Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa
File:                     3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          i2p01wqXeyrax9l/+jD5A4JeI8dJEEbNaRijGlwCVx4=
Subject key identifier:   58:C4:94:CC:66:F8:BB:EA:26:14:77:8A:DD:66:9A:6C:AE:97:D8:E3
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       27A4552F6C732F00677A980225113910B8CADA51
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        170.246.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:55:2f:6c:73:2f:00:67:7a:98:02:25:11:39:10:b8:ca:da:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=58C494CC66F8BBEA2614778ADD669A6CAE97D8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:ef:30:c8:5d:e0:2f:a6:f5:8a:99:dc:e0:
                    82:40:df:22:ea:30:00:fc:b8:c6:54:d5:78:13:91:
                    23:85:e5:0d:b8:0d:3f:dd:0a:8f:89:e9:a7:bf:1b:
                    b1:8a:7d:80:52:5e:7c:60:9e:32:6d:f2:3c:89:ef:
                    f1:24:97:66:a4:ce:ac:cb:71:19:26:41:f0:37:3a:
                    34:c8:54:63:c5:58:9d:ac:88:5f:71:46:e8:37:01:
                    29:75:6d:0d:3f:bb:c3:6c:35:3b:ba:ae:33:9f:3e:
                    a2:2b:93:a3:fa:39:0e:26:9c:6d:65:99:40:a2:cd:
                    15:46:0f:f4:a6:8d:c0:75:cd:4f:e3:40:31:f4:58:
                    04:6c:29:21:73:69:56:40:c2:94:f1:db:8c:37:cf:
                    cd:c5:9b:b4:1b:af:a1:15:9d:37:da:7f:5d:89:35:
                    1b:cd:8c:3b:37:4b:6f:50:27:4a:a5:07:2c:61:60:
                    61:22:83:1c:ec:64:3e:c2:af:ec:2a:25:89:5d:66:
                    65:fa:66:5f:0f:36:ee:c5:c8:a7:f8:80:ec:19:29:
                    ac:b1:9e:a4:ad:76:b5:43:33:2d:10:21:86:c9:9f:
                    40:aa:45:85:9c:a4:3a:42:2e:c0:fe:6e:d9:91:39:
                    57:62:30:c9:f1:87:8d:78:39:5c:53:93:ed:63:da:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C4:94:CC:66:F8:BB:EA:26:14:77:8A:DD:66:9A:6C:AE:97:D8:E3
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:c2:27:b3:03:d1:23:9a:59:1a:33:18:9d:62:d3:c9:ff:
         a5:f9:76:71:50:ac:b8:eb:40:d8:1b:1f:e7:ba:cf:ef:66:3f:
         55:eb:e2:50:fb:6b:e4:84:f7:68:e0:3c:54:d1:4c:7a:1b:d6:
         3d:c1:a6:08:d0:d0:27:6a:08:7f:1d:d8:20:40:e7:58:98:59:
         d6:93:38:76:e0:e5:f6:14:83:d4:e9:29:aa:fb:19:db:85:17:
         3e:f9:1d:44:aa:3b:5d:84:e8:ec:f2:e6:4b:1c:46:c9:f3:e8:
         e2:07:7d:50:19:26:18:56:e6:a2:8c:5d:0c:c0:d8:b4:3b:f5:
         cc:e3:45:04:3e:cd:39:78:87:ff:fe:a4:0c:6f:2c:87:fc:e4:
         48:2c:09:49:e2:11:4f:70:bc:fa:6f:41:74:d1:33:3a:31:cd:
         de:c4:7e:a5:6d:4e:e3:8f:71:14:ba:04:11:0c:73:2e:79:48:
         da:4f:90:0e:3a:8e:2b:8e:f3:e4:6e:38:d4:9d:55:78:14:4f:
         54:b0:73:13:43:39:35:f0:c0:00:97:3e:50:c5:b5:44:48:04:
         68:84:18:d6:bb:15:72:5c:2c:1e:72:cd:ef:ea:f4:71:1f:56:
         68:7d:55:3a:90:37:bf:b4:36:d3:f9:8a:78:73:9a:e4:78:fc:
         77:e6:1d:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ6RVL2xzLwBnepgCJRE5ELjK2lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwNTIyQjQ3MkY3MTIwNUJCQTRCMzI5NzUyNjg1ODE4
MTg2OTI4MTAeFw0yNDA0MDMyMTQxMTZaFw0yNTA0MDIyMTQ2MTZaMDMxMTAvBgNV
BAMTKDU4QzQ5NENDNjZGOEJCRUEyNjE0Nzc4QURENjY5QTZDQUU5N0Q4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7O8wyF3gL6b1ipnc4IJA3yLq
MAD8uMZU1XgTkSOF5Q24DT/dCo+J6ae/G7GKfYBSXnxgnjJt8jyJ7/Ekl2akzqzL
cRkmQfA3OjTIVGPFWJ2siF9xRug3ASl1bQ0/u8NsNTu6rjOfPqIrk6P6OQ4mnG1l
mUCizRVGD/SmjcB1zU/jQDH0WARsKSFzaVZAwpTx24w3z83Fm7Qbr6EVnTfaf12J
NRvNjDs3S29QJ0qlByxhYGEigxzsZD7Cr+wqJYldZmX6Zl8PNu7FyKf4gOwZKayx
nqStdrVDMy0QIYbJn0CqRYWcpDpCLsD+btmROVdiMMnxh414OVxTk+1j2rw9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWMSUzGb4u+omFHeK3WaabK6X2OMwHwYDVR0j
BBgwFoAUeAUitHL3EgW7pLMpdSaFgYGGkoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMS83ODA1MjJCNDcyRjcxMjA1QkJBNEIzMjk3NTI2ODU4MTgxODY5MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MDUyMkI0NzJGNzEyMDVC
QkE0QjMyOTc1MjY4NTgxODE4NjkyODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzEv
MzEzNzMwMmUzMjM0MzYyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq9uwwDQYJKoZIhvcNAQELBQADggEBAKbZwiez
A9EjmlkaMxidYtPJ/6X5dnFQrLjrQNgbH+e6z+9mP1Xr4lD7a+SE92jgPFTRTHob
1j3BpgjQ0CdqCH8d2CBA51iYWdaTOHbg5fYUg9TpKar7GduFFz75HUSqO12E6Ozy
5kscRsnz6OIHfVAZJhhW5qKMXQzA2LQ79czjRQQ+zTl4h//+pAxvLIf85EgsCUni
EU9wvPpvQXTRMzoxzd7EfqVtTuOPcRS6BBEMcy55SNpPkA46jiuO8+RuONSdVXgU
T1SwcxNDOTXwwACXPlDFtURIBGiEGNa7FXJcLB5yze/q9HEfVmh9VTqQN7+0NtP5
inhzmuR4/HfmHYk=
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org