Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (raw, json)
Hash identifier:          FqVl7gapl6F02YtTHNjZB8b5H1wBxyZQaGJHn5Y0pBM=
Subject key identifier:   5E:5E:4F:4A:AE:71:D7:AC:10:C1:3A:15:A6:2B:52:FE:AD:7C:EA:8E
Certificate issuer:       /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial:       5A0A3825C16A27B914B8654FCE1A386630C75572
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
Signing time:             Mon 19 Feb 2024 11:49:31 +0000
ROA not before:           Mon 19 Feb 2024 11:44:31 +0000
ROA not after:            Mon 17 Feb 2025 11:49:31 +0000
asID:                     266022
IP address blocks:        170.245.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:38:25:c1:6a:27:b9:14:b8:65:4f:ce:1a:38:66:30:c7:55:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Validity
            Not Before: Feb 19 11:44:31 2024 GMT
            Not After : Feb 17 11:49:31 2025 GMT
        Subject: CN=5E5E4F4AAE71D7AC10C13A15A62B52FEAD7CEA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:da:df:77:9b:ae:af:8e:13:e0:cc:33:69:
                    06:0e:d2:53:98:de:ba:39:97:b5:15:20:b5:23:08:
                    1e:d9:d0:0c:1f:bb:98:ba:59:49:9c:2f:80:a6:54:
                    11:d5:8a:bb:d2:59:5e:01:b9:18:b8:3b:b5:81:96:
                    7f:e1:09:d8:84:a5:6e:0c:2c:8f:eb:89:63:3a:12:
                    f1:7d:0f:6e:98:2b:61:8a:5c:f7:dc:59:9d:83:e4:
                    a6:6f:3a:0d:3d:de:e2:a0:15:07:89:db:7d:70:8b:
                    ab:6b:ee:8a:98:e4:44:53:e8:d9:df:9b:87:c6:ef:
                    e3:7b:6c:30:df:67:dd:a0:91:6a:cc:08:44:a2:e6:
                    1b:6d:3a:a4:df:bd:38:f9:39:5a:21:9a:4c:be:79:
                    7d:3d:a0:b2:f1:75:dd:fb:b0:84:5f:8f:7c:82:de:
                    4a:34:4c:2c:19:88:94:b5:9e:df:4f:88:e4:68:3e:
                    7d:c4:fe:be:ac:5f:9c:9d:42:fe:ca:98:a8:cd:ab:
                    41:98:f3:e8:b8:b0:09:36:38:07:46:4f:03:32:88:
                    39:24:bd:93:05:13:22:31:c7:80:58:ad:ed:cc:df:
                    f9:ef:e5:24:f3:eb:76:a8:37:b3:c9:3b:1c:c0:a4:
                    4e:e5:fb:7a:97:d1:3c:db:0c:d1:ff:5a:66:1f:e0:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5E:4F:4A:AE:71:D7:AC:10:C1:3A:15:A6:2B:52:FE:AD:7C:EA:8E
            X509v3 Authority Key Identifier:
                keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:62:bd:42:51:b9:26:6d:ff:1a:81:42:a2:e3:65:3d:90:
         f0:4f:3b:68:f6:e0:af:26:9b:89:a7:04:50:df:5a:7f:f2:66:
         0d:b9:9b:ee:6c:2f:08:01:38:26:db:ac:2b:6e:23:1e:09:8c:
         42:5f:91:23:4a:0b:80:12:d1:44:10:79:c0:95:b6:0c:82:d5:
         28:07:73:a2:bd:cc:a8:de:0a:45:0c:4d:c9:c7:e9:a9:d8:60:
         32:57:c3:d4:53:de:d3:33:90:9b:a1:c5:50:b6:f7:4f:eb:ec:
         c2:42:8d:19:28:87:8e:48:e1:2d:9d:4a:93:43:8e:8c:16:07:
         79:e8:96:8d:61:49:44:02:ff:96:4e:d3:65:fc:0f:80:cb:41:
         1c:87:e2:65:48:8b:fc:c4:c0:49:6f:3d:21:b6:f8:2b:b5:b6:
         6d:e3:1d:0a:d9:13:41:3e:77:ff:50:01:85:37:f6:8a:1f:46:
         5d:1d:34:9d:8f:ef:f0:b1:9e:40:72:58:b2:f4:f5:da:e4:a8:
         00:2d:c6:aa:6f:96:ca:16:c5:12:72:6c:1d:36:e3:b6:9e:4c:
         0a:12:e2:1a:e6:ce:58:db:27:4e:df:85:60:33:0d:63:38:bc:
         76:4a:0a:dc:d7:e1:92:4a:d8:b9:33:1e:4b:3d:8c:b7:9c:73:
         39:e5:60:14
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWgo4JcFqJ7kUuGVPzho4ZjDHVXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxODQyMkM3MUM5MDQ2QzNCNEM3NjY4NjdGMENDOTg5
ODgzMjM2RjAeFw0yNDAyMTkxMTQ0MzFaFw0yNTAyMTcxMTQ5MzFaMDMxMTAvBgNV
BAMTKDVFNUU0RjRBQUU3MUQ3QUMxMEMxM0ExNUE2MkI1MkZFQUQ3Q0VBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnm9rfd5uur44T4MwzaQYO0lOY
3ro5l7UVILUjCB7Z0Awfu5i6WUmcL4CmVBHVirvSWV4BuRi4O7WBln/hCdiEpW4M
LI/riWM6EvF9D26YK2GKXPfcWZ2D5KZvOg093uKgFQeJ231wi6tr7oqY5ERT6Nnf
m4fG7+N7bDDfZ92gkWrMCESi5httOqTfvTj5OVohmky+eX09oLLxdd37sIRfj3yC
3ko0TCwZiJS1nt9PiORoPn3E/r6sX5ydQv7KmKjNq0GY8+i4sAk2OAdGTwMyiDkk
vZMFEyIxx4BYre3M3/nv5STz63aoN7PJOxzApE7l+3qX0TzbDNH/WmYf4AuNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXl5PSq5x16wQwToVpitS/q186o4wHwYDVR0j
BBgwFoAUPxhCLHHJBGw7THZoZ/DMmJiDI28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dl
dW4vMC8zRjE4NDIyQzcxQzkwNDZDM0I0Qzc2Njg2N0YwQ0M5ODk4ODMyMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMTg0MjJDNzFDOTA0NkMz
QjRDNzY2ODY3RjBDQzk4OTg4MzIzNkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3OEY1RW9jZHNDa2NONFlmS0JQa1lKdE56NFVGRHBGTHJ5dHpWaTdnZXVuLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar1fDANBgkqhkiG9w0BAQsFAAOCAQEAHyhi
vUJRuSZt/xqBQqLjZT2Q8E87aPbgryabiacEUN9af/JmDbmb7mwvCAE4JtusK24j
HgmMQl+RI0oLgBLRRBB5wJW2DILVKAdzor3MqN4KRQxNycfpqdhgMlfD1FPe0zOQ
m6HFULb3T+vswkKNGSiHjkjhLZ1Kk0OOjBYHeeiWjWFJRAL/lk7TZfwPgMtBHIfi
ZUiL/MTASW89Ibb4K7W2beMdCtkTQT53/1ABhTf2ih9GXR00nY/v8LGeQHJYsvT1
2uSoAC3Gqm+WyhbFEnJsHTbjtp5MChLiGubOWNsnTt+FYDMNYzi8dkoK3NfhkkrY
uTMeSz2Mt5xzOeVgFA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org