Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa
File:                     3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa (raw, json)
Hash identifier:          rHOQ8vJzrJYtv8ptiLKpeNr0TodIaK83Pc4amz0xsW0=
Subject key identifier:   57:C9:7D:5B:33:4C:3F:68:53:62:6E:E3:5D:BF:DF:A0:4E:53:3B:77
Certificate issuer:       /CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Certificate serial:       3B16A51B6335DAAB640F1521CC3297EA603D7E0F
Authority key identifier: B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa
Signing time:             Thu 05 May 2022 16:58:29 +0000
ROA not before:           Thu 05 May 2022 16:53:29 +0000
ROA not after:            Thu 04 May 2023 16:58:29 +0000
asID:                     266360
IP address blocks:        170.239.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:16:a5:1b:63:35:da:ab:64:0f:15:21:cc:32:97:ea:60:3d:7e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
        Validity
            Not Before: May  5 16:53:29 2022 GMT
            Not After : May  4 16:58:29 2023 GMT
        Subject: CN=57C97D5B334C3F6853626EE35DBFDFA04E533B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:35:ba:6c:5d:1b:41:6c:04:fc:40:a5:cb:
                    46:91:dd:83:6d:85:cc:75:05:6b:6c:e5:1f:a9:42:
                    95:6a:d8:6a:8b:1e:ae:64:a6:c2:b7:df:24:89:31:
                    cb:63:f7:5b:22:0a:0a:7a:bf:3b:6a:9f:f3:a4:21:
                    85:f4:12:34:d3:cd:ba:e2:f3:0c:a5:e1:ee:e6:99:
                    f4:d2:91:35:ef:30:41:78:8a:94:ad:6b:4d:b8:0f:
                    d5:6d:6b:f8:0b:f7:06:c8:e1:1b:7d:4c:aa:4e:60:
                    c2:54:ef:5d:6a:f2:5e:2d:27:05:2c:37:4b:52:e7:
                    10:f6:05:3c:25:f3:ca:be:7a:ff:9e:1b:0c:92:d5:
                    6a:5a:8b:3d:64:3a:28:49:b5:27:0d:a7:32:a2:30:
                    85:25:35:71:e5:3a:ce:b4:7d:24:ed:f0:23:bb:23:
                    a4:ff:26:b6:6e:ca:5d:9d:81:14:01:c6:0c:30:b6:
                    29:3c:71:dc:55:5d:61:11:f4:90:cd:84:09:ca:38:
                    c4:d7:37:75:9a:bb:e5:03:a8:a9:d5:ed:76:02:64:
                    fe:74:02:09:ba:21:4f:a8:46:a0:3a:63:1f:02:48:
                    81:d0:a1:a5:91:2b:52:83:7f:35:04:60:d8:a4:e7:
                    68:44:d0:61:3b:61:d9:c6:8f:7c:b3:5e:ae:22:cf:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:7D:5B:33:4C:3F:68:53:62:6E:E3:5D:BF:DF:A0:4E:53:3B:77
            X509v3 Authority Key Identifier:
                keyid:B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:e0:95:c5:d0:09:0c:72:70:3f:c3:9d:53:f7:bf:6b:5e:
         96:53:55:db:f5:69:66:ca:a4:04:f2:3b:9f:46:14:8a:4d:67:
         28:d0:7a:14:f3:7e:26:57:7c:6d:31:5c:e9:ce:8a:16:71:56:
         e2:8a:a6:0e:db:e0:06:5f:6e:dd:01:9c:38:94:6c:a5:94:5d:
         81:43:a7:3d:5c:89:d0:8e:55:cc:93:af:dc:11:98:47:b9:8c:
         d7:15:bc:27:5d:55:ef:5a:e4:e1:f3:06:0d:56:cd:32:66:1f:
         88:2d:37:37:00:f6:36:d0:63:f9:ff:00:73:df:a6:80:e3:06:
         48:c5:85:03:b1:a3:0c:3f:e8:e4:3d:38:08:f4:cf:af:0f:7e:
         78:23:ed:5d:07:54:6b:78:ae:1d:9c:60:7d:12:14:10:07:7a:
         ee:54:c2:ea:5d:5c:e8:36:06:4b:36:ab:9e:5f:bb:23:19:38:
         97:63:aa:28:51:d6:9c:e4:9f:1c:77:35:72:63:5f:8e:d3:23:
         dd:aa:30:52:55:d5:7a:d9:ca:13:47:de:16:15:b4:b7:bd:ff:
         9a:73:6b:f2:1c:6a:03:b5:20:9a:68:ed:0e:c7:cf:35:80:3a:
         ac:22:4a:e9:ef:6b:34:00:fd:c4:12:40:50:b0:74:7f:e7:61:
         f6:ad:3d:b1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOxalG2M12qtkDxUhzDKX6mA9fg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY2Rjk1NTkwRkJGMjQwNUE0RDVCOUVEODc4OEVDRUFE
ODc0QjlEQTAeFw0yMjA1MDUxNjUzMjlaFw0yMzA1MDQxNjU4MjlaMDMxMTAvBgNV
BAMTKDU3Qzk3RDVCMzM0QzNGNjg1MzYyNkVFMzVEQkZERkEwNEU1MzNCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKzW6bF0bQWwE/ECly0aR3YNt
hcx1BWts5R+pQpVq2GqLHq5kpsK33ySJMctj91siCgp6vztqn/OkIYX0EjTTzbri
8wyl4e7mmfTSkTXvMEF4ipSta024D9Vta/gL9wbI4Rt9TKpOYMJU711q8l4tJwUs
N0tS5xD2BTwl88q+ev+eGwyS1Wpaiz1kOihJtScNpzKiMIUlNXHlOs60fSTt8CO7
I6T/JrZuyl2dgRQBxgwwtik8cdxVXWER9JDNhAnKOMTXN3Wau+UDqKnV7XYCZP50
Agm6IU+oRqA6Yx8CSIHQoaWRK1KDfzUEYNik52hE0GE7YdnGj3yzXq4iz0CHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV8l9WzNMP2hTYm7jXb/foE5TO3cwHwYDVR0j
BBgwFoAUtm+VWQ+/JAWk1bnth4js6th0udowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK
U1MvMC9CNjZGOTU1OTBGQkYyNDA1QTRENUI5RUQ4Nzg4RUNFQUQ4NzRCOURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2NkY5NTU5MEZCRjI0MDVB
NEQ1QjlFRDg3ODhFQ0VBRDg3NEI5REEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFTll4VVhFeHVTeXdFOFJhVjZrRGl2SlVSVncySmFwTW5GMUdTWkFwSlNTLzAv
MzEzNzMwMmUzMjMzMzkyZTMyMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjMzMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarv/jANBgkqhkiG9w0BAQsFAAOCAQEAINDg
lcXQCQxycD/DnVP3v2tellNV2/VpZsqkBPI7n0YUik1nKNB6FPN+Jld8bTFc6c6K
FnFW4oqmDtvgBl9u3QGcOJRspZRdgUOnPVyJ0I5VzJOv3BGYR7mM1xW8J11V71rk
4fMGDVbNMmYfiC03NwD2NtBj+f8Ac9+mgOMGSMWFA7GjDD/o5D04CPTPrw9+eCPt
XQdUa3iuHZxgfRIUEAd67lTC6l1c6DYGSzarnl+7Ixk4l2OqKFHWnOSfHHc1cmNf
jtMj3aowUlXVetnKE0feFhW0t73/mnNr8hxqA7UgmmjtDsfPNYA6rCJK6e9rNAD9
xBJAULB0f+dh9q09sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org