Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa
File:                     3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa (raw, json)
Hash identifier:          F/LTeotwpVd0x+cKSSqIEmjsXsczlziljT8kzuaBhkI=
Subject key identifier:   CA:FD:BC:20:A2:94:C9:2F:B3:D8:7C:39:06:9B:01:2F:64:0A:4D:59
Certificate issuer:       /CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
Certificate serial:       2FC197DF2CA7BDFEBDF2AF2A82CEC98D08019B81
Authority key identifier: 6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa
Signing time:             Thu 07 Mar 2024 22:44:44 +0000
ROA not before:           Thu 07 Mar 2024 22:39:44 +0000
ROA not after:            Thu 06 Mar 2025 22:44:44 +0000
asID:                     267535
IP address blocks:        192.141.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:97:df:2c:a7:bd:fe:bd:f2:af:2a:82:ce:c9:8d:08:01:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
        Validity
            Not Before: Mar  7 22:39:44 2024 GMT
            Not After : Mar  6 22:44:44 2025 GMT
        Subject: CN=CAFDBC20A294C92FB3D87C39069B012F640A4D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:42:5e:76:57:13:2c:2c:cd:ce:e8:70:ee:
                    48:e0:2c:29:66:9e:0b:16:ac:4a:ff:c6:4a:68:52:
                    3e:da:65:f6:cd:36:67:49:88:f1:c5:19:22:48:3a:
                    9c:44:7b:cb:7e:cd:4e:b4:a9:c6:89:ea:90:19:a1:
                    04:04:58:ca:70:d6:c3:b5:9a:88:28:b4:4f:28:ff:
                    38:9f:e5:c3:65:9c:ef:25:6b:44:b7:db:dd:b8:62:
                    76:44:a5:79:80:f2:77:eb:5e:8e:89:89:02:36:fe:
                    f4:f1:66:07:9c:ae:20:60:9c:80:d8:d9:fb:a3:95:
                    de:74:8d:d9:0b:84:0e:bb:ba:d5:bb:d7:13:3a:f8:
                    b5:94:6b:e8:fb:03:6b:3a:31:7f:3d:32:cc:85:a5:
                    85:1a:4c:aa:49:58:b1:c8:9a:5a:5c:2d:ed:47:99:
                    df:28:0f:1a:6f:d6:2c:67:5b:f4:7a:b1:a1:fc:7e:
                    26:b3:37:a9:3a:93:f9:95:77:11:97:f1:dc:16:49:
                    c8:8f:65:4a:9e:0e:5e:bb:15:d8:19:c4:91:d7:ae:
                    cc:76:e6:8c:bc:b2:33:20:ed:ec:c4:27:73:92:2f:
                    2c:6e:45:d7:b3:90:53:6e:88:67:3e:4c:c8:3b:66:
                    ec:76:c4:33:28:e0:6b:15:47:82:79:32:70:bc:78:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:BC:20:A2:94:C9:2F:B3:D8:7C:39:06:9B:01:2F:64:0A:4D:59
            X509v3 Authority Key Identifier:
                keyid:6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:27:e7:07:bc:b3:81:c2:bf:a6:34:25:cf:7c:33:86:43:
         00:27:ea:bd:4d:b7:14:65:cd:c7:e8:43:14:57:4b:53:c1:47:
