Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          T1AjIkMT3/Wq0tSz0SG9N2INehPFQo8pL4lHuhdXEPc=
Subject key identifier:   DF:65:4A:2A:64:64:F3:70:CD:E4:45:49:23:D3:D8:85:2A:EC:3A:DF
Certificate issuer:       /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial:       325C91A224EC45E37E3F3B1DE3E5CC4156026962
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 27 Mar 2024 20:00:01 +0000
ROA not before:           Wed 27 Mar 2024 19:55:01 +0000
ROA not after:            Wed 26 Mar 2025 20:00:01 +0000
asID:                     266353
IP address blocks:        170.239.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5c:91:a2:24:ec:45:e3:7e:3f:3b:1d:e3:e5:cc:41:56:02:69:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
        Validity
            Not Before: Mar 27 19:55:01 2024 GMT
            Not After : Mar 26 20:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:da:94:81:86:72:5f:a2:23:bd:67:ba:ca:
                    3e:51:d5:2e:47:ca:cd:1b:2a:e0:3a:8a:c8:f4:85:
                    4c:cc:92:02:52:48:24:d3:d5:41:bf:7a:19:8a:1b:
                    f8:70:1a:46:4b:d5:ac:9b:fd:29:f2:39:cf:1e:70:
                    80:ff:84:67:73:60:87:e6:2d:c9:c7:6a:04:82:18:
                    fc:f2:63:7f:82:af:46:b2:be:60:53:2d:cd:d7:79:
                    94:5b:93:c9:65:7d:7c:50:82:38:f2:05:18:7d:b7:
                    a1:32:f1:a8:75:11:06:6f:10:1f:a7:0d:74:38:af:
                    02:a0:04:cf:bd:56:6a:a4:4f:24:d1:44:c5:bb:eb:
                    34:de:2a:63:82:55:4b:f3:b7:82:75:f1:fa:5f:23:
                    45:5a:7c:0e:95:3c:04:ae:c8:4f:9f:f7:08:69:13:
                    2d:be:52:da:fa:ba:36:d8:9c:5e:de:74:4e:8d:b3:
                    ff:83:2c:74:85:5d:78:6e:09:6f:74:06:e9:06:26:
                    e7:f5:7f:14:1b:b8:24:26:b5:6f:3f:54:d0:75:ac:
                    b5:a3:1c:18:a8:b4:8f:cb:57:fd:c3:58:c7:4a:27:
                    a2:80:48:d4:60:60:7f:1a:f1:b5:41:bc:0c:7a:0a:
                    86:44:b6:67:65:f3:f0:8b:16:b6:6e:16:75:40:44:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:4A:2A:64:64:F3:70:CD:E4:45:49:23:D3:D8:85:2A:EC:3A:DF
            X509v3 Authority Key Identifier:
                keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:79:d0:01:89:77:99:be:34:79:27:79:fa:1b:9b:82:c4:
         bb:9a:5a:a9:45:47:b3:eb:ee:a4:4b:34:6f:11:cb:20:16:e3:
         62:d2:9b:28:ce:f4:1f:58:af:6f:87:b1:3f:25:c6:70:1e:a8:
         d6:58:f3:3d:73:40:69:9d:f4:68:b1:39:5b:e3:f7:9e:50:a3:
         2a:f7:77:60:af:10:e7:f1:eb:8e:18:b5:33:22:a5:6c:4d:ca:
         26:99:55:e2:ad:c9:c4:f9:f8:d8:79:a0:3c:ae:d9:ac:a8:ce:
         96:ff:ec:9c:0d:05:8f:be:27:23:75:f5:d2:b3:f8:9c:56:c0:
         0a:2f:3b:35:b4:e6:a7:41:0a:ad:55:8d:47:32:d2:e5:9b:3e:
         f1:b7:58:e6:dc:7f:88:80:56:ab:28:48:70:0f:ea:24:a0:59:
