Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31382e302f32332d3233203d3e20323636343337.roa
File:                     3137302e38322e31382e302f32332d3233203d3e20323636343337.roa (raw, json)
Hash identifier:          wQvzTENBD9Ooea70p7Ud6yCW0kGtYtbvCYhZttDDA8E=
Subject key identifier:   4E:11:96:D3:49:D6:B5:C3:35:54:2E:67:C5:DC:37:57:05:1A:C9:03
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       2BDD3B52939570BD903CBEEFFEB40D4F250F770D
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31382e302f32332d3233203d3e20323636343337.roa
Signing time:             Thu 05 May 2022 13:33:32 +0000
ROA not before:           Thu 05 May 2022 13:28:32 +0000
ROA not after:            Thu 04 May 2023 13:33:32 +0000
asID:                     266437
IP address blocks:        170.82.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dd:3b:52:93:95:70:bd:90:3c:be:ef:fe:b4:0d:4f:25:0f:77:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: May  5 13:28:32 2022 GMT
            Not After : May  4 13:33:32 2023 GMT
        Subject: CN=4E1196D349D6B5C335542E67C5DC3757051AC903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:d4:46:31:ed:41:5d:92:fd:0a:e5:8c:d0:
                    f6:18:59:74:33:e7:87:94:23:1b:d0:43:e0:09:59:
                    03:f3:f9:1e:87:7a:e5:48:86:fa:37:75:26:67:12:
                    31:cc:ee:2e:a4:ad:9c:47:5c:5e:11:a9:fe:8d:84:
                    08:2e:94:aa:52:7d:e0:db:71:5a:59:89:9e:b8:b3:
                    d8:29:ed:66:d4:10:27:1c:d5:dd:c0:80:6f:a8:b8:
                    77:a8:47:4f:ca:f7:df:f1:a7:02:7a:4a:f4:7e:f9:
                    24:be:cf:33:44:b7:a3:1f:39:77:e5:54:9b:37:46:
                    c4:3b:7d:d1:ed:f9:20:89:28:81:0f:2b:4f:e9:62:
                    ae:fb:ac:89:97:16:da:48:3f:d9:e8:8b:c5:38:53:
                    d1:b0:fa:52:f0:e1:d8:a6:fa:8a:14:90:42:44:2b:
                    d9:96:68:d3:bf:8d:9b:a4:db:d1:98:63:cd:d7:70:
                    7b:14:46:ef:75:14:e6:36:9c:04:e5:7b:56:ea:c4:
                    55:74:76:de:5e:b6:ea:6e:aa:f5:5d:b7:73:0c:4b:
                    7a:63:0f:b5:91:c2:a8:8b:cc:4d:9d:55:10:88:0a:
                    3f:0d:64:14:55:bc:76:f2:6e:0d:47:f0:ef:04:6e:
                    f8:04:4b:6c:ca:2b:78:08:93:90:51:5f:9b:e1:fa:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:96:D3:49:D6:B5:C3:35:54:2E:67:C5:DC:37:57:05:1A:C9:03
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/3137302e38322e31382e302f32332d3233203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:cf:2a:a0:85:5a:f7:7d:88:26:d7:97:80:9d:37:3d:43:
         ea:0a:fe:5a:bc:51:3c:5f:99:30:a0:67:5d:c2:8a:40:23:49:
         08:9f:5d:69:7d:73:5d:33:63:f7:44:85:9d:c6:2d:bd:09:7e:
         c8:71:6c:a7:06:eb:18:df:c5:be:ac:88:24:34:dd:61:ed:14:
         38:26:a9:4a:5b:95:02:ea:3b:3f:2a:5e:97:8d:d8:37:63:37:
         74:46:08:e1:a4:d1:57:8a:e9:7e:e4:f6:7b:97:e7:99:92:62:
         1e:2d:34:90:a2:17:16:83:11:41:8d:61:b9:8c:8b:6f:bb:bf:
         20:5e:06:e5:2e:6e:52:5e:dc:19:a5:2f:0a:5b:df:96:6a:ad:
         5f:1c:46:7f:77:42:ac:de:51:b7:d8:25:ec:8f:e6:ab:2c:9b:
         e2:87:b4:6a:04:10:fe:05:3f:97:1d:68:d1:c3:b7:05:60:b4:
         55:0a:ef:72:01:b6:ed:e8:dc:b5:8e:f1:a2:5e:bd:71:10:3c:
         ee:c0:70:9b:74:cf:3e:3b:fd:40:e4:20:8e:0b:5f:48:d1:13:
         c3:b1:06:33:a2:b2:ef:b1:25:20:c6:09:fe:1f:3f:99:aa:53:
         29:02:5b:70:bb:96:05:7f:dc:f3:13:92:e0:87:01:21:f4:2b:
         c6:d1:15:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK907UpOVcL2QPL7v/rQNTyUPdw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4MUQ4QTAyQkE5OUY0ODk4MkRCMEU1MUIwRjYxNERD
OUI2MTczRDAeFw0yMjA1MDUxMzI4MzJaFw0yMzA1MDQxMzMzMzJaMDMxMTAvBgNV
BAMTKDRFMTE5NkQzNDlENkI1QzMzNTU0MkU2N0M1REMzNzU3MDUxQUM5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7dRGMe1BXZL9CuWM0PYYWXQz
54eUIxvQQ+AJWQPz+R6HeuVIhvo3dSZnEjHM7i6krZxHXF4Rqf6NhAgulKpSfeDb
cVpZiZ64s9gp7WbUECcc1d3AgG+ouHeoR0/K99/xpwJ6SvR++SS+zzNEt6MfOXfl
VJs3RsQ7fdHt+SCJKIEPK0/pYq77rImXFtpIP9noi8U4U9Gw+lLw4dim+ooUkEJE
K9mWaNO/jZuk29GYY83XcHsURu91FOY2nATle1bqxFV0dt5etupuqvVdt3MMS3pj
D7WRwqiLzE2dVRCICj8NZBRVvHbybg1H8O8EbvgES2zKK3gIk5BRX5vh+swNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUThGW00nWtcM1VC5nxdw3VwUayQMwHwYDVR0j
BBgwFoAUA4HYoCupn0iYLbDlGw9hTcm2Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMC8wMzgxRDhBMDJCQTk5RjQ4OTgyREIwRTUxQjBGNjE0REM5QjYxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzODFEOEEwMkJBOTlGNDg5
ODJEQjBFNTFCMEY2MTREQzlCNjE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzAv
MzEzNzMwMmUzODMyMmUzMTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlISMA0GCSqGSIb3DQEBCwUAA4IBAQBMPc8qoIVa
932IJteXgJ03PUPqCv5avFE8X5kwoGddwopAI0kIn11pfXNdM2P3RIWdxi29CX7I
cWynBusY38W+rIgkNN1h7RQ4JqlKW5UC6js/Kl6Xjdg3Yzd0RgjhpNFXiul+5PZ7
l+eZkmIeLTSQohcWgxFBjWG5jItvu78gXgblLm5SXtwZpS8KW9+Waq1fHEZ/d0Ks
3lG32CXsj+arLJvih7RqBBD+BT+XHWjRw7cFYLRVCu9yAbbt6Ny1jvGiXr1xEDzu
wHCbdM8+O/1A5CCOC19I0RPDsQYzorLvsSUgxgn+Hz+ZqlMpAltwu5YFf9zzE5Lg
hwEh9CvG0RWo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org