Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e3134382e3132302e302f32322d3233203d3e203238353938.roa
File:                     3230312e3134382e3132302e302f32322d3233203d3e203238353938.roa (raw, json)
Hash identifier:          4h+/zSz4PAErnpqURll3RB4wIpercwSDQqDboMCnamo=
Subject key identifier:   50:F3:04:32:E1:55:2D:83:E1:91:C6:84:C0:19:6C:7D:DF:46:55:05
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       197FA8B8478D8A078C66682D046626B99E9E6108
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e3134382e3132302e302f32322d3233203d3e203238353938.roa
Signing time:             Mon 09 Oct 2023 17:53:30 +0000
ROA not before:           Mon 09 Oct 2023 17:48:30 +0000
ROA not after:            Mon 07 Oct 2024 17:53:30 +0000
asID:                     28598
IP address blocks:        201.148.120.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7f:a8:b8:47:8d:8a:07:8c:66:68:2d:04:66:26:b9:9e:9e:61:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct  9 17:48:30 2023 GMT
            Not After : Oct  7 17:53:30 2024 GMT
        Subject: CN=50F30432E1552D83E191C684C0196C7DDF465505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:25:05:f5:2b:fd:0e:fa:4e:61:fa:d5:be:
                    3c:ed:ba:a1:9d:cc:bc:75:1f:92:ef:a4:98:52:35:
                    2f:25:c6:d3:a9:48:d2:4b:6a:d9:51:d0:e2:7e:a4:
                    fc:3e:a1:d7:27:36:6e:25:a9:e2:6c:98:b1:a8:34:
                    a7:b2:69:1e:b0:86:79:1f:8b:f2:c3:f7:90:09:3b:
                    2a:fd:0f:49:40:64:72:24:a8:6f:87:a9:37:e5:28:
                    44:f4:71:90:41:1f:f2:27:d5:ef:ff:66:cf:1e:d6:
                    79:b8:bd:b7:00:48:03:4c:e3:9f:64:8b:9f:7a:ed:
                    d6:13:1a:99:e9:d4:ed:be:5c:d8:e0:2c:00:54:fc:
                    67:5b:1f:f7:52:7a:98:a2:34:c0:45:21:db:a0:3e:
                    95:ba:85:71:29:09:60:ec:96:ee:4a:0c:69:0a:2f:
                    65:c4:bf:86:57:1a:7f:e9:c6:72:52:81:db:ec:bd:
                    63:25:a8:b4:16:97:1f:7e:71:87:3c:24:12:5d:d6:
                    88:fb:d2:48:19:7a:6c:19:ca:ae:b8:94:e1:a3:82:
                    a0:75:c1:10:45:69:54:aa:34:47:87:f3:f0:81:84:
                    ec:af:b6:6d:e2:1a:83:bc:07:03:20:f5:1a:b7:4f:
                    fc:aa:09:e1:29:24:c4:5e:b5:87:4e:7b:55:b8:6a:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:04:32:E1:55:2D:83:E1:91:C6:84:C0:19:6C:7D:DF:46:55:05
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3230312e3134382e3132302e302f32322d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:92:4d:db:16:ae:9b:71:f5:00:cb:a4:c3:e0:e6:93:2c:b4:
         5e:a8:67:7a:30:66:9f:ee:0f:d5:e2:6a:da:4c:4e:f8:40:4a:
         8e:84:0a:10:c0:dc:32:28:21:50:e9:8d:9e:8a:f8:c3:da:73:
         92:71:92:21:87:8c:18:bc:cb:a2:50:0e:06:86:ee:83:dd:9e:
         5d:df:79:f3:7e:a0:11:ed:6f:9a:46:b6:74:2a:fb:82:d3:d7:
         58:90:c1:f8:06:1b:f5:9c:a0:a1:c1:4c:96:e7:b6:82:ea:67:
         93:9b:23:f0:f5:99:62:a8:40:bc:9d:d7:f9:86:9f:9e:48:4b:
         3b:4d:57:12:0b:b5:82:69:c1:98:36:1b:ec:38:cf:44:ef:73:
         19:4b:fe:f4:49:e9:2d:76:69:ee:c6:e1:9e:46:1a:6d:7d:c5:
         1f:f4:b2:11:43:6e:bb:12:73:56:c9:84:d5:b9:42:2f:ef:d6:
         41:99:0c:8a:fd:f0:57:12:af:fb:bf:5e:1b:b4:02:09:b3:92:
         a6:a6:59:3d:fe:a4:a1:78:33:e8:34:93:21:d1:e3:e1:6f:a7:
         b6:6e:80:b4:ea:fa:db:9e:f7:63:f4:cf:16:d2:92:40:95:1e:
         41:48:96:84:72:5d:f9:06:ed:a8:3c:c8:af:63:43:31:78:9d:
         ca:09:70:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGX+ouEeNigeMZmgtBGYmuZ6eYQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMDkxNzQ4MzBaFw0yNDEwMDcxNzUzMzBaMDMxMTAvBgNV
BAMTKDUwRjMwNDMyRTE1NTJEODNFMTkxQzY4NEMwMTk2QzdEREY0NjU1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjiUF9Sv9DvpOYfrVvjztuqGd
zLx1H5LvpJhSNS8lxtOpSNJLatlR0OJ+pPw+odcnNm4lqeJsmLGoNKeyaR6whnkf
i/LD95AJOyr9D0lAZHIkqG+HqTflKET0cZBBH/In1e//Zs8e1nm4vbcASANM459k
i5967dYTGpnp1O2+XNjgLABU/GdbH/dSepiiNMBFIdugPpW6hXEpCWDslu5KDGkK
L2XEv4ZXGn/pxnJSgdvsvWMlqLQWlx9+cYc8JBJd1oj70kgZemwZyq64lOGjgqB1
wRBFaVSqNEeH8/CBhOyvtm3iGoO8BwMg9Rq3T/yqCeEpJMRetYdOe1W4atVzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUPMEMuFVLYPhkcaEwBlsfd9GVQUwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzIzMDMxMmUzMTM0MzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlHgwDQYJKoZIhvcNAQELBQADggEBACGSTdsW
rptx9QDLpMPg5pMstF6oZ3owZp/uD9XiatpMTvhASo6EChDA3DIoIVDpjZ6K+MPa
c5JxkiGHjBi8y6JQDgaG7oPdnl3fefN+oBHtb5pGtnQq+4LT11iQwfgGG/WcoKHB
TJbntoLqZ5ObI/D1mWKoQLyd1/mGn55ISztNVxILtYJpwZg2G+w4z0TvcxlL/vRJ
6S12ae7G4Z5GGm19xR/0shFDbrsSc1bJhNW5Qi/v1kGZDIr98FcSr/u/Xhu0Agmz
kqamWT3+pKF4M+g0kyHR4+Fvp7ZugLTq+tue92P0zxbSkkCVHkFIloRyXfkG7ag8
yK9jQzF4ncoJcJE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org