Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa
File:                     3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa (raw, json)
Hash identifier:          kaB57ZfMEurTsqfo7ToSSt+kt39hp/jGv3dmOji8sQI=
Subject key identifier:   2E:92:11:C6:E4:37:6B:9D:16:41:23:83:1F:C0:81:C7:46:8F:39:BD
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       2CE2F1ECFC052450824A85FA563506FA1F469DDA
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa
Signing time:             Tue 05 Mar 2024 19:26:01 +0000
ROA not before:           Tue 05 Mar 2024 19:21:01 +0000
ROA not after:            Tue 04 Mar 2025 19:26:01 +0000
asID:                     265038
IP address blocks:        170.150.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e2:f1:ec:fc:05:24:50:82:4a:85:fa:56:35:06:fa:1f:46:9d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Mar  5 19:21:01 2024 GMT
            Not After : Mar  4 19:26:01 2025 GMT
        Subject: CN=2E9211C6E4376B9D164123831FC081C7468F39BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:6f:77:6a:20:15:af:35:28:3d:e7:de:ea:
                    b5:14:ba:17:0d:f1:9a:40:29:d1:0c:f2:aa:a4:1b:
                    7b:30:ab:cd:be:7c:37:53:29:96:45:05:46:4a:81:
                    13:b1:49:9c:99:64:d1:c0:5f:94:3b:79:43:25:b9:
                    91:bd:61:27:f5:f2:44:ca:c6:46:9e:0d:a9:dd:9a:
                    8b:80:26:9f:f9:3d:ee:77:9e:1a:ab:db:f8:53:5b:
                    e6:4a:0f:fe:1d:15:6f:98:0e:00:ba:3c:e9:2f:bf:
                    a8:e8:ba:44:91:1b:3b:47:ff:97:0f:91:d8:b0:56:
                    09:00:0f:14:5c:48:8e:9b:8d:02:88:16:02:17:5d:
                    c3:eb:67:5f:27:c2:3e:be:7e:37:8b:1c:4d:5e:99:
                    49:18:3a:01:ac:d3:57:cc:ef:26:71:fe:10:80:cd:
                    08:1d:77:a9:86:24:8a:5c:63:99:df:e7:eb:6f:89:
                    51:d9:84:8a:6b:4a:c0:31:1c:21:20:48:ef:f6:be:
                    61:8a:12:ec:79:68:6b:4b:ea:bf:66:86:24:ae:ac:
                    37:66:ab:bb:8e:e3:47:93:d7:96:d7:01:c4:5d:35:
                    95:b9:6f:54:c4:af:f9:8e:7d:c0:bc:f4:b0:fa:3b:
                    2a:4b:9c:73:0d:72:bd:b6:2f:76:85:7e:3e:8f:4c:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:11:C6:E4:37:6B:9D:16:41:23:83:1F:C0:81:C7:46:8F:39:BD
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:86:37:6c:64:89:14:a5:a6:e9:2d:8e:6b:10:41:2a:ee:
         58:76:c7:63:44:63:e1:de:83:d4:2b:ed:1b:3b:27:1e:68:7d:
         a7:7e:4c:e7:a0:e4:54:4a:58:8a:e4:4a:38:eb:6a:59:6a:ed:
         82:d2:26:24:df:c9:ce:67:9b:82:5c:57:98:e2:b1:ce:86:79:
         64:55:20:4f:3e:b5:35:db:9f:6c:10:e5:b0:d9:5b:e2:59:7a:
         e3:cb:8b:1b:b8:9d:d1:63:2d:66:20:7f:c6:8e:c3:bc:62:2c:
         2c:a6:28:cf:c6:35:19:36:25:20:83:6f:27:6c:1c:b1:6a:41:
         8c:64:62:a4:ba:49:3b:3a:61:0d:8c:3d:04:49:2a:76:9e:e5:
         cc:1e:36:58:a4:6a:98:49:f0:0e:df:47:f9:4a:4f:35:7f:2b:
         b3:dc:d4:66:4c:66:e1:71:ca:7c:e5:2e:f1:c8:71:32:ef:e8:
         f9:17:c1:7b:19:07:e6:0d:d4:29:f3:8f:28:c0:44:cc:27:14:
         38:12:a9:3a:0e:c3:01:68:56:02:51:40:ee:18:3b:45:9f:02:
         b6:7d:37:53:f2:2f:22:a2:98:96:c7:fa:66:57:15:88:9f:7e:
         84:2a:e9:b2:0d:d6:0a:5d:ec:32:2a:e1:0f:b8:87:a9:18:ab:
         97:dc:39:7d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULOLx7PwFJFCCSoX6VjUG+h9GndowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyRjUwNTA2OEM3Q0FCNzFEQ0NDM0Y0OERCNjU4NzRG
Qzc5RTZBODAeFw0yNDAzMDUxOTIxMDFaFw0yNTAzMDQxOTI2MDFaMDMxMTAvBgNV
BAMTKDJFOTIxMUM2RTQzNzZCOUQxNjQxMjM4MzFGQzA4MUM3NDY4RjM5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46G93aiAVrzUoPefe6rUUuhcN
8ZpAKdEM8qqkG3swq82+fDdTKZZFBUZKgROxSZyZZNHAX5Q7eUMluZG9YSf18kTK
xkaeDandmouAJp/5Pe53nhqr2/hTW+ZKD/4dFW+YDgC6POkvv6joukSRGztH/5cP
kdiwVgkADxRcSI6bjQKIFgIXXcPrZ18nwj6+fjeLHE1emUkYOgGs01fM7yZx/hCA
zQgdd6mGJIpcY5nf5+tviVHZhIprSsAxHCEgSO/2vmGKEux5aGtL6r9mhiSurDdm
q7uO40eT15bXAcRdNZW5b1TEr/mOfcC89LD6OypLnHMNcr22L3aFfj6PTLHdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULpIRxuQ3a50WQSODH8CBx0aPOb0wHwYDVR0j
BBgwFoAUXS9QUGjHyrcdzMP0jbZYdPx55qgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmpnckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1
cEEvMC81RDJGNTA1MDY4QzdDQUI3MURDQ0MzRjQ4REI2NTg3NEZDNzlFNkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEMkY1MDUwNjhDN0NBQjcx
RENDQzNGNDhEQjY1ODc0RkM3OUU2QTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JqZ3JGUTlOV0I3NnRnbkthd1lVajVQMkE2R3N2aFpwOW1rcngyM1NSdXBBLzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaqWyjANBgkqhkiG9w0BAQsFAAOCAQEAJA6G
N2xkiRSlpuktjmsQQSruWHbHY0Rj4d6D1CvtGzsnHmh9p35M56DkVEpYiuRKOOtq
WWrtgtImJN/JzmebglxXmOKxzoZ5ZFUgTz61NdufbBDlsNlb4ll648uLG7id0WMt
ZiB/xo7DvGIsLKYoz8Y1GTYlIINvJ2wcsWpBjGRipLpJOzphDYw9BEkqdp7lzB42
WKRqmEnwDt9H+UpPNX8rs9zUZkxm4XHKfOUu8chxMu/o+RfBexkH5g3UKfOPKMBE
zCcUOBKpOg7DAWhWAlFA7hg7RZ8Ctn03U/IvIqKYlsf6ZlcViJ9+hCrpsg3WCl3s
MirhD7iHqRirl9w5fQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org