Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3234203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32322d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          fhpVc8+hfHhUNfFiqWTYzwBBcqgMj8WxX8ctGVoYJkw=
Subject key identifier:   44:3C:A4:45:DD:81:C1:72:FA:18:4D:BB:6C:D5:E2:56:8F:6B:3B:F8
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       77B0E5E2E8DC0867FA4FA986DF37B72022679668
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3234203d3e20323636333835.roa
Signing time:             Fri 21 Oct 2022 15:26:29 +0000
ROA not before:           Fri 21 Oct 2022 15:21:29 +0000
ROA not after:            Fri 20 Oct 2023 15:26:29 +0000
asID:                     266385
IP address blocks:        170.80.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:e5:e2:e8:dc:08:67:fa:4f:a9:86:df:37:b7:20:22:67:96:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Oct 21 15:21:29 2022 GMT
            Not After : Oct 20 15:26:29 2023 GMT
        Subject: CN=443CA445DD81C172FA184DBB6CD5E2568F6B3BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:85:b1:cc:7d:5d:29:7f:04:6a:4a:f8:df:
                    0b:f4:0f:5f:96:8f:8f:86:30:1f:5d:33:3e:3e:fb:
                    8c:7b:a0:ee:f5:31:dc:4f:fa:67:20:62:b9:d0:61:
                    17:e6:f8:5a:0f:83:ab:7e:33:91:b3:0c:c8:de:5f:
                    40:f2:b6:91:39:e3:da:6b:b3:a9:8b:dd:2c:ce:73:
                    ab:f3:ed:1c:15:5a:ee:e1:bf:12:21:eb:2d:95:72:
                    f3:10:80:4a:d6:b5:31:0e:3d:b3:22:b1:bc:2c:98:
                    88:41:47:af:91:0c:f8:23:5f:7b:75:3b:da:a3:a1:
                    bc:88:fa:57:a4:fc:6c:67:9a:14:86:58:1d:78:8e:
                    67:6a:54:8b:32:10:8f:5a:d3:76:37:51:06:08:99:
                    2c:63:1b:2a:8a:8d:cc:72:25:d1:58:ec:65:5c:58:
                    e6:45:f2:da:70:95:8c:32:01:e0:0f:d6:01:43:ef:
                    95:22:da:48:ff:ce:bc:6a:fe:ad:0d:d2:08:9d:7c:
                    96:86:e5:d6:82:cc:8b:f4:3b:d4:55:69:b9:b6:68:
                    be:16:70:30:6b:4d:b8:18:21:7f:aa:08:5e:d2:db:
                    5f:2b:e3:48:8d:fe:44:10:67:6b:7d:15:50:55:f6:
                    49:07:67:01:8b:73:4a:34:75:58:47:94:de:7a:ae:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:A4:45:DD:81:C1:72:FA:18:4D:BB:6C:D5:E2:56:8F:6B:3B:F8
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:f7:b5:a7:6d:04:78:80:77:66:54:64:44:18:c7:2a:3e:
         b5:44:1f:eb:9b:41:82:f7:24:64:c7:10:ab:f9:5f:ff:47:de:
         25:34:5a:fb:e1:3c:00:17:2f:34:35:5a:d1:9b:cf:e0:5a:df:
         a0:95:52:d9:5e:6c:56:b0:87:ab:5c:98:98:8d:15:d5:10:14:
         55:e8:3e:6f:c0:82:4d:b3:84:7f:ac:d1:cb:6c:b3:91:c3:8e:
         be:bd:f7:8f:77:40:cf:92:bf:38:51:c7:db:6d:0f:ae:18:ce:
         46:b8:c4:0c:23:a7:12:a4:91:b6:25:36:69:cc:dc:ca:30:54:
         74:c4:c7:94:51:2a:b4:d3:c5:cc:dd:1d:a0:ed:69:d3:d0:4a:
         4f:b7:f0:a2:d0:81:00:ca:9d:38:f8:05:9a:93:a9:e5:d2:0a:
         7a:e5:83:5d:8b:77:cd:96:a1:7f:90:c4:16:08:b2:8f:a2:8b:
         15:a4:c5:6b:4d:79:9f:f8:74:5f:9c:4f:0c:c8:41:e2:b5:a3:
         59:a1:6a:d8:98:0f:33:2b:8e:30:5d:e6:a9:23:11:ff:a1:d6:
         52:cd:8a:77:53:86:3e:6a:94:c7:e0:4c:db:be:51:5d:a8:44:
         05:7b:65:b2:9e:b3:58:4a:c4:2f:53:23:28:a8:0e:e7:c5:d5:
         3b:95:c0:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd7Dl4ujcCGf6T6mG3ze3ICJnlmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzNDBCQkNGMzUxMUU3RkYwQzBEOTc5MDMwRENDODU1
M0UxNjY3NjAeFw0yMjEwMjExNTIxMjlaFw0yMzEwMjAxNTI2MjlaMDMxMTAvBgNV
BAMTKDQ0M0NBNDQ1REQ4MUMxNzJGQTE4NERCQjZDRDVFMjU2OEY2QjNCRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxYWxzH1dKX8Eakr43wv0D1+W
j4+GMB9dMz4++4x7oO71MdxP+mcgYrnQYRfm+FoPg6t+M5GzDMjeX0DytpE549pr
s6mL3SzOc6vz7RwVWu7hvxIh6y2VcvMQgErWtTEOPbMisbwsmIhBR6+RDPgjX3t1
O9qjobyI+lek/GxnmhSGWB14jmdqVIsyEI9a03Y3UQYImSxjGyqKjcxyJdFY7GVc
WOZF8tpwlYwyAeAP1gFD75Ui2kj/zrxq/q0N0gidfJaG5daCzIv0O9RVabm2aL4W
cDBrTbgYIX+qCF7S218r40iN/kQQZ2t9FVBV9kkHZwGLc0o0dVhHlN56rmw1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURDykRd2BwXL6GE27bNXiVo9rO/gwHwYDVR0j
BBgwFoAU1DQLvPNRHn/wwNl5Aw3MhVPhZnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMC9ENDM0MEJCQ0YzNTExRTdGRjBDMEQ5NzkwMzBEQ0M4NTUzRTE2Njc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MzQwQkJDRjM1MTFFN0ZG
MEMwRDk3OTAzMERDQzg1NTNFMTY2NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzAv
MzEzNzMwMmUzODMwMmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUOAwDQYJKoZIhvcNAQELBQADggEBAGbX97Wn
bQR4gHdmVGREGMcqPrVEH+ubQYL3JGTHEKv5X/9H3iU0WvvhPAAXLzQ1WtGbz+Ba
36CVUtlebFawh6tcmJiNFdUQFFXoPm/Agk2zhH+s0ctss5HDjr699493QM+SvzhR
x9ttD64Yzka4xAwjpxKkkbYlNmnM3MowVHTEx5RRKrTTxczdHaDtadPQSk+38KLQ
gQDKnTj4BZqTqeXSCnrlg12Ld82WoX+QxBYIso+iixWkxWtNeZ/4dF+cTwzIQeK1
o1mhatiYDzMrjjBd5qkjEf+h1lLNindThj5qlMfgTNu+UV2oRAV7ZbKes1hKxC9T
IyioDufF1TuVwD8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org