Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          5z5+E6MiGqCIKvLbPbQviYpDOxysp5gQXmOhuQY9wT8=
Subject key identifier:   47:B0:D5:DD:E2:F4:02:D1:36:E9:EE:FF:6C:A7:6E:72:C4:A5:45:10
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       59CF5A35DF87D4637036F599EB1AD378387F409C
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:43 +0000
ROA not before:           Thu 04 Apr 2024 05:58:43 +0000
ROA not after:            Thu 03 Apr 2025 06:03:43 +0000
asID:                     265010
IP address blocks:        170.84.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cf:5a:35:df:87:d4:63:70:36:f5:99:eb:1a:d3:78:38:7f:40:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:43 2024 GMT
            Not After : Apr  3 06:03:43 2025 GMT
        Subject: CN=47B0D5DDE2F402D136E9EEFF6CA76E72C4A54510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:7f:76:8d:a5:5a:a9:2f:95:52:4c:0a:16:
                    76:5a:d4:76:59:9c:97:ec:1e:0f:1a:0b:69:40:7d:
                    01:75:3e:6e:0c:36:b8:a0:27:50:c6:b1:0d:61:a8:
                    d6:90:3b:31:19:d6:7f:a3:84:1d:49:ca:f4:fc:6c:
                    89:9e:96:41:f6:fd:ae:05:c6:b0:c6:eb:f5:fc:96:
                    e9:9a:39:da:74:61:f8:2b:4d:40:40:fc:89:51:0c:
                    65:11:cd:e8:41:82:1f:06:3d:e4:73:65:74:50:ac:
                    57:39:2d:1f:57:31:3d:e6:d8:3a:5b:57:3d:ed:c6:
                    10:04:34:ce:15:76:e4:6d:75:46:fc:fe:56:93:1d:
                    f6:c1:7c:91:f0:52:57:46:11:15:c6:dd:dd:1e:24:
                    9e:c7:10:46:21:70:8b:3a:23:01:e5:3e:0f:a9:8e:
                    16:03:f1:d0:6d:39:f9:1b:78:9d:28:e1:08:ea:3f:
                    f1:a9:ee:85:03:4c:e4:47:62:90:96:83:9d:b9:f1:
                    93:63:7f:69:bf:49:02:2c:ea:de:d2:39:f3:56:4b:
                    21:b6:e5:02:11:c0:93:18:84:9e:15:28:e0:59:74:
                    4d:04:b4:c2:7b:84:8d:18:3a:41:9a:bf:6c:34:99:
                    f0:c3:cc:cc:cb:3c:e1:95:e5:97:13:ce:f4:b2:24:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:D5:DD:E2:F4:02:D1:36:E9:EE:FF:6C:A7:6E:72:C4:A5:45:10
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:3f:ed:1c:cf:a3:bf:dd:fa:ee:12:ea:07:c7:1d:f1:69:
         eb:04:7a:60:1a:c9:8c:c1:b1:fd:83:77:3a:72:bb:7c:7e:c1:
         64:48:75:a0:56:1e:c4:b0:c6:2f:56:a7:b1:7f:00:b9:f6:a8:
         37:b0:da:19:c8:5a:37:8b:40:58:3e:c9:44:cd:3f:e1:ca:d1:
         88:90:59:70:b7:12:27:48:c7:ac:1c:96:47:0e:c3:fe:be:0d:
         25:12:1c:58:f3:28:76:68:fd:7b:cd:d3:60:9d:28:55:02:26:
         07:9b:83:66:a0:e5:98:eb:86:fa:05:af:e8:9d:f8:83:12:bd:
         20:db:66:31:87:37:f5:3c:0c:f5:d0:83:2d:b4:e0:f9:c8:c9:
         e3:48:b1:5e:cc:87:ae:66:bd:fd:15:a7:8d:54:ba:e2:ad:df:
         5b:5c:ce:2a:b5:14:26:48:55:1c:7c:bb:af:7e:13:19:1b:5e:
         9b:92:bf:a4:47:8a:17:34:95:5c:1f:f9:8f:90:a4:5e:b5:a5:
         ca:26:18:4b:87:4d:58:1e:73:d7:2b:18:9a:4e:dd:32:58:89:
         77:ae:c9:0c:84:7b:fd:7d:03:63:03:c5:ed:69:bb:bc:e5:58:
         31:90:b2:49:c0:47:13:ab:4e:01:ff:50:44:4d:75:f8:0b:ac:
         f0:2a:33:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWc9aNd+H1GNwNvWZ6xrTeDh/QJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RjM5NTU0M0I1RDE1QzlDNDI1MjNFOTZCODQyQ0U2
MURENEI5MDAeFw0yNDA0MDQwNTU4NDNaFw0yNTA0MDMwNjAzNDNaMDMxMTAvBgNV
BAMTKDQ3QjBENURERTJGNDAyRDEzNkU5RUVGRjZDQTc2RTcyQzRBNTQ1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7H92jaVaqS+VUkwKFnZa1HZZ
nJfsHg8aC2lAfQF1Pm4MNrigJ1DGsQ1hqNaQOzEZ1n+jhB1JyvT8bImelkH2/a4F
xrDG6/X8lumaOdp0YfgrTUBA/IlRDGURzehBgh8GPeRzZXRQrFc5LR9XMT3m2Dpb
Vz3txhAENM4VduRtdUb8/laTHfbBfJHwUldGERXG3d0eJJ7HEEYhcIs6IwHlPg+p
jhYD8dBtOfkbeJ0o4QjqP/Gp7oUDTORHYpCWg5258ZNjf2m/SQIs6t7SOfNWSyG2
5QIRwJMYhJ4VKOBZdE0EtMJ7hI0YOkGav2w0mfDDzMzLPOGV5ZcTzvSyJD5xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR7DV3eL0AtE26e7/bKducsSlRRAwHwYDVR0j
BBgwFoAUaH85VUO10VycQlI+lrhCzmHdS5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMS82ODdGMzk1NTQzQjVEMTVDOUM0MjUyM0U5NkI4NDJDRTYxREQ0QjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0YzOTU1NDNCNUQxNUM5
QzQyNTIzRTk2Qjg0MkNFNjFERDRCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzEv
MzEzNzMwMmUzODM0MmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVGcwDQYJKoZIhvcNAQELBQADggEBAE1pP+0c
z6O/3fruEuoHxx3xaesEemAayYzBsf2Ddzpyu3x+wWRIdaBWHsSwxi9Wp7F/ALn2
qDew2hnIWjeLQFg+yUTNP+HK0YiQWXC3EidIx6wclkcOw/6+DSUSHFjzKHZo/XvN
02CdKFUCJgebg2ag5ZjrhvoFr+id+IMSvSDbZjGHN/U8DPXQgy204PnIyeNIsV7M
h65mvf0Vp41UuuKt31tcziq1FCZIVRx8u69+ExkbXpuSv6RHihc0lVwf+Y+QpF61
pcomGEuHTVgec9crGJpO3TJYiXeuyQyEe/19A2MDxe1pu7zlWDGQsknARxOrTgH/
UERNdfgLrPAqM8A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org