Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
File:                     3137302e38322e3136302e302f32322d3234203d3e203533313532.roa (raw, json)
Hash identifier:          hIliZUKLPRb+yOHCJ4R2WrcV4vGl/RZhKAlVww82SJY=
Subject key identifier:   93:17:52:79:11:50:D2:3F:FE:7E:50:8F:05:36:CA:8E:F6:D8:38:FD
Certificate issuer:       /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial:       085B227346EF862D92A9E4C2DCAD37AC2C10782F
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa
Signing time:             Thu 21 Mar 2024 22:00:25 +0000
ROA not before:           Thu 21 Mar 2024 21:55:25 +0000
ROA not after:            Thu 20 Mar 2025 22:00:25 +0000
asID:                     53152
IP address blocks:        170.82.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5b:22:73:46:ef:86:2d:92:a9:e4:c2:dc:ad:37:ac:2c:10:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
        Validity
            Not Before: Mar 21 21:55:25 2024 GMT
            Not After : Mar 20 22:00:25 2025 GMT
        Subject: CN=931752791150D23FFE7E508F0536CA8EF6D838FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:04:81:93:61:7a:f5:ad:14:38:29:09:3f:
                    d0:89:cb:a8:44:66:3f:2b:fd:82:66:a9:b3:83:cd:
                    b6:d8:25:7f:83:73:4c:5b:44:de:bf:69:22:4f:bf:
                    ef:e3:ea:8b:9e:52:62:a0:f0:4f:aa:af:54:68:64:
                    4a:0e:dd:99:66:6b:a6:8a:63:4b:37:64:b2:bd:f6:
                    97:61:c1:92:da:fd:53:6f:b8:19:8c:7e:31:23:7d:
                    de:e7:41:38:79:e9:44:17:dc:4e:32:a8:bd:a4:3d:
                    38:d6:71:94:fe:43:16:f4:6f:67:32:00:2a:0a:bf:
                    48:a8:2b:a6:c5:f1:fc:e4:d8:cc:a8:8c:01:37:14:
                    3c:51:6d:1a:d7:1e:7a:fc:15:e3:ad:d8:c1:04:5e:
                    42:4a:f8:67:73:1e:bd:64:1b:a5:e4:4a:1f:82:b3:
                    01:f2:60:82:b7:75:04:1b:cb:f0:70:46:d9:16:86:
                    3f:3f:af:3c:15:c2:fc:b1:30:79:2c:f4:b1:aa:74:
                    ce:2e:4e:06:2b:cc:09:52:5b:70:83:70:f8:85:08:
                    1e:89:8d:89:bb:66:e8:8a:16:3c:6f:7a:1c:09:ce:
                    de:86:6b:3e:3e:59:44:f0:dc:ec:4f:37:c6:cf:6d:
                    53:c9:ab:17:b7:09:80:27:a9:22:2f:88:83:b8:61:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:52:79:11:50:D2:3F:FE:7E:50:8F:05:36:CA:8E:F6:D8:38:FD
            X509v3 Authority Key Identifier:
                keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e38322e3136302e302f32322d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:bd:31:98:70:d8:08:92:e2:f6:2f:38:5e:c2:5b:34:10:
