Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa (raw, json)
Hash identifier:          05LKDBJ1ISKhMtvVrSbUXfehUPR0fOr+UR03xN9uTjM=
Subject key identifier:   AE:C5:4A:E7:E9:4A:3E:8A:64:DB:87:24:20:52:BC:F5:E7:7F:8C:C0
Certificate issuer:       /CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
Certificate serial:       401CCAA8871313F52E77E3F80962695D0F7470
Authority key identifier: E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa
Signing time:             Thu 18 May 2023 20:00:00 +0000
ROA not before:           Thu 18 May 2023 19:55:00 +0000
ROA not after:            Thu 16 May 2024 20:00:00 +0000
asID:                     266348
IP address blocks:        170.239.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1c:ca:a8:87:13:13:f5:2e:77:e3:f8:09:62:69:5d:0f:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B
        Validity
            Not Before: May 18 19:55:00 2023 GMT
            Not After : May 16 20:00:00 2024 GMT
        Subject: CN=AEC54AE7E94A3E8A64DB87242052BCF5E77F8CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:16:9e:8a:78:90:7e:eb:cc:87:9b:a8:12:
                    ae:d0:0f:0e:8f:5f:cf:d0:39:00:f7:7d:60:43:02:
                    8b:9c:15:9e:53:4c:51:a3:d3:2a:51:ef:d5:ad:3d:
                    af:58:4f:0b:0c:f2:e5:cc:5e:1c:07:dc:72:56:d2:
                    5b:5b:f9:d7:40:c1:af:3d:fd:80:7c:1f:fb:72:81:
                    77:be:eb:95:e6:8c:ba:27:30:6b:7a:c0:dc:58:59:
                    75:fd:5d:5e:d3:9f:21:20:4c:cf:a1:12:ba:ab:49:
                    1f:2d:7d:4d:74:40:d6:32:74:ac:c5:75:da:de:fa:
                    a5:82:d8:81:67:64:32:91:15:fd:f0:c0:a1:29:95:
                    46:91:02:ed:64:5c:ba:91:33:7e:f2:65:16:fd:e8:
                    94:82:01:9f:43:52:85:d6:6a:cd:c6:20:6e:a5:0b:
                    70:80:82:83:38:73:b5:a3:a2:5b:df:0f:37:d9:89:
                    11:28:d1:3a:a7:6b:fb:8f:fe:5b:47:53:1b:7a:47:
                    85:08:4f:89:51:f3:2d:35:f0:e6:7b:20:6a:f9:bd:
                    c9:16:59:c7:b8:35:6b:62:43:c2:8e:e2:dd:4f:56:
                    a0:4a:4a:4e:e6:e3:f4:80:92:58:fe:8f:22:8f:4e:
                    3d:7a:ce:6b:90:a2:5b:75:42:9f:87:93:91:f5:23:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:4A:E7:E9:4A:3E:8A:64:DB:87:24:20:52:BC:F5:E7:7F:8C:C0
            X509v3 Authority Key Identifier:
                keyid:E9:01:C1:7A:B0:5A:BC:DB:90:C5:B4:B5:D9:81:CA:C8:62:0C:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E901C17AB05ABCDB90C5B4B5D981CAC8620C3B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/0/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:31:cb:c2:c6:da:9c:ef:e1:41:49:1b:6e:05:9c:08:2c:
         47:0a:51:a6:eb:70:b4:65:4e:2d:ba:19:a3:c8:4d:c9:cf:44:
         c5:e2:4d:ad:9a:7f:1b:e6:1e:8b:85:07:a8:f5:29:23:b7:f9:
         07:d4:ed:35:4b:5a:8a:6d:73:60:09:66:8c:59:40:61:8a:ef:
         7a:9d:c5:b3:0a:46:79:39:fc:b6:52:56:81:10:8c:6e:ab:e0:
         43:96:70:62:9b:b8:a9:64:96:ab:17:25:34:09:fa:2c:69:06:
         8b:32:c6:3a:fe:af:dd:a2:83:6b:80:6c:f8:11:f6:9f:ea:fa:
         bb:06:97:82:86:78:e1:a4:06:e6:a9:72:6b:7c:41:fc:1f:f4:
         63:e0:e6:07:ac:96:63:12:87:02:ec:6f:40:42:86:63:e1:43:
         31:1e:b2:a0:72:f5:bc:78:97:78:cb:fa:44:53:a9:7c:05:2e:
         84:78:4c:c2:cf:30:fc:07:b0:62:bb:5a:84:f2:c7:32:74:cc:
         4a:a4:2b:a0:fb:e2:09:c1:b6:16:34:ac:5a:d1:17:da:cd:cc:
         e6:96:7d:aa:fa:92:4a:8e:5e:cf:c2:0b:df:a2:6c:a4:4c:d5:
         8d:2b:20:fb:8b:e5:58:da:1c:d0:39:b1:5c:f5:0a:78:68:03:
         0f:4a:ea:a0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITQBzKqIcTE/Uud+P4CWJpXQ90cDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFOTAxQzE3QUIwNUFCQ0RCOTBDNUI0QjVEOTgxQ0FDODYy
MEMzQjNCMB4XDTIzMDUxODE5NTUwMFoXDTI0MDUxNjIwMDAwMFowMzExMC8GA1UE
AxMoQUVDNTRBRTdFOTRBM0U4QTY0REI4NzI0MjA1MkJDRjVFNzdGOENDMDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKNFp6KeJB+68yHm6gSrtAPDo9f
z9A5APd9YEMCi5wVnlNMUaPTKlHv1a09r1hPCwzy5cxeHAfcclbSW1v510DBrz39
gHwf+3KBd77rleaMuicwa3rA3FhZdf1dXtOfISBMz6ESuqtJHy19TXRA1jJ0rMV1
2t76pYLYgWdkMpEV/fDAoSmVRpEC7WRcupEzfvJlFv3olIIBn0NShdZqzcYgbqUL
cICCgzhztaOiW98PN9mJESjROqdr+4/+W0dTG3pHhQhPiVHzLTXw5nsgavm9yRZZ
x7g1a2JDwo7i3U9WoEpKTubj9ICSWP6PIo9OPXrOa5CiW3VCn4eTkfUjxscCAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBSuxUrn6Uo+imTbhyQgUrz153+MwDAfBgNVHSME
GDAWgBTpAcF6sFq825DFtLXZgcrIYgw7OzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby80MXpva3lYVmZBY2hoaU1HdWNDejk4TVhpcTZOOTkxUWpZYlY4b0d6YWla
RS8wL0U5MDFDMTdBQjA1QUJDREI5MEM1QjRCNUQ5ODFDQUM4NjIwQzNCM0IuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRTkwMUMxN0FCMDVBQkNEQjkw
QzVCNEI1RDk4MUNBQzg2MjBDM0IzQi5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDF6b2t5WFZmQWNoaGlNR3VjQ3o5OE1YaXE2Tjk5MVFqWWJWOG9HemFpWkUvMC8z
MTM3MzAyZTMyMzMzOTJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIz
NjM2MzMzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCqu9sMA0GCSqGSIb3DQEBCwUAA4IBAQBNvDHL
wsbanO/hQUkbbgWcCCxHClGm63C0ZU4tuhmjyE3Jz0TF4k2tmn8b5h6LhQeo9Skj
t/kH1O01S1qKbXNgCWaMWUBhiu96ncWzCkZ5Ofy2UlaBEIxuq+BDlnBim7ipZJar
FyU0CfosaQaLMsY6/q/dooNrgGz4Efaf6vq7BpeChnjhpAbmqXJrfEH8H/Rj4OYH
rJZjEocC7G9AQoZj4UMxHrKgcvW8eJd4y/pEU6l8BS6EeEzCzzD8B7Biu1qE8scy
dMxKpCug++IJwbYWNKxa0Rfazczmln2q+pJKjl7PwgvfomykTNWNKyD7i+VY2hzQ
ObFc9Qp4aAMPSuqg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org