Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33362e302f32342d3234203d3e20323636343930.roa
File:                     3137302e3234342e33362e302f32342d3234203d3e20323636343930.roa (raw, json)
Hash identifier:          cRztot3GKMmbzjjE4DrMYHRW/nbUJC9W3Zw1IT+Z/YE=
Subject key identifier:   0D:99:4E:C0:96:D5:3C:03:F4:EF:F6:F7:83:B8:F1:56:9C:E6:F6:CF
Certificate issuer:       /CN=C51069BD4C33DBE36053EA46C8B354BF95A2101D
Certificate serial:       3525C0C92F48D3483181E8F006B21B1836081A5E
Authority key identifier: C5:10:69:BD:4C:33:DB:E3:60:53:EA:46:C8:B3:54:BF:95:A2:10:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33362e302f32342d3234203d3e20323636343930.roa
Signing time:             Tue 22 Mar 2022 00:01:00 +0000
ROA not before:           Mon 21 Mar 2022 23:56:00 +0000
ROA not after:            Tue 21 Mar 2023 00:01:00 +0000
asID:                     266490
IP address blocks:        170.244.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:25:c0:c9:2f:48:d3:48:31:81:e8:f0:06:b2:1b:18:36:08:1a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C51069BD4C33DBE36053EA46C8B354BF95A2101D
        Validity
            Not Before: Mar 21 23:56:00 2022 GMT
            Not After : Mar 21 00:01:00 2023 GMT
        Subject: CN=0D994EC096D53C03F4EFF6F783B8F1569CE6F6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:5f:63:92:88:51:41:12:47:bb:cc:56:43:
                    11:8e:71:3c:7f:c6:a6:82:dd:6f:77:6b:28:a9:b3:
                    58:43:8d:34:5f:02:73:e9:8f:61:e6:7a:55:95:92:
                    7e:06:b7:95:91:ca:1f:f9:07:43:d0:30:4f:9f:8f:
                    27:d6:be:65:34:ac:0f:a5:ab:fb:36:bb:a8:3f:7b:
                    cd:79:7b:42:70:22:94:e0:ea:a4:53:04:37:0a:60:
                    3b:d6:ad:89:4c:3e:c6:89:00:ec:87:68:5c:b0:5d:
                    33:e0:7b:06:db:d5:e7:0c:c8:e9:86:3c:67:0a:5d:
                    f4:5c:e7:0a:63:72:53:35:c4:33:0f:69:55:d9:5d:
                    9b:83:94:e9:41:13:c3:1f:d2:b9:0a:b6:8a:09:6c:
                    5e:55:bf:b0:ee:da:17:8d:50:5d:9f:1e:e9:1e:eb:
                    0e:4c:83:59:86:70:fb:ae:b2:e9:a5:72:9f:b8:d1:
                    31:a5:7c:93:f8:a5:d4:0e:f9:f8:d2:9a:e7:6d:a2:
                    5f:2c:bd:f7:5e:71:2e:c9:3b:20:d1:d5:43:73:f5:
                    2b:74:32:8a:68:03:e1:3c:64:f8:c9:52:98:25:88:
                    1f:36:99:f3:cd:7e:ce:a6:71:66:08:99:2b:02:7c:
                    98:e3:d1:83:48:f8:f7:e4:bf:79:66:d7:19:8d:39:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:4E:C0:96:D5:3C:03:F4:EF:F6:F7:83:B8:F1:56:9C:E6:F6:CF
            X509v3 Authority Key Identifier:
                keyid:C5:10:69:BD:4C:33:DB:E3:60:53:EA:46:C8:B3:54:BF:95:A2:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C51069BD4C33DBE36053EA46C8B354BF95A2101D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iRdQaEvaPgz4GhTWhgrvDEAp7pfLWToBHGDRzFyRBMx/0/3137302e3234342e33362e302f32342d3234203d3e20323636343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:6e:7f:60:0a:86:bb:34:14:4b:bb:72:ac:26:5b:64:42:1a:
         31:87:1d:6e:27:00:45:a4:f2:38:6d:61:a2:a1:f5:4b:d1:59:
         2b:af:99:b7:c3:28:99:66:61:82:76:89:2a:40:88:4d:07:7b:
         b6:03:af:73:88:5d:46:d0:84:7a:37:fd:03:9c:90:ee:16:c6:
         a9:72:ac:75:08:b7:a1:6a:f3:53:ba:bd:86:04:f4:06:41:36:
         ce:9f:d7:7b:ee:3d:fb:b1:85:83:de:89:14:31:a6:0b:14:82:
         a9:84:f5:63:22:ec:2c:41:87:5a:92:d7:0e:4f:47:4b:e8:7e:
         24:1f:6d:63:ea:58:96:1a:0b:ba:51:d4:63:44:9a:d7:49:d4:
         82:fc:48:6f:22:95:c3:da:12:d6:1f:1a:ea:55:00:0f:22:45:
         67:c2:c5:9c:e1:8b:87:bc:fd:2a:42:11:1b:ee:31:04:10:6e:
         7d:41:a1:1c:e2:73:06:73:e1:8d:c8:f5:56:ac:2e:6a:4c:ec:
         48:30:de:5a:60:09:17:e9:bf:0a:b5:75:a7:04:1d:e0:69:dd:
         18:7c:39:d6:4c:7e:8e:da:3d:a8:73:e3:9f:f4:33:46:a5:0b:
         27:fd:3e:44:fa:2d:ef:46:e4:13:00:d5:b6:52:eb:50:e2:67:
         bc:57:8f:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNSXAyS9I00gxgejwBrIbGDYIGl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxMDY5QkQ0QzMzREJFMzYwNTNFQTQ2QzhCMzU0QkY5
NUEyMTAxRDAeFw0yMjAzMjEyMzU2MDBaFw0yMzAzMjEwMDAxMDBaMDMxMTAvBgNV
BAMTKDBEOTk0RUMwOTZENTNDMDNGNEVGRjZGNzgzQjhGMTU2OUNFNkY2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ol9jkohRQRJHu8xWQxGOcTx/
xqaC3W93ayips1hDjTRfAnPpj2HmelWVkn4Gt5WRyh/5B0PQME+fjyfWvmU0rA+l
q/s2u6g/e815e0JwIpTg6qRTBDcKYDvWrYlMPsaJAOyHaFywXTPgewbb1ecMyOmG
PGcKXfRc5wpjclM1xDMPaVXZXZuDlOlBE8Mf0rkKtooJbF5Vv7Du2heNUF2fHuke
6w5Mg1mGcPuusumlcp+40TGlfJP4pdQO+fjSmudtol8svfdecS7JOyDR1UNz9St0
MopoA+E8ZPjJUpgliB82mfPNfs6mcWYImSsCfJjj0YNI+Pfkv3lm1xmNOVxRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDZlOwJbVPAP07/b3g7jxVpzm9s8wHwYDVR0j
BBgwFoAUxRBpvUwz2+NgU+pGyLNUv5WiEB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmlSZFFhRXZhUGd6NEdoVFdoZ3J2REVBcDdwZkxXVG9CSEdEUnpGeVJC
TXgvMC9DNTEwNjlCRDRDMzNEQkUzNjA1M0VBNDZDOEIzNTRCRjk1QTIxMDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTA2OUJENEMzM0RCRTM2
MDUzRUE0NkM4QjM1NEJGOTVBMjEwMUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJpUmRRYUV2YVBnejRHaFRXaGdydkRFQXA3cGZMV1RvQkhHRFJ6RnlSQk14LzAv
MzEzNzMwMmUzMjM0MzQyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9CQwDQYJKoZIhvcNAQELBQADggEBAK9uf2AK
hrs0FEu7cqwmW2RCGjGHHW4nAEWk8jhtYaKh9UvRWSuvmbfDKJlmYYJ2iSpAiE0H
e7YDr3OIXUbQhHo3/QOckO4WxqlyrHUIt6Fq81O6vYYE9AZBNs6f13vuPfuxhYPe
iRQxpgsUgqmE9WMi7CxBh1qS1w5PR0vofiQfbWPqWJYaC7pR1GNEmtdJ1IL8SG8i
lcPaEtYfGupVAA8iRWfCxZzhi4e8/SpCERvuMQQQbn1BoRzicwZz4Y3I9VasLmpM
7Egw3lpgCRfpvwq1dacEHeBp3Rh8OdZMfo7aPahz45/0M0alCyf9PkT6Le9G5BMA
1bZS61DiZ7xXjyw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org