Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
File:                     3137302e3234372e34302e302f32322d3234203d3e203631353931.roa (raw, json)
Hash identifier:          Qc+HEb0ebcVSI1/Ss5PHmiJ5TCEXRsJlOFuTzuiFDqc=
Subject key identifier:   8D:D0:40:20:7B:5A:44:F6:C7:1B:E9:3D:D6:1D:AD:5A:26:79:64:A2
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       64277DDA21BF5DE7BE9450361C8A32E973CF312B
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
Signing time:             Thu 03 Aug 2023 20:00:00 +0000
ROA not before:           Thu 03 Aug 2023 19:55:00 +0000
ROA not after:            Thu 01 Aug 2024 20:00:00 +0000
asID:                     61591
IP address blocks:        170.247.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:27:7d:da:21:bf:5d:e7:be:94:50:36:1c:8a:32:e9:73:cf:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Aug  3 19:55:00 2023 GMT
            Not After : Aug  1 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100A8CF530E773C225A6E1F8F8522C69A30D617B74AF24D5BBFF609889C5CD2D8BD35698468EBEE78F361046E0B39BAAA92BE8B48E23CA68D111D282200D16D8BA12424AB1D4466E0E3CDED03842027E2A0773EB0C4C310C740BC00140A155545FACEA9E01C68926A659D710B27082E5961CABFFF0B4104B9FB8B0C65A6787588E83A58388306196BFBDCCECD7F5C6E6BBB45530E59C1147504D5194B83E26685A05700B0E7898699A22AB8BE07D9647B6FEACB6BD07AF4FB0141B7C1CA3BEFC51A38A1473F96B465367C8EB2EF5ED4E6B9EB90474F3F90E18CCB36671ED67C2C7F54CA2D4536ABDC7E5061D39755FBCCD539B11262A8805D0D153D962B32FB4FDB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:53:0e:77:3c:22:5a:6e:1f:8f:85:22:c6:
                    9a:30:d6:17:b7:4a:f2:4d:5b:bf:f6:09:88:9c:5c:
                    d2:d8:bd:35:69:84:68:eb:ee:78:f3:61:04:6e:0b:
                    39:ba:aa:92:be:8b:48:e2:3c:a6:8d:11:1d:28:22:
                    00:d1:6d:8b:a1:24:24:ab:1d:44:66:e0:e3:cd:ed:
                    03:84:20:27:e2:a0:77:3e:b0:c4:c3:10:c7:40:bc:
                    00:14:0a:15:55:45:fa:ce:a9:e0:1c:68:92:6a:65:
                    9d:71:0b:27:08:2e:59:61:ca:bf:ff:0b:41:04:b9:
                    fb:8b:0c:65:a6:78:75:88:e8:3a:58:38:83:06:19:
                    6b:fb:dc:ce:cd:7f:5c:6e:6b:bb:45:53:0e:59:c1:
                    14:75:04:d5:19:4b:83:e2:66:85:a0:57:00:b0:e7:
                    89:86:99:a2:2a:b8:be:07:d9:64:7b:6f:ea:cb:6b:
                    d0:7a:f4:fb:01:41:b7:c1:ca:3b:ef:c5:1a:38:a1:
                    47:3f:96:b4:65:36:7c:8e:b2:ef:5e:d4:e6:b9:eb:
                    90:47:4f:3f:90:e1:8c:cb:36:67:1e:d6:7c:2c:7f:
                    54:ca:2d:45:36:ab:dc:7e:50:61:d3:97:55:fb:cc:
                    d5:39:b1:12:62:a8:80:5d:0d:15:3d:96:2b:32:fb:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:40:20:7B:5A:44:F6:C7:1B:E9:3D:D6:1D:AD:5A:26:79:64:A2
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:58:dc:99:ac:26:35:a9:93:c7:46:38:bc:45:69:3d:29:
         33:08:c0:28:4f:c2:fd:d8:98:08:48:8c:e7:bd:c4:d7:03:d9:
         b8:a7:a6:e9:39:69:1e:5a:68:43:72:9a:b2:fd:5c:3c:2d:be:
         e4:98:da:27:99:2c:c7:60:ca:be:fc:78:4a:6c:a0:cd:c2:33:
