Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa
File:                     3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa (raw, json)
Hash identifier:          FxRV6BI3hUFMX4PJgHc/y9UVMIWDg3UN+vqzL7JBI3c=
Subject key identifier:   DA:35:CA:62:A4:6C:15:BF:1B:6C:F5:4E:45:D8:66:F1:BE:D9:93:A4
Certificate issuer:       /CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
Certificate serial:       2EC1F68745C69E02F0A1F6283D9229E659155E1E
Authority key identifier: 0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa
Signing time:             Thu 09 Nov 2023 19:29:57 +0000
ROA not before:           Thu 09 Nov 2023 19:24:57 +0000
ROA not after:            Thu 07 Nov 2024 19:29:57 +0000
asID:                     270305
IP address blocks:        201.216.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:f6:87:45:c6:9e:02:f0:a1:f6:28:3d:92:29:e6:59:15:5e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
        Validity
            Not Before: Nov  9 19:24:57 2023 GMT
            Not After : Nov  7 19:29:57 2024 GMT
        Subject: CN=DA35CA62A46C15BF1B6CF54E45D866F1BED993A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:a0:c3:60:9d:ba:b8:3e:09:07:8d:1b:c9:
                    5b:f4:84:28:9c:df:41:ce:73:9f:17:68:d2:dc:9e:
                    79:56:b9:21:b1:79:05:60:8f:35:38:b4:eb:0e:34:
                    f3:61:ca:1f:c7:83:b3:b6:67:7d:a0:db:89:60:4f:
                    68:13:91:eb:5e:22:a6:3f:e9:c7:cf:88:c6:8e:99:
                    43:60:dd:e0:4a:33:d8:b7:86:a3:9d:47:c4:fc:27:
                    8f:82:87:1e:fa:91:3e:7e:ae:76:91:c7:53:ef:02:
                    d1:5f:6d:86:96:a2:ca:72:29:90:1d:b2:9e:c7:f0:
                    c2:9b:21:5a:03:72:75:d5:17:62:62:1c:7d:75:5b:
                    e4:35:53:75:f1:3c:15:7b:43:6e:6c:7b:30:ca:19:
                    97:a4:a2:a7:78:e7:db:60:52:93:59:68:21:a7:46:
                    a4:6d:a9:76:07:fc:d7:0b:af:f9:6b:06:7d:1f:9b:
                    6a:d9:17:08:fe:ca:5c:fe:10:0a:2f:5a:68:71:03:
                    38:ba:35:b3:d9:4d:63:a4:28:d4:ad:45:85:e6:ca:
                    37:55:78:02:ac:93:ca:a3:48:72:c3:76:b8:bb:34:
                    60:b5:3c:89:b1:aa:e3:8b:91:42:b1:34:98:51:82:
                    17:81:c4:79:e4:a4:99:8e:5e:09:1f:1e:ba:82:96:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:CA:62:A4:6C:15:BF:1B:6C:F5:4E:45:D8:66:F1:BE:D9:93:A4
            X509v3 Authority Key Identifier:
                keyid:0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:31:3f:18:fc:c0:7e:54:45:05:fc:65:fe:b1:21:47:50:2f:
         7d:60:e4:7a:f1:90:e1:e4:dd:c1:36:0c:e6:8a:7c:f4:eb:c5:
         37:ac:1b:d4:f2:45:57:5e:b5:cd:b5:20:9d:7b:f4:34:52:db:
         0e:d5:a9:43:f0:bf:89:19:c0:69:95:61:ee:f3:e6:c2:90:88:
         53:40:b4:d8:a5:50:b5:0b:95:be:ce:05:78:a3:f0:96:7c:fc:
         ac:81:27:9b:4b:dc:6e:0a:6c:86:0b:28:11:df:f8:55:9c:f9:
         09:d8:b1:10:24:06:74:f2:cf:a5:e1:ba:0d:06:ef:97:b2:84:
         13:03:48:a3:1e:5f:6c:ae:da:37:97:13:6a:ba:e1:98:d5:e6:
         3f:13:e7:7a:99:1e:11:87:f0:59:e8:26:c8:d2:92:27:4d:f4:
         16:13:ab:90:e6:42:d7:e5:40:11:5a:5e:a7:d3:78:8a:04:0a:
         a5:9c:6f:98:25:d4:36:f7:2b:2f:65:3e:39:1c:36:d7:63:dc:
         dc:00:2d:5e:99:e8:fc:39:df:31:45:58:bd:a7:5c:35:a1:6f:
         c4:75:14:c7:c1:a2:8b:b2:fb:0e:96:d4:c8:e5:b0:79:00:bd:
         ed:41:41:1d:0a:48:9a:39:6c:74:af:43:e4:e8:7e:66:cd:a5:
         de:b5:52:17
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULsH2h0XGngLwofYoPZIp5lkVXh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM0RTI0RTZCRjE5QzNFMkYyOTdEMTVGRTY5NzZEMDRB
MjdBNjVCNDAeFw0yMzExMDkxOTI0NTdaFw0yNDExMDcxOTI5NTdaMDMxMTAvBgNV
BAMTKERBMzVDQTYyQTQ2QzE1QkYxQjZDRjU0RTQ1RDg2NkYxQkVEOTkzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbB6DDYJ26uD4JB40byVv0hCic
30HOc58XaNLcnnlWuSGxeQVgjzU4tOsONPNhyh/Hg7O2Z32g24lgT2gTketeIqY/
6cfPiMaOmUNg3eBKM9i3hqOdR8T8J4+Chx76kT5+rnaRx1PvAtFfbYaWospyKZAd
sp7H8MKbIVoDcnXVF2JiHH11W+Q1U3XxPBV7Q25sezDKGZekoqd459tgUpNZaCGn
RqRtqXYH/NcLr/lrBn0fm2rZFwj+ylz+EAovWmhxAzi6NbPZTWOkKNStRYXmyjdV
eAKsk8qjSHLDdri7NGC1PImxquOLkUKxNJhRgheBxHnkpJmOXgkfHrqClgrVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2jXKYqRsFb8bbPVORdhm8b7Zk6QwHwYDVR0j
BBgwFoAUDE4k5r8Zw+Lyl9Ff5pdtBKJ6ZbQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvMEM0RTI0RTZCRjE5QzNFMkYyOTdEMTVGRTY5NzZEMDRBMjdBNjVCNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wQzRFMjRFNkJGMTlDM0UyRjI5
N0QxNUZFNjk3NkQwNEEyN0E2NUI0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzEvMzIz
MDMxMmUzMjMxMzYyZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMnYejANBgkqhkiG9w0BAQsFAAOCAQEAVzE/GPzA
flRFBfxl/rEhR1AvfWDkevGQ4eTdwTYM5op89OvFN6wb1PJFV161zbUgnXv0NFLb
DtWpQ/C/iRnAaZVh7vPmwpCIU0C02KVQtQuVvs4FeKPwlnz8rIEnm0vcbgpshgso
Ed/4VZz5CdixECQGdPLPpeG6DQbvl7KEEwNIox5fbK7aN5cTarrhmNXmPxPnepke
EYfwWegmyNKSJ030FhOrkOZC1+VAEVpep9N4igQKpZxvmCXUNvcrL2U+ORw212Pc
3AAtXpno/DnfMUVYvadcNaFvxHUUx8Gii7L7DpbUyOWweQC97UFBHQpImjlsdK9D
5Oh+Zs2l3rVSFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org