Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
File:                     3137302e3233392e382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          33ZMGb1v9M2xx46hCTJyU+QfFKDuUyL/ynGdid7ezRo=
Subject key identifier:   54:81:DC:63:BF:A0:7F:87:73:6B:84:D9:66:72:E5:EA:B6:78:55:BB
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       21125117245BE3E6B65F2EEE6A8AC7D4BA189374
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        170.239.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:51:17:24:5b:e3:e6:b6:5f:2e:ee:6a:8a:c7:d4:ba:18:93:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=5481DC63BFA07F87736B84D96672E5EAB67855BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:01:d4:fd:50:e5:f6:37:a7:59:4f:5b:ba:
                    9e:8b:a8:3a:7c:ce:71:ab:de:c5:f3:66:75:dc:12:
                    91:02:aa:ff:49:dc:9f:ef:08:f2:89:76:e7:98:81:
                    16:66:15:c6:37:ce:be:f3:fb:24:a2:5e:7f:5f:ba:
                    63:a2:76:ed:77:e8:68:02:2e:46:f3:d7:e2:d7:fa:
                    dd:a9:89:27:5e:8b:29:e4:4a:af:e9:16:8e:74:7c:
                    ba:d9:b0:1b:ba:63:aa:b4:00:f2:12:5e:e4:8e:9b:
                    c7:28:d9:45:4e:cd:9b:45:97:b3:cc:e4:86:63:3d:
                    6e:d3:b7:61:d3:0f:e1:83:39:9c:0b:0d:90:d3:af:
                    6b:98:86:d7:33:42:d4:b7:6d:03:76:33:b3:bf:f5:
                    8c:81:31:98:7c:a4:13:4a:ff:40:b3:aa:54:05:b9:
                    b6:95:a7:2b:ae:37:40:6c:6d:f4:84:e5:d9:a8:c0:
                    e0:f5:5a:7e:f9:52:63:ab:fc:b3:c6:96:29:be:21:
                    13:a7:00:4b:6d:44:07:2f:70:ee:cf:f1:fe:6b:60:
                    8b:a1:d9:1d:fa:7e:e8:3a:9d:a8:59:4c:e2:be:36:
                    d0:d9:46:e3:49:6b:1f:76:9a:5e:1a:10:b5:53:e5:
                    79:7e:38:0f:6e:60:9c:2a:d0:22:33:fa:71:e6:cc:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:81:DC:63:BF:A0:7F:87:73:6B:84:D9:66:72:E5:EA:B6:78:55:BB
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3137302e3233392e382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:04:d7:f2:d9:7c:07:8b:b7:13:f1:18:82:fa:f0:a3:16:
         35:27:5a:03:b3:25:ae:86:e4:31:43:7f:73:ad:79:4e:46:3d:
         b0:83:f1:81:ad:48:dd:2a:0f:97:ac:ed:fb:7d:fc:72:ad:ab:
         8a:21:72:bf:a4:54:c4:bd:82:d4:ba:ee:18:45:07:a1:49:d6:
         18:52:56:06:0d:78:46:10:6d:16:d6:df:74:9b:5a:e3:fc:19:
         24:5e:6c:4e:47:03:39:19:bb:1d:d1:55:12:4e:50:15:f6:4e:
         35:d0:3e:8b:59:5e:0b:97:6c:e8:f4:2c:26:20:8f:36:6f:c5:
         9b:a7:79:58:60:bc:d4:a8:db:63:4e:91:63:fe:dc:58:69:76:
         44:e2:a8:1c:ec:9e:27:34:9e:22:f6:45:6e:66:d5:56:2e:58:
         4f:72:65:39:b7:7a:71:15:07:0c:96:04:98:54:c9:91:1e:1d:
         4e:47:46:c5:e1:41:49:c4:d3:c0:65:4e:82:8b:19:e7:0b:ca:
         3c:7c:e9:e5:aa:20:43:bc:a6:f6:14:6b:c3:f8:31:b7:2b:3b:
         a5:49:e8:46:c8:91:2c:fa:1a:66:3d:b0:59:01:21:8e:f3:5a:
         1c:d7:f0:56:6b:40:63:f9:14:0f:19:5a:4d:24:2a:05:ff:17:
         cc:15:5f:59
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIRJRFyRb4+a2Xy7uaorH1LoYk3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExOEMwQ0QyRDNEQkY3RDZFNTY0MTUzNTlENEVENUJC
RkI5QjlCMDAeFw0yNDA0MDQwMTU4MDZaFw0yNTA0MDMwMjAzMDZaMDMxMTAvBgNV
BAMTKDU0ODFEQzYzQkZBMDdGODc3MzZCODREOTY2NzJFNUVBQjY3ODU1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq7wHU/VDl9jenWU9bup6LqDp8
znGr3sXzZnXcEpECqv9J3J/vCPKJdueYgRZmFcY3zr7z+ySiXn9fumOidu136GgC
Lkbz1+LX+t2piSdeiynkSq/pFo50fLrZsBu6Y6q0APISXuSOm8co2UVOzZtFl7PM
5IZjPW7Tt2HTD+GDOZwLDZDTr2uYhtczQtS3bQN2M7O/9YyBMZh8pBNK/0CzqlQF
ubaVpyuuN0BsbfSE5dmowOD1Wn75UmOr/LPGlim+IROnAEttRAcvcO7P8f5rYIuh
2R36fug6nahZTOK+NtDZRuNJax92ml4aELVT5Xl+OA9uYJwq0CIz+nHmzKMFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVIHcY7+gf4dza4TZZnLl6rZ4VbswHwYDVR0j
BBgwFoAU8RjAzS09v31uVkFTWdTtW7+5ubAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMS9GMTE4QzBDRDJEM0RCRjdENkU1NjQxNTM1OUQ0RUQ1QkJGQjlCOUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMThDMENEMkQzREJGN0Q2
RTU2NDE1MzU5RDRFRDVCQkZCOUI5QjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzEv
MzEzNzMwMmUzMjMzMzkyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM5
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqrvCDANBgkqhkiG9w0BAQsFAAOCAQEALlcE1/LZfAeL
txPxGIL68KMWNSdaA7MlrobkMUN/c615TkY9sIPxga1I3SoPl6zt+338cq2riiFy
v6RUxL2C1LruGEUHoUnWGFJWBg14RhBtFtbfdJta4/wZJF5sTkcDORm7HdFVEk5Q
FfZONdA+i1leC5ds6PQsJiCPNm/Fm6d5WGC81KjbY06RY/7cWGl2ROKoHOyeJzSe
IvZFbmbVVi5YT3JlObd6cRUHDJYEmFTJkR4dTkdGxeFBScTTwGVOgosZ5wvKPHzp
5aogQ7ym9hRrw/gxtys7pUnoRsiRLPoaZj2wWQEhjvNaHNfwVmtAY/kUDxlaTSQq
Bf8XzBVfWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org