Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          S3JCJViy0IoVGOYCSUErPX0C4BqC4Do3mOCQexFgKns=
Subject key identifier:   47:E2:B9:6E:71:7D:E8:C4:21:53:EB:18:22:3A:B3:AB:A4:3A:DD:29
Certificate issuer:       /CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
Certificate serial:       043FEEC58695C27B7F3D3AEF43E97931DAC532F3
Authority key identifier: B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa
Signing time:             Wed 20 Dec 2023 18:49:08 +0000
ROA not before:           Wed 20 Dec 2023 18:44:08 +0000
ROA not after:            Wed 18 Dec 2024 18:49:08 +0000
asID:                     61796
IP address blocks:        201.159.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:ee:c5:86:95:c2:7b:7f:3d:3a:ef:43:e9:79:31:da:c5:32:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Validity
            Not Before: Dec 20 18:44:08 2023 GMT
            Not After : Dec 18 18:49:08 2024 GMT
        Subject: CN=47E2B96E717DE8C42153EB18223AB3ABA43ADD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:85:1e:f7:f0:13:77:f5:5f:88:73:aa:fa:
                    44:cb:ba:7c:0d:11:10:e9:43:bc:43:f8:ef:89:50:
                    a9:45:9e:95:6f:2c:88:3c:f5:ab:7b:89:51:04:24:
                    5a:be:60:66:24:b5:e4:51:eb:66:0c:c2:e2:81:23:
                    6e:ee:73:74:a6:87:82:7f:dd:c4:21:4e:cf:1e:87:
                    75:64:be:92:db:3b:8e:eb:84:d0:93:89:bc:49:4b:
                    8e:d2:9e:e7:19:df:09:fb:72:5a:a0:39:47:8d:c5:
                    cf:af:ce:4a:4d:a5:01:5f:32:14:83:e2:0a:fd:f1:
                    50:64:08:20:97:25:df:42:e3:c5:51:4d:ef:43:fb:
                    90:32:4a:fc:d8:02:79:e9:0b:96:cb:09:ca:3e:37:
                    99:66:a6:16:48:15:27:76:48:f0:44:54:cf:49:dd:
                    81:0c:70:64:9d:11:44:35:1a:1b:5d:48:8c:f9:08:
                    cb:fb:7b:fd:ee:ed:ae:c3:0f:9f:27:a3:c8:44:a6:
                    02:21:21:1f:b3:60:e2:b4:3d:43:c5:c3:7f:cb:d6:
                    0c:b1:cc:76:e4:8c:61:aa:d4:a6:47:3a:ea:ba:00:
                    92:a5:51:4a:ec:fc:3c:13:2b:f8:59:c3:51:50:33:
                    d6:71:c5:05:7f:75:19:79:46:fe:6f:be:43:df:81:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:B9:6E:71:7D:E8:C4:21:53:EB:18:22:3A:B3:AB:A4:3A:DD:29
            X509v3 Authority Key Identifier:
                keyid:B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138332e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:fc:7e:b9:62:04:55:69:c5:82:c6:32:b0:76:48:89:10:ee:
         73:9a:a4:c9:43:cf:fb:8b:04:fd:6a:ac:90:90:13:d2:cb:4f:
         72:8d:58:22:8a:36:b8:08:57:f9:83:85:23:b0:8a:2f:32:e6:
         d6:97:15:58:28:2a:2a:a6:2b:62:33:5b:44:6a:e1:1c:0a:86:
         fe:d4:83:42:f9:f3:af:45:63:93:d5:42:65:5e:c6:c7:c9:55:
         dd:d8:b0:31:24:b3:5b:17:81:5a:94:1f:7c:bc:84:94:74:08:
         72:eb:14:ff:37:13:d1:36:49:04:26:a1:03:7f:36:03:c5:d6:
         98:e0:f1:f3:d3:b5:17:b2:ec:44:44:7a:dd:3c:8d:1f:c6:fb:
         41:d0:e1:62:06:ca:83:82:f3:02:3f:ab:07:0e:ef:70:a2:84:
         d5:ab:bd:8e:fd:f8:a4:c3:e2:bc:27:56:63:cf:d2:47:ee:f7:
         53:19:90:ec:6e:81:64:49:0f:8a:9e:52:cc:f3:28:c3:88:4d:
         de:a2:d8:0a:d7:f3:04:c7:cb:82:8c:8b:4b:4b:99:c3:4c:3f:
         6b:bd:f9:57:7b:1b:d7:2c:9b:05:5b:bf:e6:58:91:5e:be:18:
         2e:54:56:b5:ff:25:e7:a1:e7:93:09:3e:41:26:28:cd:96:03:
         8d:60:12:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBD/uxYaVwnt/PTrvQ+l5MdrFMvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwMDREMjdBNkI2NkZCRjkzMkY3M0RBOTkxRTc5MDBF
RDY3MzJGQzAeFw0yMzEyMjAxODQ0MDhaFw0yNDEyMTgxODQ5MDhaMDMxMTAvBgNV
BAMTKDQ3RTJCOTZFNzE3REU4QzQyMTUzRUIxODIyM0FCM0FCQTQzQUREMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgIUe9/ATd/VfiHOq+kTLunwN
ERDpQ7xD+O+JUKlFnpVvLIg89at7iVEEJFq+YGYkteRR62YMwuKBI27uc3Smh4J/
3cQhTs8eh3VkvpLbO47rhNCTibxJS47SnucZ3wn7clqgOUeNxc+vzkpNpQFfMhSD
4gr98VBkCCCXJd9C48VRTe9D+5AySvzYAnnpC5bLCco+N5lmphZIFSd2SPBEVM9J
3YEMcGSdEUQ1GhtdSIz5CMv7e/3u7a7DD58no8hEpgIhIR+zYOK0PUPFw3/L1gyx
zHbkjGGq1KZHOuq6AJKlUUrs/DwTK/hZw1FQM9ZxxQV/dRl5Rv5vvkPfgUGvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR+K5bnF96MQhU+sYIjqzq6Q63SkwHwYDVR0j
BBgwFoAUtwBNJ6a2b7+TL3PamR55AO1nMvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVu
bWMvMC9CNzAwNEQyN0E2QjY2RkJGOTMyRjczREE5OTFFNzkwMEVENjczMkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MDA0RDI3QTZCNjZGQkY5
MzJGNzNEQTk5MUU3OTAwRUQ2NzMyRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxTWFXdWJrbnNXRWZ3N3ZGaEh6d3dkdTR5cWRrM25NUVJIU2h3NTZVbm1jLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJn7cwDQYJKoZIhvcNAQELBQADggEBALn8frli
BFVpxYLGMrB2SIkQ7nOapMlDz/uLBP1qrJCQE9LLT3KNWCKKNrgIV/mDhSOwii8y
5taXFVgoKiqmK2IzW0Rq4RwKhv7Ug0L5869FY5PVQmVexsfJVd3YsDEks1sXgVqU
H3y8hJR0CHLrFP83E9E2SQQmoQN/NgPF1pjg8fPTtRey7EREet08jR/G+0HQ4WIG
yoOC8wI/qwcO73CihNWrvY79+KTD4rwnVmPP0kfu91MZkOxugWRJD4qeUszzKMOI
Td6i2ArX8wTHy4KMi0tLmcNMP2u9+Vd7G9csmwVbv+ZYkV6+GC5UVrX/Jeeh55MJ
PkEmKM2WA41gElQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org