Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (raw, json)
Hash identifier:          1UCHK+n/w9SO5UACc3DePSkcHqwB5HtFTPdF3lecuOQ=
Subject key identifier:   05:DE:E1:9D:5D:5C:A1:32:FC:F3:9F:BB:B4:25:A0:5F:44:85:6A:43
Certificate issuer:       /CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
Certificate serial:       1C2021A218900CECF064999ABD95F38D792D75E5
Authority key identifier: BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
Signing time:             Tue 27 Jun 2023 14:08:31 +0000
ROA not before:           Tue 27 Jun 2023 14:03:31 +0000
ROA not after:            Tue 25 Jun 2024 14:08:31 +0000
asID:                     266374
IP address blocks:        170.80.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:21:a2:18:90:0c:ec:f0:64:99:9a:bd:95:f3:8d:79:2d:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD
        Validity
            Not Before: Jun 27 14:03:31 2023 GMT
            Not After : Jun 25 14:08:31 2024 GMT
        Subject: CN=05DEE19D5D5CA132FCF39FBBB425A05F44856A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:07:24:da:e3:43:bd:a2:36:f4:56:93:46:
                    7e:8a:01:0f:bd:5d:33:d7:e7:b3:0d:e2:e1:0f:ac:
                    fc:2d:b9:26:52:07:50:a5:33:83:46:c5:2c:78:11:
                    98:c9:fb:a7:f8:e1:3d:1c:03:d2:57:b9:3a:08:97:
                    f3:28:fd:4e:ac:ef:c4:a9:90:c7:15:48:a5:7f:e3:
                    9c:fa:a3:01:27:38:a3:96:19:79:9d:8e:4b:16:87:
                    cb:1a:14:a9:68:0e:77:e2:53:fd:dd:c1:ae:55:e4:
                    a7:f0:9e:e1:55:14:6c:77:9d:10:e6:35:71:37:b1:
                    74:36:14:dd:5c:9d:f1:e5:b0:14:f7:87:d7:c9:85:
                    37:9c:c2:2b:98:36:06:f1:32:5c:c3:d9:9b:32:d1:
                    e5:1d:e9:48:02:34:bd:d4:d2:28:bd:c5:e1:80:2d:
                    22:26:6d:f9:ca:9f:8e:f3:96:48:fd:c1:42:f9:a1:
                    df:fe:27:df:a9:3a:4f:6b:30:b9:fe:de:f0:47:36:
                    82:8f:8c:16:ac:44:6f:25:e3:1e:27:82:bc:81:15:
                    57:dc:46:ff:a3:51:85:88:e3:8a:e5:e5:2b:0f:13:
                    d4:4a:3c:25:0a:82:8f:a1:73:a6:b3:3b:6b:e4:ea:
                    62:fa:7c:a1:01:ea:08:cd:c0:63:8a:ef:8e:73:ae:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:E1:9D:5D:5C:A1:32:FC:F3:9F:BB:B4:25:A0:5F:44:85:6A:43
            X509v3 Authority Key Identifier:
                keyid:BF:8A:4A:E4:CC:FB:51:6D:07:A1:A2:40:39:C6:62:A1:F8:6B:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF8A4AE4CCFB516D07A1A24039C662A1F86B89DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/0/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:36:a7:7e:7e:69:e7:df:d4:a1:22:dc:86:6e:ac:88:28:
