Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa
File:                     3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          Ti86o889IOR0O5SNCXLoyFp7LBbY/sfzmsIuwy4JpqQ=
Subject key identifier:   B1:56:33:AB:4B:0F:41:F2:5B:A5:FA:36:B3:3B:BD:85:0F:1C:C0:18
Certificate issuer:       /CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
Certificate serial:       081FBE7073F56B8AB5FC95C8C7880E5AEFE7348C
Authority key identifier: DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 04 Oct 2023 23:00:00 +0000
ROA not before:           Wed 04 Oct 2023 22:55:00 +0000
ROA not after:            Wed 02 Oct 2024 23:00:00 +0000
asID:                     263145
IP address blocks:        170.245.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1f:be:70:73:f5:6b:8a:b5:fc:95:c8:c7:88:0e:5a:ef:e7:34:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
        Validity
            Not Before: Oct  4 22:55:00 2023 GMT
            Not After : Oct  2 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:16:4f:80:00:b1:bc:be:3e:1d:26:20:d6:
                    63:63:59:a3:68:7e:bf:eb:f1:72:f6:3f:41:a9:15:
                    e8:99:38:54:ca:65:f7:0f:e0:3c:8f:cc:3c:5b:f2:
                    e0:b0:6a:1e:11:bf:26:ac:48:6f:19:53:df:f5:9a:
                    98:20:88:4e:42:8d:b9:c8:63:d0:82:1b:bf:1a:d7:
                    28:32:33:c4:83:6a:84:7c:7a:96:c3:fb:43:d5:a3:
                    aa:f8:5b:4e:39:40:3e:1e:70:78:3c:8a:d9:69:c6:
                    c4:a6:ef:09:c2:63:d4:32:37:19:76:56:36:be:80:
                    0c:ad:71:e8:4f:33:92:56:38:87:a4:a4:33:55:b4:
                    f6:dc:3d:71:bf:4d:e7:96:7f:a4:9b:20:98:ab:aa:
                    34:88:1c:bf:b2:68:95:e6:21:90:78:98:da:dc:95:
                    06:7a:5d:06:97:97:3f:82:23:d3:f4:25:7a:5c:50:
                    7f:97:b4:3d:5e:6a:d6:be:8d:14:9c:c6:b4:c8:b2:
                    9f:47:87:d0:73:35:85:bf:32:42:79:17:89:7c:98:
                    63:a5:74:36:82:d7:99:02:1a:17:35:a0:dc:09:fe:
                    5b:1b:19:e2:9e:63:79:3d:4d:b9:52:af:4f:cf:bd:
                    97:e6:89:bf:d1:6b:5e:e1:95:70:f8:fc:ab:e2:2a:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:33:AB:4B:0F:41:F2:5B:A5:FA:36:B3:3B:BD:85:0F:1C:C0:18
            X509v3 Authority Key Identifier:
                keyid:DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137302e3234352e3232342e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:b6:36:9b:ec:a8:a8:2f:fd:4b:74:b6:1a:4b:90:b0:f8:
         dd:7b:d2:7c:57:4f:46:9c:29:d0:9f:70:7d:dd:0b:c9:87:4b:
         cd:70:d7:b5:15:5f:e2:bd:ae:15:2c:e6:c0:fe:e1:90:27:d5:
         9d:24:d0:cf:39:c5:71:a9:0f:6e:fe:36:fe:80:4d:af:15:1d:
         b0:02:4e:ef:63:e0:e8:8d:db:9f:21:1d:7c:cc:68:a5:6d:00:
         f4:72:81:78:3d:c1:65:63:85:67:68:3f:9d:bb:5a:a9:52:31:
         d6:f1:42:d9:35:87:03:3c:46:90:58:f9:1d:68:37:21:ee:46:
