Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa
File:                     3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa (raw, json)
Hash identifier:          qMF2msTFWV5wdvWPZl5dT+W2nb2AX2sAiPJgZ2V+uEI=
Subject key identifier:   DA:82:B6:E7:AB:F3:7E:5A:EF:46:F2:A1:92:C8:5B:3A:EE:C3:A0:6C
Certificate issuer:       /CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
Certificate serial:       4F5B1485D733BCBE15FE16A1ED2B6AB4EFB544CA
Authority key identifier: 67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa
Signing time:             Tue 13 Jun 2023 14:20:01 +0000
ROA not before:           Tue 13 Jun 2023 14:15:01 +0000
ROA not after:            Tue 11 Jun 2024 14:20:01 +0000
asID:                     265085
IP address blocks:        170.233.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5b:14:85:d7:33:bc:be:15:fe:16:a1:ed:2b:6a:b4:ef:b5:44:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Validity
            Not Before: Jun 13 14:15:01 2023 GMT
            Not After : Jun 11 14:20:01 2024 GMT
        Subject: CN=DA82B6E7ABF37E5AEF46F2A192C85B3AEEC3A06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:7a:b7:53:b1:2e:5f:50:34:58:bc:e1:f1:
                    77:f0:55:90:ff:62:42:a8:93:48:77:ec:c1:22:10:
                    f0:8b:27:97:a1:aa:6b:43:c2:19:df:3d:2c:49:2b:
                    ac:d8:b2:b1:95:6d:cf:de:22:2f:60:b3:91:94:6b:
                    3d:20:2f:3e:3f:08:38:eb:79:e6:bf:f3:3c:58:62:
                    20:66:38:a7:6c:50:f5:d3:15:98:52:c4:4e:50:32:
                    29:47:dd:7d:1e:41:48:6b:8c:8a:7c:0d:24:81:f8:
                    bb:55:10:e1:36:14:0c:d9:7e:5d:ce:4d:0d:6a:93:
                    3c:da:c8:a0:7f:bb:11:7f:b3:e8:78:24:a2:a1:ad:
                    46:2f:c3:96:ce:e1:c7:f5:3d:83:26:5e:e1:45:a7:
                    88:ae:de:16:d4:0c:95:1d:ff:62:9c:c6:fd:f0:c5:
                    89:40:8c:24:e7:98:6e:de:ae:78:38:98:ea:af:61:
                    a6:b7:1f:c3:ce:47:77:8f:f3:97:bc:12:93:53:8f:
                    5d:f4:a2:62:d7:9d:c7:47:86:98:7e:86:55:7e:5d:
                    3c:ae:9a:6c:bd:11:60:5d:a1:4d:68:e8:5b:1b:7f:
                    6e:6a:92:15:16:92:84:12:34:3b:62:51:7c:f0:b9:
                    07:61:ac:7c:54:8a:cd:ec:58:da:0d:2f:c1:e6:08:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:82:B6:E7:AB:F3:7E:5A:EF:46:F2:A1:92:C8:5B:3A:EE:C3:A0:6C
            X509v3 Authority Key Identifier:
                keyid:67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:56:74:2a:93:55:81:0c:a7:f9:ed:9a:86:74:72:15:9b:
         d7:0b:32:e8:7d:78:4a:10:b0:8c:7f:96:49:54:1e:ae:4a:e4:
         ff:00:9f:97:21:3c:93:07:e3:3c:c0:19:77:54:b2:49:cd:05:
         2d:5a:51:7f:b5:b6:65:c6:dc:c8:de:f5:11:35:29:b5:ee:d9:
         aa:b3:3a:ab:20:fd:dd:fa:e5:b9:df:33:fe:4d:cc:3b:bb:2a:
         b3:59:e9:f6:4e:99:e4:d5:f5:6e:22:3d:3d:dd:ef:ab:90:0d:
         aa:65:79:bc:d1:56:7a:aa:0f:08:b5:a3:e3:6d:d5:cc:77:a4:
         27:57:36:00:20:4a:f6:a0:6e:6f:d5:a7:d5:bf:bb:ac:44:37:
         38:e9:74:15:a8:5a:75:f8:88:d2:eb:0d:47:d1:80:9a:2c:af:
         89:b6:3b:3e:eb:58:62:de:4a:09:f5:93:66:1e:3a:82:b3:e8:
         5d:29:8a:75:8a:03:21:b8:cc:95:3b:9e:7b:a3:85:01:46:ae:
         d9:af:16:8d:39:16:a2:de:ff:1b:20:2f:f0:85:37:db:76:b6:
         18:9a:f1:8d:05:24:47:b4:b3:d6:d8:11:0a:6e:10:c4:3f:84:
         54:e6:02:f6:26:ac:02:94:77:ec:35:b5:6d:0e:6b:33:02:27:
         53:e1:e3:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT1sUhdczvL4V/hah7StqtO+1RMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc1NUQzNTIyRDlBQUEwNUQ4RTYxOUJGOEVBNkRCRTM0
RDEwOEMyNDAeFw0yMzA2MTMxNDE1MDFaFw0yNDA2MTExNDIwMDFaMDMxMTAvBgNV
BAMTKERBODJCNkU3QUJGMzdFNUFFRjQ2RjJBMTkyQzg1QjNBRUVDM0EwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkI3q3U7EuX1A0WLzh8XfwVZD/
YkKok0h37MEiEPCLJ5ehqmtDwhnfPSxJK6zYsrGVbc/eIi9gs5GUaz0gLz4/CDjr
eea/8zxYYiBmOKdsUPXTFZhSxE5QMilH3X0eQUhrjIp8DSSB+LtVEOE2FAzZfl3O
TQ1qkzzayKB/uxF/s+h4JKKhrUYvw5bO4cf1PYMmXuFFp4iu3hbUDJUd/2Kcxv3w
xYlAjCTnmG7erng4mOqvYaa3H8POR3eP85e8EpNTj130omLXncdHhph+hlV+XTyu
mmy9EWBdoU1o6Fsbf25qkhUWkoQSNDtiUXzwuQdhrHxUis3sWNoNL8HmCKntAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2oK256vzflrvRvKhkshbOu7DoGwwHwYDVR0j
BBgwFoAUZ1XTUi2aqgXY5hm/jqbb400QjCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr
QlIvMC82NzU1RDM1MjJEOUFBQTA1RDhFNjE5QkY4RUE2REJFMzREMTA4QzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NTVEMzUyMkQ5QUFBMDVE
OEU2MTlCRjhFQTZEQkUzNEQxMDhDMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKV3NYR3FBcFoyZEE0RlhNUU1NVU5TZENadjlKS21HZkNKY0hYdGV6a0JSLzAv
MzEzNzMwMmUzMjMzMzMyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq6RkwDQYJKoZIhvcNAQELBQADggEBAFzBVnQq
k1WBDKf57ZqGdHIVm9cLMuh9eEoQsIx/lklUHq5K5P8An5chPJMH4zzAGXdUsknN
BS1aUX+1tmXG3Mje9RE1KbXu2aqzOqsg/d365bnfM/5NzDu7KrNZ6fZOmeTV9W4i
PT3d76uQDaplebzRVnqqDwi1o+Nt1cx3pCdXNgAgSvagbm/Vp9W/u6xENzjpdBWo
WnX4iNLrDUfRgJosr4m2Oz7rWGLeSgn1k2YeOoKz6F0pinWKAyG4zJU7nnujhQFG
rtmvFo05FqLe/xsgL/CFN9t2thia8Y0FJEe0s9bYEQpuEMQ/hFTmAvYmrAKUd+w1
tW0OazMCJ1Ph4ww=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org