         8f:7a:a4:36:7d:cc:80:66:53:72:33:51:ed:33:3e:35:2f:0e:
         b3:f2:d4:9c:84:ef:bd:f6:25:3f:95:54:5a:41:62:d9:4a:d2:
         61:9c:3f:d4:0e:09:1b:15:47:04:a5:6d:95:dd:f4:d6:1a:11:
         f0:c0:86:a0:db:d0:c5:2b:93:ef:65:44:31:cd:66:3a:fb:97:
         8a:54:69:7d:66:46:b0:15:57:fc:83:67:a7:89:81:04:39:15:
         8d:4a:8e:b8:93:83:47:23:b0:34:f5:bf:e2:95:fb:b7:dc:9a:
         42:7a:39:6c:da:86:13:71:cf:99:2c:82:26:da:ec:09:b2:27:
         e9:f2:de:4d:eb:d5:eb:11:2e:5c:aa:80:e5:da:92:9a:ed:a3:
         eb:c8:0e:25:98:c2:0e:73:1f:60:65:3d:1a:b2:ae:23:2e:d4:
         41:f7:01:7e:7d:9f:d6:4a:4b:28:20:e6:83:18:f5:0c:28:38:
         25:eb:ea:12:a2:9b:e4:fc:6b:6f:ae:1a:53:5d:cd:1f:ba:6b:
         c9:4f:4c:c6:18:ee:f2:f5:57:3c:b4:cb:10:f2:09:67:b5:97:
         0f:99:ee:ee:cb:ae:7e:78:5e:59:31:82:c8:e9:ce:e1:f1:4f:
         dc:6a:b2:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHCAhohiQDOzwZJmavZXzjXktdeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4QTRBRTRDQ0ZCNTE2RDA3QTFBMjQwMzlDNjYyQTFG
ODZCODlERDAeFw0yMzA2MjcxNDAzMzFaFw0yNDA2MjUxNDA4MzFaMDMxMTAvBgNV
BAMTKDA1REVFMTlENUQ1Q0ExMzJGQ0YzOUZCQkI0MjVBMDVGNDQ4NTZBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9Ack2uNDvaI29FaTRn6KAQ+9
XTPX57MN4uEPrPwtuSZSB1ClM4NGxSx4EZjJ+6f44T0cA9JXuToIl/Mo/U6s78Sp
kMcVSKV/45z6owEnOKOWGXmdjksWh8saFKloDnfiU/3dwa5V5KfwnuFVFGx3nRDm
NXE3sXQ2FN1cnfHlsBT3h9fJhTecwiuYNgbxMlzD2Zsy0eUd6UgCNL3U0ii9xeGA
LSImbfnKn47zlkj9wUL5od/+J9+pOk9rMLn+3vBHNoKPjBasRG8l4x4ngryBFVfc
Rv+jUYWI44rl5SsPE9RKPCUKgo+hc6azO2vk6mL6fKEB6gjNwGOK745zrhs/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBd7hnV1coTL885+7tCWgX0SFakMwHwYDVR0j
BBgwFoAUv4pK5Mz7UW0HoaJAOcZiofhrid0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMC9CRjhBNEFFNENDRkI1MTZEMDdBMUEyNDAzOUM2NjJBMUY4NkI4OURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGOEE0QUU0Q0NGQjUxNkQw
N0ExQTI0MDM5QzY2MkExRjg2Qjg5REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1cU5vdkxOTU1TTlFja1RpeXpTSGlSVWg5R2VhUUMyenpxMWR1S3FGZFNTLzAv
MzEzNzMwMmUzODMwMmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlAwMA0GCSqGSIb3DQEBCwUAA4IBAQBrizanfn5p
59/UoSLchm6siCiPeqQ2fcyAZlNyM1HtMz41Lw6z8tSchO+99iU/lVRaQWLZStJh
nD/UDgkbFUcEpW2V3fTWGhHwwIag29DFK5PvZUQxzWY6+5eKVGl9ZkawFVf8g2en
iYEEORWNSo64k4NHI7A09b/ilfu33JpCejls2oYTcc+ZLIIm2uwJsifp8t5N69Xr
ES5cqoDl2pKa7aPryA4lmMIOcx9gZT0asq4jLtRB9wF+fZ/WSksoIOaDGPUMKDgl
6+oSopvk/GtvrhpTXc0fumvJT0zGGO7y9Vc8tMsQ8glntZcPme7uy65+eF5ZMYLI
6c7h8U/carLa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org