Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa
File:                     3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa (raw, json)
Hash identifier:          lraOCgF5FL7y7WWVLyri15jCuEQdEHICklydYe2qU5o=
Subject key identifier:   CC:C4:14:99:B9:B3:C1:B1:34:04:90:7A:9B:C0:22:A3:31:92:13:37
Certificate issuer:       /CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Certificate serial:       4A109951919D811884F30E5AF2B501896CC95977
Authority key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa
Signing time:             Thu 04 Apr 2024 15:50:35 +0000
ROA not before:           Thu 04 Apr 2024 15:45:35 +0000
ROA not after:            Thu 03 Apr 2025 15:50:35 +0000
asID:                     270305
IP address blocks:        201.216.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:10:99:51:91:9d:81:18:84:f3:0e:5a:f2:b5:01:89:6c:c9:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
        Validity
            Not Before: Apr  4 15:45:35 2024 GMT
            Not After : Apr  3 15:50:35 2025 GMT
        Subject: CN=CCC41499B9B3C1B13404907A9BC022A331921337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:30:8a:9a:3d:cf:3e:3f:c3:d7:5c:94:42:
                    87:e9:d0:47:e2:1c:20:2b:b2:22:67:b3:69:73:8e:
                    1f:62:1a:a8:56:bb:cd:e4:54:ab:88:48:c4:e3:4b:
                    5e:4f:ac:a8:5a:7a:8c:30:62:b9:b9:bf:8c:8d:88:
                    b9:42:6e:a9:bd:da:b9:27:d4:55:e3:d3:0b:60:53:
                    b7:17:de:81:6b:3f:07:e0:7b:ec:40:5b:35:97:66:
                    ba:37:58:cd:68:3f:fc:ab:3d:c9:bb:ec:36:5b:76:
                    a7:10:e2:f3:de:cf:1c:da:8f:80:0c:0d:90:24:71:
                    1e:9e:86:4e:55:b9:20:e7:e3:f2:6b:8f:40:f1:bd:
                    6d:73:2b:6b:38:79:9b:f6:7b:a0:f9:87:4d:8e:f0:
                    e6:43:c4:6e:61:ca:62:27:30:a6:b4:89:4b:6d:4e:
                    09:d3:7a:26:7b:f1:5a:46:8c:13:2b:bb:b0:61:07:
                    e0:f4:e0:9d:33:14:b7:d3:bd:b6:1c:1c:25:fa:34:
                    d6:13:b2:95:d8:c5:4a:e1:10:d7:68:77:94:3b:4c:
                    2f:02:4a:5f:a7:e2:c3:69:d9:85:71:15:8b:b5:43:
                    af:b3:bc:5e:2a:40:1c:e0:e4:ff:6c:2e:05:3d:5a:
                    89:10:58:49:e7:a1:cc:1d:f4:a5:f6:8d:b4:b1:2c:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:14:99:B9:B3:C1:B1:34:04:90:7A:9B:C0:22:A3:31:92:13:37
            X509v3 Authority Key Identifier:
                keyid:67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:e7:f8:54:9b:49:b2:b6:e2:eb:c0:72:6f:07:3e:0a:21:
         71:2c:5e:80:ac:25:39:a9:ed:ba:96:d0:4d:45:0f:22:1f:ac:
         29:16:43:53:bf:e1:83:bf:67:a8:22:62:94:bf:2b:59:d0:ab:
         e2:28:bc:d5:67:9b:c8:9d:07:1d:58:9c:ca:7b:e7:93:bc:e8:
         81:fe:83:0d:c9:b0:d2:ac:4b:b2:1a:5a:40:2c:04:8f:10:7e:
         3f:c0:59:69:c8:c4:71:3b:cf:cc:b8:37:eb:4b:32:3c:e7:e4:
         d5:7b:d8:85:5b:85:2c:0c:db:5f:c9:7a:e8:aa:ab:e0:67:ac:
         d8:12:c0:78:ac:f5:12:39:b4:1e:0b:c1:9c:92:29:2c:de:c3:
         c9:e3:e1:59:da:f7:e3:88:44:48:0f:90:2e:db:d8:18:60:27:
         e9:fd:50:49:68:82:0a:4a:e1:65:ac:af:4f:4c:6f:53:a5:d5:
         ae:0e:9b:d1:01:0a:a6:ed:95:09:94:15:fb:76:0e:c5:90:42:
         b2:c9:05:b5:c3:89:45:da:99:90:f8:63:30:3a:0c:2b:02:0a:
         42:bc:17:9a:9b:1d:a7:9f:9d:3c:72:e4:68:44:bd:bb:2a:0e:
         6b:40:06:a7:3f:d2:44:0c:0b:de:49:bf:01:31:e3:9d:8a:2f:
         9b:9a:fd:d6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUShCZUZGdgRiE8w5a8rUBiWzJWXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcwQjUzNzA1QjE0MDdDQzNCMzBEREEzNTQ4Q0ZFMjI3
NzVBNDFCOTAeFw0yNDA0MDQxNTQ1MzVaFw0yNTA0MDMxNTUwMzVaMDMxMTAvBgNV
BAMTKENDQzQxNDk5QjlCM0MxQjEzNDA0OTA3QTlCQzAyMkEzMzE5MjEzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInjCKmj3PPj/D11yUQofp0Efi
HCArsiJns2lzjh9iGqhWu83kVKuISMTjS15PrKhaeowwYrm5v4yNiLlCbqm92rkn
1FXj0wtgU7cX3oFrPwfge+xAWzWXZro3WM1oP/yrPcm77DZbdqcQ4vPezxzaj4AM
DZAkcR6ehk5VuSDn4/Jrj0DxvW1zK2s4eZv2e6D5h02O8OZDxG5hymInMKa0iUtt
TgnTeiZ78VpGjBMru7BhB+D04J0zFLfTvbYcHCX6NNYTspXYxUrhENdod5Q7TC8C
Sl+n4sNp2YVxFYu1Q6+zvF4qQBzg5P9sLgU9WokQWEnnocwd9KX2jbSxLGClAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzMQUmbmzwbE0BJB6m8AiozGSEzcwHwYDVR0j
BBgwFoAUZwtTcFsUB8w7MN2jVIz+IndaQbkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvNjcwQjUzNzA1QjE0MDdDQzNCMzBEREEzNTQ4Q0ZFMjI3NzVBNDFCOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82NzBCNTM3MDVCMTQwN0NDM0Iz
MEREQTM1NDhDRkUyMjc3NUE0MUI5LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzEvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAsnYeDANBgkqhkiG9w0BAQsFAAOCAQEACg3n+FSb
SbK24uvAcm8HPgohcSxegKwlOantupbQTUUPIh+sKRZDU7/hg79nqCJilL8rWdCr
4ii81WebyJ0HHVicynvnk7zogf6DDcmw0qxLshpaQCwEjxB+P8BZacjEcTvPzLg3
60syPOfk1XvYhVuFLAzbX8l66Kqr4Ges2BLAeKz1Ejm0HgvBnJIpLN7DyePhWdr3
44hESA+QLtvYGGAn6f1QSWiCCkrhZayvT0xvU6XVrg6b0QEKpu2VCZQV+3YOxZBC
sskFtcOJRdqZkPhjMDoMKwIKQrwXmpsdp5+dPHLkaES9uyoOa0AGpz/SRAwL3km/
ATHjnYovm5r91g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org