Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          Otr4nHc/eBae7qYvUsqFhc7LxgVIVgGxu9MU0ZaOTEo=
Subject key identifier:   0D:01:CC:B2:1A:8B:93:44:F8:5D:E1:58:BD:DD:64:CC:A0:56:52:9E
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       624C2F363AFD3A9172C7942FF97157BCD972509B
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:58:15 +0000
ROA not before:           Sat 27 Apr 2024 14:53:15 +0000
ROA not after:            Sat 26 Apr 2025 14:58:15 +0000
asID:                     265300
IP address blocks:        200.106.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4c:2f:36:3a:fd:3a:91:72:c7:94:2f:f9:71:57:bc:d9:72:50:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:53:15 2024 GMT
            Not After : Apr 26 14:58:15 2025 GMT
        Subject: CN=0D01CCB21A8B9344F85DE158BDDD64CCA056529E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:fc:c8:15:0b:c5:a4:31:5d:ec:18:61:0c:
                    3a:c1:a9:16:5f:dd:8e:7b:75:32:dd:f2:76:06:4c:
                    84:4a:83:c9:77:29:7e:85:88:3f:40:e4:13:ee:8b:
                    8e:fc:06:20:1f:9e:13:e1:cb:8b:b2:70:40:83:4f:
                    86:e0:26:1b:1b:a2:f7:f2:13:4b:4f:58:a4:a8:e1:
                    10:93:44:ab:45:69:f5:97:57:b2:b1:27:7c:8f:29:
                    6a:33:40:8c:6c:93:57:08:d8:ea:9a:58:31:0e:47:
                    18:d8:83:11:01:26:e4:d1:69:e7:1d:7e:53:65:d8:
                    08:6c:eb:d4:d1:08:1f:23:93:38:f5:98:75:1e:d1:
                    ef:79:d3:2a:c2:ef:e2:e4:6e:45:21:93:fd:a5:bd:
                    4a:03:40:8c:c2:d2:69:b8:d7:43:30:b6:6b:f8:19:
                    91:41:7e:2c:ce:95:d6:bc:5a:8e:e9:ee:3d:ae:c4:
                    ee:84:08:87:8c:4a:46:9f:01:c1:34:89:52:11:53:
                    f8:d4:60:46:71:ce:1b:5a:5d:a9:05:f2:62:b6:86:
                    f0:9e:7c:f7:4c:ca:57:24:87:78:c0:2e:73:19:52:
                    fb:db:1c:55:00:6c:d7:e7:cf:f1:d1:ab:19:9b:ac:
                    64:a4:05:03:91:a0:44:b3:98:60:e2:c9:66:38:be:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:CC:B2:1A:8B:93:44:F8:5D:E1:58:BD:DD:64:CC:A0:56:52:9E
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:07:d5:43:39:71:f9:ec:95:d3:60:57:63:d7:19:40:46:
         55:31:19:b2:57:34:50:d9:14:f5:8d:bd:2f:2f:7f:e4:e1:ec:
         32:af:9b:a8:43:bd:c6:4f:19:78:05:9e:05:21:c5:e4:ef:8f:
         7a:ed:89:b2:5e:46:54:91:d0:6d:5c:94:5c:a4:e4:60:f5:b0:
         31:9c:87:1e:93:f1:ae:d1:27:7c:57:df:a1:1c:60:54:e2:92:
         9d:d5:6e:c5:30:28:6a:ab:b2:39:b7:cc:33:8e:b1:cb:96:a6:
         0b:ba:21:57:8f:a9:8b:e0:10:69:12:8d:30:d9:70:f5:33:ec:
         85:70:4d:20:4f:0b:6d:7c:8b:38:e3:ae:ad:52:9e:93:64:aa:
         72:cc:4a:7d:21:d0:6b:40:bb:4c:9a:b4:c2:8e:2b:2d:e4:d1:
         1f:84:f2:a6:fc:e2:9b:d5:1f:a5:53:61:37:7c:1a:dc:3e:3f:
         5f:01:1c:3d:e9:a9:5c:30:7d:9e:4c:d5:c1:bb:d3:31:74:36:
         e5:26:cf:a8:db:97:41:71:11:da:01:0e:d1:8d:0a:3f:f9:c6:
         30:f0:5a:fe:5a:b3:8b:f5:09:af:17:8f:84:a3:88:35:d3:34:
         00:58:78:1a:ad:ec:72:9f:6f:7a:03:94:73:66:a6:5f:5f:77:
         ef:91:59:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYkwvNjr9OpFyx5Qv+XFXvNlyUJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzN0MyNTZFQTBDRTMxQkYwNUE5MTg4NzMwMzI0NDE0
NUFDRThBRDAeFw0yNDA0MjcxNDUzMTVaFw0yNTA0MjYxNDU4MTVaMDMxMTAvBgNV
BAMTKDBEMDFDQ0IyMUE4QjkzNDRGODVERTE1OEJEREQ2NENDQTA1NjUyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCPzIFQvFpDFd7BhhDDrBqRZf
3Y57dTLd8nYGTIRKg8l3KX6FiD9A5BPui478BiAfnhPhy4uycECDT4bgJhsbovfy
E0tPWKSo4RCTRKtFafWXV7KxJ3yPKWozQIxsk1cI2OqaWDEORxjYgxEBJuTRaecd
flNl2Ahs69TRCB8jkzj1mHUe0e950yrC7+LkbkUhk/2lvUoDQIzC0mm410Mwtmv4
GZFBfizOlda8Wo7p7j2uxO6ECIeMSkafAcE0iVIRU/jUYEZxzhtaXakF8mK2hvCe
fPdMylckh3jALnMZUvvbHFUAbNfnz/HRqxmbrGSkBQORoESzmGDiyWY4vg/hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDQHMshqLk0T4XeFYvd1kzKBWUp4wHwYDVR0j
BBgwFoAUpTfCVuoM4xvwWpGIcwMkQUWs6K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMS9BNTM3QzI1NkVBMENFMzFCRjA1QTkxODg3MzAzMjQ0MTQ1QUNFOEFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MzdDMjU2RUEwQ0UzMUJG
MDVBOTE4ODczMDMyNDQxNDVBQ0U4QUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzEv
MzIzMDMwMmUzMTMwMzYyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshqhDANBgkqhkiG9w0BAQsFAAOCAQEAaxkH
1UM5cfnsldNgV2PXGUBGVTEZslc0UNkU9Y29Ly9/5OHsMq+bqEO9xk8ZeAWeBSHF
5O+Peu2Jsl5GVJHQbVyUXKTkYPWwMZyHHpPxrtEnfFffoRxgVOKSndVuxTAoaquy
ObfMM46xy5amC7ohV4+pi+AQaRKNMNlw9TPshXBNIE8LbXyLOOOurVKek2SqcsxK
fSHQa0C7TJq0wo4rLeTRH4Typvzim9UfpVNhN3wa3D4/XwEcPempXDB9nkzVwbvT
MXQ25SbPqNuXQXER2gEO0Y0KP/nGMPBa/lqzi/UJrxePhKOINdM0AFh4Gq3scp9v
egOUc2amX19375FZLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org