Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          QxeUkKgy3iZk+BFs7kr/K2GMS7P27xuvom+K5Ceuk58=
Subject key identifier:   46:8B:4C:E8:8A:00:C8:AD:19:9D:7D:0F:56:98:17:9F:BA:AD:15:89
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       5897CD6656EFBC77B23D16D7E9F8D49100216DF0
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:28 +0000
ROA not before:           Mon 25 Sep 2023 16:56:28 +0000
ROA not after:            Mon 23 Sep 2024 17:01:28 +0000
asID:                     262352
IP address blocks:        170.246.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:97:cd:66:56:ef:bc:77:b2:3d:16:d7:e9:f8:d4:91:00:21:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:28 2023 GMT
            Not After : Sep 23 17:01:28 2024 GMT
        Subject: CN=468B4CE88A00C8AD199D7D0F5698179FBAAD1589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b1:88:68:91:ef:a2:10:d9:2b:cf:35:ae:d4:
                    19:29:cb:a1:e0:fc:79:17:e1:43:1d:7e:9b:95:a6:
                    12:a9:34:62:3c:df:d4:f2:d3:a5:67:b3:de:b6:46:
                    7d:8a:e0:e4:5e:75:4e:f7:f6:8e:1d:66:cc:e2:9f:
                    e5:eb:cb:4f:b4:4e:d5:c6:6c:03:d8:cb:5e:a1:08:
                    76:96:65:25:7c:fd:b0:ec:b3:01:20:35:5e:c8:95:
                    84:fd:bb:0b:43:2b:cd:5e:b6:b0:23:5d:16:20:1e:
                    af:c5:e2:f9:05:df:50:e0:13:d2:21:f3:46:35:c7:
                    48:47:44:b7:eb:a8:39:a6:2b:10:eb:ff:c8:9b:de:
                    1c:f8:79:a1:45:89:67:33:19:16:86:ca:8b:6a:a0:
                    57:41:f7:0e:87:87:bf:dd:01:d6:1f:bc:c8:f0:14:
                    6c:31:da:53:4e:7f:c2:41:ce:04:d0:02:84:69:d0:
                    a1:5b:50:aa:3b:ab:37:fd:e7:04:ff:d5:b4:3d:31:
                    c0:41:94:df:92:d8:49:42:62:a4:cb:62:fc:0a:55:
                    dc:ac:f3:10:cb:ec:69:10:b3:d3:e2:b7:25:c6:55:
                    eb:3c:ae:c1:c1:67:49:bf:3b:0e:2f:5c:b0:d1:30:
                    c9:3f:5d:c2:8c:ff:69:32:f2:e2:39:19:3f:33:3a:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:4C:E8:8A:00:C8:AD:19:9D:7D:0F:56:98:17:9F:BA:AD:15:89
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:60:c6:d6:6e:3e:21:e3:b0:48:8b:53:54:e2:a9:0d:b7:
         3d:90:d0:ae:c7:ba:ef:8a:6b:3d:c5:10:4b:a2:43:33:7a:de:
         10:32:c3:be:21:36:8f:0b:01:13:df:eb:87:44:a8:11:99:8b:
         e4:a9:eb:c4:82:e0:53:1d:c8:23:06:c3:4f:6c:98:27:f7:f0:
         1a:12:38:bd:6d:1d:a1:ad:49:de:1e:1e:d0:96:4c:79:1d:4a:
         7f:4d:d6:cc:14:3b:2e:95:12:85:1b:77:6b:45:80:a0:41:73:
         a9:42:2b:c8:1c:2f:08:fb:31:10:18:58:79:3b:08:bf:97:44:
         4b:4a:c7:bc:d8:0f:d5:c1:3f:aa:10:34:3e:7c:38:db:0e:cf:
         57:88:74:01:b1:4b:5d:0a:36:e1:d7:8e:d0:96:12:ef:bd:b5:
         26:e6:f9:44:62:18:d7:78:4a:1b:27:a1:9a:f6:47:da:6a:d2:
         9f:c9:9c:92:1b:10:41:da:bf:e6:4f:90:5e:31:a0:4b:06:f5:
         8f:09:74:b3:d3:70:49:2d:18:9a:9c:e8:08:22:b4:59:02:d8:
         a5:02:9b:8f:cc:56:4b:46:b8:7f:ff:4c:ab:c7:56:4a:29:ea:
         51:ce:8c:9e:c6:05:56:f3:5f:e8:a3:6c:55:ea:37:bf:95:d0:
         31:e5:89:84
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWJfNZlbvvHeyPRbX6fjUkQAhbfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU4MkY3OEZBMkY4NDg2QUNBMTFEOEJCM0NCQjlBQTk1
MTkxNjIwMjAeFw0yMzA5MjUxNjU2MjhaFw0yNDA5MjMxNzAxMjhaMDMxMTAvBgNV
BAMTKDQ2OEI0Q0U4OEEwMEM4QUQxOTlEN0QwRjU2OTgxNzlGQkFBRDE1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlsYhoke+iENkrzzWu1Bkpy6Hg
/HkX4UMdfpuVphKpNGI839Ty06Vns962Rn2K4ORedU739o4dZszin+Xry0+0TtXG
bAPYy16hCHaWZSV8/bDsswEgNV7IlYT9uwtDK81etrAjXRYgHq/F4vkF31DgE9Ih
80Y1x0hHRLfrqDmmKxDr/8ib3hz4eaFFiWczGRaGyotqoFdB9w6Hh7/dAdYfvMjw
FGwx2lNOf8JBzgTQAoRp0KFbUKo7qzf95wT/1bQ9McBBlN+S2ElCYqTLYvwKVdys
8xDL7GkQs9PityXGVes8rsHBZ0m/Ow4vXLDRMMk/XcKM/2ky8uI5GT8zOhhtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURotM6IoAyK0ZnX0PVpgXn7qtFYkwHwYDVR0j
BBgwFoAUroL3j6L4SGrKEdi7PLuaqVGRYgIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzQvQUU4MkY3OEZBMkY4NDg2QUNBMTFEOEJCM0NCQjlBQTk1MTkxNjIwMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BRTgyRjc4RkEyRjg0ODZBQ0Ex
MUQ4QkIzQ0JCOUFBOTUxOTE2MjAyLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzQvMzEz
NzMwMmUzMjM0MzYyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MjMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAar2aDANBgkqhkiG9w0BAQsFAAOCAQEAPNJgxtZu
PiHjsEiLU1TiqQ23PZDQrse674prPcUQS6JDM3reEDLDviE2jwsBE9/rh0SoEZmL
5KnrxILgUx3IIwbDT2yYJ/fwGhI4vW0doa1J3h4e0JZMeR1Kf03WzBQ7LpUShRt3
a0WAoEFzqUIryBwvCPsxEBhYeTsIv5dES0rHvNgP1cE/qhA0Pnw42w7PV4h0AbFL
XQo24deO0JYS7721Jub5RGIY13hKGyehmvZH2mrSn8mckhsQQdq/5k+QXjGgSwb1
jwl0s9NwSS0YmpzoCCK0WQLYpQKbj8xWS0a4f/9Mq8dWSinqUc6MnsYFVvNf6KNs
Veo3v5XQMeWJhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org