Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa
File:                     3137302e38302e36342e302f32322d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          rJ5XV5Y0h/pPLfom/ujUM64SbN+76tk0wTDQ46ntxbs=
Subject key identifier:   98:40:E5:7E:D0:AC:B6:33:E0:9D:A9:23:64:FC:8D:69:1F:01:E6:95
Certificate issuer:       /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial:       225E67EFB93FDB7AD74041FF81AD6F8EF8AD3FE1
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa
Signing time:             Mon 08 May 2023 11:48:34 +0000
ROA not before:           Mon 08 May 2023 11:43:34 +0000
ROA not after:            Mon 06 May 2024 11:48:34 +0000
asID:                     262514
IP address blocks:        170.80.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5e:67:ef:b9:3f:db:7a:d7:40:41:ff:81:ad:6f:8e:f8:ad:3f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Validity
            Not Before: May  8 11:43:34 2023 GMT
            Not After : May  6 11:48:34 2024 GMT
        Subject: CN=9840E57ED0ACB633E09DA92364FC8D691F01E695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:6b:51:15:74:40:21:c9:ed:8f:4d:69:47:
                    38:d8:60:e7:1b:c3:84:92:7b:75:7f:77:97:6a:1f:
                    a8:bb:10:b6:34:7c:0b:84:03:2d:a7:d4:5c:3f:3f:
                    e0:bb:fe:9a:c2:d4:4c:61:16:a8:2c:de:f8:16:4f:
                    e1:c4:2a:37:38:ce:f6:aa:66:a3:08:a1:55:78:db:
                    6e:89:ab:b3:a7:3c:8e:02:64:a1:97:6e:f4:32:c9:
                    00:9d:6e:de:14:2b:76:c4:a9:f7:85:49:89:55:90:
                    76:bd:c1:90:6c:b9:64:26:ef:83:93:a4:6e:91:ff:
                    ca:36:56:ca:a4:0f:ad:de:e0:bc:b1:99:00:91:8c:
                    4d:41:c4:04:52:79:dc:87:1e:fe:c1:f1:64:71:31:
                    ed:45:74:a6:68:ae:09:ee:cb:47:b3:27:9d:0c:43:
                    2b:69:d8:91:24:b0:42:dd:96:77:a2:32:a7:39:39:
                    fb:16:4a:79:8f:f2:ac:2c:aa:ee:72:78:65:e4:e4:
                    ef:38:31:91:04:41:db:6a:73:77:51:fc:59:22:bd:
                    53:46:c7:21:87:c7:26:18:61:3a:70:4a:87:05:e2:
                    54:4c:77:23:ea:01:be:89:bd:a1:8d:ae:7a:ba:52:
                    6a:6d:62:50:3d:9f:2c:88:e3:9d:bd:b4:dd:1b:e7:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:E5:7E:D0:AC:B6:33:E0:9D:A9:23:64:FC:8D:69:1F:01:E6:95
            X509v3 Authority Key Identifier:
                keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137302e38302e36342e302f32322d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:d2:99:92:09:49:5d:5a:80:30:81:8b:18:36:e5:49:dd:
         26:63:95:1f:d8:86:bd:62:41:6a:88:e7:59:65:23:99:2a:a5:
         0a:7d:c9:99:2a:84:68:15:c5:02:25:42:6d:f6:70:14:c1:fa:
         62:3f:c2:d8:c9:18:c9:5f:09:78:b8:83:d8:9e:f8:56:da:b7:
         90:9e:a4:ef:f9:18:26:ec:0a:d1:60:74:cd:ec:8d:1a:97:92:
         c4:6b:22:32:b8:00:0c:c3:4f:46:a9:06:09:59:32:32:65:48:
         4e:4d:04:d1:1c:d3:13:ef:16:fe:0d:62:ca:4e:33:88:4d:22:
         77:0d:ac:1f:8e:4d:21:30:89:fb:96:29:24:7d:17:d6:62:ee:
         1b:45:5b:6d:3d:07:b4:81:6f:01:bf:f5:a6:55:09:12:0e:b8:
         8f:22:3e:c4:8d:1c:ed:39:58:56:4c:e1:41:64:e8:c1:1a:36:
         27:f1:69:06:15:71:16:2c:c5:fc:bd:c5:cf:d5:8e:32:e6:1c:
         4c:92:48:71:e0:a9:0d:da:0a:cf:11:13:61:c2:e1:d0:45:f3:
         48:95:19:9a:05:1c:f1:02:28:a0:62:4a:e2:12:6d:8b:3a:49:
         b8:fb:71:1c:27:24:2c:af:3c:b6:bd:d8:f7:d0:44:2b:08:d8:
         7d:6e:56:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIl5n77k/23rXQEH/ga1vjvitP+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UzRTEzM0U4MDFEQTczQ0UxNEUxNkU4MzEyNEEyOUE5
RUU3NEYyMjAeFw0yMzA1MDgxMTQzMzRaFw0yNDA1MDYxMTQ4MzRaMDMxMTAvBgNV
BAMTKDk4NDBFNTdFRDBBQ0I2MzNFMDlEQTkyMzY0RkM4RDY5MUYwMUU2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemmtRFXRAIcntj01pRzjYYOcb
w4SSe3V/d5dqH6i7ELY0fAuEAy2n1Fw/P+C7/prC1ExhFqgs3vgWT+HEKjc4zvaq
ZqMIoVV4226Jq7OnPI4CZKGXbvQyyQCdbt4UK3bEqfeFSYlVkHa9wZBsuWQm74OT
pG6R/8o2VsqkD63e4LyxmQCRjE1BxARSedyHHv7B8WRxMe1FdKZorgnuy0ezJ50M
Qytp2JEksELdlneiMqc5OfsWSnmP8qwsqu5yeGXk5O84MZEEQdtqc3dR/FkivVNG
xyGHxyYYYTpwSocF4lRMdyPqAb6JvaGNrnq6UmptYlA9nyyI4529tN0b5xShAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmEDlftCstjPgnakjZPyNaR8B5pUwHwYDVR0j
BBgwFoAUfj4TPoAdpzzhThboMSSimp7nTyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC83RTNFMTMzRTgwMURBNzNDRTE0RTE2RTgzMTI0QTI5QTlFRTc0RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFM0UxMzNFODAxREE3M0NF
MTRFMTZFODMxMjRBMjlBOUVFNzRGMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzMwMmUzODMwMmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlBAMA0GCSqGSIb3DQEBCwUAA4IBAQCn1tKZkglJ
XVqAMIGLGDblSd0mY5Uf2Ia9YkFqiOdZZSOZKqUKfcmZKoRoFcUCJUJt9nAUwfpi
P8LYyRjJXwl4uIPYnvhW2reQnqTv+Rgm7ArRYHTN7I0al5LEayIyuAAMw09GqQYJ
WTIyZUhOTQTRHNMT7xb+DWLKTjOITSJ3Dawfjk0hMIn7likkfRfWYu4bRVttPQe0
gW8Bv/WmVQkSDriPIj7EjRztOVhWTOFBZOjBGjYn8WkGFXEWLMX8vcXP1Y4y5hxM
kkhx4KkN2grPERNhwuHQRfNIlRmaBRzxAiigYkriEm2LOkm4+3EcJyQsrzy2vdj3
0EQrCNh9blaq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:53 2024 by rpki-client on console-ams.rpki-client.org