Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
File:                     3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier:          kzI3TPP+aKkzogLvKyxtUTwkru8cqhk4n4/fG0dTx3U=
Subject key identifier:   F8:1B:F2:8C:55:07:A5:0E:4D:57:9D:D2:ED:9A:1B:F6:D2:71:4B:3A
Certificate issuer:       /CN=DE93C72F22244480C517BC4501B196642FEC83A3
Certificate serial:       404A49609E37148FFF8C29B7D19A84AE63211D5F
Authority key identifier: DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
Signing time:             Sat 16 Mar 2024 01:56:18 +0000
ROA not before:           Sat 16 Mar 2024 01:51:18 +0000
ROA not after:            Sat 15 Mar 2025 01:56:18 +0000
asID:                     266303
IP address blocks:        170.79.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4a:49:60:9e:37:14:8f:ff:8c:29:b7:d1:9a:84:ae:63:21:1d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE93C72F22244480C517BC4501B196642FEC83A3
        Validity
            Not Before: Mar 16 01:51:18 2024 GMT
            Not After : Mar 15 01:56:18 2025 GMT
        Subject: CN=F81BF28C5507A50E4D579DD2ED9A1BF6D2714B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:c9:60:76:8c:d9:81:7e:9e:fb:d8:14:3a:
                    52:3a:a8:68:87:ca:99:33:bb:2a:69:b7:8b:3a:5d:
                    52:f5:8a:0f:df:42:6f:8d:0e:88:f5:b8:d8:21:80:
                    30:65:1e:5f:c1:6b:c3:7a:65:23:be:d5:27:e0:09:
                    1c:ea:23:d3:e9:5f:a5:0d:58:5a:b4:1b:f0:7c:c1:
                    06:a0:e1:a3:98:36:1b:bf:1b:c8:73:d5:40:50:76:
                    af:9b:77:fb:76:4d:91:d2:50:73:19:ca:b0:dd:06:
                    42:cb:01:ea:63:7d:75:0e:f2:c6:9a:a7:e4:64:b5:
                    ee:fa:05:7d:65:f9:bc:e5:da:ee:a6:e4:3b:11:e2:
                    19:a3:a3:5f:00:95:dd:81:5c:c7:39:37:cf:ac:ae:
                    72:1f:51:76:9a:0f:9c:50:8d:f5:4d:ef:95:f6:27:
                    59:72:fe:b4:a7:51:62:5d:0b:e5:43:e6:bd:b7:89:
                    a2:3f:9e:32:2f:58:d7:e8:1a:7f:b7:c3:23:3c:70:
                    cb:3c:6a:3a:33:82:63:e8:d7:71:e0:ac:93:b1:4e:
                    8a:b6:6d:16:a8:d4:59:52:2c:f3:bf:8a:77:13:d8:
                    83:1c:19:5e:02:aa:f5:59:c2:53:83:f3:a4:bb:0a:
                    d9:2d:87:65:37:ec:30:0d:b2:69:2a:65:68:44:85:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:F2:8C:55:07:A5:0E:4D:57:9D:D2:ED:9A:1B:F6:D2:71:4B:3A
            X509v3 Authority Key Identifier:
                keyid:DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:af:4c:c9:6d:e0:47:34:b9:6d:87:0f:e9:23:7e:28:d5:80:
