Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3232203d3e203238363336.roa
File:                     3137302e3135302e36382e302f32322d3232203d3e203238363336.roa (raw, json)
Hash identifier:          4iPltQzyxt+pb94myp3f4pxr2MFBCeTIyMRXoMfoIns=
Subject key identifier:   7D:96:D2:40:06:17:88:73:EA:68:2B:F8:F8:05:89:8E:64:5C:A9:E7
Certificate issuer:       /CN=6CD173FF9D505DB98451806A0F566316FA5AF573
Certificate serial:       067C2AAE1C7F9871A0DA46662730295B20681E58
Authority key identifier: 6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3232203d3e203238363336.roa
Signing time:             Mon 30 Jan 2023 21:06:24 +0000
ROA not before:           Mon 30 Jan 2023 21:01:24 +0000
ROA not after:            Mon 29 Jan 2024 21:06:24 +0000
asID:                     28636
IP address blocks:        170.150.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:2a:ae:1c:7f:98:71:a0:da:46:66:27:30:29:5b:20:68:1e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD173FF9D505DB98451806A0F566316FA5AF573
        Validity
            Not Before: Jan 30 21:01:24 2023 GMT
            Not After : Jan 29 21:06:24 2024 GMT
        Subject: CN=7D96D24006178873EA682BF8F805898E645CA9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:fb:28:01:8a:63:73:92:96:f0:9e:03:cd:
                    1c:aa:37:87:14:0c:8c:d9:cb:91:9e:4a:5d:9d:d7:
                    8e:d7:78:80:a4:ce:00:5e:2f:95:65:bf:97:12:15:
                    fe:3e:cd:46:23:51:f5:77:f0:6c:67:d3:d4:80:94:
                    d3:ce:02:f8:d6:17:dc:7e:89:4f:ca:5f:4a:35:3d:
                    05:42:2e:78:82:4a:96:b1:70:e5:d6:80:e0:e0:8a:
                    e9:bf:96:f4:65:b8:a4:bf:af:d8:00:85:11:76:b1:
                    d7:da:7b:7d:a5:cb:77:fa:07:c3:89:42:ac:e6:f7:
                    db:96:e0:09:c3:91:6e:ba:4a:88:ec:62:dd:4a:d1:
                    75:63:ae:37:e2:8e:a7:fb:ec:15:22:d0:80:9c:1e:
                    a5:b0:65:13:89:9b:0e:72:ac:ed:95:78:68:71:52:
                    de:c1:b9:41:58:26:90:9a:c6:94:36:86:99:02:78:
                    8d:86:db:d3:47:f7:96:67:61:2e:37:48:f4:f0:64:
                    e5:a3:25:55:ff:f9:ed:54:5a:27:6f:04:a4:6b:6e:
                    c6:c9:a6:14:73:89:ee:a3:49:81:35:6b:bf:e0:2b:
                    b5:25:a7:f9:09:77:3f:01:52:55:a4:d0:69:50:40:
                    1b:78:78:b3:f8:4b:18:77:5d:26:73:8e:ae:52:a1:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:96:D2:40:06:17:88:73:EA:68:2B:F8:F8:05:89:8E:64:5C:A9:E7
            X509v3 Authority Key Identifier:
                keyid:6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/3137302e3135302e36382e302f32322d3232203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:9a:e5:85:df:9a:34:d8:af:2b:7c:62:9b:05:05:11:03:e1:
         64:fc:2c:1a:cb:c5:5b:3b:9c:73:6f:de:36:29:53:c6:d7:d6:
         5f:4d:be:8a:cc:c4:dc:7a:5c:fe:03:c3:81:cd:5b:a4:46:1b:
         98:20:19:c2:da:1e:cc:36:7f:0b:6c:1c:9f:94:1a:65:1e:8d:
         01:bb:de:04:00:f6:cc:06:5a:b5:00:0b:e1:68:bc:cc:ea:6b:
         e2:c5:30:dd:7c:ed:eb:e2:c7:bf:cd:19:f5:01:f3:83:b3:03:
         ac:c4:26:02:15:b0:c4:0e:d5:22:d8:d9:a1:af:84:6d:f4:77:
         ca:f0:8b:1e:bb:0f:21:98:c1:7e:51:60:de:4c:fd:d6:6b:d0:
         c9:2f:ce:3a:8f:c2:c1:e3:b2:32:85:3a:b3:9a:97:f7:59:27:
         68:5f:34:66:55:75:10:98:02:9e:e8:3a:ac:d8:bd:22:72:ce:
         33:81:9f:e9:c9:39:93:3f:a9:6e:14:7c:8f:08:44:b7:b0:9a:
         72:0f:cb:ab:0a:30:f6:bc:82:87:2f:4c:95:57:4e:d1:19:62:
         f5:a9:81:d3:d1:c0:17:3e:8a:35:66:22:bc:b3:1a:89:29:8b:
         71:06:53:d2:5c:07:a8:74:39:c9:9c:9c:62:df:1f:c9:1f:22:
         30:30:9a:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBnwqrhx/mHGg2kZmJzApWyBoHlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNEMTczRkY5RDUwNURCOTg0NTE4MDZBMEY1NjYzMTZG
QTVBRjU3MzAeFw0yMzAxMzAyMTAxMjRaFw0yNDAxMjkyMTA2MjRaMDMxMTAvBgNV
BAMTKDdEOTZEMjQwMDYxNzg4NzNFQTY4MkJGOEY4MDU4OThFNjQ1Q0E5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiUPsoAYpjc5KW8J4DzRyqN4cU
DIzZy5GeSl2d147XeICkzgBeL5Vlv5cSFf4+zUYjUfV38Gxn09SAlNPOAvjWF9x+
iU/KX0o1PQVCLniCSpaxcOXWgODgium/lvRluKS/r9gAhRF2sdfae32ly3f6B8OJ
Qqzm99uW4AnDkW66SojsYt1K0XVjrjfijqf77BUi0ICcHqWwZROJmw5yrO2VeGhx
Ut7BuUFYJpCaxpQ2hpkCeI2G29NH95ZnYS43SPTwZOWjJVX/+e1UWidvBKRrbsbJ
phRzie6jSYE1a7/gK7Ulp/kJdz8BUlWk0GlQQBt4eLP4Sxh3XSZzjq5SoYhJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfZbSQAYXiHPqaCv4+AWJjmRcqecwHwYDVR0j
BBgwFoAUbNFz/51QXbmEUYBqD1ZjFvpa9XMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1E
NW4vMC82Q0QxNzNGRjlENTA1REI5ODQ1MTgwNkEwRjU2NjMxNkZBNUFGNTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZDRDE3M0ZGOUQ1MDVEQjk4
NDUxODA2QTBGNTY2MzE2RkE1QUY1NzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpeUhvODNTTmthUUIxUHNpZVRRdVBUakZ3b0dvNWhyaDlKVWk1dzFNRDVuLzAv
MzEzNzMwMmUzMTM1MzAyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqpZEMA0GCSqGSIb3DQEBCwUAA4IBAQDOmuWF35o0
2K8rfGKbBQURA+Fk/Cway8VbO5xzb942KVPG19ZfTb6KzMTcelz+A8OBzVukRhuY
IBnC2h7MNn8LbByflBplHo0Bu94EAPbMBlq1AAvhaLzM6mvixTDdfO3r4se/zRn1
AfODswOsxCYCFbDEDtUi2Nmhr4Rt9HfK8Iseuw8hmMF+UWDeTP3Wa9DJL846j8LB
47IyhTqzmpf3WSdoXzRmVXUQmAKe6Dqs2L0ics4zgZ/pyTmTP6luFHyPCES3sJpy
D8urCjD2vIKHL0yVV07RGWL1qYHT0cAXPoo1ZiK8sxqJKYtxBlPSXAeodDnJnJxi
3x/JHyIwMJqS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org