Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3232203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32322d3232203d3e20323635303836.roa (raw, json)
Hash identifier:          pZ9pQ1WzuS/O84YjXpxTLKDtF0cWQAAdxp3OE4663bg=
Subject key identifier:   BE:30:12:4E:E2:C9:A4:CB:0D:8C:CF:8B:D7:75:85:49:69:F9:FA:15
Certificate issuer:       /CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Certificate serial:       4D1BE094439E7ACCFD19894BAA590C050D289440
Authority key identifier: 89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3232203d3e20323635303836.roa
Signing time:             Mon 18 Dec 2023 14:32:32 +0000
ROA not before:           Mon 18 Dec 2023 14:27:32 +0000
ROA not after:            Mon 16 Dec 2024 14:32:32 +0000
asID:                     265086
IP address blocks:        170.233.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1b:e0:94:43:9e:7a:cc:fd:19:89:4b:aa:59:0c:05:0d:28:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
        Validity
            Not Before: Dec 18 14:27:32 2023 GMT
            Not After : Dec 16 14:32:32 2024 GMT
        Subject: CN=BE30124EE2C9A4CB0D8CCF8BD775854969F9FA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:ab:3c:eb:aa:80:30:4f:63:1d:11:59:4f:
                    c0:f0:ce:90:61:e2:14:bd:43:25:09:2a:8e:c3:e5:
                    f7:bf:70:24:b3:08:fb:99:74:0a:b9:9e:78:25:3c:
                    4f:65:4a:d3:cc:aa:8f:8f:18:7a:69:65:cf:80:cd:
                    d3:80:a0:a1:b0:ab:20:96:31:f4:05:97:c0:f3:1d:
                    56:7a:56:e1:fe:6e:b6:46:75:7d:a9:07:50:38:84:
                    45:fe:c3:68:de:9f:9c:92:69:dc:c8:1b:54:09:b8:
                    34:44:83:d4:34:2c:4a:16:e0:cd:24:41:75:d9:fd:
                    5e:98:99:78:72:f6:83:b3:97:89:1a:94:bc:7f:84:
                    10:65:07:52:76:97:e6:e1:97:b6:82:7c:d3:3e:9b:
                    eb:0d:f8:ab:f4:53:fe:09:64:d5:a9:f3:cd:cb:98:
                    e4:d0:24:85:99:c8:27:2c:77:12:46:41:10:ef:91:
                    68:51:37:5d:b3:27:da:11:13:27:a7:3d:10:74:d4:
                    e0:f7:b5:7f:d6:69:ad:21:ae:8f:bc:1e:f6:7c:3c:
                    40:fc:80:4b:68:49:bb:4e:08:45:59:27:24:a2:c8:
                    60:e2:73:df:5c:62:19:b3:78:06:4b:ad:c6:a7:e4:
                    6b:cf:1e:d9:da:cf:c4:84:2e:80:ce:3d:26:7e:85:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:12:4E:E2:C9:A4:CB:0D:8C:CF:8B:D7:75:85:49:69:F9:FA:15
            X509v3 Authority Key Identifier:
                keyid:89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33322e302f32322d3232203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:fd:72:b3:79:ec:a8:59:f0:8f:a6:8f:b2:76:54:e7:1e:
         04:8a:48:5d:d7:63:33:2e:d4:5e:ea:56:79:50:8c:4b:16:02:
         66:f3:82:ed:8a:b7:d2:a8:85:c6:b8:f3:23:b7:fa:52:fd:68:
         51:75:26:d4:8b:d2:f5:9e:1d:48:9a:4b:ec:1b:43:4c:12:5c:
         34:c2:0b:14:21:68:fc:f4:2c:7c:be:98:86:65:02:f6:a0:98:
         a5:ea:e3:11:3b:38:e8:40:6c:b2:a4:ee:a4:95:db:4f:3d:d4:
         11:6a:56:4a:f9:77:2d:56:d0:0b:79:fd:09:9a:42:de:1c:f4:
         36:90:65:cf:c0:45:8f:5e:27:e4:3e:fe:65:dd:78:93:fc:41:
         52:0b:0d:63:51:e5:a6:36:58:34:17:ed:9d:e2:51:5d:f9:ee:
         38:d4:d4:3e:34:2b:aa:f2:5c:c7:82:4b:5c:2a:e9:d8:8f:f5:
         e5:72:df:d1:72:f0:45:67:c6:17:0e:bd:09:42:46:93:98:27:
         f8:de:ef:e8:7b:0b:1e:6a:95:98:ac:dc:50:8a:d0:ca:e6:a1:
         92:cc:f8:5b:91:02:90:11:82:a2:ec:6d:b6:a2:56:d1:36:4c:
         4a:8e:24:85:ed:1a:55:fd:91:6e:74:ed:c5:2a:4a:35:b8:e4:
         0e:87:63:41
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTRvglEOeesz9GYlLqlkMBQ0olEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2MzY2RDU3NkFBNTcwQzlGQkQzQkU4N0I2MzAwQ0JE
RjU3MzRBOTAeFw0yMzEyMTgxNDI3MzJaFw0yNDEyMTYxNDMyMzJaMDMxMTAvBgNV
BAMTKEJFMzAxMjRFRTJDOUE0Q0IwRDhDQ0Y4QkQ3NzU4NTQ5NjlGOUZBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxKs866qAME9jHRFZT8DwzpBh
4hS9QyUJKo7D5fe/cCSzCPuZdAq5nnglPE9lStPMqo+PGHppZc+AzdOAoKGwqyCW
MfQFl8DzHVZ6VuH+brZGdX2pB1A4hEX+w2jen5ySadzIG1QJuDREg9Q0LEoW4M0k
QXXZ/V6YmXhy9oOzl4kalLx/hBBlB1J2l+bhl7aCfNM+m+sN+Kv0U/4JZNWp883L
mOTQJIWZyCcsdxJGQRDvkWhRN12zJ9oREyenPRB01OD3tX/Waa0hro+8HvZ8PED8
gEtoSbtOCEVZJySiyGDic99cYhmzeAZLrcan5GvPHtnaz8SELoDOPSZ+hZPvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvjASTuLJpMsNjM+L13WFSWn5+hUwHwYDVR0j
BBgwFoAUiWNm1XaqVwyfvTvoe2MAy99XNKkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HZ2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJE
LzAvODk2MzY2RDU3NkFBNTcwQzlGQkQzQkU4N0I2MzAwQ0JERjU3MzRBOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84OTYzNjZENTc2QUE1NzBDOUZC
RDNCRTg3QjYzMDBDQkRGNTczNEE5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9H
Z2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJELzAvMzEz
NzMwMmUzMjMzMzMyZTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUz
MDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKq6SAwDQYJKoZIhvcNAQELBQADggEBADe1/XKzeeyo
WfCPpo+ydlTnHgSKSF3XYzMu1F7qVnlQjEsWAmbzgu2Kt9Kohca48yO3+lL9aFF1
JtSL0vWeHUiaS+wbQ0wSXDTCCxQhaPz0LHy+mIZlAvagmKXq4xE7OOhAbLKk7qSV
20891BFqVkr5dy1W0At5/QmaQt4c9DaQZc/ARY9eJ+Q+/mXdeJP8QVILDWNR5aY2
WDQX7Z3iUV357jjU1D40K6ryXMeCS1wq6diP9eVy39Fy8EVnxhcOvQlCRpOYJ/je
7+h7Cx5qlZis3FCK0MrmoZLM+FuRApARgqLsbbaiVtE2TEqOJIXtGlX9kW507cUq
SjW45A6HY0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org