         04:58:cd:d3:15:79:2a:c3:13:03:bc:3f:8c:67:ce:e3:f5:a7:
         d4:81:7d:7c:00:7c:72:3f:0d:7b:60:7e:24:14:96:42:3a:24:
         5a:3f:bc:5e:58:f5:bd:34:8f:35:da:9c:82:89:1e:c4:41:09:
         58:ff:91:65:f9:ab:4d:09:7f:0b:39:63:fa:24:58:34:a5:44:
         47:b9:59:c6:53:47:f1:d5:69:ce:42:5d:8f:37:8c:4f:2c:0d:
         2a:c8:94:73:0e:f2:5d:49:3b:c9:9b:d2:d8:8c:fd:7a:40:81:
         52:43:a7:a4:4b:2f:b3:f4:1e:68:2c:60:4e:cf:b6:a3:ab:b3:
         50:cf:5b:28:b8:4a:6a:ec:6c:08:a9:7a:f8:0e:22:00:d2:d7:
         72:f1:ff:b3:2d:95:f2:ce:27:32:29:9c:6c:c7:a1:0f:e1:52:
         90:0a:3f:9c:17:b1:9c:0d:6e:90:20:3e:53:b3:a9:b3:94:07:
         62:e2:65:43:3d:97:0b:9b:39:1d:4e:0d:79:aa:d3:00:44:4c:
         44:3e:71:8c:3d:aa:ef:db:b2:c7:e6:13:b3:46:e8:42:f4:1d:
         8f:05:af:7b:25:a1:ec:12:90:79:6a:41:25:7f:54:44:af:7c:
         72:59:e1:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQEpJYJ43FI//jCm30ZqErmMhHV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU5M0M3MkYyMjI0NDQ4MEM1MTdCQzQ1MDFCMTk2NjQy
RkVDODNBMzAeFw0yNDAzMTYwMTUxMThaFw0yNTAzMTUwMTU2MThaMDMxMTAvBgNV
BAMTKEY4MUJGMjhDNTUwN0E1MEU0RDU3OUREMkVEOUExQkY2RDI3MTRCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrg8lgdozZgX6e+9gUOlI6qGiH
ypkzuyppt4s6XVL1ig/fQm+NDoj1uNghgDBlHl/Ba8N6ZSO+1SfgCRzqI9PpX6UN
WFq0G/B8wQag4aOYNhu/G8hz1UBQdq+bd/t2TZHSUHMZyrDdBkLLAepjfXUO8saa
p+Rkte76BX1l+bzl2u6m5DsR4hmjo18Ald2BXMc5N8+srnIfUXaaD5xQjfVN75X2
J1ly/rSnUWJdC+VD5r23iaI/njIvWNfoGn+3wyM8cMs8ajozgmPo13HgrJOxToq2
bRao1FlSLPO/incT2IMcGV4CqvVZwlOD86S7Ctkth2U37DANsmkqZWhEhZ63AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+BvyjFUHpQ5NV53S7Zob9tJxSzowHwYDVR0j
BBgwFoAU3pPHLyIkRIDFF7xFAbGWZC/sg6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF
NFQvMC9ERTkzQzcyRjIyMjQ0NDgwQzUxN0JDNDUwMUIxOTY2NDJGRUM4M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFOTNDNzJGMjIyNDQ0ODBD
NTE3QkM0NTAxQjE5NjY0MkZFQzgzQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNmN2hYSzhRM0tQOEJadXBpRXdMVjFxMUw3Qm1SUktyQjFiUlg0SlZxRTRULzAv
MzEzNzMwMmUzNzM5MmUzMTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqT68wDQYJKoZIhvcNAQELBQADggEBACSvTMlt
4Ec0uW2HD+kjfijVgARYzdMVeSrDEwO8P4xnzuP1p9SBfXwAfHI/DXtgfiQUlkI6
JFo/vF5Y9b00jzXanIKJHsRBCVj/kWX5q00Jfws5Y/okWDSlREe5WcZTR/HVac5C
XY83jE8sDSrIlHMO8l1JO8mb0tiM/XpAgVJDp6RLL7P0HmgsYE7PtqOrs1DPWyi4
SmrsbAipevgOIgDS13Lx/7MtlfLOJzIpnGzHoQ/hUpAKP5wXsZwNbpAgPlOzqbOU
B2LiZUM9lwubOR1ODXmq0wBETEQ+cYw9qu/bssfmE7NG6EL0HY8Fr3sloewSkHlq
QSV/VESvfHJZ4VQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org