Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          AupiOnmQ62UMxOT+i8BoH09FMc7LqU61A8wZqBQdDow=
Subject key identifier:   7A:A0:15:2D:52:A4:52:E4:AA:B2:9F:93:C8:42:5F:47:6D:B6:43:0C
Certificate issuer:       /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial:       151E63FF447B6890F353326B458A1427C4D8C7DF
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa
Signing time:             Mon 11 Mar 2024 20:42:06 +0000
ROA not before:           Mon 11 Mar 2024 20:37:06 +0000
ROA not after:            Mon 10 Mar 2025 20:42:06 +0000
asID:                     264491
IP address blocks:        170.247.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1e:63:ff:44:7b:68:90:f3:53:32:6b:45:8a:14:27:c4:d8:c7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Validity
            Not Before: Mar 11 20:37:06 2024 GMT
            Not After : Mar 10 20:42:06 2025 GMT
        Subject: CN=7AA0152D52A452E4AAB29F93C8425F476DB6430C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:f5:cc:fe:fb:57:cf:2e:c6:8e:f7:0f:58:
                    dc:99:a7:05:49:9f:c5:15:97:e7:ea:da:18:fe:36:
                    5c:33:c7:55:21:ed:1a:97:23:ce:bb:35:77:7b:69:
                    66:4f:42:b7:d7:23:34:6c:d7:14:c6:34:fe:11:0a:
                    38:2f:24:32:0f:b1:4d:22:8b:20:1c:68:e5:08:ae:
                    89:25:a9:7e:e7:51:80:e5:8c:fa:95:06:4a:18:48:
                    28:52:96:6d:b9:a8:40:81:19:64:53:a2:b5:a1:ad:
                    c0:9c:f5:9c:a7:27:2f:d8:b8:ba:e3:f9:35:4b:b2:
                    99:d4:ed:59:f5:6d:60:79:e0:6e:76:f5:d5:47:52:
                    a9:6b:10:91:d5:7f:c3:df:29:c3:95:1b:bf:0c:a9:
                    7b:08:06:8f:5a:cc:10:57:36:bd:59:46:db:4c:9b:
                    a6:19:03:7c:70:54:01:75:5b:54:75:5f:e9:db:60:
                    5e:60:78:5c:81:21:ff:a5:2e:b2:9e:64:56:85:77:
                    61:a2:a7:de:dd:eb:a0:b9:74:b0:c0:be:c9:b2:3f:
                    58:7a:e4:dd:a1:4c:37:19:4a:eb:23:d6:16:57:53:
                    ec:02:01:b2:46:b6:4d:19:04:51:1f:46:cb:3a:fc:
                    22:2c:0f:35:62:ba:66:82:f4:7e:6a:21:4b:7b:56:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:15:2D:52:A4:52:E4:AA:B2:9F:93:C8:42:5F:47:6D:B6:43:0C
            X509v3 Authority Key Identifier:
                keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:65:ca:48:9a:05:06:1c:f5:92:9f:5a:a3:ef:db:f5:60:
         2b:37:ce:90:24:13:77:e2:b6:c7:14:68:a9:61:0e:69:0e:91:
         9d:8e:3d:5e:37:61:09:c7:04:d9:df:4c:80:cf:26:92:15:1b:
         36:ae:a0:17:b6:2c:d1:ea:69:df:a1:e4:0d:06:05:18:11:64:
         96:5d:1c:91:4f:af:36:ed:4b:f8:ed:ab:23:02:5a:2e:94:1d:
         84:b2:a2:54:45:09:7e:7c:e6:9a:50:db:0a:24:cf:c9:c0:77:
         f6:c5:df:b7:15:d3:89:8e:0b:6a:c0:75:9c:23:35:d4:26:8d:
         46:e2:f1:99:7e:59:bb:b7:6a:3f:90:34:06:5a:e7:5c:12:5a:
         91:1f:05:c2:00:97:6e:2a:71:6a:48:27:ca:df:7f:51:4a:74:
         6b:49:9a:fb:b8:38:ee:b2:e5:47:aa:be:1c:fe:3c:f8:3d:5a:
         0a:b8:09:f2:27:d9:6a:97:80:c0:52:9e:40:ae:d7:ef:b4:5c:
         cd:90:0b:4b:2e:91:8b:f7:a7:85:fd:40:25:3c:1c:33:d3:b9:
         5e:65:a0:3d:9d:13:17:2f:55:72:f8:1c:cd:8f:22:ef:36:4f:
         5e:24:69:cc:34:a7:9a:13:05:d5:8f:cc:c2:da:38:cf:b5:1e:
         03:d9:69:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFR5j/0R7aJDzUzJrRYoUJ8TYx98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMyQzc3MjA1RUU2OTcwRTlFODgzOUQ1NTJCMDBCRDZG
MTEyOEU5NTAeFw0yNDAzMTEyMDM3MDZaFw0yNTAzMTAyMDQyMDZaMDMxMTAvBgNV
BAMTKDdBQTAxNTJENTJBNDUyRTRBQUIyOUY5M0M4NDI1RjQ3NkRCNjQzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDfXM/vtXzy7GjvcPWNyZpwVJ
n8UVl+fq2hj+Nlwzx1Uh7RqXI867NXd7aWZPQrfXIzRs1xTGNP4RCjgvJDIPsU0i
iyAcaOUIroklqX7nUYDljPqVBkoYSChSlm25qECBGWRTorWhrcCc9ZynJy/YuLrj
+TVLspnU7Vn1bWB54G529dVHUqlrEJHVf8PfKcOVG78MqXsIBo9azBBXNr1ZRttM
m6YZA3xwVAF1W1R1X+nbYF5geFyBIf+lLrKeZFaFd2Gip97d66C5dLDAvsmyP1h6
5N2hTDcZSusj1hZXU+wCAbJGtk0ZBFEfRss6/CIsDzViumaC9H5qIUt7VtTxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeqAVLVKkUuSqsp+TyEJfR222QwwwHwYDVR0j
BBgwFoAUjCx3IF7mlw6eiDnVUrAL1vESjpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC84QzJDNzcyMDVFRTY5NzBFOUU4ODM5RDU1MkIwMEJENkYxMTI4RTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDMkM3NzIwNUVFNjk3MEU5
RTg4MzlENTUyQjAwQkQ2RjExMjhFOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3/DANBgkqhkiG9w0BAQsFAAOCAQEAkQ9l
ykiaBQYc9ZKfWqPv2/VgKzfOkCQTd+K2xxRoqWEOaQ6RnY49XjdhCccE2d9MgM8m
khUbNq6gF7Ys0epp36HkDQYFGBFkll0ckU+vNu1L+O2rIwJaLpQdhLKiVEUJfnzm
mlDbCiTPycB39sXftxXTiY4LasB1nCM11CaNRuLxmX5Zu7dqP5A0BlrnXBJakR8F
wgCXbipxakgnyt9/UUp0a0ma+7g47rLlR6q+HP48+D1aCrgJ8ifZapeAwFKeQK7X
77RczZALSy6Ri/enhf1AJTwcM9O5XmWgPZ0TFy9VcvgczY8i7zZPXiRpzDSnmhMF
1Y/Mwto4z7UeA9lpAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org