Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3332203d3e20323633333734.roa
File:                     3139312e33372e3232342e302f32312d3332203d3e20323633333734.roa (raw, json)
Hash identifier:          KnGAbeR0MHKaSLDb4JyknuXfInHd/ptf6MQsjZJpboU=
Subject key identifier:   A3:6B:83:1F:4C:C9:4A:6A:21:7D:96:A9:CC:1E:04:50:BE:3B:38:28
Certificate issuer:       /CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
Certificate serial:       27C5A7FC02E58E76A6D3ABB27D1DB8474DA474CD
Authority key identifier: BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3332203d3e20323633333734.roa
Signing time:             Thu 17 Nov 2022 17:42:57 +0000
ROA not before:           Thu 17 Nov 2022 17:37:57 +0000
ROA not after:            Thu 16 Nov 2023 17:42:57 +0000
asID:                     263374
IP address blocks:        191.37.224.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c5:a7:fc:02:e5:8e:76:a6:d3:ab:b2:7d:1d:b8:47:4d:a4:74:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
        Validity
            Not Before: Nov 17 17:37:57 2022 GMT
            Not After : Nov 16 17:42:57 2023 GMT
        Subject: CN=A36B831F4CC94A6A217D96A9CC1E0450BE3B3828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d6:c0:11:19:14:cf:1a:8c:84:f9:a7:c9:55:
                    3f:82:a1:1b:fd:f4:4e:86:67:26:78:8a:49:32:82:
                    37:d8:c0:71:b8:88:74:f4:1a:c8:48:d1:28:d6:8e:
                    d9:54:b1:2f:a8:1f:b6:26:a0:68:de:d1:e6:6f:de:
                    14:0d:c8:1b:99:89:06:2d:88:94:a5:f4:c9:67:a5:
                    95:f9:4e:af:84:a1:61:1b:f3:45:5e:c6:ef:aa:0c:
                    b1:99:51:ad:47:48:1a:9f:da:8a:c7:83:a5:c7:a7:
                    3a:95:77:ef:d6:f6:4d:37:e3:78:f4:7f:c8:bc:02:
                    e5:9e:81:b3:6f:77:4e:76:c5:d2:60:84:84:b3:e6:
                    57:bc:11:44:8e:2e:7f:d2:3d:24:46:78:46:40:60:
                    21:dc:f0:3a:df:5c:ab:63:84:16:9e:e4:7c:b7:1d:
                    43:53:67:28:a1:b8:31:e1:65:68:2d:52:78:e9:92:
                    92:48:a5:7b:12:96:26:25:fe:d7:bf:25:04:ea:e7:
                    71:11:5a:9d:b5:65:07:73:a0:6d:98:b3:83:a5:ea:
                    7c:1d:c0:89:62:ea:7e:08:2e:f0:9c:dc:52:5e:77:
                    ff:69:c4:da:c1:5c:c4:ff:59:61:3c:76:a7:81:4d:
                    85:7f:fc:52:3c:ba:38:d2:7a:e6:40:2f:5a:a5:93:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6B:83:1F:4C:C9:4A:6A:21:7D:96:A9:CC:1E:04:50:BE:3B:38:28
            X509v3 Authority Key Identifier:
                keyid:BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3332203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:71:b4:0b:e9:c6:f6:68:3c:80:70:3c:b1:0d:6f:fe:60:c0:
         75:3e:6c:04:15:15:3e:59:29:08:23:a7:53:ee:90:1d:55:27:
         26:e8:cb:2b:af:1e:70:e7:5f:94:57:7d:20:cf:1d:c5:dc:0e:
         2b:e1:fb:1e:ce:9f:cc:36:b6:a7:cd:29:93:b6:37:b2:ad:78:
         a2:e8:c1:9e:09:66:eb:5a:b0:54:cc:db:e0:fa:23:68:26:0e:
         fb:4a:37:21:2d:9f:66:ea:0d:dc:16:aa:ed:d7:5b:eb:d0:4e:
         84:4c:9d:ac:b9:22:4a:97:92:12:df:f8:86:30:28:a4:74:40:
         34:6a:41:1c:37:a7:45:4d:79:ef:b3:70:38:80:28:f6:b8:3f:
         dd:f1:b5:fa:98:f5:20:40:0c:4c:48:99:71:41:61:12:f3:1b:
         34:76:43:00:4e:a8:d3:3e:a7:03:ee:46:4f:a8:1d:09:bf:98:
         7e:85:b5:b8:02:a0:a1:b1:33:b7:28:93:41:29:71:d9:12:b1:
         c1:18:5b:85:dc:79:d3:5f:d2:38:cf:e0:99:47:e6:2e:5a:5f:
         f0:b6:40:d9:bb:6a:5e:f1:e9:61:a3:2d:23:70:ea:ec:13:43:
         14:5e:32:d3:23:54:f8:17:4a:14:1b:91:e3:db:82:e5:05:fc:
         18:b9:9c:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ8Wn/ALljnam06uyfR24R02kdM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRBMTEwMEMxMDAwRUU2RjNFMDFFODVFMzA5NTMwQkUz
NkYxMzk5NTAeFw0yMjExMTcxNzM3NTdaFw0yMzExMTYxNzQyNTdaMDMxMTAvBgNV
BAMTKEEzNkI4MzFGNENDOTRBNkEyMTdEOTZBOUNDMUUwNDUwQkUzQjM4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21sARGRTPGoyE+afJVT+CoRv9
9E6GZyZ4ikkygjfYwHG4iHT0GshI0SjWjtlUsS+oH7YmoGje0eZv3hQNyBuZiQYt
iJSl9MlnpZX5Tq+EoWEb80Vexu+qDLGZUa1HSBqf2orHg6XHpzqVd+/W9k0343j0
f8i8AuWegbNvd052xdJghISz5le8EUSOLn/SPSRGeEZAYCHc8DrfXKtjhBae5Hy3
HUNTZyihuDHhZWgtUnjpkpJIpXsSliYl/te/JQTq53ERWp21ZQdzoG2Ys4Ol6nwd
wIli6n4ILvCc3FJed/9pxNrBXMT/WWE8dqeBTYV//FI8ujjSeuZAL1qlkzYLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo2uDH0zJSmohfZapzB4EUL47OCgwHwYDVR0j
BBgwFoAUvaEQDBAA7m8+AeheMJUwvjbxOZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM
S1MvMC9CREExMTAwQzEwMDBFRTZGM0UwMUU4NUUzMDk1MzBCRTM2RjEzOTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JEQTExMDBDMTAwMEVFNkYz
RTAxRTg1RTMwOTUzMEJFMzZGMTM5OTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBVGVQQ0IyU1ZIcE12ZVJ0UnhQMlFSa3czV3Z1MXNYNHdvRzVCdnpFTEtTLzAv
MzEzOTMxMmUzMzM3MmUzMjMyMzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzMzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JeAwDQYJKoZIhvcNAQELBQADggEBAAFxtAvp
xvZoPIBwPLENb/5gwHU+bAQVFT5ZKQgjp1PukB1VJyboyyuvHnDnX5RXfSDPHcXc
Divh+x7On8w2tqfNKZO2N7KteKLowZ4JZutasFTM2+D6I2gmDvtKNyEtn2bqDdwW
qu3XW+vQToRMnay5IkqXkhLf+IYwKKR0QDRqQRw3p0VNee+zcDiAKPa4P93xtfqY
9SBADExImXFBYRLzGzR2QwBOqNM+pwPuRk+oHQm/mH6FtbgCoKGxM7cok0EpcdkS
scEYW4XcedNf0jjP4JlH5i5aX/C2QNm7al7x6WGjLSNw6uwTQxReMtMjVPgXShQb
kePbguUF/Bi5nIk=
-----END CERTIFICATE-----