Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3232203d3e20323632353134.roa
File:                     3137302e38302e36342e302f32322d3232203d3e20323632353134.roa (raw, json)
Hash identifier:          xoRNB5ByIYV4N11pZU58GAd0xJnSjFcbfZUjYNGAV4k=
Subject key identifier:   A1:2B:F2:66:45:58:12:7F:BF:B0:A9:66:08:D4:73:05:63:0E:55:7C
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       64A716A1501D334CDC97DF981D174887F4935CEF
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3232203d3e20323632353134.roa
Signing time:             Mon 17 Oct 2022 20:40:18 +0000
ROA not before:           Mon 17 Oct 2022 20:35:18 +0000
ROA not after:            Mon 16 Oct 2023 20:40:18 +0000
asID:                     262514
IP address blocks:        170.80.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:16:a1:50:1d:33:4c:dc:97:df:98:1d:17:48:87:f4:93:5c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 17 20:35:18 2022 GMT
            Not After : Oct 16 20:40:18 2023 GMT
        Subject: CN=A12BF2664558127FBFB0A96608D47305630E557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:e6:32:66:0f:bb:8b:a9:05:77:3e:bf:29:
                    a8:52:d8:19:e1:04:e0:37:61:7f:e0:56:a6:49:7a:
                    8c:ea:24:dd:37:0e:6a:92:64:9d:7f:6b:fe:f5:7e:
                    98:0d:77:c7:f4:52:b9:ae:9b:8b:84:b3:28:4a:40:
                    d8:db:0e:bb:12:51:4e:f1:a5:52:c8:81:53:91:c6:
                    c9:d6:38:20:b4:5a:fa:af:51:6d:57:24:4f:99:fd:
                    7d:3a:d3:f4:32:a5:23:7b:81:36:82:ea:39:e0:a8:
                    c4:71:70:73:35:2a:cb:e5:20:e3:3d:79:de:7b:76:
                    62:ec:e0:b4:71:08:a7:9e:36:0b:e6:70:7f:74:2e:
                    35:2a:e6:62:d4:1e:6a:f0:22:08:ff:9d:88:ec:75:
                    6b:c3:80:7e:95:86:65:a3:c8:7d:df:5a:ea:22:9e:
                    58:e2:4b:89:75:e4:1b:b2:c0:a7:ae:3f:d1:70:22:
                    3f:ec:21:b1:fd:b4:8b:8d:78:00:0f:f0:4a:81:51:
                    fa:82:a4:b5:ab:3e:ab:79:cd:c4:61:64:0d:a6:f7:
                    de:8b:07:7f:4c:d3:2b:b7:a6:73:89:e6:27:76:be:
                    20:be:a2:48:82:2c:4e:47:05:e0:8d:94:fa:be:e4:
                    fe:73:e2:85:94:12:9c:cc:c5:61:92:bb:73:dc:bf:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:F2:66:45:58:12:7F:BF:B0:A9:66:08:D4:73:05:63:0E:55:7C
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/3137302e38302e36342e302f32322d3232203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:33:68:fe:cc:7d:c9:fb:43:fb:fb:5e:ca:c6:69:cb:04:4f:
         e4:4c:f0:42:61:d7:f1:9a:46:71:41:0b:1e:7c:c9:19:a6:34:
         da:77:51:4f:e6:1e:dd:f3:14:b6:97:d1:f6:53:9e:b0:23:5b:
         f3:e6:9d:c7:19:b2:0b:e7:3e:5b:02:d7:48:c7:c2:23:5a:ac:
         e2:58:f7:95:d3:8e:67:69:03:64:1e:6d:1c:1b:83:8b:ab:e0:
         c7:18:bc:22:f5:30:67:1c:7d:1d:78:d4:a9:4f:cc:02:0a:e0:
         51:4c:ad:d5:c6:fb:98:52:d8:02:ff:08:96:f2:28:fd:90:83:
         e4:98:21:45:9d:89:48:c4:de:5d:3a:1f:cf:8d:23:48:57:4e:
         0d:92:1e:8e:7d:1b:27:6b:d5:67:9a:bc:81:b3:2e:7e:aa:bf:
         99:bd:44:fb:e1:8f:1e:e4:58:37:95:d8:d2:bc:0a:19:55:30:
         bf:37:60:7f:dc:5f:08:83:5d:cb:9b:7b:5a:5b:77:e8:7f:6c:
         52:70:ed:24:d6:50:49:0c:30:36:da:d1:09:df:f0:51:d1:a4:
         27:65:61:4b:a4:44:27:5d:61:57:c2:73:35:0c:af:f3:97:48:
         83:9d:f3:93:6b:e8:18:c3:4b:2d:6b:c0:5e:3b:a5:5e:e8:b2:
         7f:72:8b:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZKcWoVAdM0zcl9+YHRdIh/STXO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwM0U5RTlDQkE0RTE4QUY2RDVBOTQ4OUUxQTkyMkVD
MkJDQTM2RDAeFw0yMjEwMTcyMDM1MThaFw0yMzEwMTYyMDQwMThaMDMxMTAvBgNV
BAMTKEExMkJGMjY2NDU1ODEyN0ZCRkIwQTk2NjA4RDQ3MzA1NjMwRTU1N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TeYyZg+7i6kFdz6/KahS2Bnh
BOA3YX/gVqZJeozqJN03DmqSZJ1/a/71fpgNd8f0Urmum4uEsyhKQNjbDrsSUU7x
pVLIgVORxsnWOCC0WvqvUW1XJE+Z/X060/QypSN7gTaC6jngqMRxcHM1KsvlIOM9
ed57dmLs4LRxCKeeNgvmcH90LjUq5mLUHmrwIgj/nYjsdWvDgH6VhmWjyH3fWuoi
nljiS4l15BuywKeuP9FwIj/sIbH9tIuNeAAP8EqBUfqCpLWrPqt5zcRhZA2m996L
B39M0yu3pnOJ5id2viC+okiCLE5HBeCNlPq+5P5z4oWUEpzMxWGSu3Pcv/TDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoSvyZkVYEn+/sKlmCNRzBWMOVXwwHwYDVR0j
BBgwFoAU5gPp6cuk4Yr21alInhqSLsK8o20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvNC9FNjAzRTlFOUNCQTRFMThBRjZENUE5NDg5RTFBOTIyRUMyQkNBMzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2MDNFOUU5Q0JBNEUxOEFG
NkQ1QTk0ODlFMUE5MjJFQzJCQ0EzNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzQv
MzEzNzMwMmUzODMwMmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlBAMA0GCSqGSIb3DQEBCwUAA4IBAQApM2j+zH3J
+0P7+17KxmnLBE/kTPBCYdfxmkZxQQsefMkZpjTad1FP5h7d8xS2l9H2U56wI1vz
5p3HGbIL5z5bAtdIx8IjWqziWPeV045naQNkHm0cG4OLq+DHGLwi9TBnHH0deNSp
T8wCCuBRTK3VxvuYUtgC/wiW8ij9kIPkmCFFnYlIxN5dOh/PjSNIV04Nkh6OfRsn
a9VnmryBsy5+qr+ZvUT74Y8e5Fg3ldjSvAoZVTC/N2B/3F8Ig13Lm3taW3fof2xS
cO0k1lBJDDA22tEJ3/BR0aQnZWFLpEQnXWFXwnM1DK/zl0iDnfOTa+gYw0sta8Be
O6Ve6LJ/couE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org