Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/0/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa
File:                     3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (raw, json)
Hash identifier:          oAHC9YDhcUzbHNRR7po7ykKoW2/0ExYuAnb1+0FzpRE=
Subject key identifier:   34:30:FD:5C:1E:A6:A4:A6:99:24:E8:32:9C:71:0B:C0:76:10:33:D6
Certificate issuer:       /CN=74235A8BE3B0B777021BD25E2B5193EF625D9D58
Certificate serial:       0C0CE78E841D646480CBD3A7334E4FC55E62D58C
Authority key identifier: 74:23:5A:8B:E3:B0:B7:77:02:1B:D2:5E:2B:51:93:EF:62:5D:9D:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74235A8BE3B0B777021BD25E2B5193EF625D9D58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/0/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa
Signing time:             Mon 16 Oct 2023 18:08:59 +0000
ROA not before:           Mon 16 Oct 2023 18:03:59 +0000
ROA not after:            Mon 14 Oct 2024 18:08:59 +0000
asID:                     267499
IP address blocks:        201.182.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:e7:8e:84:1d:64:64:80:cb:d3:a7:33:4e:4f:c5:5e:62:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74235A8BE3B0B777021BD25E2B5193EF625D9D58
        Validity
            Not Before: Oct 16 18:03:59 2023 GMT
            Not After : Oct 14 18:08:59 2024 GMT
        Subject: CN=3430FD5C1EA6A4A69924E8329C710BC0761033D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:3e:68:7c:e1:b8:e5:d8:12:d7:c3:77:0e:
                    f1:86:7a:09:a3:b6:65:be:16:99:65:76:f7:cb:e9:
                    66:e6:fe:64:93:d5:8a:1e:b2:45:b5:bb:87:3e:e0:
                    66:60:7b:a1:23:b9:3e:c9:c2:a2:18:8d:e8:9e:a4:
                    c9:b8:e2:27:e9:74:e1:8b:99:1e:45:01:6c:c0:62:
                    27:bd:ce:13:4a:d0:43:8d:9c:23:9d:96:93:23:ae:
                    f5:4f:f6:76:c1:e2:ff:c8:08:ad:8e:49:04:5e:8e:
                    70:fc:bb:b7:ff:9c:de:0e:01:08:81:5a:9b:65:95:
                    2a:2a:89:3a:29:39:ec:4b:b9:af:fa:ec:4b:30:32:
                    7e:70:71:0f:bf:47:b7:ae:00:08:44:21:70:66:53:
                    57:5c:59:5d:79:4d:c1:0d:a9:8c:5f:26:21:9a:a1:
                    a5:4e:f8:23:e8:f5:7c:39:1f:07:61:98:bc:0e:78:
                    7b:fd:91:70:53:fd:0c:dc:df:a4:21:48:4f:61:65:
                    13:d6:7c:55:da:08:d1:4f:d7:89:20:d5:c2:ca:1c:
                    e5:de:2e:fe:95:e2:f3:2c:6d:ec:8d:af:4f:2f:2c:
                    61:57:0a:3f:c5:19:e0:39:f8:d8:7d:cd:b3:b8:b1:
                    f5:bd:39:c2:7f:ec:32:d6:0a:d9:7f:5a:ba:38:6c:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:FD:5C:1E:A6:A4:A6:99:24:E8:32:9C:71:0B:C0:76:10:33:D6
            X509v3 Authority Key Identifier:
