Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3236203d3e20323730333035.roa
File:                     3230312e3231362e3132302e302f32342d3236203d3e20323730333035.roa (raw, json)
Hash identifier:          jdkQkuK5ag/zWjJqQgLWg1VPtvRwHrnmJWTd3QZ9RJU=
Subject key identifier:   FE:D7:35:EF:C8:9D:1B:6B:7F:10:63:8C:34:10:3A:92:51:5F:79:AA
Certificate issuer:       /CN=2EB1573F98123E28FC28A2381146A49E59E8D2FE
Certificate serial:       044128F5367127AE6672AEFE32223723A7AB0F25
Authority key identifier: 2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3236203d3e20323730333035.roa
Signing time:             Thu 03 Aug 2023 16:48:21 +0000
ROA not before:           Thu 03 Aug 2023 16:43:21 +0000
ROA not after:            Thu 01 Aug 2024 16:48:21 +0000
asID:                     270305
IP address blocks:        201.216.120.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:41:28:f5:36:71:27:ae:66:72:ae:fe:32:22:37:23:a7:ab:0f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB1573F98123E28FC28A2381146A49E59E8D2FE
        Validity
            Not Before: Aug  3 16:43:21 2023 GMT
            Not After : Aug  1 16:48:21 2024 GMT
        Subject: CN=FED735EFC89D1B6B7F10638C34103A92515F79AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:01:08:22:74:9a:6c:5a:fd:74:5c:89:a5:
                    3a:6c:ad:02:a1:da:8a:e1:03:c3:c6:69:14:20:4c:
                    99:5c:de:de:62:db:52:5b:10:62:fa:89:84:fc:aa:
                    15:c9:92:65:72:8e:5b:18:7e:57:a0:18:c8:1e:cb:
                    ba:69:ee:86:11:42:c8:98:50:54:b0:a3:33:6e:b7:
                    61:bc:a0:e8:12:06:7b:63:b2:6f:00:47:1e:c4:ca:
                    36:dc:52:f7:b0:19:79:06:4b:09:d1:08:18:1e:56:
                    7d:76:c1:4a:ec:df:4d:a7:3f:a6:31:77:4a:5c:53:
                    c1:2c:08:69:aa:f7:83:86:04:ad:b8:c5:fd:a1:62:
                    29:f3:85:6c:b5:6f:31:ad:c7:84:2c:5f:5a:9b:cf:
                    0e:a3:43:18:92:f4:ff:8e:94:30:ed:60:f9:b5:7b:
                    8b:9c:60:57:93:ad:f2:6f:bd:d3:d5:a3:bf:b9:09:
                    79:d5:a4:ff:68:c1:1e:7a:3c:96:6c:da:8e:9e:29:
                    45:c2:fc:e3:66:d9:52:8c:54:73:a4:01:a5:cc:8a:
                    23:ae:c1:d7:ff:96:d3:86:28:64:50:86:de:a8:40:
                    32:3b:8d:5c:3c:31:bc:de:53:49:aa:80:62:de:cb:
                    c0:1d:a4:47:c1:03:b6:67:d0:d1:bc:b2:d2:45:29:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D7:35:EF:C8:9D:1B:6B:7F:10:63:8C:34:10:3A:92:51:5F:79:AA
            X509v3 Authority Key Identifier:
                keyid:2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3236203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:29:cc:f8:82:3f:1a:79:2e:e3:22:56:a5:86:db:11:63:d8:
         bb:68:e3:a2:d9:d4:26:19:d7:49:ff:ed:37:a6:15:e3:72:88:
         63:e6:4e:20:33:d7:5b:23:28:70:5d:50:cd:bb:5b:b9:3a:24:
         b0:a9:73:b7:21:39:e1:91:ca:e8:fb:89:5f:c6:a3:7a:1e:8d:
         90:48:9a:ba:97:d1:4e:39:cf:78:84:8c:2c:17:5e:02:de:89:
         9b:10:62:00:38:ab:e4:06:69:e6:ac:52:1c:7b:3d:6c:2f:81:
         a6:2f:55:51:36:40:fa:08:a9:66:ec:29:c7:87:27:52:f2:f9:
         3f:4b:8e:df:ae:ab:ab:1e:b6:71:a4:53:c4:d3:1c:c9:ab:56:
         a3:d0:c2:a3:b5:90:6e:56:aa:ce:b6:4c:79:05:60:bc:97:d5:
         ac:bb:73:e9:69:54:50:9e:87:a9:66:8c:99:8d:66:c8:16:87:
         9c:07:6d:cb:1b:7b:de:2e:1c:49:c6:71:2d:d1:18:64:c0:e6:
         5c:31:e3:63:bb:04:c3:3d:a7:87:48:0b:e2:b6:02:a6:14:3e:
         e7:00:2c:26:44:e8:34:17:89:56:58:5f:91:87:54:52:81:8a:
         1b:79:f2:33:ce:18:9c:5f:a8:68:65:84:aa:30:04:f6:33:ff:
         01:f7:03:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBEEo9TZxJ65mcq7+MiI3I6erDyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCMTU3M0Y5ODEyM0UyOEZDMjhBMjM4MTE0NkE0OUU1
OUU4RDJGRTAeFw0yMzA4MDMxNjQzMjFaFw0yNDA4MDExNjQ4MjFaMDMxMTAvBgNV
BAMTKEZFRDczNUVGQzg5RDFCNkI3RjEwNjM4QzM0MTAzQTkyNTE1Rjc5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUAEIInSabFr9dFyJpTpsrQKh
2orhA8PGaRQgTJlc3t5i21JbEGL6iYT8qhXJkmVyjlsYflegGMgey7pp7oYRQsiY
UFSwozNut2G8oOgSBntjsm8ARx7EyjbcUvewGXkGSwnRCBgeVn12wUrs302nP6Yx
d0pcU8EsCGmq94OGBK24xf2hYinzhWy1bzGtx4QsX1qbzw6jQxiS9P+OlDDtYPm1
e4ucYFeTrfJvvdPVo7+5CXnVpP9owR56PJZs2o6eKUXC/ONm2VKMVHOkAaXMiiOu
wdf/ltOGKGRQht6oQDI7jVw8MbzeU0mqgGLey8AdpEfBA7Zn0NG8stJFKSX3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/tc178idG2t/EGOMNBA6klFfeaowHwYDVR0j
BBgwFoAULrFXP5gSPij8KKI4EUaknlno0v4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvMkVCMTU3M0Y5ODEyM0UyOEZDMjhBMjM4MTE0NkE0OUU1OUU4RDJGRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRUIxNTczRjk4MTIzRTI4RkMy
OEEyMzgxMTQ2QTQ5RTU5RThEMkZFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzAvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzYyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMnYeDANBgkqhkiG9w0BAQsFAAOCAQEAhCnM+II/
Gnku4yJWpYbbEWPYu2jjotnUJhnXSf/tN6YV43KIY+ZOIDPXWyMocF1QzbtbuTok
sKlztyE54ZHK6PuJX8ajeh6NkEiaupfRTjnPeISMLBdeAt6JmxBiADir5AZp5qxS
HHs9bC+Bpi9VUTZA+gipZuwpx4cnUvL5P0uO366rqx62caRTxNMcyatWo9DCo7WQ
blaqzrZMeQVgvJfVrLtz6WlUUJ6HqWaMmY1myBaHnAdtyxt73i4cScZxLdEYZMDm
XDHjY7sEwz2nh0gL4rYCphQ+5wAsJkToNBeJVlhfkYdUUoGKG3nyM84YnF+oaGWE
qjAE9jP/AfcDrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org