Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32372e302f32342d3234203d3e20323636343839.roa
File:                     3137302e3234342e32372e302f32342d3234203d3e20323636343839.roa (raw, json)
Hash identifier:          bek8HEsb+Uf9Yf/c6OEX2g7Alp5SbR7RKt+BLUDfhF8=
Subject key identifier:   06:6E:03:41:6E:93:A9:B7:4F:4B:DA:EC:13:D1:9A:C6:B3:E9:47:85
Certificate issuer:       /CN=DCDF3F704AF3B7D3719CD934C3BA88561969C337
Certificate serial:       44EB51B6123AA1CC860E6CC484D2BD272964217D
Authority key identifier: DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32372e302f32342d3234203d3e20323636343839.roa
Signing time:             Fri 24 Mar 2023 12:06:55 +0000
ROA not before:           Fri 24 Mar 2023 12:01:55 +0000
ROA not after:            Fri 22 Mar 2024 12:06:55 +0000
asID:                     266489
IP address blocks:        170.244.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:eb:51:b6:12:3a:a1:cc:86:0e:6c:c4:84:d2:bd:27:29:64:21:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDF3F704AF3B7D3719CD934C3BA88561969C337
        Validity
            Not Before: Mar 24 12:01:55 2023 GMT
            Not After : Mar 22 12:06:55 2024 GMT
        Subject: CN=066E03416E93A9B74F4BDAEC13D19AC6B3E94785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:3c:49:fe:0c:3d:cb:eb:43:c6:d8:72:2d:
                    d0:89:a6:df:4b:31:63:21:c4:32:4b:e4:6c:2e:de:
                    a7:ca:64:78:dd:82:87:04:f1:28:14:7f:94:1a:93:
                    7f:2a:ba:c9:3a:55:75:c3:b1:71:68:54:52:95:9b:
                    2e:55:ff:26:fd:09:73:71:7d:6c:c7:33:9e:1f:3c:
                    1b:c7:4f:2b:30:59:31:25:eb:b4:cc:ec:5d:80:5d:
                    23:63:df:2c:38:76:e0:12:f6:ae:d1:e2:8e:c4:30:
                    f9:66:1f:b5:29:6c:9b:1c:1c:f3:81:7b:23:69:da:
                    5f:cb:b9:0c:f1:da:27:77:4d:21:96:d1:fc:50:c8:
                    a2:d7:87:ae:5b:b6:9c:fa:8e:67:f2:fd:4b:25:be:
                    b9:a9:85:94:ab:12:13:df:6d:72:a6:90:bf:af:a1:
                    68:23:26:81:23:bc:11:22:79:fa:80:a7:c9:63:8d:
                    37:89:ef:01:ae:fe:e2:da:b3:b8:3f:28:88:50:0c:
                    60:34:65:9b:59:09:48:d6:9e:22:6c:d2:2a:84:1c:
                    a9:38:12:44:ae:d2:45:cf:a3:73:d9:1e:e6:ca:62:
                    f8:93:8d:9f:da:d3:2b:d0:cc:46:b6:05:95:bb:31:
                    91:1d:01:a8:f6:69:98:cb:7c:ba:67:48:9f:ed:10:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:03:41:6E:93:A9:B7:4F:4B:DA:EC:13:D1:9A:C6:B3:E9:47:85
            X509v3 Authority Key Identifier:
                keyid:DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32372e302f32342d3234203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:0b:66:24:5f:36:61:f0:ea:42:66:8e:63:97:69:d8:a8:
