Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
File:                     3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier:          d66dbuDR47wZyRw7Mxm6eiq7qicUguK771CokoJTvi4=
Subject key identifier:   E3:4A:B3:72:9E:EB:DA:70:09:6D:E2:41:06:AE:66:20:02:80:E7:80
Certificate issuer:       /CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Certificate serial:       6B1C04E1A949B18EECFB1B15511378F50B587D5A
Authority key identifier: 53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
Signing time:             Fri 22 Sep 2023 03:52:42 +0000
ROA not before:           Fri 22 Sep 2023 03:47:42 +0000
ROA not after:            Fri 20 Sep 2024 03:52:42 +0000
asID:                     263919
IP address blocks:        170.0.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1c:04:e1:a9:49:b1:8e:ec:fb:1b:15:51:13:78:f5:0b:58:7d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
        Validity
            Not Before: Sep 22 03:47:42 2023 GMT
            Not After : Sep 20 03:52:42 2024 GMT
        Subject: CN=E34AB3729EEBDA70096DE24106AE66200280E780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:b4:c5:f1:8a:df:10:51:0f:f8:64:e2:18:
                    44:72:31:43:6c:81:e1:86:28:04:6f:4c:62:b3:e5:
                    57:66:57:f5:5e:33:a9:dd:c3:a4:60:a9:43:f9:fc:
                    63:43:e5:ee:58:3f:40:a5:86:94:b2:e2:cc:2a:04:
                    48:78:60:51:89:fe:68:af:c5:7e:39:53:85:d5:b2:
                    73:2e:e1:76:84:5c:1d:d3:55:8a:73:ea:00:4c:7e:
                    02:75:20:15:3c:18:38:65:3a:24:b2:48:50:b9:4b:
                    7c:bf:07:c8:63:4c:ab:d0:b9:a1:b6:1e:41:fa:b5:
                    d7:a7:75:34:c8:eb:34:53:de:77:33:34:3b:3d:dd:
                    79:d9:2b:b7:06:cf:fd:ad:b2:29:ef:f6:42:6c:84:
                    5a:68:ff:e7:95:20:ef:d6:27:78:d5:e1:75:56:fe:
                    30:40:0f:a6:32:12:74:1a:a2:e5:8a:b0:98:81:27:
                    8c:e2:f5:6d:69:ac:a1:87:fe:53:1c:1f:76:3e:d7:
                    83:ed:57:f5:e5:3c:aa:c3:d1:de:0b:cb:f9:86:fa:
                    5c:cb:da:1f:88:aa:b2:b8:12:94:5a:36:d3:8f:88:
                    ad:8a:98:a6:ee:c3:72:88:30:9a:16:99:43:2e:79:
                    1c:72:4c:f7:62:da:96:43:64:9c:da:79:a2:b7:85:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:B3:72:9E:EB:DA:70:09:6D:E2:41:06:AE:66:20:02:80:E7:80
            X509v3 Authority Key Identifier:
                keyid:53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:82:88:7b:e8:cb:ac:bb:a4:ac:e0:a6:ba:8c:ca:71:6e:17:
         01:aa:db:3f:db:6c:50:97:ec:40:3b:7d:b1:76:57:69:e8:33:
         aa:6e:5f:4d:c7:d7:49:86:e4:51:8f:34:98:98:65:09:d5:be:
         bd:e3:31:a0:48:7f:d0:88:61:aa:5c:b8:e1:e8:5f:c8:0f:a9:
         eb:53:e4:c0:7a:b7:e8:9e:16:61:a5:6e:4f:eb:6a:ce:7d:1f:
         c3:f7:c5:19:38:4c:6d:1e:f5:e9:c2:6d:68:43:b5:85:40:5f:
         73:be:36:36:45:c4:09:d6:85:12:4d:f5:57:c6:ab:01:11:6b:
         75:49:6a:08:01:cf:d0:8e:58:aa:1d:4f:65:fc:6f:0b:3b:52:
         5a:40:12:19:14:dc:fc:6b:ce:e7:db:75:0e:02:17:36:0e:bf:
         0a:3e:6d:b4:5d:6a:b3:02:91:c7:dc:ca:b5:21:46:37:e9:fa:
         36:e1:71:aa:df:93:f8:fa:67:80:ef:81:40:1d:8c:82:10:f6:
         7d:29:a6:21:b7:04:bf:07:fd:85:2e:df:7f:1c:69:3c:b0:8e:
         bd:b6:a6:93:af:09:11:5e:1f:6f:01:1b:1a:a8:a0:ee:bb:92:
         f1:11:9f:8d:1d:a0:b5:83:6b:46:58:4b:7a:02:4f:80:dd:02:
         d6:5a:97:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaxwE4alJsY7s+xsVURN49QtYfVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNEQkQ4NTUwNTc0QkZCMTc2NzA4M0ZBRDNBMzI3Q0Q1
MzUxNzUwRTAeFw0yMzA5MjIwMzQ3NDJaFw0yNDA5MjAwMzUyNDJaMDMxMTAvBgNV
BAMTKEUzNEFCMzcyOUVFQkRBNzAwOTZERTI0MTA2QUU2NjIwMDI4MEU3ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlLTF8YrfEFEP+GTiGERyMUNs
geGGKARvTGKz5VdmV/VeM6ndw6RgqUP5/GND5e5YP0ClhpSy4swqBEh4YFGJ/miv
xX45U4XVsnMu4XaEXB3TVYpz6gBMfgJ1IBU8GDhlOiSySFC5S3y/B8hjTKvQuaG2
HkH6tdendTTI6zRT3nczNDs93XnZK7cGz/2tsinv9kJshFpo/+eVIO/WJ3jV4XVW
/jBAD6YyEnQaouWKsJiBJ4zi9W1prKGH/lMcH3Y+14PtV/XlPKrD0d4Ly/mG+lzL
2h+IqrK4EpRaNtOPiK2KmKbuw3KIMJoWmUMueRxyTPdi2pZDZJzaeaK3hYCDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU40qzcp7r2nAJbeJBBq5mIAKA54AwHwYDVR0j
BBgwFoAUU9vYVQV0v7F2cIP606MnzVNRdQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL
ODUvMC81M0RCRDg1NTA1NzRCRkIxNzY3MDgzRkFEM0EzMjdDRDUzNTE3NTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzREJEODU1MDU3NEJGQjE3
NjcwODNGQUQzQTMyN0NENTM1MTc1MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRjRzJvYkVVWWZNS2hXQVg0NTduRmd6b1RYWVN0aUxLNERhRTM0VkRTSzg1LzAv
MzEzNzMwMmUzMDJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzkzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDQMA0GCSqGSIb3DQEBCwUAA4IBAQBJgoh76Mus
u6Ss4Ka6jMpxbhcBqts/22xQl+xAO32xdldp6DOqbl9Nx9dJhuRRjzSYmGUJ1b69
4zGgSH/QiGGqXLjh6F/ID6nrU+TAerfonhZhpW5P62rOfR/D98UZOExtHvXpwm1o
Q7WFQF9zvjY2RcQJ1oUSTfVXxqsBEWt1SWoIAc/QjliqHU9l/G8LO1JaQBIZFNz8
a87n23UOAhc2Dr8KPm20XWqzApHH3Mq1IUY36fo24XGq35P4+meA74FAHYyCEPZ9
KaYhtwS/B/2FLt9/HGk8sI69tqaTrwkRXh9vARsaqKDuu5LxEZ+NHaC1g2tGWEt6
Ak+A3QLWWpdZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org