Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa
File:                     3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa (raw, json)
Hash identifier:          AaYr52qVrmAiQsOgRSLKfK4g1XJKhiFs8qKVGPTOGUM=
Subject key identifier:   72:EC:B6:3B:E9:1C:67:01:9B:53:76:64:E0:51:5E:A7:90:5D:9C:B6
Certificate issuer:       /CN=A14CE50B38F120E4E5858C18F51C0958AE6D29CA
Certificate serial:       4416311BC61CAA3D9520D3583786199A94394F64
Authority key identifier: A1:4C:E5:0B:38:F1:20:E4:E5:85:8C:18:F5:1C:09:58:AE:6D:29:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa
Signing time:             Thu 14 Mar 2024 18:56:08 +0000
ROA not before:           Thu 14 Mar 2024 18:51:08 +0000
ROA not after:            Thu 13 Mar 2025 18:56:08 +0000
asID:                     263324
IP address blocks:        170.247.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:31:1b:c6:1c:aa:3d:95:20:d3:58:37:86:19:9a:94:39:4f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14CE50B38F120E4E5858C18F51C0958AE6D29CA
        Validity
            Not Before: Mar 14 18:51:08 2024 GMT
            Not After : Mar 13 18:56:08 2025 GMT
        Subject: CN=72ECB63BE91C67019B537664E0515EA7905D9CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:23:d8:3f:b4:3d:a9:ee:e2:02:f1:de:12:4d:
                    ea:c8:99:e0:07:b5:ea:6b:2d:c4:5f:a9:0b:01:57:
                    4a:2e:62:77:17:29:3b:df:14:1c:b5:c2:61:d0:d6:
                    ce:79:63:55:81:26:28:8c:e6:46:94:89:90:04:8a:
                    43:d8:4c:2c:38:47:2e:37:a4:e4:c6:cb:49:c3:d1:
                    6c:44:9a:74:93:ff:ed:7f:86:b1:3a:0c:80:3e:ce:
                    d4:83:cb:00:e4:03:7e:8e:bf:0a:79:07:36:09:c1:
                    e8:f3:12:7c:3c:d8:99:ea:34:f0:14:d2:31:75:c3:
                    6b:f7:91:3d:a1:c3:53:2a:40:5e:e4:f7:4c:93:90:
                    1b:c8:87:ea:87:ed:71:fe:ee:5e:d7:2d:e0:bd:1e:
                    b1:be:09:f3:fc:bd:7b:fa:fe:42:a1:cc:7c:e3:0d:
                    e6:4f:cd:95:61:d8:a3:16:d9:96:f1:57:0a:d6:ab:
                    6b:c1:bc:6a:87:cb:54:d6:79:a6:94:72:1d:4e:47:
                    f4:02:e5:55:41:3a:10:b4:44:90:5a:97:ef:c9:ed:
                    dc:f7:60:dc:97:9d:bc:19:14:2e:56:57:6d:13:ee:
                    d5:93:f9:dd:0e:b2:7f:15:6c:42:b1:f1:9a:3a:b3:
                    64:3a:af:76:0c:9d:d1:bc:73:2d:b7:12:3f:7a:1f:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:B6:3B:E9:1C:67:01:9B:53:76:64:E0:51:5E:A7:90:5D:9C:B6
            X509v3 Authority Key Identifier:
                keyid:A1:4C:E5:0B:38:F1:20:E4:E5:85:8C:18:F5:1C:09:58:AE:6D:29:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:a7:8a:bb:23:96:88:9b:ba:2d:54:4d:e8:44:8b:ad:62:
         84:35:36:6c:48:c0:8d:58:43:03:d2:0e:85:68:1e:4b:02:b6:
         98:3f:74:ea:17:81:a5:2c:48:a7:f9:bb:bf:77:36:41:b6:9f:
         17:f8:b6:ca:59:7e:d0:55:72:04:b2:29:16:69:44:65:d1:11:
         ba:8d:7f:9d:59:74:82:c8:28:09:8c:06:9c:5c:2d:b3:cb:79:
         a1:6b:26:ad:c9:49:fc:71:e2:0d:05:ca:96:c8:77:1d:10:4d:
         dd:0e:3c:07:20:6e:56:e4:d1:06:2a:ce:00:37:f8:47:75:57:
         eb:17:29:b7:56:79:9d:45:a6:f8:72:88:83:5a:77:1d:ef:fe:
         73:18:46:26:eb:53:6a:2a:8a:7d:55:05:54:db:4a:76:e5:c7:
         5d:7c:fe:66:0b:f9:91:ea:25:12:3e:44:44:f7:5d:f5:59:ae:
         e3:63:40:df:f9:e9:63:54:d7:3d:59:47:6b:88:4b:65:b3:c0:
         5a:0d:e3:a4:6e:de:d7:f1:2b:73:de:e8:c6:e8:f3:19:1a:61:
         aa:4e:8b:81:c9:d6:db:0e:7d:59:22:08:f7:04:00:59:12:13:
         c6:44:d0:19:39:d8:11:4b:86:8a:6d:28:43:ff:51:65:a3:c3:
         c8:43:f5:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURBYxG8Ycqj2VINNYN4YZmpQ5T2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE0Q0U1MEIzOEYxMjBFNEU1ODU4QzE4RjUxQzA5NThB
RTZEMjlDQTAeFw0yNDAzMTQxODUxMDhaFw0yNTAzMTMxODU2MDhaMDMxMTAvBgNV
BAMTKDcyRUNCNjNCRTkxQzY3MDE5QjUzNzY2NEUwNTE1RUE3OTA1RDlDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWI9g/tD2p7uIC8d4STerImeAH
teprLcRfqQsBV0ouYncXKTvfFBy1wmHQ1s55Y1WBJiiM5kaUiZAEikPYTCw4Ry43
pOTGy0nD0WxEmnST/+1/hrE6DIA+ztSDywDkA36Ovwp5BzYJwejzEnw82JnqNPAU
0jF1w2v3kT2hw1MqQF7k90yTkBvIh+qH7XH+7l7XLeC9HrG+CfP8vXv6/kKhzHzj
DeZPzZVh2KMW2ZbxVwrWq2vBvGqHy1TWeaaUch1OR/QC5VVBOhC0RJBal+/J7dz3
YNyXnbwZFC5WV20T7tWT+d0Osn8VbEKx8Zo6s2Q6r3YMndG8cy23Ej96HznJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcuy2O+kcZwGbU3Zk4FFep5BdnLYwHwYDVR0j
BBgwFoAUoUzlCzjxIOTlhYwY9RwJWK5tKcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NK
clkvMC9BMTRDRTUwQjM4RjEyMEU0RTU4NThDMThGNTFDMDk1OEFFNkQyOUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExNENFNTBCMzhGMTIwRTRF
NTg1OEMxOEY1MUMwOTU4QUU2RDI5Q0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9xQwDQYJKoZIhvcNAQELBQADggEBADHRp4q7
I5aIm7otVE3oRIutYoQ1NmxIwI1YQwPSDoVoHksCtpg/dOoXgaUsSKf5u793NkG2
nxf4tspZftBVcgSyKRZpRGXREbqNf51ZdILIKAmMBpxcLbPLeaFrJq3JSfxx4g0F
ypbIdx0QTd0OPAcgblbk0QYqzgA3+Ed1V+sXKbdWeZ1FpvhyiINadx3v/nMYRibr
U2oqin1VBVTbSnblx118/mYL+ZHqJRI+RET3XfVZruNjQN/56WNU1z1ZR2uIS2Wz
wFoN46Ru3tfxK3Pe6Mbo8xkaYapOi4HJ1tsOfVkiCPcEAFkSE8ZE0Bk52BFLhopt
KEP/UWWjw8hD9Q4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org