Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa (raw, json)
Hash identifier:          cZ/udFbndbq45sO7FikMeAMRkSaBS1360+eVb57FRfA=
Subject key identifier:   63:A1:D4:29:CB:FC:26:88:8A:D5:7D:A0:60:23:49:ED:5C:1C:D1:B5
Certificate issuer:       /CN=11E710341EFB8CFEE7722CDDCEC0B393875429B6
Certificate serial:       6FE6548F0DCA5EF495A8890DE85C0A38A9B5BFE1
Authority key identifier: 11:E7:10:34:1E:FB:8C:FE:E7:72:2C:DD:CE:C0:B3:93:87:54:29:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E710341EFB8CFEE7722CDDCEC0B393875429B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa
Signing time:             Mon 08 Apr 2024 17:31:28 +0000
ROA not before:           Mon 08 Apr 2024 17:26:28 +0000
ROA not after:            Mon 07 Apr 2025 17:31:28 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:54:8f:0d:ca:5e:f4:95:a8:89:0d:e8:5c:0a:38:a9:b5:bf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E710341EFB8CFEE7722CDDCEC0B393875429B6
        Validity
            Not Before: Apr  8 17:26:28 2024 GMT
            Not After : Apr  7 17:31:28 2025 GMT
        Subject: CN=63A1D429CBFC26888AD57DA0602349ED5C1CD1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:71:ac:8a:3c:b1:27:5a:dc:2f:de:d2:34:
                    7c:93:cb:d6:4d:64:a9:e6:0d:27:bb:ce:ee:df:9c:
                    09:74:a3:aa:84:3b:a7:c1:87:78:97:0c:7d:dc:84:
                    99:c0:91:2a:60:56:52:6e:8a:52:95:4b:21:84:e6:
                    06:1b:ea:e5:ed:1b:9a:cc:b8:37:7d:c9:5a:73:aa:
                    c8:5c:68:f6:4d:32:19:eb:7e:7b:d8:bb:24:19:82:
                    1d:70:8a:30:bb:ca:ea:a0:79:8b:73:97:95:fb:47:
                    45:16:e4:4b:f4:01:c9:d8:d4:dd:d1:e7:ef:32:ea:
                    b7:0a:74:42:d9:f5:75:c7:e3:7c:c3:36:df:b9:8c:
                    c8:66:77:8c:80:fa:52:d9:09:e7:58:96:b5:f3:54:
                    83:55:19:9d:d2:e2:9f:b1:66:f9:e5:b1:a1:f9:63:
                    b2:6b:4d:8c:77:a5:38:e7:1e:c4:86:2a:9a:71:d3:
                    43:d7:2f:47:96:48:88:41:9d:e4:b0:1c:bc:43:6c:
                    70:35:7d:e5:f8:76:d2:05:a8:24:87:c8:64:b3:60:
                    11:4d:6e:01:6f:cf:2a:bf:fb:9c:f6:24:e0:49:4b:
                    df:14:0c:be:32:53:29:57:e7:63:dd:05:ca:59:99:
                    d9:1e:26:3c:fa:eb:df:fb:be:09:d7:cd:c4:14:9a:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A1:D4:29:CB:FC:26:88:8A:D5:7D:A0:60:23:49:ED:5C:1C:D1:B5
            X509v3 Authority Key Identifier:
                keyid:11:E7:10:34:1E:FB:8C:FE:E7:72:2C:DD:CE:C0:B3:93:87:54:29:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/11E710341EFB8CFEE7722CDDCEC0B393875429B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E710341EFB8CFEE7722CDDCEC0B393875429B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/3/3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:50:db:f7:2c:15:2a:65:b0:7a:55:2e:e8:fd:00:37:20:
