Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130352e302f32342d3234203d3e20323732363435.roa
File:                     3230312e3231362e3130352e302f32342d3234203d3e20323732363435.roa (raw, json)
Hash identifier:          hQVLbFBPI14p3ASYT/s5Ll0GFXbIur01DPMZbaPVT0o=
Subject key identifier:   F1:4C:D5:21:61:A6:1C:3C:AD:FD:C6:9F:2A:C5:F4:AA:60:D0:96:8F
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       17CE72566C26D1B33CD6E1EF236114D1421DB564
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130352e302f32342d3234203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:18 +0000
ROA not before:           Wed 20 Mar 2024 23:17:18 +0000
ROA not after:            Wed 19 Mar 2025 23:22:18 +0000
asID:                     272645
IP address blocks:        201.216.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:72:56:6c:26:d1:b3:3c:d6:e1:ef:23:61:14:d1:42:1d:b5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:18 2024 GMT
            Not After : Mar 19 23:22:18 2025 GMT
        Subject: CN=F14CD52161A61C3CADFDC69F2AC5F4AA60D0968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:fb:91:db:c7:d5:12:ef:17:e1:64:40:8e:
                    58:b0:d7:66:4d:98:4a:66:03:b7:53:6e:ac:a0:8e:
                    25:c1:a5:f0:a2:4b:f7:d2:ec:bd:a9:84:34:8c:a1:
                    72:d6:c2:d2:05:f4:14:2e:66:b9:15:b4:60:e8:3a:
                    21:fd:0b:cd:7b:0b:ba:73:c9:b4:34:97:c4:98:11:
                    43:ed:48:5d:9e:2c:9d:32:05:68:dd:6f:97:a7:c0:
                    1d:85:8c:2b:b9:f6:7c:f0:9b:cd:04:52:e1:b9:39:
                    f3:e5:4f:72:bc:f2:88:b1:50:0a:f0:97:d1:82:bc:
                    f8:14:23:82:39:41:8e:e8:2d:ff:97:da:16:7d:d6:
                    af:ea:bf:56:21:77:c0:58:ab:be:42:70:75:72:dd:
                    ce:f1:53:b6:93:66:47:a8:35:5e:39:cc:18:d7:e9:
                    5a:c3:5e:08:76:9c:13:aa:2b:74:f0:59:4a:62:a8:
                    7a:f1:a0:7a:d5:cd:4e:1f:50:5f:3c:b6:48:8b:a0:
                    8a:e6:e2:a4:37:ab:f7:6c:e3:32:de:1f:42:69:75:
                    61:e8:2c:cb:9a:90:de:52:5f:7e:3f:ce:fb:85:67:
                    0d:54:72:e9:ba:fc:59:7c:c4:60:7d:37:44:cd:56:
                    55:97:6d:38:53:f3:87:1e:76:2e:c1:fd:ba:4f:74:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4C:D5:21:61:A6:1C:3C:AD:FD:C6:9F:2A:C5:F4:AA:60:D0:96:8F
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130352e302f32342d3234203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ab:0b:ad:bc:1e:97:04:8e:7d:61:94:f2:5e:5e:df:d6:70:
         69:6a:7d:27:b6:2e:91:d7:bd:63:db:32:bf:15:e2:9e:17:81:
         f9:d9:10:81:b5:d6:2e:61:98:70:10:44:54:e2:ee:64:f5:51:
         91:42:7f:6f:99:e7:a9:f6:f6:51:ab:16:79:7a:c9:b3:b2:6e:
         c2:4a:86:92:e8:b7:cb:f9:16:b7:b4:15:00:0e:18:0b:56:ec:
         14:b3:73:f9:e3:23:ac:be:99:07:d0:2b:bd:d3:6c:3f:98:f9:
         95:9d:b6:f1:33:06:a9:f2:6e:6b:ed:e5:d1:0f:69:2d:0b:0b:
         c8:1d:63:bd:e2:79:9e:ae:71:53:40:5d:5a:3d:24:27:51:73:
         49:7b:6d:4e:8a:1b:ff:50:b3:c8:bc:a4:02:23:b0:3f:34:3f:
         f3:3c:ea:2f:ac:c4:fc:a6:92:69:f6:6c:c2:f9:1f:8b:89:6d:
         df:b9:1e:35:f0:25:91:b3:fc:ea:03:e8:40:16:43:73:fe:79:
         68:a7:a5:eb:bd:24:78:09:32:97:de:2d:64:40:34:97:d5:5e:
         4c:06:63:07:02:46:58:d2:bf:d5:94:8d:13:90:16:97:03:a5:
         5d:b7:a7:0f:58:23:44:c6:9f:07:a4:f4:2f:68:1c:99:79:b5:
         88:be:c8:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF85yVmwm0bM81uHvI2EU0UIdtWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMzlEREJDQkVBQjNBQ0QwMzE0RjAwQkUwOUQ4N0Ez
NTQwODIyRjAeFw0yNDAzMjAyMzE3MThaFw0yNTAzMTkyMzIyMThaMDMxMTAvBgNV
BAMTKEYxNENENTIxNjFBNjFDM0NBREZEQzY5RjJBQzVGNEFBNjBEMDk2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRfuR28fVEu8X4WRAjliw12ZN
mEpmA7dTbqygjiXBpfCiS/fS7L2phDSMoXLWwtIF9BQuZrkVtGDoOiH9C817C7pz
ybQ0l8SYEUPtSF2eLJ0yBWjdb5enwB2FjCu59nzwm80EUuG5OfPlT3K88oixUArw
l9GCvPgUI4I5QY7oLf+X2hZ91q/qv1Yhd8BYq75CcHVy3c7xU7aTZkeoNV45zBjX
6VrDXgh2nBOqK3TwWUpiqHrxoHrVzU4fUF88tkiLoIrm4qQ3q/ds4zLeH0JpdWHo
LMuakN5SX34/zvuFZw1Ucum6/Fl8xGB9N0TNVlWXbThT84cedi7B/bpPdEZvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8UzVIWGmHDyt/cafKsX0qmDQlo8wHwYDVR0j
BBgwFoAUPCOd28vqs6zQMU8AvgnYejVAgi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0ha
NEIvMC8zQzIzOUREQkNCRUFCM0FDRDAzMTRGMDBCRTA5RDg3QTM1NDA4MjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMjM5RERCQ0JFQUIzQUNE
MDMxNEYwMEJFMDlEODdBMzU0MDgyMkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpelBXUXhkUWl5VHZhZjd5SnFoejVmWEZTcFVSU3dpdUJUQjF3c2tIWjRCLzAv
MzIzMDMxMmUzMjMxMzYyZTMxMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjM2MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnYaTANBgkqhkiG9w0BAQsFAAOCAQEAkKsL
rbwelwSOfWGU8l5e39ZwaWp9J7Yukde9Y9syvxXinheB+dkQgbXWLmGYcBBEVOLu
ZPVRkUJ/b5nnqfb2UasWeXrJs7JuwkqGkui3y/kWt7QVAA4YC1bsFLNz+eMjrL6Z
B9ArvdNsP5j5lZ228TMGqfJua+3l0Q9pLQsLyB1jveJ5nq5xU0BdWj0kJ1FzSXtt
Toob/1CzyLykAiOwPzQ/8zzqL6zE/KaSafZswvkfi4lt37keNfAlkbP86gPoQBZD
c/55aKel670keAkyl94tZEA0l9VeTAZjBwJGWNK/1ZSNE5AWlwOlXbenD1gjRMaf
B6T0L2gcmXm1iL7I0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org