         4a:52:73:55:bc:ff:60:79:84:2c:ce:28:ec:e4:aa:0a:14:c4:
         b5:1a:d0:57:dd:d6:c1:30:0a:ce:c0:8a:83:e0:91:3d:49:54:
         9f:43:c8:32:a9:b8:75:ac:5e:26:a2:a8:f7:64:a7:20:66:51:
         b7:c1:0b:4c:66:1a:45:8d:ca:13:0e:58:1a:85:f1:5a:bd:d7:
         0d:02:0b:05:00:f5:d4:51:b4:60:81:09:d9:52:a1:b3:02:29:
         f3:9a:52:13:f6:cf:d4:fe:f8:be:5b:f8:b9:d0:f8:f0:d7:f0:
         d1:84:69:26:5a:5b:5f:6b:e0:01:85:a7:e5:d6:3a:74:fe:be:
         7f:94:89:f7:71:fc:59:c6:33:85:cc:96:ea:14:d3:26:06:fb:
         c0:ac:68:1b:d3:14:14:62:68:a8:c4:cc:5d:2a:9b:c7:63:2b:
         23:08:7f:62:35:43:46:50:22:ec:07:9f:02:7c:d3:3d:fa:97:
         09:a3:28:f9:16:30:db:b6:59:ff:ea:6d:2b:92:a8:39:4d:a0:
         51:7f:c3:c5:33:6f:a8:ac:9f:bb:a0:3d:d2:65:9c:81:7c:13:
         13:a9:a7:2e:ab:a4:cc:80:08:71:c2:62:fb:20:a8:91:7f:cb:
         37:cb:4d:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUROtRthI6ocyGDmzEhNK9JylkIX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERjNGNzA0QUYzQjdEMzcxOUNEOTM0QzNCQTg4NTYx
OTY5QzMzNzAeFw0yMzAzMjQxMjAxNTVaFw0yNDAzMjIxMjA2NTVaMDMxMTAvBgNV
BAMTKDA2NkUwMzQxNkU5M0E5Qjc0RjRCREFFQzEzRDE5QUM2QjNFOTQ3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXTxJ/gw9y+tDxthyLdCJpt9L
MWMhxDJL5Gwu3qfKZHjdgocE8SgUf5Qak38qusk6VXXDsXFoVFKVmy5V/yb9CXNx
fWzHM54fPBvHTyswWTEl67TM7F2AXSNj3yw4duAS9q7R4o7EMPlmH7UpbJscHPOB
eyNp2l/LuQzx2id3TSGW0fxQyKLXh65btpz6jmfy/UslvrmphZSrEhPfbXKmkL+v
oWgjJoEjvBEiefqAp8ljjTeJ7wGu/uLas7g/KIhQDGA0ZZtZCUjWniJs0iqEHKk4
EkSu0kXPo3PZHubKYviTjZ/a0yvQzEa2BZW7MZEdAaj2aZjLfLpnSJ/tEGy/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBm4DQW6TqbdPS9rsE9GaxrPpR4UwHwYDVR0j
BBgwFoAU3N8/cErzt9NxnNk0w7qIVhlpwzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNOeW0zQWh3REpLYWlzdHcyekIzc2hHU1dNU0E0UGZtNmo5NG9mUFU0
dEIvMC9EQ0RGM0Y3MDRBRjNCN0QzNzE5Q0Q5MzRDM0JBODg1NjE5NjlDMzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDREYzRjcwNEFGM0I3RDM3
MTlDRDkzNEMzQkE4ODU2MTk2OUMzMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTnltM0Fod0RKS2Fpc3R3MnpCM3NoR1NXTVNBNFBmbTZqOTRvZlBVNHRCLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9BswDQYJKoZIhvcNAQELBQADggEBAK22C2Yk
XzZh8OpCZo5jl2nYqEpSc1W8/2B5hCzOKOzkqgoUxLUa0Ffd1sEwCs7AioPgkT1J
VJ9DyDKpuHWsXiaiqPdkpyBmUbfBC0xmGkWNyhMOWBqF8Vq91w0CCwUA9dRRtGCB
CdlSobMCKfOaUhP2z9T++L5b+LnQ+PDX8NGEaSZaW19r4AGFp+XWOnT+vn+Uifdx
/FnGM4XMluoU0yYG+8CsaBvTFBRiaKjEzF0qm8djKyMIf2I1Q0ZQIuwHnwJ80z36
lwmjKPkWMNu2Wf/qbSuSqDlNoFF/w8Uzb6isn7ugPdJlnIF8ExOppy6rpMyACHHC
YvsgqJF/yzfLTbA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:15 2023 by rpki-client on console-ams.rpki-client.org