         af:f4:43:fc:00:09:8b:0e:1a:d6:ad:de:27:b4:79:0d:f0:0a:
         f0:68:19:85:46:cf:f7:b7:74:8d:c0:82:92:50:3a:9e:8e:3c:
         8e:50:da:20:41:86:a9:af:d4:18:0f:0b:e0:56:25:7b:65:66:
         21:e3:e4:29:80:5d:46:86:2f:36:26:5f:55:17:fe:75:73:64:
         13:36:3b:ff:49:96:b5:10:27:88:5f:98:cc:ed:a9:4f:45:27:
         52:40:51:6e:91:aa:6b:4f:e2:26:ff:c0:65:ae:26:b5:9e:14:
         c7:e2:3b:a9:15:0c:17:55:09:30:43:a2:e5:6e:8a:26:eb:93:
         4c:c2:9f:42:d1:a1:90:9c:89:57:aa:b7:91:f0:c3:ef:9d:00:
         c0:34:b4:0f:bf:d8:f8:9e:8d:be:b0:3d:53:ef:aa:9c:28:c5:
         e0:51:a4:1f:f5:a3:70:80:27:59:9d:23:e0:f4:35:7f:bf:14:
         b3:ae:af:d6:04:f6:68:54:54:3f:0b:0c:cd:e8:37:94:1e:a4:
         14:0f:47:f9:8c:56:1c:4d:a6:c5:90:52:95:1b:e5:d3:d9:60:
         fa:b2:a9:7e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL8GX3yynvf698q8qgs7JjQgBm4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMwMkMwQTdCMjBGNzU3RDdGOEZCQzAyRDI4NDE3MDY4
MDJDRjM1QjAeFw0yNDAzMDcyMjM5NDRaFw0yNTAzMDYyMjQ0NDRaMDMxMTAvBgNV
BAMTKENBRkRCQzIwQTI5NEM5MkZCM0Q4N0MzOTA2OUIwMTJGNjQwQTRENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBUJedlcTLCzNzuhw7kjgLClm
ngsWrEr/xkpoUj7aZfbNNmdJiPHFGSJIOpxEe8t+zU60qcaJ6pAZoQQEWMpw1sO1
mogotE8o/zif5cNlnO8la0S32924YnZEpXmA8nfrXo6JiQI2/vTxZgecriBgnIDY
2fujld50jdkLhA67utW71xM6+LWUa+j7A2s6MX89MsyFpYUaTKpJWLHImlpcLe1H
md8oDxpv1ixnW/R6saH8fiazN6k6k/mVdxGX8dwWSciPZUqeDl67FdgZxJHXrsx2
5oy8sjMg7ezEJ3OSLyxuRdezkFNuiGc+TMg7Zux2xDMo4GsVR4J5MnC8eClzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyv28IKKUyS+z2Hw5BpsBL2QKTVkwHwYDVR0j
BBgwFoAUbALAp7IPdX1/j7wC0oQXBoAs81swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZISkE3MkNCVWE3WVdjWjFzUEdiSmdRbXRQRFJ2eEZKNWVYRHdXN2k5
SzUvMC82QzAyQzBBN0IyMEY3NTdEN0Y4RkJDMDJEMjg0MTcwNjgwMkNGMzVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZDMDJDMEE3QjIwRjc1N0Q3
RjhGQkMwMkQyODQxNzA2ODAyQ0YzNUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmSEpBNzJDQlVhN1lXY1oxc1BHYkpnUW10UERSdnhGSjVlWER3VzdpOUs1LzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM1MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCNajANBgkqhkiG9w0BAQsFAAOCAQEAYa0n
5we8s4HCv6Y0Jc98M4ZDACfqvU23FGXNx+hDFFdLU8FHr/RD/AAJiw4a1q3eJ7R5
DfAK8GgZhUbP97d0jcCCklA6no48jlDaIEGGqa/UGA8L4FYle2VmIePkKYBdRoYv
NiZfVRf+dXNkEzY7/0mWtRAniF+YzO2pT0UnUkBRbpGqa0/iJv/AZa4mtZ4Ux+I7
qRUMF1UJMEOi5W6KJuuTTMKfQtGhkJyJV6q3kfDD750AwDS0D7/Y+J6NvrA9U++q
nCjF4FGkH/WjcIAnWZ0j4PQ1f78Us66v1gT2aFRUPwsMzeg3lB6kFA9H+YxWHE2m
xZBSlRvl09lg+rKpfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org