Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa
File:                     3137302e38312e36302e302f32322d3234203d3e20323636343031.roa (raw, json)
Hash identifier:          sdAUlqMjjOHO3EGRxIQncyiXH2fb37EyaE85jIRll0M=
Subject key identifier:   D9:2D:C2:41:D9:AF:90:F8:CA:3E:A5:BE:09:12:B0:45:B2:0E:19:CA
Certificate issuer:       /CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
Certificate serial:       5FF3AC902B01EF8D29A67040DFEE4BB8E9058E92
Authority key identifier: B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa
Signing time:             Fri 02 Sep 2022 01:20:34 +0000
ROA not before:           Fri 02 Sep 2022 01:15:34 +0000
ROA not after:            Fri 01 Sep 2023 01:20:34 +0000
asID:                     266401
IP address blocks:        170.81.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:ac:90:2b:01:ef:8d:29:a6:70:40:df:ee:4b:b8:e9:05:8e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
        Validity
            Not Before: Sep  2 01:15:34 2022 GMT
            Not After : Sep  1 01:20:34 2023 GMT
        Subject: CN=D92DC241D9AF90F8CA3EA5BE0912B045B20E19CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:f4:6c:a0:98:c0:ce:7c:c8:6b:d4:6b:a6:
                    1f:cb:7d:ef:95:83:ba:06:e3:65:29:23:a2:eb:b3:
                    95:ed:b6:72:c7:1a:d4:59:c1:51:c4:c5:39:eb:d6:
                    3f:49:92:9a:ba:87:c9:d7:f4:2f:2e:8a:d8:49:50:
                    c1:6c:4c:f3:08:a2:a3:89:1a:48:55:2c:e8:9d:0c:
                    07:f9:21:18:8e:15:d5:8f:8c:e8:d0:51:8e:f8:2f:
                    6e:bf:95:9c:5e:5c:9d:2c:4e:c8:c8:00:20:61:d3:
                    09:93:3c:c3:7b:08:a3:7a:6c:6b:0d:d5:6c:03:90:
                    ae:4b:e3:1b:d9:39:b2:b2:c7:0e:cf:b8:b8:ca:a1:
                    30:4a:ee:df:c9:4e:60:10:2d:22:bb:92:50:8d:6c:
                    de:25:e0:65:e1:14:be:58:48:a2:43:6f:6e:8c:08:
                    43:94:7a:86:fd:79:1f:6f:3d:23:b0:01:a8:1b:55:
                    07:d3:b9:67:36:38:20:a2:3c:d9:50:66:8f:d4:ff:
                    5e:83:29:fc:a2:76:66:6a:07:9c:f7:c6:3a:ed:3d:
                    06:93:9c:c2:28:96:c6:e1:3c:85:97:b5:e7:a4:38:
                    62:86:8e:08:8a:fc:af:03:64:14:07:8b:f8:3a:74:
                    7f:ec:08:5b:57:6f:03:e4:11:b6:a4:8c:c6:d3:ef:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:C2:41:D9:AF:90:F8:CA:3E:A5:BE:09:12:B0:45:B2:0E:19:CA
            X509v3 Authority Key Identifier:
                keyid:B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3234203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:84:21:23:c4:9d:50:53:37:48:cb:94:69:f0:07:f4:cc:79:
         d7:c5:c7:0c:91:7e:67:92:04:11:6d:b3:6c:2d:e4:6d:6a:0f:
         a1:e8:2d:0a:90:1c:24:0d:79:a3:70:98:8f:99:8b:02:4c:5b:
         2c:89:bc:a4:58:62:81:9e:13:93:8e:9e:30:5b:fb:b8:f5:f4:
         df:6f:48:4e:06:3f:57:c6:94:bc:12:4a:8d:22:2b:9a:9e:28:
         19:fe:e3:83:81:d2:de:cd:a3:cd:16:04:ab:8a:0d:e2:2a:da:
         d7:d5:02:e6:ab:cd:cb:71:18:06:c7:92:5b:77:99:95:20:a5:
         8e:d4:09:bb:e2:e6:ce:84:f0:bf:21:23:06:d1:6e:65:15:2c:
         1a:46:3a:a0:1a:7b:fa:3c:9c:90:0c:99:08:dc:20:ea:47:9b:
         fd:f4:4a:df:ed:74:14:43:8a:d9:51:1a:0e:20:54:b4:42:5d:
         2e:06:73:43:7a:2d:3a:6d:28:38:68:52:6c:90:fa:5e:b8:53:
         e7:f5:2a:20:f1:c0:c0:13:0a:f4:42:49:8f:6e:dc:db:ef:92:
         dd:2a:46:f3:a9:90:10:f3:42:a5:f2:52:d6:c5:f6:f4:fc:d8:
         2e:87:ea:c3:95:da:86:8b:83:d4:2e:d1:dd:56:aa:3d:52:f9:
         d1:53:f4:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX/OskCsB740ppnBA3+5LuOkFjpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNBRTlBRjhBNjJCMTkxQkQzM0NBMDdBMkYwRkU5ODVG
MUJEMTA3NDAeFw0yMjA5MDIwMTE1MzRaFw0yMzA5MDEwMTIwMzRaMDMxMTAvBgNV
BAMTKEQ5MkRDMjQxRDlBRjkwRjhDQTNFQTVCRTA5MTJCMDQ1QjIwRTE5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLx/RsoJjAznzIa9Rrph/Lfe+V
g7oG42UpI6Lrs5XttnLHGtRZwVHExTnr1j9Jkpq6h8nX9C8uithJUMFsTPMIoqOJ
GkhVLOidDAf5IRiOFdWPjOjQUY74L26/lZxeXJ0sTsjIACBh0wmTPMN7CKN6bGsN
1WwDkK5L4xvZObKyxw7PuLjKoTBK7t/JTmAQLSK7klCNbN4l4GXhFL5YSKJDb26M
CEOUeob9eR9vPSOwAagbVQfTuWc2OCCiPNlQZo/U/16DKfyidmZqB5z3xjrtPQaT
nMIolsbhPIWXteekOGKGjgiK/K8DZBQHi/g6dH/sCFtXbwPkEbakjMbT7x7nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2S3CQdmvkPjKPqW+CRKwRbIOGcowHwYDVR0j
BBgwFoAUs66a+KYrGRvTPKB6Lw/phfG9EHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhLRXFoelIyUDVFeFdiczdrYXhjRThGWXFTTWZFUXpvMnVreVhxa1dK
ZzcvMC9CM0FFOUFGOEE2MkIxOTFCRDMzQ0EwN0EyRjBGRTk4NUYxQkQxMDc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzQUU5QUY4QTYyQjE5MUJE
MzNDQTA3QTJGMEZFOTg1RjFCRDEwNzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4S0VxaHpSMlA1RXhXYnM3a2F4Y0U4RllxU01mRVF6bzJ1a3lYcWtXSmc3LzAv
MzEzNzMwMmUzODMxMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlE8MA0GCSqGSIb3DQEBCwUAA4IBAQAYhCEjxJ1Q
UzdIy5Rp8Af0zHnXxccMkX5nkgQRbbNsLeRtag+h6C0KkBwkDXmjcJiPmYsCTFss
ibykWGKBnhOTjp4wW/u49fTfb0hOBj9XxpS8EkqNIiuanigZ/uODgdLezaPNFgSr
ig3iKtrX1QLmq83LcRgGx5Jbd5mVIKWO1Am74ubOhPC/ISMG0W5lFSwaRjqgGnv6
PJyQDJkI3CDqR5v99Erf7XQUQ4rZURoOIFS0Ql0uBnNDei06bSg4aFJskPpeuFPn
9Sog8cDAEwr0QkmPbtzb75LdKkbzqZAQ80Kl8lLWxfb0/Nguh+rDldqGi4PULtHd
Vqo9UvnRU/TS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org