Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34322e302f32332d3233203d3e20323635323234.roa
File:                     3137302e3233392e34322e302f32332d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          oB8JBJH9GH3n+2VKK2n481UD30OF/5uWUv/vvLdQtt4=
Subject key identifier:   6A:1D:7B:15:62:41:95:FA:33:5B:33:BE:FD:1B:AB:80:7F:37:B4:F9
Certificate issuer:       /CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
Certificate serial:       1D2A5444261F22FAE6A38179F34C19FAA33F019E
Authority key identifier: 44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34322e302f32332d3233203d3e20323635323234.roa
Signing time:             Fri 18 Feb 2022 12:27:50 +0000
ROA not before:           Fri 18 Feb 2022 12:22:50 +0000
ROA not after:            Fri 17 Feb 2023 12:27:50 +0000
asID:                     265224
IP address blocks:        170.239.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2a:54:44:26:1f:22:fa:e6:a3:81:79:f3:4c:19:fa:a3:3f:01:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Validity
            Not Before: Feb 18 12:22:50 2022 GMT
            Not After : Feb 17 12:27:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:21:ed:5c:88:bf:12:5e:03:81:fb:54:35:
                    4f:59:53:6d:77:ca:60:48:82:20:f3:1b:6a:b7:a4:
                    a9:49:68:01:59:e0:59:46:d3:ba:ed:a8:75:6f:64:
                    de:26:67:0d:05:19:a7:3e:2b:b6:6d:66:e7:60:c6:
                    96:d2:5b:38:7f:04:03:86:f8:90:d1:f7:fb:c6:5c:
                    38:67:05:0d:55:0a:56:f4:b6:11:e2:ca:50:d4:c9:
                    c4:69:95:0a:49:d1:c2:82:ef:ce:89:36:83:38:f9:
                    49:6d:f8:5d:85:1a:39:3b:df:16:6a:57:46:9d:86:
                    cd:91:b2:28:63:f7:14:b6:74:b4:a6:d2:9e:c7:21:
                    c8:8e:c5:70:d8:aa:22:18:23:a0:2c:bb:0a:ef:ac:
                    62:4a:1f:5e:ad:43:a0:fd:67:56:d1:8b:ce:d1:c2:
                    9d:7d:d9:8b:e3:f5:25:70:69:ed:32:1f:13:31:b1:
                    f5:60:1a:11:c7:f6:45:f1:29:af:0d:0a:25:d8:6e:
                    9a:ff:25:08:bf:ae:ff:d4:a8:28:93:cf:6e:d0:5b:
                    12:bb:ae:5f:94:b2:45:92:d0:bf:37:d6:70:22:72:
                    5e:51:69:05:fd:9b:fe:6a:78:ab:37:e1:aa:79:a7:
                    72:3b:93:3c:b0:5e:d4:0c:c5:cf:1a:83:bb:d3:ef:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:7B:15:62:41:95:FA:33:5B:33:BE:FD:1B:AB:80:7F:37:B4:F9
            X509v3 Authority Key Identifier:
                keyid:44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34322e302f32332d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:ba:74:bf:36:ff:9f:49:e0:d0:cd:b4:5a:e7:e0:8f:77:
         e7:16:cd:e0:0c:50:1b:f2:67:94:69:f2:3f:07:43:3b:73:5e:
         3f:e2:47:27:16:24:d3:f1:26:da:93:b1:ce:5f:9e:9c:0d:75:
         7a:19:09:59:ea:e6:27:13:ca:6e:2a:81:94:9f:6c:fa:99:f9:
         8c:7c:d8:21:cb:8c:6f:0d:c9:0b:4c:4a:62:2d:69:e8:39:8c:
         2e:22:72:00:67:81:37:44:c8:f1:6d:da:a4:3e:a9:06:d8:4d:
         03:4a:43:65:23:7d:8b:2e:20:c6:c5:34:a3:ac:e9:43:9c:bc:
         64:5e:f2:96:ea:55:f1:e9:ae:3f:d4:f4:cb:60:10:2c:af:17:
         b4:67:8a:37:6d:44:38:e4:cf:e9:d3:ab:58:37:e3:ac:9e:2e:
         02:3b:f8:93:9c:57:39:55:c0:fb:7b:8b:96:b4:32:bd:a6:84:
         5c:69:56:dd:5b:34:4d:9b:69:36:c3:ae:c6:e3:ef:11:c2:30:
         39:cd:6e:d8:46:8d:53:4a:34:2a:0f:de:1a:1c:8a:4e:dd:d3:
         7f:c6:92:7b:69:16:d5:02:72:c0:0a:33:27:51:f3:a6:ef:66:
         7e:86:de:51:8c:a2:42:6c:37:03:e8:b5:17:65:21:33:d5:05:
         58:89:7e:1c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHSpURCYfIvrmo4F580wZ+qM/AZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCQ0IwQ0JEOEI2OTk1RTExNUQwMjFGNTU2NUMxQTI1
RkJGNTJBRjAeFw0yMjAyMTgxMjIyNTBaFw0yMzAyMTcxMjI3NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE2NTIxRUQ1Qzg4QkYxMjVF
MDM4MUZCNTQzNTRGNTk1MzZENzdDQTYwNDg4MjIwRjMxQjZBQjdBNEE5NDk2ODAx
NTlFMDU5NDZEM0JBRURBODc1NkY2NERFMjY2NzBEMDUxOUE3M0UyQkI2NkQ2NkU3
NjBDNjk2RDI1QjM4N0YwNDAzODZGODkwRDFGN0ZCQzY1QzM4NjcwNTBENTUwQTU2
RjRCNjExRTJDQTUwRDRDOUM0Njk5NTBBNDlEMUMyODJFRkNFODkzNjgzMzhGOTQ5
NkRGODVEODUxQTM5M0JERjE2NkE1NzQ2OUQ4NkNEOTFCMjI4NjNGNzE0QjY3NEI0
QTZEMjlFQzcyMUM4OEVDNTcwRDhBQTIyMTgyM0EwMkNCQjBBRUZBQzYyNEExRjVF
QUQ0M0EwRkQ2NzU2RDE4QkNFRDFDMjlEN0REOThCRTNGNTI1NzA2OUVEMzIxRjEz
MzFCMUY1NjAxQTExQzdGNjQ1RjEyOUFGMEQwQTI1RDg2RTlBRkYyNTA4QkZBRUZG
RDRBODI4OTNDRjZFRDA1QjEyQkJBRTVGOTRCMjQ1OTJEMEJGMzdENjcwMjI3MjVF
NTE2OTA1RkQ5QkZFNkE3OEFCMzdFMUFBNzlBNzcyM0I5MzNDQjA1RUQ0MENDNUNG
MUE4M0JCRDNFRkM3RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAumUh7VyIvxJeA4H7VDVPWVNtd8pgSIIg8xtqt6SpSWgBWeBZRtO6
7ah1b2TeJmcNBRmnPiu2bWbnYMaW0ls4fwQDhviQ0ff7xlw4ZwUNVQpW9LYR4spQ
1MnEaZUKSdHCgu/OiTaDOPlJbfhdhRo5O98WaldGnYbNkbIoY/cUtnS0ptKexyHI
jsVw2KoiGCOgLLsK76xiSh9erUOg/WdW0YvO0cKdfdmL4/UlcGntMh8TMbH1YBoR
x/ZF8SmvDQol2G6a/yUIv67/1Kgok89u0FsSu65flLJFktC/N9ZwInJeUWkF/Zv+
anirN+GqeadyO5M8sF7UDMXPGoO70+/H6QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGodexViQZX6M1szvv0bq4B/N7T5MB8GA1UdIwQYMBaAFES8sMvYtpleEV0CH1Vl
waJfv1KvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV6RXlOQVdGajRXcjc1
TlRzYXZRVWNLVHNyeVlxaHpFZ3FkTXl6dm5kNmV0LzAvNDRCQ0IwQ0JEOEI2OTk1
RTExNUQwMjFGNTU2NUMxQTI1RkJGNTJBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NEJDQjBDQkQ4QjY5OTVFMTE1RDAyMUY1NTY1QzFBMjVGQkY1
MkFGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81ekV5TkFXRmo0V3I3NU5Uc2F2
UVVjS1RzcnlZcWh6RWdxZE15enZuZDZldC8wLzMxMzczMDJlMzIzMzM5MmUzNDMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1MzIzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qu8qMA0GCSqGSIb3DQEBCwUAA4IBAQBwrbp0vzb/n0ng0M20Wufgj3fnFs3gDFAb
8meUafI/B0M7c14/4kcnFiTT8Sbak7HOX56cDXV6GQlZ6uYnE8puKoGUn2z6mfmM
fNghy4xvDckLTEpiLWnoOYwuInIAZ4E3RMjxbdqkPqkG2E0DSkNlI32LLiDGxTSj
rOlDnLxkXvKW6lXx6a4/1PTLYBAsrxe0Z4o3bUQ45M/p06tYN+Osni4CO/iTnFc5
VcD7e4uWtDK9poRcaVbdWzRNm2k2w67G4+8RwjA5zW7YRo1TSjQqD94aHIpO3dN/
xpJ7aRbVAnLACjMnUfOm72Z+ht5RjKJCbDcD6LUXZSEz1QVYiX4c
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org