         73:3a:92:eb:90:1f:a3:a4:91:0a:40:36:8a:ca:f9:1b:50:82:
         28:14:c5:66:c7:7b:d4:c3:52:5c:f1:ca:b6:a3:21:c3:fa:55:
         88:22:a0:d6:d1:f7:04:c8:8d:92:ee:23:1d:39:d5:cc:47:dd:
         4c:7c:0e:d1:ca:1e:85:1d:95:7c:44:ae:79:e7:a7:cb:7e:30:
         21:dc:78:84:36:18:7c:38:b0:36:8a:9b:3e:1e:ac:47:fc:37:
         c0:a2:f5:fb
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUMlyRoiTsReN+Pzsd4+XMQVYCaWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5N0JBMzY4NzlEMENDQzAyNjExQ0U0RTBDNEYxODEy
QTNFQzEwODAeFw0yNDAzMjcxOTU1MDFaFw0yNTAzMjYyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRCQ0RBOTQ4MTg2NzI1RkEy
MjNCRDY3QkFDQTNFNTFENTJFNDdDQUNEMUIyQUUwM0E4QUM4RjQ4NTRDQ0M5MjAy
NTI0ODI0RDNENTQxQkY3QTE5OEExQkY4NzAxQTQ2NEJENUFDOUJGRDI5RjIzOUNG
MUU3MDgwRkY4NDY3NzM2MDg3RTYyREM5Qzc2QTA0ODIxOEZDRjI2MzdGODJBRjQ2
QjJCRTYwNTMyRENERDc3OTk0NUI5M0M5NjU3RDdDNTA4MjM4RjIwNTE4N0RCN0Ex
MzJGMUE4NzUxMTA2NkYxMDFGQTcwRDc0MzhBRjAyQTAwNENGQkQ1NjZBQTQ0RjI0
RDE0NEM1QkJFQjM0REUyQTYzODI1NTRCRjNCNzgyNzVGMUZBNUYyMzQ1NUE3QzBF
OTUzQzA0QUVDODRGOUZGNzA4NjkxMzJEQkU1MkRBRkFCQTM2RDg5QzVFREU3NDRF
OERCM0ZGODMyQzc0ODU1RDc4NkUwOTZGNzQwNkU5MDYyNkU3RjU3RjE0MUJCODI0
MjZCNTZGM0Y1NEQwNzVBQ0I1QTMxQzE4QThCNDhGQ0I1N0ZEQzM1OEM3NEEyN0Ey
ODA0OEQ0NjA2MDdGMUFGMUI1NDFCQzBDN0EwQTg2NDRCNjY3NjVGM0YwOEIxNkI2
NkUxNjc1NDA0NEI2RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1LzalIGGcl+iI71nuso+UdUuR8rNGyrgOorI9IVMzJICUkgk09VB
v3oZihv4cBpGS9Wsm/0p8jnPHnCA/4Rnc2CH5i3Jx2oEghj88mN/gq9Gsr5gUy3N
13mUW5PJZX18UII48gUYfbehMvGodREGbxAfpw10OK8CoATPvVZqpE8k0UTFu+s0
3ipjglVL87eCdfH6XyNFWnwOlTwErshPn/cIaRMtvlLa+ro22Jxe3nROjbP/gyx0
hV14bglvdAbpBibn9X8UG7gkJrVvP1TQday1oxwYqLSPy1f9w1jHSieigEjUYGB/
GvG1QbwMegqGRLZnZfPwixa2bhZ1QES20QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FN9lSipkZPNwzeRFSSPT2IUq7DrfMB8GA1UdIwQYMBaAFEOXujaHnQzMAmEc5ODE
8YEqPsEIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNQWTNvaW1QWnJEb1Fm
QkdobVpCaGRlVGpUdVlaaGE4UHlUbTN5TTZuak5wLzAvNDM5N0JBMzY4NzlEMEND
QzAyNjExQ0U0RTBDNEYxODEyQTNFQzEwOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80Mzk3QkEzNjg3OUQwQ0NDMDI2MTFDRTRFMEM0RjE4MTJBM0VD
MTA4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zUFkzb2ltUFpyRG9RZkJHaG1a
QmhkZVRqVHVZWmhhOFB5VG0zeU02bmpOcC8wLzMxMzczMDJlMzIzMzM5MmUzMTM0
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq744wDQYJKoZIhvcNAQELBQADggEBAFznedABiXeZvjR5J3n6G5uCxLuaWqlF
R7Pr7qRLNG8RyyAW42LSmyjO9B9Yr2+HsT8lxnAeqNZY8z1zQGmd9GixOVvj955Q
oyr3d2CvEOfx644YtTMipWxNyiaZVeKtycT5+Nh5oDyu2ayozpb/7JwNBY++JyN1
9dKz+JxWwAovOzW05qdBCq1VjUcy0uWbPvG3WObcf4iAVqsoSHAP6iSgWXM6kuuQ
H6OkkQpANorK+RtQgigUxWbHe9TDUlzxyrajIcP6VYgioNbR9wTIjZLuIx051cxH
3Ux8DtHKHoUdlXxErnnnp8t+MCHceIQ2GHw4sDaKmz4erEf8N8Ci9fs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org