Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3137302e37392e37322e302f32322d3234203d3e20323632343539.roa
File:                     3137302e37392e37322e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          2eUusqbiGqEaval2wth4m/3w3O72aZ9EZzh02BxZqkY=
Subject key identifier:   23:AC:78:5F:90:9E:05:31:92:24:83:ED:2A:99:F5:73:66:86:75:28
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       514188B4977DED98F98B8D94B8B40D369C1A30F5
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3137302e37392e37322e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:22 +0000
ROA not before:           Fri 23 Jun 2023 12:55:22 +0000
ROA not after:            Fri 21 Jun 2024 13:00:22 +0000
asID:                     262459
IP address blocks:        170.79.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:88:b4:97:7d:ed:98:f9:8b:8d:94:b8:b4:0d:36:9c:1a:30:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:22 2023 GMT
            Not After : Jun 21 13:00:22 2024 GMT
        Subject: CN=23AC785F909E0531922483ED2A99F57366867528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:74:78:c6:58:d4:60:6d:71:d7:ef:94:b2:
                    e6:95:ea:78:4f:c3:c1:fe:42:15:60:05:da:f1:a8:
                    c5:c2:82:a8:4c:45:92:d9:75:b2:fd:ba:4e:b1:61:
                    bb:53:48:e1:98:8f:d3:a5:1c:fe:33:e9:10:93:cd:
                    33:97:98:2f:33:34:a7:3b:7e:7f:bd:85:25:4b:e4:
                    b3:d5:7d:60:cc:d8:89:53:ab:4d:b2:a5:c8:08:36:
                    e0:4c:84:fa:37:4f:33:a6:54:16:2b:09:b9:d8:4d:
                    da:01:1c:09:3f:c8:e0:7d:25:e4:da:be:61:83:20:
                    61:e1:7e:f9:e3:3c:c8:44:1f:df:11:6a:a8:cf:a8:
                    85:5b:25:59:8d:ed:fa:3f:9a:48:68:83:ae:73:cd:
                    a6:1e:77:db:74:68:68:f0:c8:c7:cc:28:bc:7f:d2:
                    bc:de:28:25:79:a9:4a:2d:63:4b:19:17:68:bc:86:
                    97:90:22:b3:f0:45:16:df:a8:45:c4:e9:8a:21:c7:
                    a7:fc:3e:91:0e:1e:97:25:eb:cd:73:ad:98:92:40:
                    ce:1b:bc:e3:99:7b:34:f8:6f:b7:a4:c1:24:3c:f9:
                    6c:6a:df:7c:16:e2:d9:10:b0:db:f0:a2:21:d0:10:
                    93:f0:0f:d4:7b:5f:32:74:b3:31:a0:35:52:be:fc:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:78:5F:90:9E:05:31:92:24:83:ED:2A:99:F5:73:66:86:75:28
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3137302e37392e37322e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:e5:d7:a7:a9:82:db:1a:a7:a7:27:65:1c:c9:fa:fb:ca:
         4c:6a:1e:4c:c9:34:aa:9d:b8:f9:58:8d:e0:bc:31:55:ef:3b:
         89:63:69:cf:92:84:05:f0:7a:91:82:7f:df:31:8b:c0:cc:3a:
         bb:55:c2:66:67:a1:d7:5f:f3:3c:d7:ce:4d:4e:1a:98:dc:16:
         9a:26:be:25:fd:72:09:fa:33:36:0e:dc:ee:e4:eb:70:12:b3:
         5c:94:d3:e7:b0:fd:48:33:9a:d3:d2:94:08:da:c8:a9:b3:44:
         8b:aa:df:21:20:a5:f2:38:47:87:fc:b5:51:49:18:85:79:60:
         c3:a5:cc:0b:09:fc:ba:42:66:2c:06:de:10:2b:49:4c:e9:2c:
         94:4e:4c:91:17:a3:2a:dc:a5:ca:6b:40:c7:fa:9e:80:44:1c:
         f5:ee:a6:77:b2:5a:73:45:4a:03:66:9f:24:c5:e0:4f:d7:c4:
         6c:0b:0c:65:09:1d:3c:6c:81:6d:b7:73:45:33:19:ce:fd:d9:
         d9:ea:1d:12:46:b6:30:48:44:11:1d:d6:7d:6e:30:4a:d1:0e:
         91:ad:ba:cc:1e:0e:3e:02:9c:9b:b3:bf:6d:41:dc:20:46:6c:
         5d:ba:c5:7d:ff:5e:15:29:dd:8f:a9:ec:eb:49:1e:e9:07:fa:
         7f:1c:e4:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUUGItJd97Zj5i42UuLQNNpwaMPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1ODYzMzkyRTk5QTI4Mjg0M0FDNjM5N0E5RTAyNEU5
MTczMTY0MjAeFw0yMzA2MjMxMjU1MjJaFw0yNDA2MjExMzAwMjJaMDMxMTAvBgNV
BAMTKDIzQUM3ODVGOTA5RTA1MzE5MjI0ODNFRDJBOTlGNTczNjY4Njc1MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DHR4xljUYG1x1++UsuaV6nhP
w8H+QhVgBdrxqMXCgqhMRZLZdbL9uk6xYbtTSOGYj9OlHP4z6RCTzTOXmC8zNKc7
fn+9hSVL5LPVfWDM2IlTq02ypcgINuBMhPo3TzOmVBYrCbnYTdoBHAk/yOB9JeTa
vmGDIGHhfvnjPMhEH98RaqjPqIVbJVmN7fo/mkhog65zzaYed9t0aGjwyMfMKLx/
0rzeKCV5qUotY0sZF2i8hpeQIrPwRRbfqEXE6Yohx6f8PpEOHpcl681zrZiSQM4b
vOOZezT4b7ekwSQ8+Wxq33wW4tkQsNvwoiHQEJPwD9R7XzJ0szGgNVK+/CsDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI6x4X5CeBTGSJIPtKpn1c2aGdSgwHwYDVR0j
BBgwFoAUHFhjOS6ZooKEOsY5ep4CTpFzFkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMC8xQzU4NjMzOTJFOTlBMjgyODQzQUM2Mzk3QTlFMDI0RTkxNzMxNjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNTg2MzM5MkU5OUEyODI4
NDNBQzYzOTdBOUUwMjRFOTE3MzE2NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzAv
MzEzNzMwMmUzNzM5MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk9IMA0GCSqGSIb3DQEBCwUAA4IBAQAaHuXXp6mC
2xqnpydlHMn6+8pMah5MyTSqnbj5WI3gvDFV7zuJY2nPkoQF8HqRgn/fMYvAzDq7
VcJmZ6HXX/M8185NThqY3BaaJr4l/XIJ+jM2Dtzu5OtwErNclNPnsP1IM5rT0pQI
2sips0SLqt8hIKXyOEeH/LVRSRiFeWDDpcwLCfy6QmYsBt4QK0lM6SyUTkyRF6Mq
3KXKa0DH+p6ARBz17qZ3slpzRUoDZp8kxeBP18RsCwxlCR08bIFtt3NFMxnO/dnZ
6h0SRrYwSEQRHdZ9bjBK0Q6RrbrMHg4+Apybs79tQdwgRmxdusV9/14VKd2Pqezr
SR7pB/p/HOQk
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org