Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          5StG3G7rCSik6+Lc9wmnr0ajuc5R+cZuoy3+AIhAzgg=
Subject key identifier:   D7:09:C0:31:3D:85:CA:93:AD:D3:78:3C:6F:FC:B8:F8:C7:BA:8E:38
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       1D3B91A8B44435135AEF6A5456BBB82BAFDD1320
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:07:44 +0000
ROA not before:           Thu 20 Jul 2023 14:02:44 +0000
ROA not after:            Thu 18 Jul 2024 14:07:44 +0000
asID:                     52706
IP address blocks:        170.233.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3b:91:a8:b4:44:35:13:5a:ef:6a:54:56:bb:b8:2b:af:dd:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:02:44 2023 GMT
            Not After : Jul 18 14:07:44 2024 GMT
        Subject: CN=D709C0313D85CA93ADD3783C6FFCB8F8C7BA8E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:cc:d7:1e:4d:a8:34:13:0a:29:06:91:0d:
                    ce:75:28:5d:d7:35:7d:2f:18:c0:92:85:de:b5:7b:
                    5b:6c:74:f8:a0:cc:f8:d3:0c:78:c7:4e:42:d2:d9:
                    97:5c:8e:4d:dc:4f:27:23:f2:af:2a:87:62:a4:5b:
                    74:66:ce:71:73:98:75:1c:75:e2:b9:ef:34:1b:37:
                    c9:67:a2:98:ec:a4:6c:37:64:ed:a5:51:4f:e1:7b:
                    fa:d3:cd:95:9a:c6:4b:30:76:28:7b:82:f2:c6:20:
                    8d:23:59:5f:51:e5:90:85:b4:62:a0:ef:0c:97:ff:
                    31:83:a9:cc:e5:ac:49:47:78:0f:49:74:95:eb:f1:
                    f8:85:33:42:aa:28:45:ab:49:a9:f4:99:b1:4d:15:
                    a0:74:f5:b7:01:de:d9:47:fd:a7:76:e5:f1:60:b7:
                    94:4c:2e:7c:c7:6f:58:6f:fb:3a:79:f5:63:e7:98:
                    e5:61:9a:61:54:6e:6a:d2:94:c8:05:00:3b:0a:c2:
                    22:a3:19:08:f2:05:ec:f4:25:04:82:69:3b:ac:12:
                    3a:87:b5:61:82:69:b9:62:a5:60:ad:50:51:31:5f:
                    16:96:b4:fe:6c:f9:56:9a:00:47:8e:06:68:a9:e8:
                    8d:c2:56:39:57:4d:07:29:32:2b:00:b7:27:84:f1:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:09:C0:31:3D:85:CA:93:AD:D3:78:3C:6F:FC:B8:F8:C7:BA:8E:38
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:8f:65:ed:96:8c:2d:0e:7c:b9:7e:b2:2d:3b:a7:c3:3a:
         a3:a0:c9:b3:c6:05:85:d9:19:23:8b:ef:9a:21:3a:44:82:e9:
         67:ed:34:b6:a0:b9:34:b1:ea:b1:b3:31:fd:02:12:99:86:cf:
         12:02:67:14:1c:d7:db:be:cf:4a:9a:bb:f3:21:da:1c:12:54:
         33:fd:19:53:02:c7:ef:80:81:7b:26:2e:6a:21:84:47:da:7b:
         05:af:8d:b6:15:d1:e3:3b:ea:89:d7:52:4f:c2:c9:d7:6e:5c:
         90:f9:a1:fc:5a:00:32:2d:ad:c0:dc:9b:b9:4c:1e:75:5d:46:
         08:c7:20:35:25:a3:b9:63:d6:e6:70:60:2d:5e:99:8c:09:72:
         36:d2:73:41:71:a3:e0:a4:73:ea:79:f7:eb:97:62:34:ad:20:
         35:86:e6:d7:13:bf:2e:1c:75:e5:1c:f1:9f:73:20:47:ff:d0:
         cf:3b:c9:76:2b:4d:92:19:49:f8:7a:09:9c:85:29:1d:fa:ce:
         38:77:4c:2e:8e:02:a1:2e:1f:6d:73:db:8c:3f:46:6e:1e:d4:
         17:42:6b:5a:99:7c:9b:2a:38:3f:50:7f:45:2f:36:33:3c:fa:
         58:f2:d1:2f:8f:62:9c:b8:89:25:4d:32:8c:34:82:4b:33:bf:
         5f:ea:1f:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHTuRqLRENRNa72pUVru4K6/dEyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDAyNDRaFw0yNDA3MTgxNDA3NDRaMDMxMTAvBgNV
BAMTKEQ3MDlDMDMxM0Q4NUNBOTNBREQzNzgzQzZGRkNCOEY4QzdCQThFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmszXHk2oNBMKKQaRDc51KF3X
NX0vGMCShd61e1tsdPigzPjTDHjHTkLS2Zdcjk3cTycj8q8qh2KkW3RmznFzmHUc
deK57zQbN8lnopjspGw3ZO2lUU/he/rTzZWaxkswdih7gvLGII0jWV9R5ZCFtGKg
7wyX/zGDqczlrElHeA9JdJXr8fiFM0KqKEWrSan0mbFNFaB09bcB3tlH/ad25fFg
t5RMLnzHb1hv+zp59WPnmOVhmmFUbmrSlMgFADsKwiKjGQjyBez0JQSCaTusEjqH
tWGCablipWCtUFExXxaWtP5s+VaaAEeOBmip6I3CVjlXTQcpMisAtyeE8UCPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1wnAMT2FypOt03g8b/y4+Me6jjgwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzMwMmUzMjMzMzMyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq6dQwDQYJKoZIhvcNAQELBQADggEBALWNj2Xt
lowtDny5frItO6fDOqOgybPGBYXZGSOL75ohOkSC6WftNLaguTSx6rGzMf0CEpmG
zxICZxQc19u+z0qau/Mh2hwSVDP9GVMCx++AgXsmLmohhEfaewWvjbYV0eM76onX
Uk/CydduXJD5ofxaADItrcDcm7lMHnVdRgjHIDUlo7lj1uZwYC1emYwJcjbSc0Fx
o+Ckc+p59+uXYjStIDWG5tcTvy4cdeUc8Z9zIEf/0M87yXYrTZIZSfh6CZyFKR36
zjh3TC6OAqEuH21z24w/Rm4e1BdCa1qZfJsqOD9Qf0UvNjM8+ljy0S+PYpy4iSVN
Mow0gkszv1/qHwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org