         84:24:7b:47:56:b5:24:f0:10:81:0b:4c:d2:15:c5:c6:51:30:
         4f:c4:67:36:89:0f:b4:f2:49:eb:b2:b0:90:64:41:4b:72:93:
         69:df:f3:ee:b5:6c:19:4b:f3:4d:13:81:2f:23:3b:aa:7f:65:
         32:b5:c7:92:42:60:9f:be:59:1e:60:6f:5e:de:e8:b6:60:e2:
         9f:b1:73:d6:3c:cb:d1:83:65:f7:cf:ea:b6:0a:cb:2a:91:f9:
         f3:da:13:54:aa:47:93:cd:c6:9f:81:db:75:44:3d:d9:00:e5:
         41:51:ff:a9:f0:89:f6:ef:f7:b4:81:6d:1b:80:0d:6e:6e:f0:
         6a:1f:72:3e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCB++cHP1a4q1/JXIx4gOWu/nNIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFGQkU2NUZGOTZCQkE4OUY0NjdENEYyMEIwNTQ5QzU3
OUYwOTlEQTAeFw0yMzEwMDQyMjU1MDBaFw0yNDEwMDIyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTdDMjE2NEY4MDAwQjFCQ0JF
M0UxRDI2MjBENjYzNjM1OUEzNjg3RUJGRUJGMTcyRjYzRjQxQTkxNUU4OTkzODU0
Q0E2NUY3MEZFMDNDOEZDQzNDNUJGMkUwQjA2QTFFMTFCRjI2QUM0ODZGMTk1M0RG
RjU5QTk4MjA4ODRFNDI4REI5Qzg2M0QwODIxQkJGMUFENzI4MzIzM0M0ODM2QTg0
N0M3QTk2QzNGQjQzRDVBM0FBRjg1QjRFMzk0MDNFMUU3MDc4M0M4QUQ5NjlDNkM0
QTZFRjA5QzI2M0Q0MzIzNzE5NzY1NjM2QkU4MDBDQUQ3MUU4NEYzMzkyNTYzODg3
QTRBNDMzNTVCNEY2REMzRDcxQkY0REU3OTY3RkE0OUIyMDk4QUJBQTM0ODgxQ0JG
QjI2ODk1RTYyMTkwNzg5OERBREM5NTA2N0E1RDA2OTc5NzNGODIyM0QzRjQyNTdB
NUM1MDdGOTdCNDNENUU2QUQ2QkU4RDE0OUNDNkI0QzhCMjlGNDc4N0QwNzMzNTg1
QkYzMjQyNzkxNzg5N0M5ODYzQTU3NDM2ODJENzk5MDIxQTE3MzVBMERDMDlGRTVC
MUIxOUUyOUU2Mzc5M0Q0REI5NTJBRjRGQ0ZCRDk3RTY4OUJGRDE2QjVFRTE5NTcw
RjhGQ0FCRTIyQUYwRjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA58IWT4AAsby+Ph0mINZjY1mjaH6/6/Fy9j9BqRXomThUymX3D+A8
j8w8W/LgsGoeEb8mrEhvGVPf9ZqYIIhOQo25yGPQghu/GtcoMjPEg2qEfHqWw/tD
1aOq+FtOOUA+HnB4PIrZacbEpu8JwmPUMjcZdlY2voAMrXHoTzOSVjiHpKQzVbT2
3D1xv03nln+kmyCYq6o0iBy/smiV5iGQeJja3JUGel0Gl5c/giPT9CV6XFB/l7Q9
XmrWvo0UnMa0yLKfR4fQczWFvzJCeReJfJhjpXQ2gteZAhoXNaDcCf5bGxninmN5
PU25Uq9Pz72X5om/0Wte4ZVw+Pyr4irw9wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLFWM6tLD0HyW6X6NrM7vYUPHMAYMB8GA1UdIwQYMBaAFNr75l/5a7qJ9GfU8gsF
ScV58JnaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzEvREFGQkU2NUZGOTZCQkE4
OUY0NjdENEYyMEIwNTQ5QzU3OUYwOTlEQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EQUZCRTY1RkY5NkJCQTg5RjQ2N0Q0RjIwQjA1NDlDNTc5RjA5
OURBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8xLzMxMzczMDJlMzIzNDM1MmUzMjMy
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzMTM0MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq9eAwDQYJKoZIhvcNAQELBQADggEBABqItjab7KioL/1LdLYaS5Cw+N170nxX
T0acKdCfcH3dC8mHS81w17UVX+K9rhUs5sD+4ZAn1Z0k0M85xXGpD27+Nv6ATa8V
HbACTu9j4OiN258hHXzMaKVtAPRygXg9wWVjhWdoP527WqlSMdbxQtk1hwM8RpBY
+R1oNyHuRoQke0dWtSTwEIELTNIVxcZRME/EZzaJD7TySeuysJBkQUtyk2nf8+61
bBlL800TgS8jO6p/ZTK1x5JCYJ++WR5gb17e6LZg4p+xc9Y8y9GDZffP6rYKyyqR
+fPaE1SqR5PNxp+B23VEPdkA5UFR/6nwifbv97SBbRuADW5u8Gofcj4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org