Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          MO1LrKA3BYziebB9hlrtwehzHZMR9o0W/cs8zBj4vUA=
Subject key identifier:   AA:16:EF:FB:71:46:4A:8F:00:C9:65:4B:F3:A5:9E:52:4D:39:09:B5
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       5E9DEC29CD661EEFD5026438D0B84CAFFCED44DC
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:51 +0000
ROA not before:           Fri 23 Jun 2023 20:01:51 +0000
ROA not after:            Fri 21 Jun 2024 20:06:51 +0000
asID:                     264996
IP address blocks:        170.84.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:ec:29:cd:66:1e:ef:d5:02:64:38:d0:b8:4c:af:fc:ed:44:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:51 2023 GMT
            Not After : Jun 21 20:06:51 2024 GMT
        Subject: CN=AA16EFFB71464A8F00C9654BF3A59E524D3909B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:63:9d:1c:5b:72:7a:d4:32:26:30:f0:cf:
                    1e:dd:7a:a8:52:12:f4:5a:0c:18:ec:b3:6b:9d:2f:
                    7e:d6:b4:f7:4b:c3:b1:a5:03:d8:f9:e0:26:09:8b:
                    dd:4b:f1:7b:24:b7:4f:ca:52:90:13:3c:7f:72:c5:
                    11:28:cb:48:9f:5b:a2:83:09:78:02:55:96:a8:81:
                    d9:35:15:03:7b:bd:83:f2:6f:81:a2:98:a7:17:03:
                    a7:9f:70:ed:1f:0c:57:53:e0:c2:37:58:ed:3a:e4:
                    1c:fa:c2:87:10:1d:78:4e:d2:87:85:1b:87:ed:53:
                    b8:eb:d2:95:72:08:6e:5f:cc:f6:fb:84:95:6e:3d:
                    67:ac:32:ae:d6:1a:fe:aa:22:e4:ec:dd:2f:2f:5e:
                    cd:89:ff:bc:e6:04:5d:fa:fb:36:76:b2:10:03:cc:
                    6a:a1:8a:17:f7:a9:4b:1f:42:45:66:85:53:91:50:
                    33:2e:87:e2:cd:4a:40:e5:84:bd:a0:db:30:f0:5b:
                    ca:22:bc:ad:0f:8a:a3:57:9b:da:d6:c0:d7:f3:7a:
                    43:21:86:26:db:63:62:94:92:98:de:61:0a:04:1b:
                    33:c8:6c:c4:a4:80:8f:04:46:38:5b:1b:2b:30:e1:
                    5f:5a:c4:89:c2:a9:4c:8e:6f:e9:5f:f1:57:fd:ba:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:16:EF:FB:71:46:4A:8F:00:C9:65:4B:F3:A5:9E:52:4D:39:09:B5
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:00:8b:a1:d0:16:0d:69:1e:1e:aa:4b:45:a6:f0:20:bf:
         8d:9f:6f:e6:b4:bb:82:4d:08:3e:3e:d8:a3:6d:d6:33:f5:98:
         37:c7:0f:93:51:55:8c:7c:12:d7:7c:23:7d:4e:6f:6f:34:a6:
         1e:6e:92:4b:43:e1:96:0b:8c:d5:67:19:fe:f3:bf:df:10:95:
         15:2e:a8:f2:3b:5d:cc:96:f6:41:83:50:28:cd:a6:1d:d4:9d:
         b0:1e:6e:0a:01:62:98:02:2f:f6:29:e6:a5:41:00:ca:45:96:
         e2:4d:b8:55:e1:5c:1b:29:16:3a:06:47:38:7b:ae:33:99:be:
         1e:21:22:47:eb:e1:ba:80:fc:cf:56:15:3f:89:a9:e4:e9:9d:
         2c:64:49:74:20:bd:bf:06:fa:00:5e:8e:d1:94:d3:d1:7a:12:
         e9:da:46:b9:69:63:fc:c2:e0:cd:c2:cd:1c:ea:90:70:02:87:
         29:35:ab:00:ec:7e:91:75:d2:8d:d8:08:ee:c6:df:1a:a1:90:
         ec:f1:c2:4a:86:55:fa:d1:99:b9:bb:3f:fc:65:03:53:16:89:
         66:3f:20:e4:c7:23:77:be:af:df:d2:cc:36:ed:b3:9a:fb:41:
         0e:ef:31:e5:a3:33:17:54:c4:47:48:07:3e:21:70:e3:02:f3:
         b6:8a:55:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXp3sKc1mHu/VAmQ40LhMr/ztRNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3REYxNjE3RTZEMkVBNUQ1MDE3QkEwMDBDQTREMURE
NkQ2MkY4RTAeFw0yMzA2MjMyMDAxNTFaFw0yNDA2MjEyMDA2NTFaMDMxMTAvBgNV
BAMTKEFBMTZFRkZCNzE0NjRBOEYwMEM5NjU0QkYzQTU5RTUyNEQzOTA5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9mOdHFtyetQyJjDwzx7deqhS
EvRaDBjss2udL37WtPdLw7GlA9j54CYJi91L8Xskt0/KUpATPH9yxREoy0ifW6KD
CXgCVZaogdk1FQN7vYPyb4GimKcXA6efcO0fDFdT4MI3WO065Bz6wocQHXhO0oeF
G4ftU7jr0pVyCG5fzPb7hJVuPWesMq7WGv6qIuTs3S8vXs2J/7zmBF36+zZ2shAD
zGqhihf3qUsfQkVmhVORUDMuh+LNSkDlhL2g2zDwW8oivK0PiqNXm9rWwNfzekMh
hibbY2KUkpjeYQoEGzPIbMSkgI8ERjhbGysw4V9axInCqUyOb+lf8Vf9urBnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqhbv+3FGSo8AyWVL86WeUk05CbUwHwYDVR0j
BBgwFoAUmn3xYX5tLqXVAXugAMpNHdbWL44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMC85QTdERjE2MTdFNkQyRUE1RDUwMTdCQTAwMENBNEQxREQ2RDYyRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBN0RGMTYxN0U2RDJFQTVE
NTAxN0JBMDAwQ0E0RDFERDZENjJGOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzAv
MzEzNzMwMmUzODM0MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlRUMA0GCSqGSIb3DQEBCwUAA4IBAQBPngCLodAW
DWkeHqpLRabwIL+Nn2/mtLuCTQg+PtijbdYz9Zg3xw+TUVWMfBLXfCN9Tm9vNKYe
bpJLQ+GWC4zVZxn+87/fEJUVLqjyO13MlvZBg1AozaYd1J2wHm4KAWKYAi/2Keal
QQDKRZbiTbhV4VwbKRY6Bkc4e64zmb4eISJH6+G6gPzPVhU/iank6Z0sZEl0IL2/
BvoAXo7RlNPRehLp2ka5aWP8wuDNws0c6pBwAocpNasA7H6RddKN2Ajuxt8aoZDs
8cJKhlX60Zm5uz/8ZQNTFolmPyDkxyN3vq/f0sw27bOa+0EO7zHlozMXVMRHSAc+
IXDjAvO2ilU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org