Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e33312e302f32342d3234203d3e20323639313934.roa
File:                     3137302e3234372e33312e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          nnSvC98On5oYXF+2xyR/Gwnm+u+KMepz7oz19wCFfvU=
Subject key identifier:   26:C6:10:12:73:DD:80:37:2B:17:E3:69:59:47:C2:CF:A6:D1:72:8D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       67987CC262C701FA7D0D166E1909D8F0F8E336DA
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e33312e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 19 Aug 2023 21:02:51 +0000
ROA not before:           Sat 19 Aug 2023 20:57:51 +0000
ROA not after:            Sat 17 Aug 2024 21:02:51 +0000
asID:                     269194
IP address blocks:        170.247.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:98:7c:c2:62:c7:01:fa:7d:0d:16:6e:19:09:d8:f0:f8:e3:36:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Aug 19 20:57:51 2023 GMT
            Not After : Aug 17 21:02:51 2024 GMT
        Subject: CN=26C6101273DD80372B17E3695947C2CFA6D1728D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:d0:02:23:5e:6a:58:4e:75:40:08:25:61:
                    8a:e2:99:a7:93:2a:90:0a:7c:85:98:e8:c5:dd:86:
                    d1:43:8c:64:f3:15:a7:d7:6b:a0:77:60:e5:54:c6:
                    f2:91:f2:fe:d8:f6:8f:30:d0:2d:db:53:c8:3a:62:
                    e3:b3:81:eb:2e:36:f2:d6:4c:01:47:54:76:23:86:
                    50:93:63:e2:a3:2a:c0:1d:7e:69:5a:2c:a6:f0:60:
                    1d:5b:c9:5a:7f:ae:99:d0:e2:ea:d1:42:e9:d1:2b:
                    03:e4:df:06:4d:7d:0b:33:6f:ae:1e:06:84:3d:b5:
                    5f:ae:5b:4c:0f:71:7b:35:15:f5:df:3d:36:51:25:
                    48:54:a2:ae:4b:10:cb:19:1a:47:f9:8d:c6:c5:fb:
                    a6:a3:fd:89:0e:52:c3:69:44:b1:a5:23:55:ba:82:
                    90:24:cc:2b:b1:cf:70:9a:42:09:76:78:11:23:b8:
                    c2:96:20:1e:09:69:82:4d:8c:b0:23:22:76:20:2c:
                    41:5e:51:79:a9:e1:d0:fc:2f:a0:d5:70:9a:27:a1:
                    e1:f5:31:1e:4e:f6:61:a9:df:e1:0c:79:cb:75:a3:
                    0d:28:02:df:1b:f2:c4:4b:5b:97:5c:8b:ec:f0:fe:
                    1d:0e:ed:18:30:4d:ef:6c:a2:74:9d:10:8d:2a:24:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C6:10:12:73:DD:80:37:2B:17:E3:69:59:47:C2:CF:A6:D1:72:8D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e33312e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:56:f4:cf:12:1b:b3:7f:b9:96:97:9f:07:4e:60:0b:4e:96:
         16:34:99:0e:44:73:0e:fc:01:44:ca:82:e9:b2:9c:2d:28:62:
         66:8b:a9:74:c3:ae:a1:1e:e4:14:fb:9b:8d:84:63:55:1f:58:
         39:fc:19:8f:b8:51:68:73:da:d6:8a:bc:57:ff:04:19:f2:93:
         05:1d:db:a6:e2:22:e3:f5:3e:a1:95:e1:61:35:c1:ad:e5:51:
         de:5b:89:14:0c:9e:25:3c:aa:24:58:2d:7b:ae:14:b8:a0:09:
         54:9d:2d:52:43:18:b9:7a:d8:3f:83:2a:59:4e:98:c1:8a:68:
         4f:ae:a6:ab:03:1b:e6:12:8c:57:a2:73:f5:c2:80:46:c2:50:
         00:64:c8:86:0a:03:5e:48:3a:41:e4:61:4a:7d:88:9e:5a:a2:
         25:81:e8:19:e8:46:08:ff:dc:18:96:3e:35:74:16:73:9e:5a:
         e8:eb:46:0c:ed:b5:34:ac:b6:03:59:96:1d:77:51:99:05:ec:
         d8:d2:0b:f5:fd:dc:b9:15:e0:2d:ca:af:61:e6:6f:28:fd:e2:
         52:30:fa:b7:38:7f:6f:41:85:1c:9e:69:69:eb:a1:ae:2a:07:
         8b:c4:f6:c2:58:c0:8c:4b:8c:79:8f:01:7c:b8:be:7d:e1:34:
         f0:ed:68:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ5h8wmLHAfp9DRZuGQnY8PjjNtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA4MTkyMDU3NTFaFw0yNDA4MTcyMTAyNTFaMDMxMTAvBgNV
BAMTKDI2QzYxMDEyNzNERDgwMzcyQjE3RTM2OTU5NDdDMkNGQTZEMTcyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BNACI15qWE51QAglYYrimaeT
KpAKfIWY6MXdhtFDjGTzFafXa6B3YOVUxvKR8v7Y9o8w0C3bU8g6YuOzgesuNvLW
TAFHVHYjhlCTY+KjKsAdfmlaLKbwYB1byVp/rpnQ4urRQunRKwPk3wZNfQszb64e
BoQ9tV+uW0wPcXs1FfXfPTZRJUhUoq5LEMsZGkf5jcbF+6aj/YkOUsNpRLGlI1W6
gpAkzCuxz3CaQgl2eBEjuMKWIB4JaYJNjLAjInYgLEFeUXmp4dD8L6DVcJonoeH1
MR5O9mGp3+EMect1ow0oAt8b8sRLW5dci+zw/h0O7RgwTe9sonSdEI0qJD6BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJsYQEnPdgDcrF+NpWUfCz6bRco0wHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzEzNzMwMmUzMjM0MzcyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9x8wDQYJKoZIhvcNAQELBQADggEBAM1W9M8S
G7N/uZaXnwdOYAtOlhY0mQ5Ecw78AUTKgumynC0oYmaLqXTDrqEe5BT7m42EY1Uf
WDn8GY+4UWhz2taKvFf/BBnykwUd26biIuP1PqGV4WE1wa3lUd5biRQMniU8qiRY
LXuuFLigCVSdLVJDGLl62D+DKllOmMGKaE+upqsDG+YSjFeic/XCgEbCUABkyIYK
A15IOkHkYUp9iJ5aoiWB6BnoRgj/3BiWPjV0FnOeWujrRgzttTSstgNZlh13UZkF
7NjSC/X93LkV4C3Kr2Hmbyj94lIw+rc4f29BhRyeaWnroa4qB4vE9sJYwIxLjHmP
AXy4vn3hNPDtaBo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org