Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/3137302e302e3130342e302f32322d3234203d3e20323634393638.roa
File:                     3137302e302e3130342e302f32322d3234203d3e20323634393638.roa (raw, json)
Hash identifier:          RoRTRILxJ1w7JKmfHAxzv0t7tV7/h3U+ve9PJGcmgXA=
Subject key identifier:   9C:32:F3:7C:75:74:A3:BF:FE:0D:04:3B:CB:65:7D:05:E8:25:0B:A6
Certificate issuer:       /CN=FB90B305DB276A008037A566C2CA28A4DF1ADBAE
Certificate serial:       135447C0585710A02E5434537E8CF191EFC87F3B
Authority key identifier: FB:90:B3:05:DB:27:6A:00:80:37:A5:66:C2:CA:28:A4:DF:1A:DB:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/3137302e302e3130342e302f32322d3234203d3e20323634393638.roa
Signing time:             Wed 12 Jul 2023 12:38:00 +0000
ROA not before:           Wed 12 Jul 2023 12:33:00 +0000
ROA not after:            Wed 10 Jul 2024 12:38:00 +0000
asID:                     264968
IP address blocks:        170.0.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:54:47:c0:58:57:10:a0:2e:54:34:53:7e:8c:f1:91:ef:c8:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90B305DB276A008037A566C2CA28A4DF1ADBAE
        Validity
            Not Before: Jul 12 12:33:00 2023 GMT
            Not After : Jul 10 12:38:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:95:2b:ba:77:89:59:26:5c:13:55:a2:48:
                    42:92:a9:ea:8d:05:10:1c:ce:5a:c2:b1:76:c6:14:
                    54:00:d3:44:ab:9e:a7:86:be:81:4f:89:eb:31:bc:
                    a5:f7:8e:4c:6d:d2:15:0d:77:5e:87:dc:33:12:f1:
                    63:fa:67:03:4c:d3:2f:7d:59:5f:ea:19:8c:bf:eb:
                    c6:38:78:51:f4:02:f9:fc:b4:10:16:50:9e:e1:7e:
                    46:e9:91:02:c1:f5:f0:e0:7c:6e:1b:67:fa:fb:90:
                    55:1f:c3:f2:1c:0b:40:ee:66:96:0f:0f:32:fa:0a:
                    f5:98:1a:52:9e:0c:0d:4a:64:2f:bb:88:19:16:d7:
                    ef:6d:72:c9:11:94:6b:72:24:3b:69:cc:d5:9c:3c:
                    0e:dd:d4:42:c2:90:47:97:dd:50:03:a1:f0:38:0f:
                    ab:4f:e4:fb:db:0c:02:16:d1:d1:82:9f:07:3d:19:
                    5c:3b:f0:64:ab:e3:60:3c:87:c9:34:24:f1:1e:bc:
                    e7:ba:73:fc:dd:a7:e4:23:c4:20:e6:06:32:b1:59:
                    a3:61:6f:e7:50:b5:e6:4b:17:4d:fc:f4:9a:7c:36:
                    0d:56:19:67:33:b3:e9:da:ba:5b:9e:d5:13:59:7f:
                    31:5d:59:30:dc:6a:b4:12:dd:5c:88:9a:71:96:b6:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:32:F3:7C:75:74:A3:BF:FE:0D:04:3B:CB:65:7D:05:E8:25:0B:A6
            X509v3 Authority Key Identifier:
                keyid:FB:90:B3:05:DB:27:6A:00:80:37:A5:66:C2:CA:28:A4:DF:1A:DB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/3137302e302e3130342e302f32322d3234203d3e20323634393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:0e:54:ef:1d:88:63:5f:e0:05:16:f5:94:d6:21:64:5d:
         2a:2f:1c:f2:6e:84:a4:72:9f:d3:1e:66:d9:1e:7a:05:0c:2f:
         08:c4:01:5b:73:5c:f7:62:ed:be:06:ec:96:03:9d:76:ec:b2:
         d6:51:e5:df:94:c3:67:1f:46:9f:78:44:7a:d4:88:0f:ad:41:
         37:e6:d1:d4:54:b5:19:af:6e:24:d8:07:da:b0:16:6c:72:13:
         49:2a:4f:eb:82:b0:04:97:3e:ff:6b:13:d2:a1:9c:04:60:eb:
         8d:58:8d:cb:a7:9d:e1:2d:03:ae:37:6d:0f:e3:99:7f:6e:28:
         18:73:cd:4f:fc:1c:20:74:1a:b6:fe:b9:8a:9d:cc:5c:b6:a7:
         a1:92:dc:8d:67:fc:3b:2a:5c:12:21:5e:7a:5d:e1:83:99:c4:
         8d:20:57:c8:2d:64:71:98:92:0a:c6:3f:f4:69:7e:5f:8f:7f:
         9e:5d:81:51:4b:20:42:b3:b0:3e:6a:e7:17:a0:54:4d:cb:e1:
         5a:d1:39:aa:f6:d9:23:92:30:46:d5:4e:64:cb:15:66:99:5d:
         55:6b:70:f1:2e:00:ae:2f:dd:59:32:24:64:c6:ee:09:f7:0c:
         b6:05:10:49:56:d2:9f:e7:b4:fe:3e:4b:42:e2:af:5e:16:2b:
         c6:74:33:67
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUE1RHwFhXEKAuVDRTfozxke/IfzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MEIzMDVEQjI3NkEwMDgwMzdBNTY2QzJDQTI4QTRE
RjFBREJBRTAeFw0yMzA3MTIxMjMzMDBaFw0yNDA3MTAxMjM4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM5RDk1MkJCQTc3ODk1OTI2
NUMxMzU1QTI0ODQyOTJBOUVBOEQwNTEwMUNDRTVBQzJCMTc2QzYxNDU0MDBEMzQ0
QUI5RUE3ODZCRTgxNEY4OUVCMzFCQ0E1Rjc4RTRDNkREMjE1MEQ3NzVFODdEQzMz
MTJGMTYzRkE2NzAzNENEMzJGN0Q1OTVGRUExOThDQkZFQkM2Mzg3ODUxRjQwMkY5
RkNCNDEwMTY1MDlFRTE3RTQ2RTk5MTAyQzFGNUYwRTA3QzZFMUI2N0ZBRkI5MDU1
MUZDM0YyMUMwQjQwRUU2Njk2MEYwRjMyRkEwQUY1OTgxQTUyOUUwQzBENEE2NDJG
QkI4ODE5MTZEN0VGNkQ3MkM5MTE5NDZCNzIyNDNCNjlDQ0Q1OUMzQzBFRERENDQy
QzI5MDQ3OTdERDUwMDNBMUYwMzgwRkFCNEZFNEZCREIwQzAyMTZEMUQxODI5RjA3
M0QxOTVDM0JGMDY0QUJFMzYwM0M4N0M5MzQyNEYxMUVCQ0U3QkE3M0ZDRERBN0U0
MjNDNDIwRTYwNjMyQjE1OUEzNjE2RkU3NTBCNUU2NEIxNzRERkNGNDlBN0MzNjBE
NTYxOTY3MzNCM0U5REFCQTVCOUVENTEzNTk3RjMxNUQ1OTMwREM2QUI0MTJERDVD
ODg5QTcxOTZCNjBFQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArJ2VK7p3iVkmXBNVokhCkqnqjQUQHM5awrF2xhRUANNEq56nhr6B
T4nrMbyl945MbdIVDXdeh9wzEvFj+mcDTNMvfVlf6hmMv+vGOHhR9AL5/LQQFlCe
4X5G6ZECwfXw4HxuG2f6+5BVH8PyHAtA7maWDw8y+gr1mBpSngwNSmQvu4gZFtfv
bXLJEZRrciQ7aczVnDwO3dRCwpBHl91QA6HwOA+rT+T72wwCFtHRgp8HPRlcO/Bk
q+NgPIfJNCTxHrznunP83afkI8Qg5gYysVmjYW/nULXmSxdN/PSafDYNVhlnM7Pp
2rpbntUTWX8xXVkw3Gq0Et1ciJpxlrYOrwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJwy83x1dKO//g0EO8tlfQXoJQumMB8GA1UdIwQYMBaAFPuQswXbJ2oAgDelZsLK
KKTfGtuuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRZNnE3UDlqeXhwdEFx
Y1lkc2tTVHRyMTRKY2Vaa0dVM2FGQVY0N0pma3NGLzAvRkI5MEIzMDVEQjI3NkEw
MDgwMzdBNTY2QzJDQTI4QTRERjFBREJBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQjkwQjMwNURCMjc2QTAwODAzN0E1NjZDMkNBMjhBNERGMUFE
QkFFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80WTZxN1A5anl4cHRBcWNZZHNr
U1R0cjE0SmNlWmtHVTNhRkFWNDdKZmtzRi8wLzMxMzczMDJlMzAyZTMxMzAzNDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM5MzYzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqoA
aDANBgkqhkiG9w0BAQsFAAOCAQEAH64OVO8diGNf4AUW9ZTWIWRdKi8c8m6EpHKf
0x5m2R56BQwvCMQBW3Nc92LtvgbslgOdduyy1lHl35TDZx9Gn3hEetSID61BN+bR
1FS1Ga9uJNgH2rAWbHITSSpP64KwBJc+/2sT0qGcBGDrjViNy6ed4S0DrjdtD+OZ
f24oGHPNT/wcIHQatv65ip3MXLanoZLcjWf8OypcEiFeel3hg5nEjSBXyC1kcZiS
CsY/9Gl+X49/nl2BUUsgQrOwPmrnF6BUTcvhWtE5qvbZI5IwRtVOZMsVZpldVWtw
8S4Ari/dWTIkZMbuCfcMtgUQSVbSn+e0/j5LQuKvXhYrxnQzZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org