Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa
File:                     3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          2/CS80Vts91J2a/oamvcsG/aitozOxhWkEoKnXjUOz8=
Subject key identifier:   1D:D7:8B:03:0B:18:4F:20:1E:3D:0C:21:D7:F7:2C:D5:C3:53:4C:80
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       4286686F5059640CBAC0D98DBA95C4312D3BD766
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        170.246.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:68:6f:50:59:64:0c:ba:c0:d9:8d:ba:95:c4:31:2d:3b:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=1DD78B030B184F201E3D0C21D7F72CD5C3534C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:8d:da:a6:54:d2:60:ee:88:f5:15:a3:54:
                    d7:ad:ec:b8:70:ff:76:48:2c:d8:a3:35:c8:b6:e9:
                    44:88:02:12:5e:ae:b8:dc:91:32:e8:4e:e5:c9:d8:
                    6f:73:d4:9d:84:77:c9:93:3c:e4:85:c1:9c:cf:31:
                    3d:6b:04:a6:4b:8a:17:7a:49:15:06:6e:8c:4b:c3:
                    62:ab:02:66:11:cd:32:7c:d2:79:19:b0:20:97:1e:
                    f4:71:cc:c3:7a:56:be:fb:a5:45:0f:c7:c5:ca:c1:
                    ee:dc:ba:25:3e:e5:38:5d:23:55:bf:50:ff:37:ff:
                    c3:50:04:ef:f8:0f:8a:3b:df:8a:22:2d:f1:89:bc:
                    83:16:37:fd:34:ae:bb:52:be:99:1f:91:82:5f:fc:
                    48:fa:ed:cb:de:4c:f2:71:a3:da:40:5a:59:bc:fb:
                    7d:35:79:26:ef:9c:6f:58:b4:fa:43:46:6e:01:11:
                    4b:72:16:55:80:1a:90:4d:fc:70:e1:ab:ce:e4:d4:
                    2b:c0:a2:45:ce:4c:ae:bf:f5:f4:7f:48:fc:2c:4f:
                    9d:91:53:2b:9e:3c:37:e6:0e:30:19:f5:61:c0:77:
                    88:d4:9f:51:64:44:05:d9:df:6d:60:51:b4:5c:58:
                    3c:e3:2d:bd:ef:53:e4:f8:d6:8f:f2:e2:47:e5:da:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D7:8B:03:0B:18:4F:20:1E:3D:0C:21:D7:F7:2C:D5:C3:53:4C:80
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:3c:93:0d:50:e9:55:db:8f:20:e5:cb:54:5a:5b:15:59:54:
         9a:57:9e:e5:4f:94:52:c0:c0:c0:aa:2e:79:ab:3f:64:55:d5:
         24:9b:09:0c:3f:5b:7a:4f:d3:06:85:ba:ca:13:ec:5d:c3:8e:
         fe:84:b5:72:91:63:c1:2b:20:45:da:c3:b7:45:31:41:6f:99:
         64:a9:d5:37:bf:e2:c3:90:cb:b7:1f:d1:a7:48:27:f6:2b:84:
         f1:79:74:5e:eb:44:94:77:14:7a:fa:17:82:73:fd:4a:7c:58:
         90:36:4f:8a:5c:0c:47:33:d0:54:9d:52:85:cc:0d:e1:13:bf:
         ef:b3:2e:19:8f:ec:ea:e1:ad:77:97:fe:2f:74:9f:28:79:cd:
         f2:1e:1b:4e:40:89:d9:d7:2a:4f:08:cf:92:12:9e:72:40:ea:
         d4:08:46:da:fb:2f:f0:29:7d:8d:b7:6e:60:0c:6d:49:12:fd:
         72:e0:74:e7:a3:4a:3c:a6:ca:67:86:f9:30:0c:53:eb:50:e1:
         92:6a:7a:a0:cf:dd:db:db:c1:d8:0b:93:92:a9:99:6d:d7:da:
         36:0e:a1:cb:32:7e:fa:00:7c:6b:0b:68:60:ef:35:cd:49:e3:
         f8:6a:4a:30:7f:a0:1d:da:a6:30:e1:f8:38:6b:9f:53:db:8d:
         03:ac:f0:2f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQoZob1BZZAy6wNmNupXEMS0712YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwNTIyQjQ3MkY3MTIwNUJCQTRCMzI5NzUyNjg1ODE4
MTg2OTI4MTAeFw0yNDA0MDMyMTQxMTZaFw0yNTA0MDIyMTQ2MTZaMDMxMTAvBgNV
BAMTKDFERDc4QjAzMEIxODRGMjAxRTNEMEMyMUQ3RjcyQ0Q1QzM1MzRDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMI3aplTSYO6I9RWjVNet7Lhw
/3ZILNijNci26USIAhJerrjckTLoTuXJ2G9z1J2Ed8mTPOSFwZzPMT1rBKZLihd6
SRUGboxLw2KrAmYRzTJ80nkZsCCXHvRxzMN6Vr77pUUPx8XKwe7cuiU+5ThdI1W/
UP83/8NQBO/4D4o734oiLfGJvIMWN/00rrtSvpkfkYJf/Ej67cveTPJxo9pAWlm8
+301eSbvnG9YtPpDRm4BEUtyFlWAGpBN/HDhq87k1CvAokXOTK6/9fR/SPwsT52R
UyuePDfmDjAZ9WHAd4jUn1FkRAXZ321gUbRcWDzjLb3vU+T41o/y4kfl2oytAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHdeLAwsYTyAePQwh1/cs1cNTTIAwHwYDVR0j
BBgwFoAUeAUitHL3EgW7pLMpdSaFgYGGkoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMS83ODA1MjJCNDcyRjcxMjA1QkJBNEIzMjk3NTI2ODU4MTgxODY5MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MDUyMkI0NzJGNzEyMDVC
QkE0QjMyOTc1MjY4NTgxODE4NjkyODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzEv
MzEzNzMwMmUzMjM0MzYyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9uwwDQYJKoZIhvcNAQELBQADggEBAL08kw1Q
6VXbjyDly1RaWxVZVJpXnuVPlFLAwMCqLnmrP2RV1SSbCQw/W3pP0waFusoT7F3D
jv6EtXKRY8ErIEXaw7dFMUFvmWSp1Te/4sOQy7cf0adIJ/YrhPF5dF7rRJR3FHr6
F4Jz/Up8WJA2T4pcDEcz0FSdUoXMDeETv++zLhmP7OrhrXeX/i90nyh5zfIeG05A
idnXKk8Iz5ISnnJA6tQIRtr7L/ApfY23bmAMbUkS/XLgdOejSjymymeG+TAMU+tQ
4ZJqeqDP3dvbwdgLk5KpmW3X2jYOocsyfvoAfGsLaGDvNc1J4/hqSjB/oB3apjDh
+Dhrn1PbjQOs8C8=
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org