Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
File:                     3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa (raw, json)
Hash identifier:          1ZhZTZ1XPqHJX+SJZXjDB9ErjncEgO3ZPyzBznZbqd0=
Subject key identifier:   8C:62:6E:98:0B:53:7B:16:EA:2D:BC:56:31:12:A5:93:A4:2F:11:A7
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       454D802A4D86699A7305973236AC660982B0CCF3
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:45 +0000
ROA not before:           Thu 04 Apr 2024 05:58:45 +0000
ROA not after:            Thu 03 Apr 2025 06:03:45 +0000
asID:                     265010
IP address blocks:        170.84.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:80:2a:4d:86:69:9a:73:05:97:32:36:ac:66:09:82:b0:cc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:45 2024 GMT
            Not After : Apr  3 06:03:45 2025 GMT
        Subject: CN=8C626E980B537B16EA2DBC563112A593A42F11A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:15:53:cd:b0:09:3b:fa:0f:ef:fa:e3:20:
                    96:c1:c0:5d:e8:1b:c7:cf:bb:87:3f:23:6f:e9:70:
                    16:6d:6b:8e:89:17:34:4c:96:5f:6b:66:61:a1:30:
                    96:87:18:0c:c8:21:21:ef:df:6b:a8:49:a5:70:73:
                    11:a6:01:6c:93:19:fe:83:4d:fd:ee:a7:c1:66:98:
                    12:62:2f:ef:a2:28:53:ab:fe:86:95:d1:2f:e1:a4:
                    f8:6a:8c:13:37:dd:8f:51:fe:25:7f:bd:4b:28:5c:
                    a5:72:2a:f6:77:e0:06:82:10:e0:fe:d3:1c:89:b9:
                    09:d3:90:06:9d:c9:f5:34:5a:6a:20:2b:5e:29:d7:
                    b2:7c:b7:e3:6f:a6:c5:ce:cb:1e:4b:8c:37:1f:5b:
                    da:5c:79:f1:5b:d2:2a:95:40:34:fb:4d:90:67:54:
                    95:fc:44:58:d6:0e:df:7c:12:75:40:08:59:2a:05:
                    07:f7:cd:6b:5c:6e:5f:95:af:bc:b4:4e:7d:d5:5d:
                    6b:df:07:d6:1b:a4:7e:dc:10:25:cd:21:5b:54:96:
                    63:5e:5b:50:4c:d8:85:03:ab:6a:89:8c:71:72:b4:
                    24:a8:63:64:67:a3:0f:14:a9:c6:12:22:93:6e:3d:
                    cf:74:e6:a6:d0:05:6e:2f:c1:2a:35:93:c3:a1:a8:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:6E:98:0B:53:7B:16:EA:2D:BC:56:31:12:A5:93:A4:2F:11:A7
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:42:ab:15:cb:ad:51:87:f8:94:b8:8a:b7:11:1c:eb:cf:
         97:6c:64:e3:65:c2:15:cc:a2:31:45:02:b9:b5:70:b2:36:4c:
         7f:4a:c7:d2:81:64:2d:b1:13:79:09:5d:df:2f:85:56:37:de:
         ca:09:2b:30:23:af:cb:dc:ee:a2:4a:9a:50:6b:ef:4b:6a:05:
         f4:5a:76:83:d8:1c:4c:c9:0d:bb:36:38:f7:50:1d:53:f2:b0:
         d7:4c:8e:32:21:1f:9b:1b:d8:fd:31:a7:a6:ff:06:d7:38:12:
         ae:5b:00:1b:20:f9:30:12:f9:3c:a3:bc:bf:dd:43:67:c4:e1:
         a6:f2:9f:e3:ca:8f:3d:00:f2:87:57:13:84:5b:0e:3c:b2:57:
         11:78:20:15:da:75:be:06:68:46:5e:db:2c:14:2b:36:9b:71:
         a0:15:cc:ef:b9:8b:6e:1c:e8:77:8f:c6:48:7d:22:fe:c0:07:
         75:df:d5:b3:c0:5f:2f:50:3f:6e:ec:e9:da:e0:7d:a9:25:09:
         d1:50:b2:d3:e3:76:b3:68:16:f7:c6:df:fe:cf:e2:56:38:0d:
         13:63:a4:cb:e7:32:bf:11:88:07:dd:a2:77:28:cb:44:82:67:
         a7:57:93:12:86:9c:64:1d:2f:2c:fb:36:6f:0c:5c:ae:3b:ae:
         7e:a9:75:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURU2AKk2GaZpzBZcyNqxmCYKwzPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RjM5NTU0M0I1RDE1QzlDNDI1MjNFOTZCODQyQ0U2
MURENEI5MDAeFw0yNDA0MDQwNTU4NDVaFw0yNTA0MDMwNjAzNDVaMDMxMTAvBgNV
BAMTKDhDNjI2RTk4MEI1MzdCMTZFQTJEQkM1NjMxMTJBNTkzQTQyRjExQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFBVTzbAJO/oP7/rjIJbBwF3o
G8fPu4c/I2/pcBZta46JFzRMll9rZmGhMJaHGAzIISHv32uoSaVwcxGmAWyTGf6D
Tf3up8FmmBJiL++iKFOr/oaV0S/hpPhqjBM33Y9R/iV/vUsoXKVyKvZ34AaCEOD+
0xyJuQnTkAadyfU0WmogK14p17J8t+NvpsXOyx5LjDcfW9pcefFb0iqVQDT7TZBn
VJX8RFjWDt98EnVACFkqBQf3zWtcbl+Vr7y0Tn3VXWvfB9YbpH7cECXNIVtUlmNe
W1BM2IUDq2qJjHFytCSoY2Rnow8UqcYSIpNuPc905qbQBW4vwSo1k8OhqNxJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjGJumAtTexbqLbxWMRKlk6QvEacwHwYDVR0j
BBgwFoAUaH85VUO10VycQlI+lrhCzmHdS5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMS82ODdGMzk1NTQzQjVEMTVDOUM0MjUyM0U5NkI4NDJDRTYxREQ0QjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0YzOTU1NDNCNUQxNUM5
QzQyNTIzRTk2Qjg0MkNFNjFERDRCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzEv
MzEzNzMwMmUzODM0MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVGQwDQYJKoZIhvcNAQELBQADggEBAHwyQqsV
y61Rh/iUuIq3ERzrz5dsZONlwhXMojFFArm1cLI2TH9Kx9KBZC2xE3kJXd8vhVY3
3soJKzAjr8vc7qJKmlBr70tqBfRadoPYHEzJDbs2OPdQHVPysNdMjjIhH5sb2P0x
p6b/Btc4Eq5bABsg+TAS+TyjvL/dQ2fE4abyn+PKjz0A8odXE4RbDjyyVxF4IBXa
db4GaEZe2ywUKzabcaAVzO+5i24c6HePxkh9Iv7AB3Xf1bPAXy9QP27s6drgfakl
CdFQstPjdrNoFvfG3/7P4lY4DRNjpMvnMr8RiAfdoncoy0SCZ6dXkxKGnGQdLyz7
Nm8MXK47rn6pdcg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org