         e0:cc:43:d6:cd:d5:4b:e7:c2:16:57:61:9e:53:f3:a9:95:39:
         bf:46:d1:63:44:50:07:73:58:08:6f:d8:b0:d5:00:3a:6f:e2:
         cd:95:d0:06:0a:c9:bd:2a:97:1a:e9:1e:ba:06:f8:69:bf:48:
         94:a0:93:bb:d2:50:80:49:c8:59:7d:be:34:93:c3:d5:d0:49:
         5c:2b:29:2e:a3:f0:60:d0:2a:dc:62:02:16:41:2b:5c:85:5e:
         f1:08:52:12:d7:14:1b:39:56:89:9e:cc:87:f6:77:f3:22:ee:
         21:13:1a:ce:64:fe:c1:79:f2:ed:73:1b:6b:09:a0:02:ec:0e:
         f8:71:d0:8b:7f:06:20:0b:83:96:60:2d:20:fe:ce:67:87:3d:
         b0:4c:fc:7a:72:0f:38:a7:be:41:af:92:69:6a:03:96:37:ba:
         34:be:69:12:c4:2e:67:f5:76:57:31:3e:18:54:fc:02:10:15:
         84:a0:06:df:f5:b6:ed:0c:c9:86:81:09:62:a6:b6:4c:2d:68:
         24:a7:42:dc:04:c5:69:eb:87:86:b6:d2:ff:6c:d8:7c:e3:97:
         dd:b4:8a:a6:c7:bc:f4:f4:df:4f:40:2c:bc:84:d3:b9:59:da:
         7f:5c:2e:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb+ZUjw3KXvSVqIkN6FwKOKm1v+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFNzEwMzQxRUZCOENGRUU3NzIyQ0REQ0VDMEIzOTM4
NzU0MjlCNjAeFw0yNDA0MDgxNzI2MjhaFw0yNTA0MDcxNzMxMjhaMDMxMTAvBgNV
BAMTKDYzQTFENDI5Q0JGQzI2ODg4QUQ1N0RBMDYwMjM0OUVENUMxQ0QxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyv3GsijyxJ1rcL97SNHyTy9ZN
ZKnmDSe7zu7fnAl0o6qEO6fBh3iXDH3chJnAkSpgVlJuilKVSyGE5gYb6uXtG5rM
uDd9yVpzqshcaPZNMhnrfnvYuyQZgh1wijC7yuqgeYtzl5X7R0UW5Ev0AcnY1N3R
5+8y6rcKdELZ9XXH43zDNt+5jMhmd4yA+lLZCedYlrXzVINVGZ3S4p+xZvnlsaH5
Y7JrTYx3pTjnHsSGKppx00PXL0eWSIhBneSwHLxDbHA1feX4dtIFqCSHyGSzYBFN
bgFvzyq/+5z2JOBJS98UDL4yUylX52PdBcpZmdkeJjz669/7vgnXzcQUmn/9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY6HUKcv8JoiK1X2gYCNJ7Vwc0bUwHwYDVR0j
BBgwFoAUEecQNB77jP7ncizdzsCzk4dUKbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQ
VE4vMy8xMUU3MTAzNDFFRkI4Q0ZFRTc3MjJDRERDRUMwQjM5Mzg3NTQyOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExRTcxMDM0MUVGQjhDRkVF
NzcyMkNERENFQzBCMzkzODc1NDI5QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFa1BvQlgzWGJ4YkZaZWtpclJxbjhCWGlEVThlblNyZnJ3aFdleFhoUFROLzMv
MzEzNzMwMmUzMjM1MzQyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq/mAwDQYJKoZIhvcNAQELBQADggEBAJ4SUNv3
LBUqZbB6VS7o/QA3IODMQ9bN1UvnwhZXYZ5T86mVOb9G0WNEUAdzWAhv2LDVADpv
4s2V0AYKyb0qlxrpHroG+Gm/SJSgk7vSUIBJyFl9vjSTw9XQSVwrKS6j8GDQKtxi
AhZBK1yFXvEIUhLXFBs5VomezIf2d/Mi7iETGs5k/sF58u1zG2sJoALsDvhx0It/
BiALg5ZgLSD+zmeHPbBM/HpyDzinvkGvkmlqA5Y3ujS+aRLELmf1dlcxPhhU/AIQ
FYSgBt/1tu0MyYaBCWKmtkwtaCSnQtwExWnrh4a20v9s2Hzjl920iqbHvPT0309A
LLyE07lZ2n9cLrg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org