Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3332203d3e20323634353530.roa
File:                     3137302e302e33352e302f32342d3332203d3e20323634353530.roa (raw, json)
Hash identifier:          y/0Gorm7cf8MY8V56Afs4QOXxeFUeyUUAAOF0HjITg8=
Subject key identifier:   DA:F0:83:94:86:21:5A:4A:FA:04:8D:87:E9:C2:0D:9D:31:4C:91:7F
Certificate issuer:       /CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
Certificate serial:       0BA7A11027048F04A17446B67693A308DAF8301F
Authority key identifier: E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3332203d3e20323634353530.roa
Signing time:             Sat 26 Aug 2023 20:57:48 +0000
ROA not before:           Sat 26 Aug 2023 20:52:48 +0000
ROA not after:            Sat 24 Aug 2024 20:57:48 +0000
asID:                     264550
IP address blocks:        170.0.35.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:a1:10:27:04:8f:04:a1:74:46:b6:76:93:a3:08:da:f8:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
        Validity
            Not Before: Aug 26 20:52:48 2023 GMT
            Not After : Aug 24 20:57:48 2024 GMT
        Subject: CN=DAF0839486215A4AFA048D87E9C20D9D314C917F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:e1:2e:43:bb:e7:db:da:d6:6b:04:21:b6:
                    55:29:68:4b:e5:91:47:c2:39:1e:eb:ed:05:86:1d:
                    41:5f:24:59:f8:a9:c9:31:6c:e5:ee:6b:14:61:20:
                    34:0d:17:8c:9c:e9:d3:42:40:70:5e:6a:48:36:d6:
                    d9:02:87:ac:c0:02:73:7f:14:55:1a:6f:8e:bb:2b:
                    fe:f0:90:e4:3c:28:f7:26:a9:d2:29:01:47:f3:5d:
                    ec:ae:08:5c:00:4f:36:c6:e9:fb:62:3b:54:58:a8:
                    63:fe:e5:84:8e:83:3e:53:4c:94:3c:7d:ea:64:49:
                    25:ce:51:10:86:50:5f:22:09:59:6d:da:a7:f2:b3:
                    82:2c:d3:38:b8:f1:79:95:21:4e:88:ef:53:40:5c:
                    f9:b9:5b:b6:a3:8d:65:31:59:41:95:2c:78:4e:9d:
                    f7:6c:57:7d:a4:6d:f5:78:b7:1a:eb:35:5f:e7:02:
                    f4:6a:09:5e:03:5b:94:48:08:71:b0:76:14:c3:94:
                    42:c9:66:2a:32:0b:e5:cc:84:08:6e:36:9f:23:cb:
                    ac:1d:71:a3:0f:51:54:c3:82:b6:72:33:d6:27:74:
                    0e:db:d4:1f:9e:ec:e1:a5:7b:ea:4a:76:41:f1:dc:
                    b3:45:da:4b:b4:4e:2b:c6:32:cb:ff:7d:42:cf:a2:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:83:94:86:21:5A:4A:FA:04:8D:87:E9:C2:0D:9D:31:4C:91:7F
            X509v3 Authority Key Identifier:
                keyid:E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3332203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:61:e4:4e:49:39:b5:e1:de:31:d1:de:f8:f8:05:e2:a6:
         60:e4:12:c0:c8:fd:76:13:08:8d:22:85:9e:90:17:bc:4b:c1:
         df:dd:8a:96:cf:e3:c9:bb:0b:1a:2a:12:43:71:81:09:f4:30:
         5a:45:c7:ae:d8:71:e0:ce:c8:84:d9:52:5f:b7:47:d3:e3:46:
         4d:42:80:16:eb:7c:1c:66:a1:f4:3e:1b:94:28:a1:21:71:c0:
         0f:60:2e:50:3f:f5:ec:79:4f:a8:0b:60:af:ab:b0:6e:d8:79:
         bd:08:33:88:29:f8:b0:08:98:b4:1c:74:0c:a0:80:ed:85:4e:
         ea:99:45:f8:ff:49:98:a8:83:da:34:fa:5b:6a:c8:2a:d5:00:
         18:fd:06:c2:ff:9b:bf:8d:69:9f:47:0d:29:b7:2c:09:e6:27:
         75:04:d0:c0:df:df:d2:40:ee:98:ee:67:fb:d9:5c:1c:f1:9c:
         4a:c5:da:52:fe:48:a5:35:f3:a8:48:c3:90:50:3e:cd:aa:07:
         f5:ff:6f:5a:02:24:d6:ae:70:cb:a6:08:25:7b:d7:68:8f:c2:
         9f:1e:23:6f:d3:bb:fa:b2:64:17:f5:86:e0:72:0d:8e:d0:b2:
         5b:05:1e:a6:5d:9f:f7:23:6d:69:f3:da:31:97:f5:44:87:3f:
         86:7b:0c:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC6ehECcEjwShdEa2dpOjCNr4MB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZCOUE3MDFCRTNGNkEyMzUzRTZDNTM2QjgxRUZGMjUy
MEFCNjFBNzAeFw0yMzA4MjYyMDUyNDhaFw0yNDA4MjQyMDU3NDhaMDMxMTAvBgNV
BAMTKERBRjA4Mzk0ODYyMTVBNEFGQTA0OEQ4N0U5QzIwRDlEMzE0QzkxN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2suEuQ7vn29rWawQhtlUpaEvl
kUfCOR7r7QWGHUFfJFn4qckxbOXuaxRhIDQNF4yc6dNCQHBeakg21tkCh6zAAnN/
FFUab467K/7wkOQ8KPcmqdIpAUfzXeyuCFwATzbG6ftiO1RYqGP+5YSOgz5TTJQ8
fepkSSXOURCGUF8iCVlt2qfys4Is0zi48XmVIU6I71NAXPm5W7ajjWUxWUGVLHhO
nfdsV32kbfV4txrrNV/nAvRqCV4DW5RICHGwdhTDlELJZioyC+XMhAhuNp8jy6wd
caMPUVTDgrZyM9YndA7b1B+e7OGle+pKdkHx3LNF2ku0TivGMsv/fULPoprXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU2vCDlIYhWkr6BI2H6cINnTFMkX8wHwYDVR0j
BBgwFoAU5rmnAb4/aiNT5sU2uB7/JSCrYacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC9FNkI5QTcwMUJFM0Y2QTIzNTNFNkM1MzZCODFFRkYyNTIwQUI2MUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2QjlBNzAxQkUzRjZBMjM1
M0U2QzUzNkI4MUVGRjI1MjBBQjYxQTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzEzNzMwMmUzMDJlMzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMyMzYzNDM1
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKoAIzANBgkqhkiG9w0BAQsFAAOCAQEAKB9h5E5JObXh
3jHR3vj4BeKmYOQSwMj9dhMIjSKFnpAXvEvB392Kls/jybsLGioSQ3GBCfQwWkXH
rthx4M7IhNlSX7dH0+NGTUKAFut8HGah9D4blCihIXHAD2AuUD/17HlPqAtgr6uw
bth5vQgziCn4sAiYtBx0DKCA7YVO6plF+P9JmKiD2jT6W2rIKtUAGP0Gwv+bv41p
n0cNKbcsCeYndQTQwN/f0kDumO5n+9lcHPGcSsXaUv5IpTXzqEjDkFA+zaoH9f9v
WgIk1q5wy6YIJXvXaI/Cnx4jb9O7+rJkF/WG4HINjtCyWwUepl2f9yNtafPaMZf1
RIc/hnsMlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org