Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa (raw, json)
Hash identifier:          37tmct1vU9T7ZeoGcMEG591MWzL4g15q3LvBR3uNKck=
Subject key identifier:   3A:7F:3C:9A:DC:64:8C:FC:5C:90:43:87:AC:5E:77:59:D7:10:BB:83
Certificate issuer:       /CN=6B000F8A633C0B39C38D951C0A953771C088CEC7
Certificate serial:       17CD9830E0F983CDF3B66A7A19B826131092892F
Authority key identifier: 6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B000F8A633C0B39C38D951C0A953771C088CEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa
Signing time:             Mon 08 Apr 2024 17:31:27 +0000
ROA not before:           Mon 08 Apr 2024 17:26:27 +0000
ROA not after:            Mon 07 Apr 2025 17:31:27 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:98:30:e0:f9:83:cd:f3:b6:6a:7a:19:b8:26:13:10:92:89:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B000F8A633C0B39C38D951C0A953771C088CEC7
        Validity
            Not Before: Apr  8 17:26:27 2024 GMT
            Not After : Apr  7 17:31:27 2025 GMT
        Subject: CN=3A7F3C9ADC648CFC5C904387AC5E7759D710BB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:36:5e:00:f8:28:c6:dd:d5:0c:ed:84:44:
                    2a:12:a0:42:f4:c4:d5:0c:8c:44:3a:48:12:61:3b:
                    26:cd:bf:11:0a:a3:75:9c:f0:ac:4e:bf:87:27:0f:
                    c6:5d:0e:d5:69:f6:3e:58:63:d7:2d:ff:34:84:0f:
                    65:f4:c2:e9:9b:ef:3c:fc:14:85:00:57:b4:f3:c9:
                    97:7e:fe:e7:4b:d0:9a:18:00:0d:80:b6:c8:d6:32:
                    4f:ac:39:1f:0e:36:90:f3:11:4b:fe:b7:d4:6f:c8:
                    56:ac:9b:43:e5:ea:3c:1a:a5:e1:aa:aa:bd:08:fa:
                    86:87:42:d9:fc:45:7f:92:f8:4a:18:8e:6b:2b:f4:
                    f9:a5:83:3a:d2:22:b8:1c:5f:f4:2f:1e:fe:9b:f6:
                    2f:c7:1b:47:69:b8:a0:77:52:76:72:9d:6c:10:91:
                    95:a9:10:76:d6:2b:c3:25:4e:0b:fb:bb:51:37:a0:
                    d3:56:c4:7d:72:9c:d4:20:ff:53:9e:b5:a2:7a:a0:
                    35:16:7d:41:97:21:d8:dd:18:7e:d3:d0:bb:fa:67:
                    80:33:ca:fc:5b:15:3d:9d:a4:d0:fe:e0:08:ae:bd:
                    51:06:78:13:f3:81:da:95:34:ba:ff:30:c7:5c:8f:
                    e3:1e:aa:6a:07:ae:26:39:4f:0c:2d:3b:db:ae:ef:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:3C:9A:DC:64:8C:FC:5C:90:43:87:AC:5E:77:59:D7:10:BB:83
            X509v3 Authority Key Identifier:
                keyid:6B:00:0F:8A:63:3C:0B:39:C3:8D:95:1C:0A:95:37:71:C0:88:CE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/6B000F8A633C0B39C38D951C0A953771C088CEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B000F8A633C0B39C38D951C0A953771C088CEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/2/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:e3:87:29:c7:62:0f:4b:65:d4:c8:c9:af:4f:fd:6e:0b:
         6f:aa:79:de:9e:8f:2e:74:88:c1:93:4b:75:0c:2c:23:5a:6d:
         fd:a8:82:31:3a:a4:a2:46:67:fc:ce:fb:5b:68:f9:ae:65:97:
         41:a9:1c:a7:af:46:5b:49:db:30:95:ec:c1:4b:85:9c:13:7c:
         39:70:a6:34:bf:c4:7f:d4:9e:7a:28:5e:6f:1a:9e:ff:d4:3a:
         4f:99:dc:0d:cd:c3:69:af:82:a0:cf:48:1e:a9:64:12:ec:6b:
         8c:e0:a7:cb:7e:a1:40:6a:ce:ab:dc:95:7b:59:a5:0c:7a:5a:
         f1:05:41:4f:11:5b:d5:c6:e5:53:a5:6d:a0:6c:9c:a8:97:b1:
         8c:dd:12:8a:b7:a2:90:2f:9a:05:ab:b8:ab:a3:eb:bc:fd:fe:
         d9:83:ca:76:37:d5:cb:f7:e9:d8:32:c9:a4:a3:2d:82:7e:70:
         ab:e3:8c:ab:dd:0f:58:8e:32:29:de:8e:13:82:36:09:c8:17:
         1c:a2:e2:58:19:10:c8:98:8c:c8:ec:10:06:f9:f8:47:05:d8:
         a4:6a:57:58:64:67:7e:46:67:70:e0:8d:87:aa:dd:cf:35:4e:
         a0:21:e8:13:15:8a:bd:0a:d9:31:3a:19:2f:ab:c9:7d:a4:49:
         96:08:e4:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF82YMOD5g83ztmp6GbgmExCSiS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwMDBGOEE2MzNDMEIzOUMzOEQ5NTFDMEE5NTM3NzFD
MDg4Q0VDNzAeFw0yNDA0MDgxNzI2MjdaFw0yNTA0MDcxNzMxMjdaMDMxMTAvBgNV
BAMTKDNBN0YzQzlBREM2NDhDRkM1QzkwNDM4N0FDNUU3NzU5RDcxMEJCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AzZeAPgoxt3VDO2ERCoSoEL0
xNUMjEQ6SBJhOybNvxEKo3Wc8KxOv4cnD8ZdDtVp9j5YY9ct/zSED2X0wumb7zz8
FIUAV7TzyZd+/udL0JoYAA2AtsjWMk+sOR8ONpDzEUv+t9RvyFasm0Pl6jwapeGq
qr0I+oaHQtn8RX+S+EoYjmsr9PmlgzrSIrgcX/QvHv6b9i/HG0dpuKB3UnZynWwQ
kZWpEHbWK8MlTgv7u1E3oNNWxH1ynNQg/1OetaJ6oDUWfUGXIdjdGH7T0Lv6Z4Az
yvxbFT2dpND+4AiuvVEGeBPzgdqVNLr/MMdcj+MeqmoHriY5TwwtO9uu7+/3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOn88mtxkjPxckEOHrF53WdcQu4MwHwYDVR0j
BBgwFoAUawAPimM8CznDjZUcCpU3ccCIzscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQ
VE4vMi82QjAwMEY4QTYzM0MwQjM5QzM4RDk1MUMwQTk1Mzc3MUMwODhDRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCMDAwRjhBNjMzQzBCMzlD
MzhEOTUxQzBBOTUzNzcxQzA4OENFQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFa1BvQlgzWGJ4YkZaZWtpclJxbjhCWGlEVThlblNyZnJ3aFdleFhoUFROLzIv
MzEzNzMwMmUzMjM1MzQyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq/mAwDQYJKoZIhvcNAQELBQADggEBAJxS44cp
x2IPS2XUyMmvT/1uC2+qed6ejy50iMGTS3UMLCNabf2ogjE6pKJGZ/zO+1to+a5l
l0GpHKevRltJ2zCV7MFLhZwTfDlwpjS/xH/UnnooXm8anv/UOk+Z3A3Nw2mvgqDP
SB6pZBLsa4zgp8t+oUBqzqvclXtZpQx6WvEFQU8RW9XG5VOlbaBsnKiXsYzdEoq3
opAvmgWruKuj67z9/tmDynY31cv36dgyyaSjLYJ+cKvjjKvdD1iOMinejhOCNgnI
Fxyi4lgZEMiYjMjsEAb5+EcF2KRqV1hkZ35GZ3DgjYeq3c81TqAh6BMVir0K2TE6
GS+ryX2kSZYI5PY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org