c4:87:63:d0:bf:e6:99:b0:c8:7c:5a:55:44:00:29:78:83:f9:
         79:72:38:80:68:66:42:4d:56:d7:4b:cb:dc:c5:47:8f:53:03:
         24:38:2e:61:63:a0:80:84:b6:27:d9:ba:dc:f0:f5:77:f1:bb:
         9e:5c:4d:c0:4d:f8:fc:31:c5:ba:0c:8f:77:69:98:fb:85:c7:
         44:30:00:0f:97:1d:17:bd:a3:e5:62:6b:9e:ca:84:43:62:76:
         8f:2b:48:35:d2:64:1d:b0:72:3a:0e:86:dd:54:3b:14:0f:dd:
         3a:96:6b:06:56:2b:7b:6d:9a:e9:de:f9:bf:11:2a:fe:48:6d:
         6c:17:7f:dd:53:3b:1a:97:b2:ae:ec:cd:00:31:6d:4d:03:1e:
         74:89:79:00:e0:dd:b2:e9:75:fc:05:ee:cf:0f:4f:af:fa:c6:
         25:c7:52:f5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN6dhuY2dU6nrk34iQj05liuRSrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFOUE3NjNFQzJCQzQ2OTNFOERERjg3MzgyQkU0MTkz
REE0Njk2RDAeFw0yNDAyMjIyMTEzNTVaFw0yNTAyMjAyMTE4NTVaMDMxMTAvBgNV
BAMTKDhDQTBBMUUwREUyODEwMzk4Q0M1OEQ1RTI0NDI4QTYyNTU0ODU5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzz5KGRAjzueEnSwzWnFarR0sO
rOHUjw54yDAEIv+CZcHHoee2ySyBWE3V7cM81uBuQ0AAX+Bk/ixHdbATRmlGE4yX
AQ0v7U6QcrD5iJR73/6YNUk+gpPPzHHtWOoofCumOD01R4iyJWJMcWstpn9wEJi9
pOjnivFWNSfM1y3iFyO/zJVMcwKShrCXTvhj34RC4oxuCgGv9JtCDmmbuvC0rV5w
1S6o+SiT9SAS1qmVL158eQuYtUYt8Z2upZx8Qe7LHl0FzXD5UTvRSxDoAsPNEQ/n
MYTHJfyKb5/10llh8+qGu3H2gwhJP+qj4D/vP+Or7nex7Y+0jE/vfOGfYCv9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjKCh4N4oEDmMxY1eJEKKYlVIWekwHwYDVR0j
BBgwFoAUoumnY+wrxGk+jd+HOCvkGT2kaW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK
d1YvMC9BMkU5QTc2M0VDMkJDNDY5M0U4RERGODczODJCRTQxOTNEQTQ2OTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyRTlBNzYzRUMyQkM0Njkz
RThEREY4NzM4MkJFNDE5M0RBNDY5NkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TkVrTkVuV3d6cVhmalRvOWluUno4eHkzWlRGblhUczFqMlBpdDFkSndWLzAv
MzIzMDMxMmUzMTM0MzgyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmUcDANBgkqhkiG9w0BAQsFAAOCAQEAUXLK
Aktv+kp+E0Yhvsnz6K3NSlk+ZLysW/kpv+S7MYRIQUjHtb6fK5D+REnXa5owxnk6
mNcMA09/Nu3Il+CBWIhFJqaCiZZ7ajn0YphWmPsjzsguUja1IsMcxIdj0L/mmbDI
fFpVRAApeIP5eXI4gGhmQk1W10vL3MVHj1MDJDguYWOggIS2J9m63PD1d/G7nlxN
wE34/DHFugyPd2mY+4XHRDAAD5cdF72j5WJrnsqEQ2J2jytINdJkHbByOg6G3VQ7
FA/dOpZrBlYre22a6d75vxEq/khtbBd/3VM7GpeyruzNADFtTQMedIl5AODdsul1
/AXuzw9Pr/rGJcdS9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org