         7d:f2:33:b3:7d:3c:34:4e:e6:b6:96:9d:69:9c:31:de:12:00:
         6f:4e:23:bb:ac:1f:98:a8:3a:72:aa:1c:85:03:bd:69:3d:75:
         92:1f:da:f5:57:3f:ff:c3:f9:ae:54:2a:ee:02:ca:89:88:58:
         e9:db:4f:76:99:c3:88:7d:30:ff:dc:c2:aa:12:61:3f:95:55:
         c8:9c:00:50:a1:1b:bd:36:bf:0f:a7:af:2c:67:37:9b:10:b8:
         4a:d0:6d:85:63:aa:3e:a3:4d:df:62:b3:cd:ba:43:4e:f6:0f:
         7a:67:b3:ff:fc:bd:9a:d8:47:64:10:ca:99:05:af:c3:21:6c:
         70:23:09:32:26:35:e9:04:a6:db:6d:64:73:37:dd:56:a0:4a:
         7a:09:4c:0f:48:df:bc:1b:22:37:43:c5:a5:da:b0:36:0a:98:
         2d:0b:e5:ee:61:a6:aa:73:8b:3c:bd:1c:03:45:81:31:a4:ad:
         d0:74:19:d6
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZCd92iG/Xee+lFA2HIoy6XPPMSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3NTM0NTczMDE1RkZGNjY3RkVGRjY4MzNGMTMyRDE4
Mzk2MTBEQjAeFw0yMzA4MDMxOTU1MDBaFw0yNDA4MDEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQThDRjUzMEU3NzNDMjI1QTZF
MUY4Rjg1MjJDNjlBMzBENjE3Qjc0QUYyNEQ1QkJGRjYwOTg4OUM1Q0QyRDhCRDM1
Njk4NDY4RUJFRTc4RjM2MTA0NkUwQjM5QkFBQTkyQkU4QjQ4RTIzQ0E2OEQxMTFE
MjgyMjAwRDE2RDhCQTEyNDI0QUIxRDQ0NjZFMEUzQ0RFRDAzODQyMDI3RTJBMDc3
M0VCMEM0QzMxMEM3NDBCQzAwMTQwQTE1NTU0NUZBQ0VBOUUwMUM2ODkyNkE2NTlE
NzEwQjI3MDgyRTU5NjFDQUJGRkYwQjQxMDRCOUZCOEIwQzY1QTY3ODc1ODhFODNB
NTgzODgzMDYxOTZCRkJEQ0NFQ0Q3RjVDNkU2QkJCNDU1MzBFNTlDMTE0NzUwNEQ1
MTk0QjgzRTI2Njg1QTA1NzAwQjBFNzg5ODY5OUEyMkFCOEJFMDdEOTY0N0I2RkVB
Q0I2QkQwN0FGNEZCMDE0MUI3QzFDQTNCRUZDNTFBMzhBMTQ3M0Y5NkI0NjUzNjdD
OEVCMkVGNUVENEU2QjlFQjkwNDc0RjNGOTBFMThDQ0IzNjY3MUVENjdDMkM3RjU0
Q0EyRDQ1MzZBQkRDN0U1MDYxRDM5NzU1RkJDQ0Q1MzlCMTEyNjJBODgwNUQwRDE1
M0Q5NjJCMzJGQjRGREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqM9TDnc8IlpuH4+FIsaaMNYXt0ryTVu/9gmInFzS2L01aYRo6+54
82EEbgs5uqqSvotI4jymjREdKCIA0W2LoSQkqx1EZuDjze0DhCAn4qB3PrDEwxDH
QLwAFAoVVUX6zqngHGiSamWdcQsnCC5ZYcq//wtBBLn7iwxlpnh1iOg6WDiDBhlr
+9zOzX9cbmu7RVMOWcEUdQTVGUuD4maFoFcAsOeJhpmiKri+B9lke2/qy2vQevT7
AUG3wco778UaOKFHP5a0ZTZ8jrLvXtTmueuQR08/kOGMyzZnHtZ8LH9Uyi1FNqvc
flBh05dV+8zVObESYqiAXQ0VPZYrMvtP2wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FI3QQCB7WkT2xxvpPdYdrVomeWSiMB8GA1UdIwQYMBaAFBd1NFcwFf/2Z/7/aDPx
MtGDlhDbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzAvMTc3NTM0NTczMDE1RkZG
NjY3RkVGRjY4MzNGMTMyRDE4Mzk2MTBEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzc1MzQ1NzMwMTVGRkY2NjdGRUZGNjgzM0YxMzJEMTgzOTYx
MERCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8wLzMxMzczMDJlMzIzNDM3MmUzNDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1MzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3
KDANBgkqhkiG9w0BAQsFAAOCAQEAYJ1Y3JmsJjWpk8dGOLxFaT0pMwjAKE/C/diY
CEiM573E1wPZuKem6TlpHlpoQ3Kasv1cPC2+5JjaJ5ksx2DKvvx4SmygzcIzffIz
s308NE7mtpadaZwx3hIAb04ju6wfmKg6cqochQO9aT11kh/a9Vc//8P5rlQq7gLK
iYhY6dtPdpnDiH0w/9zCqhJhP5VVyJwAUKEbvTa/D6evLGc3mxC4StBthWOqPqNN
32KzzbpDTvYPemez//y9mthHZBDKmQWvwyFscCMJMiY16QSm221kczfdVqBKeglM
D0jfvBsiN0PFpdqwNgqYLQvl7mGmqnOLPL0cA0WBMaSt0HQZ1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org