Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          P/4/gU1UwXP7KbLzDzM26ous6J6o7usxnVvhd31G/SY=
Subject key identifier:   D1:3E:E8:78:D1:3E:E1:01:8D:D4:FC:5C:60:F4:09:FB:FB:0B:ED:83
Certificate issuer:       /CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
Certificate serial:       3E7CC1A65996D9B55D85D6F5ED22678DAAD0A5C3
Authority key identifier: 4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa
Signing time:             Wed 13 Mar 2024 18:44:46 +0000
ROA not before:           Wed 13 Mar 2024 18:39:46 +0000
ROA not after:            Wed 12 Mar 2025 18:44:46 +0000
asID:                     262792
IP address blocks:        201.76.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:c1:a6:59:96:d9:b5:5d:85:d6:f5:ed:22:67:8d:aa:d0:a5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Validity
            Not Before: Mar 13 18:39:46 2024 GMT
            Not After : Mar 12 18:44:46 2025 GMT
        Subject: CN=D13EE878D13EE1018DD4FC5C60F409FBFB0BED83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:28:de:03:af:75:84:ce:8a:cc:31:8a:db:
                    4a:9f:0a:32:77:64:a4:d2:3e:e7:92:ad:65:28:8d:
                    02:e0:70:1c:d8:b2:4d:fd:a7:9f:d0:bb:8e:e4:b2:
                    29:5a:41:3d:bf:ed:06:a1:3e:39:eb:b2:59:2e:e0:
                    8e:c1:8d:b4:2f:09:60:f5:b2:e7:61:ac:72:c8:54:
                    64:f5:7d:60:f8:57:39:53:dc:24:f0:0f:4a:3c:b4:
                    94:01:da:01:cf:bb:06:46:a3:64:59:12:8d:3b:38:
                    08:08:2c:90:94:1b:3d:ba:39:61:cf:db:2f:43:c7:
                    72:3c:f6:f1:45:17:9a:b3:bc:98:d5:6e:5b:2f:95:
                    4a:03:dd:73:00:c0:67:cd:4d:ee:52:9c:ac:ab:4d:
                    69:32:43:d0:1d:04:cd:96:32:39:d9:09:b3:8d:32:
                    7b:77:c2:da:4d:6e:c1:dd:51:dc:b8:38:6e:9a:77:
                    0b:ee:1b:5a:31:0e:97:0e:da:59:d3:04:79:4c:b7:
                    07:ce:ce:0c:15:25:98:7c:c7:81:2b:a8:36:9c:2a:
                    e9:96:84:e4:ea:92:e6:41:ba:f3:ad:44:70:dd:e1:
                    20:b8:d5:5d:e3:68:8a:88:ac:1b:f5:38:47:ad:70:
                    c1:f7:b6:c3:47:42:67:90:b7:0b:af:a3:72:40:61:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3E:E8:78:D1:3E:E1:01:8D:D4:FC:5C:60:F4:09:FB:FB:0B:ED:83
            X509v3 Authority Key Identifier:
                keyid:4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:b4:f8:e3:bd:3a:6b:eb:a4:cd:d4:fc:05:36:c2:24:0e:
         45:c5:a9:be:6d:b7:19:5d:df:29:b1:d7:f0:ed:8b:be:d9:01:
         09:3d:22:0c:66:1d:4e:26:21:64:6e:f2:62:e3:ba:39:6a:39:
         a4:eb:c9:18:c6:84:2d:bf:72:a3:76:48:88:59:1a:36:5c:b3:
         77:af:43:a7:83:38:c7:65:d4:59:02:01:c4:69:f7:cb:9f:95:
         94:0c:ee:2d:4b:62:5f:33:7e:5a:3c:1c:83:00:08:f2:f1:50:
         73:bb:df:b9:4e:09:87:20:78:ca:55:ec:57:af:f2:b0:1c:e2:
         ce:ef:e4:e9:98:69:42:01:a3:67:07:9c:30:d0:ed:1d:43:91:
         0c:31:3c:cb:cd:59:ff:57:b8:a7:9e:65:64:ff:c3:9c:d6:b1:
         d3:47:27:36:9f:43:5d:b2:d4:bd:4b:91:80:5e:bf:58:3e:da:
         d1:d4:f7:7c:62:9d:fd:41:51:8f:9e:62:9f:0e:f3:0b:eb:d4:
         02:d6:87:db:3b:9c:a8:e3:ec:99:0c:64:f1:99:58:d7:ec:5b:
         ee:b3:d3:f5:fa:c3:d2:b1:0d:ca:87:f6:6f:fa:f5:e9:f5:07:
         14:36:60:78:c0:8a:86:56:0f:99:83:0b:e5:39:a2:a7:73:ac:
         da:5b:2e:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPnzBplmW2bVdhdb17SJnjarQpcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGQThDMkE5OTBFMjIxQzM4RDY4NTY4REY5MzI1MUU5
OTQ0QTk3RDAeFw0yNDAzMTMxODM5NDZaFw0yNTAzMTIxODQ0NDZaMDMxMTAvBgNV
BAMTKEQxM0VFODc4RDEzRUUxMDE4REQ0RkM1QzYwRjQwOUZCRkIwQkVEODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKCjeA691hM6KzDGK20qfCjJ3
ZKTSPueSrWUojQLgcBzYsk39p5/Qu47ksilaQT2/7QahPjnrslku4I7BjbQvCWD1
sudhrHLIVGT1fWD4VzlT3CTwD0o8tJQB2gHPuwZGo2RZEo07OAgILJCUGz26OWHP
2y9Dx3I89vFFF5qzvJjVblsvlUoD3XMAwGfNTe5SnKyrTWkyQ9AdBM2WMjnZCbON
Mnt3wtpNbsHdUdy4OG6adwvuG1oxDpcO2lnTBHlMtwfOzgwVJZh8x4ErqDacKumW
hOTqkuZBuvOtRHDd4SC41V3jaIqIrBv1OEetcMH3tsNHQmeQtwuvo3JAYU5VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0T7oeNE+4QGN1PxcYPQJ+/sL7YMwHwYDVR0j
BBgwFoAUS/qMKpkOIhw41oVo35MlHplEqX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMC80QkZBOEMyQTk5MEUyMjFDMzhENjg1NjhERjkzMjUxRTk5NDRBOTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRkE4QzJBOTkwRTIyMUMz
OEQ2ODU2OERGOTMyNTFFOTk0NEE5N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzAv
MzIzMDMxMmUzNzM2MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyUxgMA0GCSqGSIb3DQEBCwUAA4IBAQB78bT44706
a+ukzdT8BTbCJA5Fxam+bbcZXd8psdfw7Yu+2QEJPSIMZh1OJiFkbvJi47o5ajmk
68kYxoQtv3KjdkiIWRo2XLN3r0OngzjHZdRZAgHEaffLn5WUDO4tS2JfM35aPByD
AAjy8VBzu9+5TgmHIHjKVexXr/KwHOLO7+TpmGlCAaNnB5ww0O0dQ5EMMTzLzVn/
V7innmVk/8Oc1rHTRyc2n0NdstS9S5GAXr9YPtrR1Pd8Yp39QVGPnmKfDvML69QC
1ofbO5yo4+yZDGTxmVjX7Fvus9P1+sPSsQ3Kh/Zv+vXp9QcUNmB4wIqGVg+Zgwvl
OaKnc6zaWy6G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org