Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
File:                     3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (raw, json)
Hash identifier:          5VdBcEFLKI5fXuWb+JuOUuLYAmp4sxsdXUEY8MUgAE0=
Subject key identifier:   00:79:BD:E3:D2:26:45:E3:5C:70:B0:94:F4:1F:C2:0B:7F:05:80:0B
Certificate issuer:       /CN=E5A8CF793535D99A58F9F8C736468C1E96613685
Certificate serial:       66366DCC13E87568F39B8A62B22E6956EC3C833F
Authority key identifier: E5:A8:CF:79:35:35:D9:9A:58:F9:F8:C7:36:46:8C:1E:96:61:36:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A8CF793535D99A58F9F8C736468C1E96613685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
Signing time:             Wed 05 Jul 2023 19:22:55 +0000
ROA not before:           Wed 05 Jul 2023 19:17:55 +0000
ROA not after:            Wed 03 Jul 2024 19:22:55 +0000
asID:                     61812
IP address blocks:        170.83.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:6d:cc:13:e8:75:68:f3:9b:8a:62:b2:2e:69:56:ec:3c:83:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A8CF793535D99A58F9F8C736468C1E96613685
        Validity
            Not Before: Jul  5 19:17:55 2023 GMT
            Not After : Jul  3 19:22:55 2024 GMT
        Subject: CN=0079BDE3D22645E35C70B094F41FC20B7F05800B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d3:b1:91:88:3f:22:29:86:99:62:d1:5e:c0:
                    d5:b8:65:39:66:0b:d3:fb:9a:ab:32:95:4b:e1:f3:
                    9a:07:dd:6a:e6:f2:71:e2:bf:47:03:78:74:3c:61:
                    ed:84:80:31:7a:db:74:74:09:cc:80:b6:40:e7:10:
                    d6:c2:c9:9c:f7:19:e8:cc:bd:41:22:64:ca:9f:cb:
                    4b:5f:ed:e5:d5:9c:fb:98:20:00:86:da:28:ea:28:
                    10:e2:cc:23:6f:ca:bf:bb:eb:4e:cc:d0:8a:da:c1:
                    b8:73:1e:cf:c2:d2:bf:e3:15:e5:15:33:22:5c:20:
                    c0:91:64:e8:57:d6:00:27:e9:8a:2b:6c:ec:98:9a:
                    e9:4d:f3:86:67:b0:2f:ff:6f:b6:5d:54:2e:3b:27:
                    4d:51:7d:74:c2:21:57:7c:b0:c0:9e:4b:65:dc:c7:
                    16:b7:64:33:16:f5:8c:59:84:69:67:4e:2d:d6:00:
                    7c:7d:81:15:cc:87:d8:29:85:f9:c6:22:34:dc:d6:
                    d3:d7:0c:38:32:e1:35:fe:b9:b2:31:0b:a2:70:93:
                    19:2a:24:7b:a0:e6:82:b8:db:3f:7b:a5:b5:6a:1b:
                    45:35:d3:55:47:18:c4:0b:f8:76:87:50:7c:73:6f:
                    5f:16:ba:72:88:92:6f:d4:fb:b7:76:98:9e:cf:a2:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:79:BD:E3:D2:26:45:E3:5C:70:B0:94:F4:1F:C2:0B:7F:05:80:0B
            X509v3 Authority Key Identifier:
                keyid:E5:A8:CF:79:35:35:D9:9A:58:F9:F8:C7:36:46:8C:1E:96:61:36:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/E5A8CF793535D99A58F9F8C736468C1E96613685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A8CF793535D99A58F9F8C736468C1E96613685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:41:0b:e8:37:e9:90:5f:0a:8a:e4:7e:b4:64:18:a3:02:
         82:cc:5f:5e:51:d4:a6:0b:a0:df:2a:5a:9a:ea:02:d1:62:99:
         5c:e7:fa:4b:3a:6c:0f:34:39:8f:4a:ee:c1:0a:3e:f4:a7:b8:
         f7:71:85:48:0e:e4:90:27:41:b7:9a:79:25:16:82:45:54:81:
         e1:59:43:17:13:98:95:87:e9:f6:b9:c3:8d:73:ef:28:4f:20:
         08:bd:9d:f4:8e:5f:a8:bf:51:f0:e1:40:51:65:43:01:e2:68:
         3e:30:ac:6f:ec:a1:95:68:68:e2:54:2f:47:92:4a:b1:4c:2a:
         56:2b:e5:e9:15:79:14:8a:f8:e3:6a:13:31:e5:bd:1d:d9:c1:
         f3:d0:58:78:f8:3b:50:5b:10:36:01:ea:cf:32:a0:3b:87:84:
         d3:d2:fd:8f:56:4a:8c:0f:c5:f8:f2:f7:5c:e5:2a:28:9a:9e:
         95:b2:d6:33:6a:8f:2b:47:8d:42:0b:95:23:cb:1a:44:bf:ff:
         f6:96:b4:07:ea:60:52:f7:9f:bf:80:e2:a9:e3:00:d1:8e:4e:
         1d:6c:06:a6:60:a2:9e:a0:b0:85:95:10:6d:a9:2f:31:bd:00:
         77:bb:e5:7d:fc:a0:50:55:fb:d7:c2:92:07:78:5d:2b:7d:7e:
         dc:87:9f:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZjZtzBPodWjzm4pisi5pVuw8gz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOENGNzkzNTM1RDk5QTU4RjlGOEM3MzY0NjhDMUU5
NjYxMzY4NTAeFw0yMzA3MDUxOTE3NTVaFw0yNDA3MDMxOTIyNTVaMDMxMTAvBgNV
BAMTKDAwNzlCREUzRDIyNjQ1RTM1QzcwQjA5NEY0MUZDMjBCN0YwNTgwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD007GRiD8iKYaZYtFewNW4ZTlm
C9P7mqsylUvh85oH3Wrm8nHiv0cDeHQ8Ye2EgDF623R0CcyAtkDnENbCyZz3GejM
vUEiZMqfy0tf7eXVnPuYIACG2ijqKBDizCNvyr+7607M0IrawbhzHs/C0r/jFeUV
MyJcIMCRZOhX1gAn6YorbOyYmulN84ZnsC//b7ZdVC47J01RfXTCIVd8sMCeS2Xc
xxa3ZDMW9YxZhGlnTi3WAHx9gRXMh9gphfnGIjTc1tPXDDgy4TX+ubIxC6Jwkxkq
JHug5oK42z97pbVqG0U101VHGMQL+HaHUHxzb18WunKIkm/U+7d2mJ7Poi4HAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAHm949ImReNccLCU9B/CC38FgAswHwYDVR0j
BBgwFoAU5ajPeTU12ZpY+fjHNkaMHpZhNoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVlu
RUUvMC9FNUE4Q0Y3OTM1MzVEOTlBNThGOUY4QzczNjQ2OEMxRTk2NjEzNjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1QThDRjc5MzUzNUQ5OUE1
OEY5RjhDNzM2NDY4QzFFOTY2MTM2ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjUHRjRFFHV0dlbTFyZ3lxb21NN2sxS2lndW12WFB6amYzR3FCdWVZbkVFLzAv
MzEzNzMwMmUzODMzMmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzgzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlOAMA0GCSqGSIb3DQEBCwUAA4IBAQA8dUEL6Dfp
kF8KiuR+tGQYowKCzF9eUdSmC6DfKlqa6gLRYplc5/pLOmwPNDmPSu7BCj70p7j3
cYVIDuSQJ0G3mnklFoJFVIHhWUMXE5iVh+n2ucONc+8oTyAIvZ30jl+ov1Hw4UBR
ZUMB4mg+MKxv7KGVaGjiVC9HkkqxTCpWK+XpFXkUivjjahMx5b0d2cHz0Fh4+DtQ
WxA2AerPMqA7h4TT0v2PVkqMD8X48vdc5Soomp6VstYzao8rR41CC5UjyxpEv//2
lrQH6mBS95+/gOKp4wDRjk4dbAamYKKeoLCFlRBtqS8xvQB3u+V9/KBQVfvXwpIH
eF0rfX7ch5/4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org