Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
File:                     3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (raw, json)
Hash identifier:          LVEDUl0HJSUrHLVRYpDHaXcW15hlCmQFsKqaGhgeQSM=
Subject key identifier:   4D:97:48:C3:89:7E:A8:DE:6A:AF:7F:CD:C3:70:CC:DF:5C:76:F7:3E
Certificate issuer:       /CN=B972E6C020508D0A414EE6D0F0E456F40E486260
Certificate serial:       3EEB05DA18533C11C6E3BC2E62C8D4BE8DAD4E90
Authority key identifier: B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B972E6C020508D0A414EE6D0F0E456F40E486260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
Signing time:             Fri 22 Mar 2024 14:56:28 +0000
ROA not before:           Fri 22 Mar 2024 14:51:28 +0000
ROA not after:            Fri 21 Mar 2025 14:56:28 +0000
asID:                     266304
IP address blocks:        170.79.200.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:eb:05:da:18:53:3c:11:c6:e3:bc:2e:62:c8:d4:be:8d:ad:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B972E6C020508D0A414EE6D0F0E456F40E486260
        Validity
            Not Before: Mar 22 14:51:28 2024 GMT
            Not After : Mar 21 14:56:28 2025 GMT
        Subject: CN=4D9748C3897EA8DE6AAF7FCDC370CCDF5C76F73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:8b:35:a8:e3:56:b5:9c:47:45:93:2c:ab:
                    80:26:7b:c6:76:9e:26:5f:14:f1:a3:12:1b:32:4e:
                    71:89:55:de:37:e4:f4:8d:1c:58:29:6e:25:5a:df:
                    67:bf:9d:ff:52:36:31:3b:e5:1a:84:2b:c1:6c:a9:
                    51:21:3d:11:6d:c4:4c:e8:d2:34:0c:ca:8e:81:ef:
                    08:7a:f8:e2:1d:da:a2:d9:a5:be:49:83:3d:a2:3e:
                    8d:c3:43:45:5b:4d:9a:4a:2e:e0:53:63:87:13:f8:
                    d3:96:e8:26:a5:fc:ff:3e:e5:3d:10:da:73:bd:4f:
                    b4:9e:e3:b9:2b:c3:0c:5d:99:4f:8e:b4:c5:2f:1e:
                    4b:01:e3:ee:e3:d0:85:85:fc:8a:bb:78:f4:0a:91:
                    c2:35:a7:8a:64:57:29:bc:bc:12:1c:c7:25:62:0c:
                    c6:1a:e1:9f:6d:25:79:e4:78:ca:36:7b:04:a8:b6:
                    28:bd:53:45:cf:6c:6b:56:a2:b5:6e:98:dd:66:61:
                    61:a7:60:a1:2d:f2:e4:91:c2:01:01:56:d9:86:67:
                    13:f1:d2:12:be:69:58:df:ed:12:9e:62:10:6d:86:
                    c7:03:74:0b:20:52:78:1b:d4:54:75:53:f3:10:98:
                    95:b9:c4:1d:08:f3:13:53:5a:fb:eb:2f:29:5c:95:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:48:C3:89:7E:A8:DE:6A:AF:7F:CD:C3:70:CC:DF:5C:76:F7:3E
            X509v3 Authority Key Identifier:
                keyid:B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/B972E6C020508D0A414EE6D0F0E456F40E486260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B972E6C020508D0A414EE6D0F0E456F40E486260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:c5:55:f7:10:e1:b3:f2:1b:26:ad:84:bc:eb:d6:c0:42:
         cb:8f:34:1a:30:b2:91:3f:c0:00:92:00:89:57:44:83:8b:df:
         13:a0:67:84:9a:99:02:c5:58:85:0a:76:2f:61:dd:81:57:c0:
         be:94:25:a8:ed:ae:fe:b4:3a:25:44:a2:7d:bb:18:d3:10:eb:
         d1:5f:bb:47:5e:68:d1:de:e1:58:63:45:04:29:37:91:a4:3a:
         e1:44:cb:05:12:6c:a8:0e:99:f7:a3:b6:95:7a:2d:5d:50:22:
         85:bd:6e:17:a7:80:22:4c:3c:39:c7:17:9f:44:80:b2:c4:c2:
         82:58:52:6d:81:dc:55:31:99:0c:83:84:b5:9d:3c:e6:4d:8c:
         b9:5e:5c:e2:15:11:28:3c:48:c1:d5:b0:df:19:4b:77:37:95:
         23:f9:0a:f7:45:1c:0c:a0:72:d1:20:97:88:0f:b4:b7:66:92:
         c2:b1:90:cb:9f:ee:f9:59:2c:cb:4f:41:85:71:11:3e:95:3d:
         57:f7:d4:85:90:90:61:2b:e0:ed:49:92:97:5e:c7:a6:00:3b:
         76:eb:49:c6:b6:c6:ea:08:be:60:11:7f:02:b2:3b:f1:a7:4e:
         7b:63:e7:d7:6d:7d:87:8a:b1:6a:22:e3:25:a2:2e:27:8a:12:
         bb:f9:1b:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPusF2hhTPBHG47wuYsjUvo2tTpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk3MkU2QzAyMDUwOEQwQTQxNEVFNkQwRjBFNDU2RjQw
RTQ4NjI2MDAeFw0yNDAzMjIxNDUxMjhaFw0yNTAzMjExNDU2MjhaMDMxMTAvBgNV
BAMTKDREOTc0OEMzODk3RUE4REU2QUFGN0ZDREMzNzBDQ0RGNUM3NkY3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYos1qONWtZxHRZMsq4Ame8Z2
niZfFPGjEhsyTnGJVd435PSNHFgpbiVa32e/nf9SNjE75RqEK8FsqVEhPRFtxEzo
0jQMyo6B7wh6+OId2qLZpb5Jgz2iPo3DQ0VbTZpKLuBTY4cT+NOW6Cal/P8+5T0Q
2nO9T7Se47krwwxdmU+OtMUvHksB4+7j0IWF/Iq7ePQKkcI1p4pkVym8vBIcxyVi
DMYa4Z9tJXnkeMo2ewSotii9U0XPbGtWorVumN1mYWGnYKEt8uSRwgEBVtmGZxPx
0hK+aVjf7RKeYhBthscDdAsgUngb1FR1U/MQmJW5xB0I8xNTWvvrLylclVGbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTZdIw4l+qN5qr3/Nw3DM31x29z4wHwYDVR0j
BBgwFoAUuXLmwCBQjQpBTubQ8ORW9A5IYmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC9COTcyRTZDMDIwNTA4RDBBNDE0RUU2RDBGMEU0NTZGNDBFNDg2MjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5NzJFNkMwMjA1MDhEMEE0
MTRFRTZEMEYwRTQ1NkY0MEU0ODYyNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAv
MzEzNzMwMmUzNzM5MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT8gwDQYJKoZIhvcNAQELBQADggEBAGNuxVX3
EOGz8hsmrYS869bAQsuPNBowspE/wACSAIlXRIOL3xOgZ4SamQLFWIUKdi9h3YFX
wL6UJajtrv60OiVEon27GNMQ69Ffu0deaNHe4VhjRQQpN5GkOuFEywUSbKgOmfej
tpV6LV1QIoW9bhengCJMPDnHF59EgLLEwoJYUm2B3FUxmQyDhLWdPOZNjLleXOIV
ESg8SMHVsN8ZS3c3lSP5CvdFHAygctEgl4gPtLdmksKxkMuf7vlZLMtPQYVxET6V
PVf31IWQkGEr4O1Jkpdex6YAO3brSca2xuoIvmARfwKyO/GnTntj59dtfYeKsWoi
4yWiLieKErv5G2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org