Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235332e302f32342d3234203d3e20323636333630.roa
File:                     3137302e3233392e3235332e302f32342d3234203d3e20323636333630.roa (raw, json)
Hash identifier:          0sgjgi8HdBUnRrmwhkgmfqLNFGApFh7fNDhyleHDUUM=
Subject key identifier:   F8:E4:FB:D7:F2:1B:BD:D1:52:B1:20:9F:C8:CE:22:37:35:BD:1B:EB
Certificate issuer:       /CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Certificate serial:       011C643253AC40ECDE0DE1B718298213673FE06A
Authority key identifier: B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235332e302f32342d3234203d3e20323636333630.roa
Signing time:             Thu 05 May 2022 16:58:25 +0000
ROA not before:           Thu 05 May 2022 16:53:25 +0000
ROA not after:            Thu 04 May 2023 16:58:25 +0000
asID:                     266360
IP address blocks:        170.239.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:64:32:53:ac:40:ec:de:0d:e1:b7:18:29:82:13:67:3f:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
        Validity
            Not Before: May  5 16:53:25 2022 GMT
            Not After : May  4 16:58:25 2023 GMT
        Subject: CN=F8E4FBD7F21BBDD152B1209FC8CE223735BD1BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:45:0b:18:b7:11:31:3c:56:e6:ff:2e:0f:6c:
                    7d:73:01:c4:5e:29:f8:99:78:dd:13:21:59:e1:8e:
                    6d:10:11:81:85:96:78:70:ab:99:86:bb:85:8a:79:
                    bf:31:81:4d:28:bb:ed:10:7d:01:e2:55:0e:5f:b5:
                    2a:2c:2d:a0:02:ca:b3:d1:18:2b:8e:41:53:54:f9:
                    2f:08:af:80:5c:bc:89:fe:76:00:fb:0a:df:cb:5a:
                    7f:97:13:b8:7c:02:c3:09:cd:84:7e:88:3f:20:33:
                    e6:72:fd:6c:73:92:41:85:9c:81:45:f9:55:0c:54:
                    f4:98:fe:ca:a9:30:38:83:0a:59:b6:1b:b5:1c:d2:
                    19:3f:2b:77:ec:58:9a:ea:fa:09:3c:71:73:c2:53:
                    07:9f:a3:91:7f:1b:2e:d6:11:c2:b5:a4:82:09:64:
                    a7:ed:28:f1:1b:d7:f2:2a:36:98:90:1c:22:de:12:
                    72:3e:90:7a:31:a4:c4:f7:e9:e7:b1:04:6d:dd:8f:
                    c8:68:4a:88:2b:33:67:51:81:06:11:21:d5:30:af:
                    52:c2:9d:74:19:0b:86:cd:f2:17:47:1b:00:c8:90:
                    ec:e9:6b:53:1c:56:50:27:62:81:52:60:33:86:56:
                    5f:68:0b:cc:aa:d8:d6:0c:0d:57:24:6a:00:47:f5:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:FB:D7:F2:1B:BD:D1:52:B1:20:9F:C8:CE:22:37:35:BD:1B:EB
            X509v3 Authority Key Identifier:
                keyid:B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235332e302f32342d3234203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:62:ba:ca:f6:3a:df:de:92:37:ec:3b:ff:b0:9a:30:f2:
         7c:dd:b5:09:7e:49:6b:cf:80:e0:2c:33:1f:98:4f:03:82:67:
         ad:e9:8a:de:92:74:69:b9:c8:04:9c:c3:83:79:08:19:94:b8:
         32:c1:71:f1:8d:6e:c6:c5:8d:86:b6:5b:ed:37:89:66:f6:ac:
         1f:8a:d8:78:af:e4:08:24:3b:05:37:ae:94:49:0e:31:f8:06:
         39:64:3f:f2:24:bd:3f:cc:d0:7f:45:00:4e:bf:60:eb:e3:77:
         c7:51:c2:b6:21:11:c0:d5:71:0c:91:db:53:fc:93:79:58:c8:
         94:22:ea:5d:6f:29:e0:aa:43:f5:10:1d:69:1b:6d:00:38:98:
         a6:a7:2f:95:aa:ae:6a:4b:b3:73:46:e8:ee:77:4c:ad:e3:07:
         fd:53:66:a1:77:e2:81:82:a4:9f:0e:23:c3:10:06:32:a6:9e:
         6b:89:dc:07:7d:38:33:23:51:72:89:bf:c6:6f:2a:ec:53:52:
         07:dc:65:f1:ae:01:a6:95:87:05:ba:c0:a7:02:b7:68:b2:10:
         30:57:b4:83:00:21:60:70:bf:2d:a8:03:b1:98:e6:d9:43:e8:
         38:16:02:4d:f7:7c:20:7b:cd:1c:1a:df:1e:05:d0:08:cd:a3:
         4e:e8:15:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUARxkMlOsQOzeDeG3GCmCE2c/4GowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY2Rjk1NTkwRkJGMjQwNUE0RDVCOUVEODc4OEVDRUFE
ODc0QjlEQTAeFw0yMjA1MDUxNjUzMjVaFw0yMzA1MDQxNjU4MjVaMDMxMTAvBgNV
BAMTKEY4RTRGQkQ3RjIxQkJERDE1MkIxMjA5RkM4Q0UyMjM3MzVCRDFCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnRQsYtxExPFbm/y4PbH1zAcRe
KfiZeN0TIVnhjm0QEYGFlnhwq5mGu4WKeb8xgU0ou+0QfQHiVQ5ftSosLaACyrPR
GCuOQVNU+S8Ir4BcvIn+dgD7Ct/LWn+XE7h8AsMJzYR+iD8gM+Zy/WxzkkGFnIFF
+VUMVPSY/sqpMDiDClm2G7Uc0hk/K3fsWJrq+gk8cXPCUwefo5F/Gy7WEcK1pIIJ
ZKftKPEb1/IqNpiQHCLeEnI+kHoxpMT36eexBG3dj8hoSogrM2dRgQYRIdUwr1LC
nXQZC4bN8hdHGwDIkOzpa1McVlAnYoFSYDOGVl9oC8yq2NYMDVckagBH9ayrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+OT71/IbvdFSsSCfyM4iNzW9G+swHwYDVR0j
BBgwFoAUtm+VWQ+/JAWk1bnth4js6th0udowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK
U1MvMC9CNjZGOTU1OTBGQkYyNDA1QTRENUI5RUQ4Nzg4RUNFQUQ4NzRCOURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2NkY5NTU5MEZCRjI0MDVB
NEQ1QjlFRDg3ODhFQ0VBRDg3NEI5REEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFTll4VVhFeHVTeXdFOFJhVjZrRGl2SlVSVncySmFwTW5GMUdTWkFwSlNTLzAv
MzEzNzMwMmUzMjMzMzkyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrv/TANBgkqhkiG9w0BAQsFAAOCAQEAMrli
usr2Ot/ekjfsO/+wmjDyfN21CX5Ja8+A4CwzH5hPA4JnremK3pJ0abnIBJzDg3kI
GZS4MsFx8Y1uxsWNhrZb7TeJZvasH4rYeK/kCCQ7BTeulEkOMfgGOWQ/8iS9P8zQ
f0UATr9g6+N3x1HCtiERwNVxDJHbU/yTeVjIlCLqXW8p4KpD9RAdaRttADiYpqcv
laquakuzc0bo7ndMreMH/VNmoXfigYKknw4jwxAGMqaea4ncB304MyNRcom/xm8q
7FNSB9xl8a4BppWHBbrApwK3aLIQMFe0gwAhYHC/LagDsZjm2UPoOBYCTfd8IHvN
HBrfHgXQCM2jTugVdQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org