                keyid:74:23:5A:8B:E3:B0:B7:77:02:1B:D2:5E:2B:51:93:EF:62:5D:9D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/0/74235A8BE3B0B777021BD25E2B5193EF625D9D58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74235A8BE3B0B777021BD25E2B5193EF625D9D58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/0/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:96:f2:8d:c0:38:20:e9:3b:17:37:c0:33:6f:00:84:07:74:
         53:bf:40:dc:72:60:4d:30:d4:fc:0c:54:b4:4f:5d:17:e3:48:
         aa:ac:e8:8b:55:e4:d3:11:81:e9:ad:cb:7b:47:8d:1b:5e:21:
         ed:62:a3:ca:28:c0:8f:cc:2d:1b:cd:19:02:f3:ea:11:d0:d3:
         42:c7:e3:b0:a4:41:1e:b2:de:60:f7:d8:dd:8d:f6:04:7b:47:
         87:30:0b:c4:47:30:03:00:b1:9c:78:8f:4f:23:02:cd:34:9e:
         ec:4a:9f:5a:a9:b6:fa:a8:07:99:e6:31:e0:8f:a0:29:db:c2:
         83:fe:43:0e:46:8c:56:e4:17:8e:22:57:69:1f:07:da:85:15:
         b1:83:7e:c1:ec:8c:49:e8:0c:8b:c1:54:84:5a:d8:c4:0b:3b:
         d5:0e:4a:21:b6:8d:0c:84:1a:e7:bf:71:3a:41:3b:b4:f6:37:
         ef:c9:c9:b4:83:56:ab:61:18:3b:62:94:1d:d5:92:2f:4d:42:
         5a:85:ce:f1:2b:33:6c:be:cc:77:88:4b:27:95:06:d6:2a:48:
         bb:b2:56:8a:3f:3d:f2:69:c3:47:f2:fa:c6:82:05:0c:34:6c:
         e6:83:5d:8a:f8:35:c9:74:91:7f:03:54:b7:44:d6:c1:a0:db:
         61:c2:d4:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDAznjoQdZGSAy9OnM05PxV5i1YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQyMzVBOEJFM0IwQjc3NzAyMUJEMjVFMkI1MTkzRUY2
MjVEOUQ1ODAeFw0yMzEwMTYxODAzNTlaFw0yNDEwMTQxODA4NTlaMDMxMTAvBgNV
BAMTKDM0MzBGRDVDMUVBNkE0QTY5OTI0RTgzMjlDNzEwQkMwNzYxMDMzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTj5ofOG45dgS18N3DvGGegmj
tmW+FplldvfL6Wbm/mST1YoeskW1u4c+4GZge6EjuT7JwqIYjeiepMm44ifpdOGL
mR5FAWzAYie9zhNK0EONnCOdlpMjrvVP9nbB4v/ICK2OSQRejnD8u7f/nN4OAQiB
WptllSoqiTopOexLua/67EswMn5wcQ+/R7euAAhEIXBmU1dcWV15TcENqYxfJiGa
oaVO+CPo9Xw5HwdhmLwOeHv9kXBT/Qzc36QhSE9hZRPWfFXaCNFP14kg1cLKHOXe
Lv6V4vMsbeyNr08vLGFXCj/FGeA5+Nh9zbO4sfW9OcJ/7DLWCtl/Wro4bF0VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNDD9XB6mpKaZJOgynHELwHYQM9YwHwYDVR0j
BBgwFoAUdCNai+Owt3cCG9JeK1GT72JdnVgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBV
SmcvMC83NDIzNUE4QkUzQjBCNzc3MDIxQkQyNUUyQjUxOTNFRjYyNUQ5RDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0MjM1QThCRTNCMEI3Nzcw
MjFCRDI1RTJCNTE5M0VGNjI1RDlENTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0WmhpYVJrWDg5ZGJEVnFITUczdXVrM3NaQzc1NXVnMVdwN1IxTFFwVUpnLzAv
MzIzMDMxMmUzMTM4MzIyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJtjgwDQYJKoZIhvcNAQELBQADggEBACOW8o3A
OCDpOxc3wDNvAIQHdFO/QNxyYE0w1PwMVLRPXRfjSKqs6ItV5NMRgemty3tHjRte
Ie1io8oowI/MLRvNGQLz6hHQ00LH47CkQR6y3mD32N2N9gR7R4cwC8RHMAMAsZx4
j08jAs00nuxKn1qptvqoB5nmMeCPoCnbwoP+Qw5GjFbkF44iV2kfB9qFFbGDfsHs
jEnoDIvBVIRa2MQLO9UOSiG2jQyEGue/cTpBO7T2N+/JybSDVqthGDtilB3Vki9N
QlqFzvErM2y+zHeISyeVBtYqSLuyVoo/PfJpw0fy+saCBQw0bOaDXYr4Ncl0kX8D
VLdE1sGg22HC1LM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org