         1b:ec:1f:53:7d:4b:68:43:67:8a:d9:00:a4:35:8f:c6:63:8c:
         ee:ae:c6:ca:cb:b9:bf:32:db:b8:31:85:38:50:90:9c:16:2f:
         71:f1:af:d3:7e:a1:37:5b:4f:9a:48:4b:9b:a4:7a:29:39:e9:
         a9:d4:c3:2b:52:1d:8c:f5:62:71:87:d4:c0:95:da:dd:75:93:
         0b:78:9f:bf:aa:4b:fc:25:b2:5f:61:9e:4c:9f:18:90:97:a8:
         db:f9:97:d4:98:a0:ba:ef:fc:9f:b5:b5:af:3e:c7:35:2d:6f:
         50:61:f5:7a:8c:25:87:1a:64:0d:0e:a9:94:0f:b3:9c:cc:6d:
         28:a1:53:3a:2d:64:ad:d0:6d:f9:b7:83:87:3f:7e:a8:a1:4e:
         5c:3a:68:3d:32:7f:d0:dc:23:93:dd:d6:05:d4:dc:ea:b8:17:
         c4:7a:d4:0f:1a:2a:ac:a6:44:32:f4:65:0e:8e:e3:8b:f5:b1:
         3b:86:82:cd:af:7c:df:e4:3d:56:9a:c9:90:06:dd:ff:8c:7c:
         7f:6e:3d:95:86:00:f1:db:33:37:bf:59:0d:ca:41:6f:14:0b:
         5e:80:85:05:0a:b6:87:90:b0:5b:3d:d8:6e:dc:92:87:c4:72:
         d8:f6:a5:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCFsic0bvhi2SqeTC3K03rCwQeC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFRTNEMjhENUExMjQ0ODU2NUNFRDM5MDM3MDUxRDRC
NTMzODkzRDAeFw0yNDAzMjEyMTU1MjVaFw0yNTAzMjAyMjAwMjVaMDMxMTAvBgNV
BAMTKDkzMTc1Mjc5MTE1MEQyM0ZGRTdFNTA4RjA1MzZDQThFRjZEODM4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpYQSBk2F69a0UOCkJP9CJy6hE
Zj8r/YJmqbODzbbYJX+Dc0xbRN6/aSJPv+/j6oueUmKg8E+qr1RoZEoO3Zlma6aK
Y0s3ZLK99pdhwZLa/VNvuBmMfjEjfd7nQTh56UQX3E4yqL2kPTjWcZT+Qxb0b2cy
ACoKv0ioK6bF8fzk2MyojAE3FDxRbRrXHnr8FeOt2MEEXkJK+GdzHr1kG6XkSh+C
swHyYIK3dQQby/BwRtkWhj8/rzwVwvyxMHks9LGqdM4uTgYrzAlSW3CDcPiFCB6J
jYm7ZuiKFjxvehwJzt6Gaz4+WUTw3OxPN8bPbVPJqxe3CYAnqSIviIO4YRD9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkxdSeRFQ0j/+flCPBTbKjvbYOP0wHwYDVR0j
BBgwFoAU3u49KNWhJEhWXO05A3BR1LUziT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhtZ2tXTVFTbWs5NjdDcEJFc3RYMngxYmlOVTVGWXVhaWJvWDZjSE1K
QmkvMC9ERUVFM0QyOEQ1QTEyNDQ4NTY1Q0VEMzkwMzcwNTFENEI1MzM4OTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFRUUzRDI4RDVBMTI0NDg1
NjVDRUQzOTAzNzA1MUQ0QjUzMzg5M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYbWdrV01RU21rOTY3Q3BCRXN0WDJ4MWJpTlU1Rll1YWlib1g2Y0hNSkJpLzAv
MzEzNzMwMmUzODMyMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlKgMA0GCSqGSIb3DQEBCwUAA4IBAQBj7L0xmHDY
CJLi9i84XsJbNBAb7B9TfUtoQ2eK2QCkNY/GY4zursbKy7m/Mtu4MYU4UJCcFi9x
8a/TfqE3W0+aSEubpHopOemp1MMrUh2M9WJxh9TAldrddZMLeJ+/qkv8JbJfYZ5M
nxiQl6jb+ZfUmKC67/yftbWvPsc1LW9QYfV6jCWHGmQNDqmUD7OczG0ooVM6LWSt
0G35t4OHP36ooU5cOmg9Mn/Q3COT3dYF1NzquBfEetQPGiqspkQy9GUOjuOL9bE7
hoLNr3zf5D1WmsmQBt3/jHx/bj2VhgDx2zM3v1kNykFvFAtegIUFCraHkLBbPdhu
3JKHxHLY9qXV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org