Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa
File:                     3137302e38342e38362e302f32342d3234203d3e20323634393936.roa (raw, json)
Hash identifier:          KCPKV4cLP5cNLW7wpXtzM7Lpi+xEKz0Y1OzcD2RUvIU=
Subject key identifier:   84:88:DD:91:5A:ED:9C:7C:3D:D9:41:A1:AB:9F:54:6A:20:43:4A:74
Certificate issuer:       /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial:       21F4A6C9CB1E792FE51F6F0A3A1A71F284CAC835
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa
Signing time:             Fri 23 Jun 2023 20:06:51 +0000
ROA not before:           Fri 23 Jun 2023 20:01:51 +0000
ROA not after:            Fri 21 Jun 2024 20:06:51 +0000
asID:                     264996
IP address blocks:        170.84.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f4:a6:c9:cb:1e:79:2f:e5:1f:6f:0a:3a:1a:71:f2:84:ca:c8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
        Validity
            Not Before: Jun 23 20:01:51 2023 GMT
            Not After : Jun 21 20:06:51 2024 GMT
        Subject: CN=8488DD915AED9C7C3DD941A1AB9F546A20434A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:9b:75:21:be:87:02:54:f1:41:fe:9a:18:
                    ab:1b:51:96:ed:85:d0:b1:2f:e3:f3:20:b8:3b:4d:
                    be:62:fc:1c:00:9b:8f:18:2d:7b:75:c6:81:71:56:
                    93:79:87:25:ee:a6:e0:64:cb:66:cc:e1:85:7c:00:
                    7b:38:94:10:c5:b8:8f:56:19:a3:01:8f:2b:15:37:
                    f9:1c:92:ed:b8:93:e9:ca:56:e7:d7:eb:dd:33:f8:
                    60:f0:9e:5a:e5:cd:c6:5f:3b:85:a8:fe:6b:0e:82:
                    7c:92:0f:ea:66:68:bc:b1:8c:cc:83:05:f2:9b:2e:
                    3f:86:ad:42:d4:89:40:14:e4:f7:a6:cd:fd:b1:6a:
                    59:55:7c:99:d9:f6:ee:3e:12:c4:3a:95:ee:8c:34:
                    1c:37:5e:04:53:9b:98:3e:55:c6:3f:d5:5a:12:fa:
                    69:ae:f8:e2:fa:15:f7:61:53:ed:e0:f5:a8:60:43:
                    b6:6a:77:2d:02:ed:be:8f:f3:a2:42:11:dd:46:f3:
                    60:5a:f5:73:c9:1e:1e:e0:48:54:39:7d:d9:63:f2:
                    1e:df:e2:b2:ec:5f:fd:f2:84:97:5d:b9:cd:87:a3:
                    99:c3:4c:c4:ff:6c:f0:09:db:8c:05:11:c6:7c:2c:
                    79:4b:9d:8e:85:7c:bc:61:10:1e:95:f0:10:15:f9:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:DD:91:5A:ED:9C:7C:3D:D9:41:A1:AB:9F:54:6A:20:43:4A:74
            X509v3 Authority Key Identifier:
                keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38362e302f32342d3234203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:df:ad:03:a1:43:b6:2a:6a:25:d1:6f:d9:52:4b:04:38:1a:
         79:66:1b:83:db:58:99:07:5b:43:dd:ca:08:a2:2a:8a:42:55:
         67:66:67:c6:08:ee:f7:bd:db:1b:48:97:87:be:7c:67:13:72:
         aa:c6:11:74:6f:a3:29:2e:4f:67:98:74:44:3f:e3:6b:16:93:
         1c:36:dc:68:62:c3:a7:83:c8:44:b3:c3:eb:de:00:62:b8:d4:
         fe:86:2f:3d:cc:05:6c:b5:a2:f7:87:9a:19:26:81:8a:fa:65:
         e4:31:9a:2c:ef:74:a1:12:38:b1:29:16:7d:e9:1e:34:a4:5c:
         84:f2:8a:f4:5e:ee:b0:eb:69:ac:c7:b7:68:06:2d:9a:5c:05:
         19:2c:89:32:3f:78:bf:f1:38:be:86:7c:cb:94:6a:ff:d9:42:
         e1:cb:9c:cd:5a:87:67:f5:b5:dc:27:11:e7:ef:b8:c4:95:08:
         c9:fb:3e:c1:54:58:71:9f:a5:24:f8:90:60:a2:4f:bf:d0:e5:
         4b:0e:81:e9:10:63:a1:d7:e9:26:28:ea:c1:6a:b0:0a:02:44:
         78:6a:43:46:ad:1b:2f:3f:5a:b4:0e:c8:17:d3:ec:a3:13:3b:
         ee:94:eb:c6:35:7a:fb:75:22:2a:49:50:24:95:e7:72:1e:c7:
         f9:45:23:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIfSmycseeS/lH28KOhpx8oTKyDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3REYxNjE3RTZEMkVBNUQ1MDE3QkEwMDBDQTREMURE
NkQ2MkY4RTAeFw0yMzA2MjMyMDAxNTFaFw0yNDA2MjEyMDA2NTFaMDMxMTAvBgNV
BAMTKDg0ODhERDkxNUFFRDlDN0MzREQ5NDFBMUFCOUY1NDZBMjA0MzRBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfS5t1Ib6HAlTxQf6aGKsbUZbt
hdCxL+PzILg7Tb5i/BwAm48YLXt1xoFxVpN5hyXupuBky2bM4YV8AHs4lBDFuI9W
GaMBjysVN/kcku24k+nKVufX690z+GDwnlrlzcZfO4Wo/msOgnySD+pmaLyxjMyD
BfKbLj+GrULUiUAU5Pemzf2xallVfJnZ9u4+EsQ6le6MNBw3XgRTm5g+VcY/1VoS
+mmu+OL6FfdhU+3g9ahgQ7Zqdy0C7b6P86JCEd1G82Ba9XPJHh7gSFQ5fdlj8h7f
4rLsX/3yhJdduc2Ho5nDTMT/bPAJ24wFEcZ8LHlLnY6FfLxhEB6V8BAV+ZubAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhIjdkVrtnHw92UGhq59UaiBDSnQwHwYDVR0j
BBgwFoAUmn3xYX5tLqXVAXugAMpNHdbWL44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMC85QTdERjE2MTdFNkQyRUE1RDUwMTdCQTAwMENBNEQxREQ2RDYyRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBN0RGMTYxN0U2RDJFQTVE
NTAxN0JBMDAwQ0E0RDFERDZENjJGOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzAv
MzEzNzMwMmUzODM0MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlRWMA0GCSqGSIb3DQEBCwUAA4IBAQAy360DoUO2
Kmol0W/ZUksEOBp5ZhuD21iZB1tD3coIoiqKQlVnZmfGCO73vdsbSJeHvnxnE3Kq
xhF0b6MpLk9nmHREP+NrFpMcNtxoYsOng8hEs8Pr3gBiuNT+hi89zAVstaL3h5oZ
JoGK+mXkMZos73ShEjixKRZ96R40pFyE8or0Xu6w62msx7doBi2aXAUZLIkyP3i/
8Ti+hnzLlGr/2ULhy5zNWodn9bXcJxHn77jElQjJ+z7BVFhxn6Uk+JBgok+/0OVL
DoHpEGOh1+kmKOrBarAKAkR4akNGrRsvP1q0DsgX0+yjEzvulOvGNXr7dSIqSVAk
ledyHsf5RSMt
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org