Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32342d3234203d3e20323636343337.roa (raw, json)
Hash identifier:          jJlDl7RC61layI/BmcWQKaBaAfv8GhdOrTMuN306t6Y=
Subject key identifier:   83:52:D3:B2:3A:B6:4A:CD:B6:2E:95:78:8B:1D:2F:F4:49:5D:A7:C2
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       4498D27D214001EF33D30D9EAB503EBDD426BEB3
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:41 +0000
ROA not before:           Mon 29 Jan 2024 15:01:41 +0000
ROA not after:            Mon 27 Jan 2025 15:06:41 +0000
asID:                     266437
IP address blocks:        170.82.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:98:d2:7d:21:40:01:ef:33:d3:0d:9e:ab:50:3e:bd:d4:26:be:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:41 2024 GMT
            Not After : Jan 27 15:06:41 2025 GMT
        Subject: CN=8352D3B23AB64ACDB62E95788B1D2FF4495DA7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:19:4b:09:8d:1d:06:0f:e4:8c:bd:9c:3b:
                    9e:61:97:ec:a6:74:eb:34:d7:24:2a:1a:4d:55:e6:
                    d4:e5:bd:a2:7f:47:60:dd:c7:f0:6d:fb:44:23:0e:
                    40:dc:35:1c:3f:54:25:94:30:e7:a4:6a:f8:4a:ff:
                    f6:91:e9:df:42:8a:75:a6:2e:ef:88:1c:22:5a:18:
                    40:3e:ae:e3:7a:27:85:72:ce:a0:9b:6e:84:20:6c:
                    7c:28:db:cc:eb:f2:c6:8d:93:2b:1f:e2:f1:55:b7:
                    0b:a2:8f:9a:9f:33:9b:43:cc:98:17:25:a6:98:dc:
                    d7:fb:42:90:f0:7d:4b:02:65:fa:c3:24:18:d8:1a:
                    be:f5:aa:9c:eb:e8:72:74:81:64:b8:ca:4d:b3:ea:
                    4c:32:44:ba:21:e2:e8:1a:0b:69:ba:72:ff:b5:2f:
                    bd:35:f7:d2:99:04:e2:13:45:08:6e:a4:57:59:bf:
                    a9:87:51:93:38:de:4b:54:0c:67:a8:3a:8a:28:e4:
                    48:43:d6:fc:1c:f7:39:5c:54:9a:79:fb:25:e5:dd:
                    45:52:52:9f:5e:d4:50:0e:42:62:33:be:16:99:7f:
                    66:16:9e:77:0d:18:54:12:25:37:86:a9:f1:36:21:
                    51:77:29:aa:04:66:ef:2a:09:49:5e:ee:e4:f3:e1:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:D3:B2:3A:B6:4A:CD:B6:2E:95:78:8B:1D:2F:F4:49:5D:A7:C2
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31362e302f32342d3234203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:af:26:31:d8:be:4c:5f:61:94:7c:de:98:f5:2c:bc:69:
         ea:fa:67:33:97:ad:8e:3a:c4:e6:8f:8d:f8:61:4b:04:f7:ad:
         f5:7b:4e:ed:d2:b4:17:5f:36:0a:19:5f:d2:a6:24:42:6e:69:
         79:47:81:f9:12:2d:0b:c5:d6:ac:75:11:6b:b1:0c:91:73:fd:
         73:75:80:49:60:67:58:1b:a9:ac:a2:bf:5a:0c:96:4d:bb:b9:
         fb:d0:21:74:1d:23:a5:7f:6b:dc:b4:9d:fb:19:76:07:68:8b:
         72:59:17:c9:f9:c5:a6:f6:2e:45:84:20:d1:c8:7b:55:87:ca:
         e5:52:e3:3a:a1:0f:17:ea:25:8f:40:f5:8b:47:a2:ab:5e:de:
         55:6b:9e:5d:44:1b:37:79:ad:68:29:9c:99:58:d5:7c:96:af:
         fe:63:34:e0:6c:35:8d:af:d2:ce:ad:79:40:5a:b4:a8:9d:a2:
         1d:04:29:3b:f0:c4:dc:56:4d:0e:c0:1a:73:66:12:c7:b8:79:
         4d:db:29:a1:53:25:a4:3d:71:e7:86:c7:f7:13:bc:f5:44:f8:
         3b:46:dc:ea:b7:2e:c0:da:9d:7d:1e:d7:be:25:75:37:1f:a8:
         05:39:29:19:d1:59:1a:0f:66:e8:c2:f0:05:96:cf:b8:bf:49:
         ba:49:7d:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURJjSfSFAAe8z0w2eq1A+vdQmvrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzNUMwOEQ1MjdEMDI3QThCOUU5ODQyN0I2ODM0MEFC
QUVEMDk2MjAeFw0yNDAxMjkxNTAxNDFaFw0yNTAxMjcxNTA2NDFaMDMxMTAvBgNV
BAMTKDgzNTJEM0IyM0FCNjRBQ0RCNjJFOTU3ODhCMUQyRkY0NDk1REE3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XBlLCY0dBg/kjL2cO55hl+ym
dOs01yQqGk1V5tTlvaJ/R2Ddx/Bt+0QjDkDcNRw/VCWUMOekavhK//aR6d9CinWm
Lu+IHCJaGEA+ruN6J4VyzqCbboQgbHwo28zr8saNkysf4vFVtwuij5qfM5tDzJgX
JaaY3Nf7QpDwfUsCZfrDJBjYGr71qpzr6HJ0gWS4yk2z6kwyRLoh4ugaC2m6cv+1
L70199KZBOITRQhupFdZv6mHUZM43ktUDGeoOooo5EhD1vwc9zlcVJp5+yXl3UVS
Up9e1FAOQmIzvhaZf2YWnncNGFQSJTeGqfE2IVF3KaoEZu8qCUle7uTz4RypAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUg1LTsjq2Ss22LpV4ix0v9Eldp8IwHwYDVR0j
BBgwFoAUkTXAjVJ9AnqLnphCe2g0CrrtCWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMC85MTM1QzA4RDUyN0QwMjdBOEI5RTk4NDI3QjY4MzQwQUJBRUQwOTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxMzVDMDhENTI3RDAyN0E4
QjlFOTg0MjdCNjgzNDBBQkFFRDA5NjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzAv
MzEzNzMwMmUzODMyMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlIQMA0GCSqGSIb3DQEBCwUAA4IBAQB5za8mMdi+
TF9hlHzemPUsvGnq+mczl62OOsTmj434YUsE9631e07t0rQXXzYKGV/SpiRCbml5
R4H5Ei0LxdasdRFrsQyRc/1zdYBJYGdYG6msor9aDJZNu7n70CF0HSOlf2vctJ37
GXYHaItyWRfJ+cWm9i5FhCDRyHtVh8rlUuM6oQ8X6iWPQPWLR6KrXt5Va55dRBs3
ea1oKZyZWNV8lq/+YzTgbDWNr9LOrXlAWrSonaIdBCk78MTcVk0OwBpzZhLHuHlN
2ymhUyWkPXHnhsf3E7z1RPg7Rtzqty7A2p19Hte+JXU3H6gFOSkZ0VkaD2bowvAF
ls+4v0m6SX3F
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org