Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa
File:                     3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa (raw, json)
Hash identifier:          0FmoCwRDQzgRKTQEQO+B4pcqIjMsHhr80k45QWcBSx0=
Subject key identifier:   18:25:35:B0:0B:99:04:5A:EE:39:25:30:1B:29:04:03:B8:EE:FF:39
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       29B5D925986EFD78E4D483BB0C622E4016F8F2E2
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa
Signing time:             Thu 23 Mar 2023 13:29:32 +0000
ROA not before:           Thu 23 Mar 2023 13:24:32 +0000
ROA not after:            Thu 21 Mar 2024 13:29:32 +0000
asID:                     270781
IP address blocks:        201.148.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b5:d9:25:98:6e:fd:78:e4:d4:83:bb:0c:62:2e:40:16:f8:f2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 13:24:32 2023 GMT
            Not After : Mar 21 13:29:32 2024 GMT
        Subject: CN=182535B00B99045AEE3925301B290403B8EEFF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:f5:5d:be:8d:ca:4c:e8:34:d8:2c:c9:0c:
                    36:90:92:dd:06:95:3a:35:3b:57:08:35:54:d7:54:
                    2a:42:5f:62:d9:14:58:37:ec:28:32:3e:c1:3c:c2:
                    ed:ea:8e:be:6b:47:77:5e:3b:68:49:c6:b9:5e:b6:
                    6a:89:f6:61:68:d2:43:fe:fd:28:d7:38:e7:fd:38:
                    2f:42:ad:b2:9c:6c:de:1c:db:a2:d7:03:6e:80:f1:
                    00:cd:de:a6:1c:93:f2:d0:e3:53:f9:f4:77:d9:8a:
                    24:2d:45:0e:f1:c7:f0:a3:53:1c:10:90:27:7c:99:
                    61:fc:7a:41:d6:44:76:e3:ee:31:63:d9:95:41:66:
                    aa:73:7a:08:78:b8:04:64:46:26:4d:12:d1:7e:b3:
                    26:e2:66:44:06:6e:c6:5f:d1:1e:93:0f:e7:c1:c5:
                    37:ae:f8:96:a3:cf:15:b3:ae:be:46:7f:ed:a1:09:
                    f2:43:f5:8e:36:c9:79:c3:c4:0b:4b:a0:b4:dd:6e:
                    e6:e5:5b:f4:0b:e9:2f:2b:2d:a1:e6:d8:16:b9:00:
                    d8:0c:cf:06:99:de:65:12:16:97:75:2f:93:90:bf:
                    f5:cc:cb:e5:67:a1:0c:2f:14:ee:36:8c:4f:f7:96:
                    8d:1f:1a:12:6d:7d:a5:bc:8b:7d:1d:0d:32:73:97:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:35:B0:0B:99:04:5A:EE:39:25:30:1B:29:04:03:B8:EE:FF:39
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:78:70:bc:36:b3:20:50:d5:a3:a2:5d:d8:3d:a2:99:08:
         04:cc:a3:19:e1:e1:2e:55:4e:a3:46:cd:72:f5:7f:7e:7a:d0:
         c3:e5:86:59:5a:7f:59:de:88:2a:51:c7:ab:4a:7e:67:72:d3:
         2d:95:89:34:73:55:57:e6:40:68:96:87:fb:dd:6e:8f:8a:81:
         b5:0b:b8:1d:ea:9d:93:ba:e7:79:42:e5:64:84:09:2e:f8:28:
         e2:8c:ea:b5:3a:56:28:97:00:72:5e:54:07:49:37:57:07:58:
         c9:23:d5:0e:a4:bf:cd:66:cc:84:fc:7f:55:92:9b:9f:2f:5c:
         ca:21:41:e9:2d:18:c6:c7:cd:58:ea:79:ef:91:56:bb:85:1e:
         49:0c:c8:a2:f2:a2:1b:98:ba:20:e2:7c:ce:ed:20:8f:c3:95:
         c4:06:05:9a:ac:be:4a:30:3a:3a:df:e4:b0:f7:0d:01:bf:b5:
         3f:50:51:9d:05:56:15:fa:87:86:fc:14:fc:f5:61:dd:a5:6c:
         11:17:b2:44:06:2b:67:1e:10:7d:57:26:87:e5:31:f5:3d:45:
         be:04:fa:d3:68:6c:a0:a7:40:57:14:69:17:76:f9:49:0d:90:
         5c:9b:b1:3b:5e:53:64:93:a7:14:da:37:b8:8d:82:b7:4c:a6:
         62:a3:0e:c8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKbXZJZhu/Xjk1IO7DGIuQBb48uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1NzkxQUJDREY4OUU0REQ2RTNCM0IwRTFCQzYxQTE0
QTE0N0MyMzAeFw0yMzAzMjMxMzI0MzJaFw0yNDAzMjExMzI5MzJaMDMxMTAvBgNV
BAMTKDE4MjUzNUIwMEI5OTA0NUFFRTM5MjUzMDFCMjkwNDAzQjhFRUZGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtPVdvo3KTOg02CzJDDaQkt0G
lTo1O1cINVTXVCpCX2LZFFg37CgyPsE8wu3qjr5rR3deO2hJxrletmqJ9mFo0kP+
/SjXOOf9OC9CrbKcbN4c26LXA26A8QDN3qYck/LQ41P59HfZiiQtRQ7xx/CjUxwQ
kCd8mWH8ekHWRHbj7jFj2ZVBZqpzegh4uARkRiZNEtF+sybiZkQGbsZf0R6TD+fB
xTeu+JajzxWzrr5Gf+2hCfJD9Y42yXnDxAtLoLTdbublW/QL6S8rLaHm2Ba5ANgM
zwaZ3mUSFpd1L5OQv/XMy+VnoQwvFO42jE/3lo0fGhJtfaW8i30dDTJzl3PjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGCU1sAuZBFruOSUwGykEA7ju/zkwHwYDVR0j
BBgwFoAULVeRq834nk3W47Ow4bxhoUoUfCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK
d1YvMC8yRDU3OTFBQkNERjg5RTRERDZFM0IzQjBFMUJDNjFBMTRBMTQ3QzIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENTc5MUFCQ0RGODlFNERE
NkUzQjNCMEUxQkM2MUExNEExNDdDMjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TkVrTkVuV3d6cVhmalRvOWluUno4eHkzWlRGblhUczFqMlBpdDFkSndWLzAv
MzIzMDMxMmUzMTM0MzgyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmUcDANBgkqhkiG9w0BAQsFAAOCAQEAd7J4
cLw2syBQ1aOiXdg9opkIBMyjGeHhLlVOo0bNcvV/fnrQw+WGWVp/Wd6IKlHHq0p+
Z3LTLZWJNHNVV+ZAaJaH+91uj4qBtQu4Heqdk7rneULlZIQJLvgo4ozqtTpWKJcA
cl5UB0k3VwdYySPVDqS/zWbMhPx/VZKbny9cyiFB6S0YxsfNWOp575FWu4UeSQzI
ovKiG5i6IOJ8zu0gj8OVxAYFmqy+SjA6Ot/ksPcNAb+1P1BRnQVWFfqHhvwU/PVh
3aVsEReyRAYrZx4QfVcmh+Ux9T1FvgT602hsoKdAVxRpF3b5SQ2QXJuxO15TZJOn
FNo3uI2Ct0ymYqMOyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org