Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32332d3233203d3e20323635303639.roa
File:                     3137302e3233312e3133322e302f32332d3233203d3e20323635303639.roa (raw, json)
Hash identifier:          g1Mq2NrPqNmd9hkPtOunrKFNiwHiUdMCsy5CyZDP6lE=
Subject key identifier:   A6:62:A6:9A:96:62:23:E4:BD:8E:09:75:CF:D3:F2:AA:AC:96:1E:C3
Certificate issuer:       /CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
Certificate serial:       187FCB502A9179C33B83D6063732DBD762CB2D48
Authority key identifier: 17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32332d3233203d3e20323635303639.roa
Signing time:             Sat 26 Feb 2022 14:55:12 +0000
ROA not before:           Sat 26 Feb 2022 14:50:12 +0000
ROA not after:            Sat 25 Feb 2023 14:55:12 +0000
asID:                     265069
IP address blocks:        170.231.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7f:cb:50:2a:91:79:c3:3b:83:d6:06:37:32:db:d7:62:cb:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C70EDD5F8146F1E1E21940FCFB346A62CA5E41
        Validity
            Not Before: Feb 26 14:50:12 2022 GMT
            Not After : Feb 25 14:55:12 2023 GMT
        Subject: CN=A662A69A966223E4BD8E0975CFD3F2AAAC961EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:15:6e:ca:35:12:53:99:43:75:93:bd:5c:
                    29:34:14:24:25:b2:3d:90:d2:9c:89:c1:f6:02:8f:
                    cb:28:a0:91:db:d6:31:08:92:5f:fd:24:60:a4:64:
                    0d:56:cd:40:19:e7:4b:52:99:9b:27:1e:d0:29:ec:
                    d3:98:b4:7e:bf:c9:e7:ce:ad:54:df:93:b6:c0:fc:
                    e0:17:4b:5b:ab:4e:0e:62:c6:60:ea:ed:bc:ab:56:
                    9a:57:26:aa:22:f5:ff:05:8c:2f:00:fa:be:7e:3f:
                    a2:cc:a5:40:2c:63:77:46:77:bc:8b:28:ff:6e:4a:
                    95:70:e5:ac:67:c9:9c:14:28:47:f8:0f:3e:15:cd:
                    9c:b8:e3:0c:a3:44:50:2e:25:af:ca:89:7a:2a:8c:
                    aa:2e:41:eb:c5:60:ca:0a:99:03:11:f4:04:11:7c:
                    5a:12:2f:db:bf:cd:e7:6b:fb:ba:9b:ff:e1:dc:5f:
                    93:4d:3b:7d:2e:ae:88:4d:8c:2b:35:a5:68:bc:ce:
                    cf:af:a9:a7:43:53:9b:a9:2a:b7:fb:b3:aa:ba:82:
                    21:f0:4c:97:a7:4d:fc:f2:3b:b5:22:05:5c:78:60:
                    6b:66:fc:fe:f6:cd:e4:72:69:62:bf:2e:19:06:d4:
                    b3:e9:b8:3a:3d:c2:7f:e0:3d:5b:fc:d9:9e:bb:08:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:A6:9A:96:62:23:E4:BD:8E:09:75:CF:D3:F2:AA:AC:96:1E:C3
            X509v3 Authority Key Identifier:
                keyid:17:C7:0E:DD:5F:81:46:F1:E1:E2:19:40:FC:FB:34:6A:62:CA:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17C70EDD5F8146F1E1E21940FCFB346A62CA5E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2o4paBoq6LzvHAs31rV7xtet2Hzi7TKLjBWpoMv7wDcQ/0/3137302e3233312e3133322e302f32332d3233203d3e20323635303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:ec:5f:0b:4a:d1:d7:c0:96:70:95:eb:8a:e9:c6:67:09:
         c1:81:85:fb:dc:bb:92:4a:14:90:0f:cb:67:68:9e:c2:62:eb:
         d8:96:aa:2e:90:d3:9c:09:6e:6c:bc:9c:40:57:3e:e9:6f:c8:
         47:9d:5f:35:f6:46:5a:aa:ab:a1:62:b4:bc:09:48:e5:4f:94:
         d7:8a:41:9f:ac:18:74:91:99:fe:ec:16:28:15:7e:3f:c5:7f:
         9c:40:49:84:1f:d4:53:01:6c:82:64:74:4a:a1:b0:e6:e1:ba:
         eb:0b:ea:dd:a1:f6:41:1f:c3:de:83:8f:d9:95:a6:82:d6:be:
         ab:90:35:29:db:a2:bf:ab:47:7c:25:48:be:dc:d2:66:90:a8:
         1c:c8:0a:79:48:f3:d7:c6:c9:af:4e:2c:5f:df:4a:4f:a7:d0:
         c2:5b:e5:b0:38:4a:3d:a9:f2:e6:1a:39:ad:07:d7:ac:bb:ed:
         19:a8:42:4b:52:84:0c:56:79:a9:ec:d3:38:ae:bd:2e:2c:d4:
         29:d7:04:5f:8d:c7:0a:af:6d:2b:31:c1:69:c7:88:ae:e3:2e:
         75:25:03:fe:1c:e6:4b:bc:2a:f2:3d:9d:a7:83:b1:1d:3b:86:
         51:1a:ff:fd:52:d8:31:f3:49:cd:60:e9:47:cc:db:2b:f7:42:
         0c:3a:c4:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGH/LUCqRecM7g9YGNzLb12LLLUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdDNzBFREQ1RjgxNDZGMUUxRTIxOTQwRkNGQjM0NkE2
MkNBNUU0MTAeFw0yMjAyMjYxNDUwMTJaFw0yMzAyMjUxNDU1MTJaMDMxMTAvBgNV
BAMTKEE2NjJBNjlBOTY2MjIzRTRCRDhFMDk3NUNGRDNGMkFBQUM5NjFFQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5RVuyjUSU5lDdZO9XCk0FCQl
sj2Q0pyJwfYCj8sooJHb1jEIkl/9JGCkZA1WzUAZ50tSmZsnHtAp7NOYtH6/yefO
rVTfk7bA/OAXS1urTg5ixmDq7byrVppXJqoi9f8FjC8A+r5+P6LMpUAsY3dGd7yL
KP9uSpVw5axnyZwUKEf4Dz4VzZy44wyjRFAuJa/KiXoqjKouQevFYMoKmQMR9AQR
fFoSL9u/zedr+7qb/+HcX5NNO30urohNjCs1pWi8zs+vqadDU5upKrf7s6q6giHw
TJenTfzyO7UiBVx4YGtm/P72zeRyaWK/LhkG1LPpuDo9wn/gPVv82Z67CHg5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpmKmmpZiI+S9jgl1z9PyqqyWHsMwHwYDVR0j
BBgwFoAUF8cO3V+BRvHh4hlA/Ps0amLKXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm80cGFCb3E2THp2SEFzMzFyVjd4dGV0Mkh6aTdUS0xqQldwb012N3dE
Y1EvMC8xN0M3MEVERDVGODE0NkYxRTFFMjE5NDBGQ0ZCMzQ2QTYyQ0E1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3QzcwRURENUY4MTQ2RjFF
MUUyMTk0MEZDRkIzNDZBNjJDQTVFNDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvNHBhQm9xNkx6dkhBczMxclY3eHRldDJIemk3VEtMakJXcG9Ndjd3RGNRLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarnhDANBgkqhkiG9w0BAQsFAAOCAQEAjRzs
XwtK0dfAlnCV64rpxmcJwYGF+9y7kkoUkA/LZ2iewmLr2JaqLpDTnAlubLycQFc+
6W/IR51fNfZGWqqroWK0vAlI5U+U14pBn6wYdJGZ/uwWKBV+P8V/nEBJhB/UUwFs
gmR0SqGw5uG66wvq3aH2QR/D3oOP2ZWmgta+q5A1Kduiv6tHfCVIvtzSZpCoHMgK
eUjz18bJr04sX99KT6fQwlvlsDhKPany5ho5rQfXrLvtGahCS1KEDFZ5qezTOK69
LizUKdcEX43HCq9tKzHBaceIruMudSUD/hzmS7wq8j2dp4OxHTuGURr//VLYMfNJ
zWDpR8zbK/dCDDrEBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org