Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e3132382f32352d3235203d3e20323636353036.roa
File:                     3137302e3234342e3138302e3132382f32352d3235203d3e20323636353036.roa (raw, json)
Hash identifier:          uVC02v9uRDEmnT82hcTIAuY4w7V3PIIGFk3gZEK9SB4=
Subject key identifier:   37:2E:CB:89:8C:E2:7B:4F:E9:FF:86:05:0D:DB:E2:56:03:B6:7D:38
Certificate issuer:       /CN=CD595B734685C1E1321F4AE24C925EA2C710159F
Certificate serial:       44A4CA9327D9D020FA78961602EDC1F82ED1A03C
Authority key identifier: CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e3132382f32352d3235203d3e20323636353036.roa
Signing time:             Thu 26 Oct 2023 01:20:37 +0000
ROA not before:           Thu 26 Oct 2023 01:15:37 +0000
ROA not after:            Thu 24 Oct 2024 01:20:37 +0000
asID:                     266506
IP address blocks:        170.244.180.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a4:ca:93:27:d9:d0:20:fa:78:96:16:02:ed:c1:f8:2e:d1:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Validity
            Not Before: Oct 26 01:15:37 2023 GMT
            Not After : Oct 24 01:20:37 2024 GMT
        Subject: CN=372ECB898CE27B4FE9FF86050DDBE25603B67D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:e9:4c:8a:53:28:7a:71:d3:d2:16:d2:bc:
                    40:27:ef:bc:15:ec:e5:28:cf:ec:1d:30:63:43:b5:
                    d7:1e:8f:73:5a:ad:af:82:f0:81:d3:06:7d:f8:b1:
                    ed:12:54:a5:9f:7a:e4:42:df:9e:d9:52:2e:c2:c2:
                    d7:2c:fa:e5:ec:47:30:0a:98:a7:14:cf:a3:59:db:
                    05:e7:90:28:c0:bd:bb:a3:2d:86:5c:99:d2:bb:2f:
                    7b:b9:b8:a9:6c:12:54:4a:de:f1:a3:6f:b7:26:6d:
                    ec:72:86:87:7d:4d:5b:ad:24:18:f8:e5:e7:cf:88:
                    15:4f:1c:41:e0:fb:a3:a7:08:31:06:04:38:d3:f2:
                    98:96:68:9e:02:4d:6d:33:f8:f4:5e:73:da:90:d9:
                    91:35:86:2b:aa:99:12:a3:a2:0d:fd:2b:d4:d9:26:
                    60:b2:4f:ed:6b:8e:fe:91:d3:39:7d:75:14:6a:55:
                    32:89:31:9a:a1:7d:35:1d:30:5d:71:6a:8c:39:e2:
                    35:6b:79:48:46:ce:b9:ee:01:92:c1:cc:21:d2:26:
                    93:36:5a:fa:83:39:fe:97:e0:cb:93:57:67:ed:e3:
                    1a:f4:01:b2:15:5a:4e:e7:af:10:8c:e2:60:69:6a:
                    a0:d7:08:13:1a:48:7f:35:37:53:0e:3e:a7:e9:0d:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:CB:89:8C:E2:7B:4F:E9:FF:86:05:0D:DB:E2:56:03:B6:7D:38
            X509v3 Authority Key Identifier:
                keyid:CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/3137302e3234342e3138302e3132382f32352d3235203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.180.128/25

    Signature Algorithm: sha256WithRSAEncryption
