Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa
File:                     3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa (raw, json)
Hash identifier:          eGquSEpHPBkTq36GrR7f8MS9UO2Qd3Aes0/U/Qfq9Zo=
Subject key identifier:   12:00:A4:15:62:F4:83:5B:6F:19:55:BB:2E:BF:09:72:04:55:C9:71
Certificate issuer:       /CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
Certificate serial:       63BDAB0550AFCD3BDDDBC93522E6CE96D587544D
Authority key identifier: 35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa
Signing time:             Fri 05 Jan 2024 19:12:58 +0000
ROA not before:           Fri 05 Jan 2024 19:07:58 +0000
ROA not after:            Fri 03 Jan 2025 19:12:58 +0000
asID:                     266445
IP address blocks:        170.82.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bd:ab:05:50:af:cd:3b:dd:db:c9:35:22:e6:ce:96:d5:87:54:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
        Validity
            Not Before: Jan  5 19:07:58 2024 GMT
            Not After : Jan  3 19:12:58 2025 GMT
        Subject: CN=1200A41562F4835B6F1955BB2EBF09720455C971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:f4:2f:bd:58:11:3f:e4:42:f3:b1:34:4f:
                    46:5a:d2:be:ac:f1:74:88:e9:49:17:32:04:12:ad:
                    99:28:97:f2:cd:93:83:22:e5:5e:60:e9:fd:78:9c:
                    7f:4a:2e:7c:4c:c0:10:62:69:dd:76:85:3c:c5:93:
                    76:de:4c:7b:7f:33:14:38:fe:35:f4:4c:81:00:8a:
                    a2:a2:b4:e5:19:fe:de:03:78:70:c4:f5:3b:fc:75:
                    97:c4:c9:64:fb:b5:2e:60:7e:18:b9:7b:76:5e:04:
                    18:15:c2:c1:07:f4:27:a6:5f:e9:cd:97:c7:1d:85:
                    a6:81:fb:90:30:79:5c:20:3d:a6:cd:b4:7c:77:2c:
                    9e:fc:6b:b1:59:cd:cd:03:52:ee:9b:5e:11:4f:15:
                    16:e8:01:a5:7d:6c:7d:80:f8:6b:e3:03:25:06:fe:
                    ab:92:b8:9c:07:64:d2:f4:e9:1a:1a:fa:26:d0:34:
                    e3:4b:e6:c5:08:6d:2f:4b:5f:64:a5:7e:fc:40:8d:
                    45:66:2c:65:2c:7d:10:6a:65:d6:ab:34:4f:9a:a0:
                    b1:a8:f3:25:8b:20:a2:4b:d8:cc:a1:a1:81:3e:e2:
                    7f:51:4d:2d:d5:21:81:38:6b:69:c2:e9:36:1a:ab:
                    39:5b:09:27:c4:31:3c:26:2b:51:af:6e:a0:30:b2:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:A4:15:62:F4:83:5B:6F:19:55:BB:2E:BF:09:72:04:55:C9:71
            X509v3 Authority Key Identifier:
                keyid:35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:06:e6:2f:7f:c1:60:4d:b8:a5:11:39:1c:39:d9:6d:f0:
         8d:bd:e4:9e:94:77:d6:d9:b0:74:82:67:7a:1c:f3:cd:3e:8e:
         22:a7:0a:ac:60:6f:f2:57:51:3c:49:66:cd:85:6c:25:1e:84:
         c3:8e:61:c9:bf:01:af:a6:a9:0c:48:9f:c2:76:c2:cb:80:df:
         e8:c3:ea:47:3f:1d:14:3f:56:55:16:90:97:2d:72:9d:7f:11:
         a2:ce:da:ac:cc:0c:60:b6:86:bc:de:eb:0b:2f:22:97:c3:5b:
         b9:76:90:64:2a:41:a9:21:c3:b7:d4:0a:c6:bf:69:b0:89:b9:
         30:48:76:c7:a5:04:71:eb:9b:19:22:af:04:db:77:63:12:93:
         35:23:06:20:e7:16:e9:7b:72:5e:5d:c6:59:5b:5b:c8:59:b9:
         f9:59:87:93:16:49:12:15:83:7a:a0:b4:5e:08:5d:78:6d:1e:
         fa:d9:d2:a4:d5:f1:24:c8:19:70:db:d7:5d:5a:cc:73:e5:50:
         40:4b:a4:26:a1:d0:58:cf:89:9f:59:51:bc:f6:12:a3:69:3f:
         c0:ba:7c:b8:41:94:8a:eb:be:7e:b7:ee:89:94:86:39:6b:84:
         55:78:be:19:d2:c2:fe:da:aa:de:95:28:6a:38:96:33:fd:a7:
         1b:ef:52:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY72rBVCvzTvd28k1IubOltWHVE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5NDhDMTM5QjcwOEFCRkU0QTExQUUwMThBOEY1RTI1
QTA5QkEyMDAeFw0yNDAxMDUxOTA3NThaFw0yNTAxMDMxOTEyNThaMDMxMTAvBgNV
BAMTKDEyMDBBNDE1NjJGNDgzNUI2RjE5NTVCQjJFQkYwOTcyMDQ1NUM5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcfQvvVgRP+RC87E0T0Za0r6s
8XSI6UkXMgQSrZkol/LNk4Mi5V5g6f14nH9KLnxMwBBiad12hTzFk3beTHt/MxQ4
/jX0TIEAiqKitOUZ/t4DeHDE9Tv8dZfEyWT7tS5gfhi5e3ZeBBgVwsEH9CemX+nN
l8cdhaaB+5AweVwgPabNtHx3LJ78a7FZzc0DUu6bXhFPFRboAaV9bH2A+GvjAyUG
/quSuJwHZNL06Roa+ibQNONL5sUIbS9LX2SlfvxAjUVmLGUsfRBqZdarNE+aoLGo
8yWLIKJL2MyhoYE+4n9RTS3VIYE4a2nC6TYaqzlbCSfEMTwmK1GvbqAwsgBTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEgCkFWL0g1tvGVW7Lr8JcgRVyXEwHwYDVR0j
BBgwFoAUNZSME5twir/koRrgGKj14loJuiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFJRSGFIQXhGQ2FHeHVrVkdGOG5DN1UxeUY3MTZibldGN0ZwRWc2YzFz
VEIvMC8zNTk0OEMxMzlCNzA4QUJGRTRBMTFBRTAxOEE4RjVFMjVBMDlCQTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1OTQ4QzEzOUI3MDhBQkZF
NEExMUFFMDE4QThGNUUyNUEwOUJBMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRSUUhhSEF4RkNhR3h1a1ZHRjhuQzdVMXlGNzE2Ym5XRjdGcEVnNmMxc1RCLzAv
MzEzNzMwMmUzODMyMmUzMTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUrQwDQYJKoZIhvcNAQELBQADggEBACj4BuYv
f8FgTbilETkcOdlt8I295J6Ud9bZsHSCZ3oc880+jiKnCqxgb/JXUTxJZs2FbCUe
hMOOYcm/Aa+mqQxIn8J2wsuA3+jD6kc/HRQ/VlUWkJctcp1/EaLO2qzMDGC2hrze
6wsvIpfDW7l2kGQqQakhw7fUCsa/abCJuTBIdselBHHrmxkirwTbd2MSkzUjBiDn
Ful7cl5dxllbW8hZuflZh5MWSRIVg3qgtF4IXXhtHvrZ0qTV8STIGXDb111azHPl
UEBLpCah0FjPiZ9ZUbz2EqNpP8C6fLhBlIrrvn637omUhjlrhFV4vhnSwv7aqt6V
KGo4ljP9pxvvUkw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org