Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa
File:                     3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa (raw, json)
Hash identifier:          ZMhJvtB8+WggagDAV8mjcDYi3sSrDY5j0bm3fY91q5s=
Subject key identifier:   1D:41:61:FE:F9:2E:D5:2A:8F:AA:F4:2F:CF:A4:29:A1:73:28:A9:2C
Certificate issuer:       /CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
Certificate serial:       440C50EEC951A07FB79B9E90AB4CA0E8565F5CF6
Authority key identifier: 0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa
Signing time:             Thu 09 Nov 2023 19:29:53 +0000
ROA not before:           Thu 09 Nov 2023 19:24:53 +0000
ROA not after:            Thu 07 Nov 2024 19:29:53 +0000
asID:                     270305
IP address blocks:        201.216.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:50:ee:c9:51:a0:7f:b7:9b:9e:90:ab:4c:a0:e8:56:5f:5c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
        Validity
            Not Before: Nov  9 19:24:53 2023 GMT
            Not After : Nov  7 19:29:53 2024 GMT
        Subject: CN=1D4161FEF92ED52A8FAAF42FCFA429A17328A92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:5a:80:3c:c5:d9:bb:84:18:a1:c6:25:81:
                    c3:36:64:01:3a:c9:68:20:44:42:45:61:00:c8:c4:
                    14:31:f0:48:82:41:60:81:ee:33:77:96:11:9f:58:
                    97:b7:0b:d4:20:4a:92:81:6b:a6:9c:83:78:bc:d8:
                    28:dd:81:25:db:98:ef:23:d3:cc:70:68:d5:12:23:
                    ee:ed:96:49:7f:ed:32:87:1f:13:9e:3d:51:21:23:
                    5b:b5:eb:3d:7a:c7:0f:28:fb:1d:07:60:ba:de:f6:
                    c0:98:57:8c:99:b2:7c:98:74:03:9b:ec:19:a4:89:
                    56:c6:50:45:98:72:3f:33:02:ae:2f:aa:f9:dd:01:
                    ca:e0:56:00:40:ae:0d:59:7c:aa:07:2a:bc:d7:cd:
                    ca:91:5e:f0:ce:88:55:3d:97:ab:26:de:a0:e7:0b:
                    75:89:86:03:77:3f:bf:e8:d5:27:39:ce:e6:5c:52:
                    9c:ea:66:a6:66:34:b0:f7:b2:3e:46:b6:a2:47:f1:
                    d6:63:3f:35:b7:2c:4d:e3:d5:7c:e3:97:63:41:df:
                    16:d2:d2:33:a1:19:aa:78:cf:07:db:58:de:5d:84:
                    02:63:8b:08:fe:54:a7:46:4d:1f:cd:2e:ff:37:97:
                    2e:42:51:a6:1e:89:b0:73:97:24:81:4a:22:9a:9d:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:61:FE:F9:2E:D5:2A:8F:AA:F4:2F:CF:A4:29:A1:73:28:A9:2C
            X509v3 Authority Key Identifier:
                keyid:0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:4f:0d:91:34:62:36:e1:6f:5e:e0:b0:0e:06:14:45:90:
         3b:cc:ca:fe:57:6b:6c:32:15:1f:43:e8:47:1e:67:83:58:bc:
         fd:2e:a9:b1:aa:6a:84:d9:8c:5c:fe:51:09:40:e6:b1:01:a1:
         13:d3:96:1c:91:e3:07:24:c0:9b:62:fc:9e:49:83:95:ed:c0:
         77:10:30:40:3d:97:6a:67:8d:a7:91:e2:2e:32:69:38:b6:81:
         62:9d:55:7a:4e:14:23:c3:17:e0:6c:8c:a6:ab:2e:e9:db:b7:
         ad:e9:ca:94:75:6f:69:81:e4:da:77:68:25:c9:6f:b5:9b:2e:
         fc:cc:9e:e0:5b:f5:71:aa:52:0e:a4:4c:11:2e:74:cc:71:d9:
         62:f0:13:67:1c:e5:96:78:a9:68:b1:d9:0d:3e:27:fa:e0:a4:
         96:9b:77:6f:cc:95:6d:78:99:b8:fc:0d:b7:93:2c:45:d5:c4:
         95:5e:a8:53:75:f2:28:e3:12:c6:82:8e:4b:b4:b1:10:4a:06:
         19:c4:23:17:99:c1:7e:6b:a7:4d:d9:d5:81:ab:2d:b8:56:9c:
         8a:b4:95:40:14:b1:63:4b:25:61:e9:f1:d5:76:a1:dc:ca:c3:
         cf:13:36:4b:b1:60:25:f4:ae:27:58:8c:68:be:03:f7:d3:35:
         b7:be:b5:7c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURAxQ7slRoH+3m56Qq0yg6FZfXPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM0RTI0RTZCRjE5QzNFMkYyOTdEMTVGRTY5NzZEMDRB
MjdBNjVCNDAeFw0yMzExMDkxOTI0NTNaFw0yNDExMDcxOTI5NTNaMDMxMTAvBgNV
BAMTKDFENDE2MUZFRjkyRUQ1MkE4RkFBRjQyRkNGQTQyOUExNzMyOEE5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXalqAPMXZu4QYocYlgcM2ZAE6
yWggREJFYQDIxBQx8EiCQWCB7jN3lhGfWJe3C9QgSpKBa6acg3i82CjdgSXbmO8j
08xwaNUSI+7tlkl/7TKHHxOePVEhI1u16z16xw8o+x0HYLre9sCYV4yZsnyYdAOb
7BmkiVbGUEWYcj8zAq4vqvndAcrgVgBArg1ZfKoHKrzXzcqRXvDOiFU9l6sm3qDn
C3WJhgN3P7/o1Sc5zuZcUpzqZqZmNLD3sj5GtqJH8dZjPzW3LE3j1Xzjl2NB3xbS
0jOhGap4zwfbWN5dhAJjiwj+VKdGTR/NLv83ly5CUaYeibBzlySBSiKanYCNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHUFh/vku1SqPqvQvz6QpoXMoqSwwHwYDVR0j
BBgwFoAUDE4k5r8Zw+Lyl9Ff5pdtBKJ6ZbQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvMEM0RTI0RTZCRjE5QzNFMkYyOTdEMTVGRTY5NzZEMDRBMjdBNjVCNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wQzRFMjRFNkJGMTlDM0UyRjI5
N0QxNUZFNjk3NkQwNEEyN0E2NUI0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzEvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMnYeDANBgkqhkiG9w0BAQsFAAOCAQEAGy9PDZE0
Yjbhb17gsA4GFEWQO8zK/ldrbDIVH0PoRx5ng1i8/S6psapqhNmMXP5RCUDmsQGh
E9OWHJHjByTAm2L8nkmDle3AdxAwQD2XameNp5HiLjJpOLaBYp1Vek4UI8MX4GyM
pqsu6du3renKlHVvaYHk2ndoJclvtZsu/Mye4Fv1capSDqRMES50zHHZYvATZxzl
lnipaLHZDT4n+uCklpt3b8yVbXiZuPwNt5MsRdXElV6oU3XyKOMSxoKOS7SxEEoG
GcQjF5nBfmunTdnVgastuFacirSVQBSxY0slYenx1Xah3MrDzxM2S7FgJfSuJ1iM
aL4D99M1t761fA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org