         61:df:ac:3e:84:5c:0f:06:09:4f:14:b6:d1:4c:1e:37:9e:a0:
         0f:33:12:e2:df:e9:5f:d3:e6:38:e0:4d:fb:9b:10:b5:f1:dc:
         31:40:b8:23:2b:c7:10:aa:5a:a8:b6:a8:22:a5:6c:d3:e1:f5:
         93:70:9a:86:6d:c1:a2:1e:ef:35:a4:0c:5e:0e:4e:6a:30:d1:
         b0:02:6d:ed:78:a1:5a:89:16:29:ae:a0:68:5e:77:c0:15:5a:
         87:65:19:09:36:90:e2:32:3e:c8:27:b0:77:a7:ce:64:6f:97:
         a0:0c:a1:07:d6:a8:d3:5f:86:d9:ba:24:cc:4d:d2:37:15:dd:
         8c:a9:68:9f:a9:3b:9c:32:a9:f1:20:20:c5:c8:df:6a:fa:c1:
         52:5a:91:75:3d:2d:44:9e:7e:0b:96:3a:b1:cf:00:46:e3:0d:
         88:6f:40:80:0b:e3:bd:b5:ec:ba:9a:cf:92:40:3c:35:b9:08:
         64:84:50:08:7a:a2:11:f7:db:8d:5d:e1:f2:f8:0c:f9:64:61:
         51:12:73:6f:00:11:8f:1d:a8:6f:0d:bb:97:d6:eb:41:a3:4f:
         d9:2c:f4:da:67:2b:0e:56:87:54:7b:ed:4f:00:f7:82:b6:1a:
         9f:83:91:66:cc:61:de:3f:22:d6:a4:4b:ee:e1:b6:5a:dd:94:
         5e:0e:dc:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIURKTKkyfZ0CD6eJYWAu3B+C7RoDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q1OTVCNzM0Njg1QzFFMTMyMUY0QUUyNEM5MjVFQTJD
NzEwMTU5RjAeFw0yMzEwMjYwMTE1MzdaFw0yNDEwMjQwMTIwMzdaMDMxMTAvBgNV
BAMTKDM3MkVDQjg5OENFMjdCNEZFOUZGODYwNTBEREJFMjU2MDNCNjdEMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHelMilMoenHT0hbSvEAn77wV
7OUoz+wdMGNDtdcej3Nara+C8IHTBn34se0SVKWfeuRC357ZUi7Cwtcs+uXsRzAK
mKcUz6NZ2wXnkCjAvbujLYZcmdK7L3u5uKlsElRK3vGjb7cmbexyhod9TVutJBj4
5efPiBVPHEHg+6OnCDEGBDjT8piWaJ4CTW0z+PRec9qQ2ZE1hiuqmRKjog39K9TZ
JmCyT+1rjv6R0zl9dRRqVTKJMZqhfTUdMF1xaow54jVreUhGzrnuAZLBzCHSJpM2
WvqDOf6X4MuTV2ft4xr0AbIVWk7nrxCM4mBpaqDXCBMaSH81N1MOPqfpDdgZAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUNy7LiYzie0/p/4YFDdviVgO2fTgwHwYDVR0j
BBgwFoAUzVlbc0aFweEyH0riTJJeoscQFZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhy
NnQvMC9DRDU5NUI3MzQ2ODVDMUUxMzIxRjRBRTI0QzkyNUVBMkM3MTAxNTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENTk1QjczNDY4NUMxRTEz
MjFGNEFFMjRDOTI1RUEyQzcxMDE1OUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0RnVra3F4dHdRVVBud3d3NlNaZHpCWkg2TnhpeEE1OGsxREdFUG84cjZ0LzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzgzMDJlMzEzMjM4MmYzMjM1MmQzMjM1MjAzZDNl
MjAzMjM2MzYzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYI
KwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQeq9LSAMA0GCSqGSIb3DQEBCwUAA4IB
AQBh36w+hFwPBglPFLbRTB43nqAPMxLi3+lf0+Y44E37mxC18dwxQLgjK8cQqlqo
tqgipWzT4fWTcJqGbcGiHu81pAxeDk5qMNGwAm3teKFaiRYprqBoXnfAFVqHZRkJ
NpDiMj7IJ7B3p85kb5egDKEH1qjTX4bZuiTMTdI3Fd2MqWifqTucMqnxICDFyN9q
+sFSWpF1PS1Enn4LljqxzwBG4w2Ib0CAC+O9tey6ms+SQDw1uQhkhFAIeqIR99uN
XeHy+Az5ZGFREnNvABGPHahvDbuX1utBo0/ZLPTaZysOVodUe+1PAPeCthqfg5Fm
zGHePyLWpEvu4bZa3ZReDtz2
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org