Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3332203d3e20323636343031.roa
File:                     3137302e38312e36302e302f32322d3332203d3e20323636343031.roa (raw, json)
Hash identifier:          NlmIQr/fG6MFLynxbyMG9Mtm6JXTDEFZR0oCha3pEJw=
Subject key identifier:   9B:C2:35:4F:98:3A:B5:F6:A9:36:CF:AA:66:DF:16:A6:04:D8:C4:4C
Certificate issuer:       /CN=6CB4B945583C5E88991A6EDB9EFD250C14979DA5
Certificate serial:       5CABD1E033A35D47241E1445795E825972CF38A6
Authority key identifier: 6C:B4:B9:45:58:3C:5E:88:99:1A:6E:DB:9E:FD:25:0C:14:97:9D:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3332203d3e20323636343031.roa
Signing time:             Tue 24 Jan 2023 18:25:40 +0000
ROA not before:           Tue 24 Jan 2023 18:20:40 +0000
ROA not after:            Tue 23 Jan 2024 18:25:40 +0000
asID:                     266401
IP address blocks:        170.81.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ab:d1:e0:33:a3:5d:47:24:1e:14:45:79:5e:82:59:72:cf:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB4B945583C5E88991A6EDB9EFD250C14979DA5
        Validity
            Not Before: Jan 24 18:20:40 2023 GMT
            Not After : Jan 23 18:25:40 2024 GMT
        Subject: CN=9BC2354F983AB5F6A936CFAA66DF16A604D8C44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:a0:8c:6e:25:10:90:40:d2:9b:cd:59:ef:
                    1e:12:43:4e:b6:ad:90:a6:22:17:ba:da:54:01:a8:
                    38:56:5b:47:ee:6f:39:67:52:80:fa:ab:da:b4:4e:
                    7e:5b:21:92:72:8e:8e:e6:69:90:52:f5:4d:a7:83:
                    3c:69:d9:36:54:01:76:a1:7e:ed:94:5c:2f:ec:9c:
                    be:de:32:f0:9c:4b:f1:ac:a3:29:65:b8:0f:93:26:
                    12:84:7e:da:a1:25:49:fd:74:b2:4a:f5:58:e9:a7:
                    c5:5d:ec:b0:00:40:7a:66:9e:41:1c:3b:a1:40:76:
                    b0:54:2c:aa:62:a1:eb:91:8c:f3:6c:b8:a7:51:5f:
                    1c:78:d5:7d:24:4f:c2:93:33:d8:e8:e3:a8:88:f5:
                    18:63:a2:3c:45:e7:58:00:26:c6:ff:06:8c:f4:34:
                    95:2c:b4:cc:79:17:51:ae:dd:c1:71:00:04:9a:6e:
                    30:ee:01:b5:86:91:eb:7c:00:2f:b0:2e:4a:fe:b7:
                    08:70:31:64:46:a9:d3:c2:ca:de:86:e3:f1:69:a2:
                    41:89:e3:4d:a3:3e:61:0b:29:9e:4c:07:aa:7f:06:
                    42:2b:0b:32:37:6f:c7:5d:b9:1b:87:64:52:0b:34:
                    d1:d9:71:cc:c4:28:be:a9:a2:e7:de:84:11:fc:e7:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:35:4F:98:3A:B5:F6:A9:36:CF:AA:66:DF:16:A6:04:D8:C4:4C
            X509v3 Authority Key Identifier:
                keyid:6C:B4:B9:45:58:3C:5E:88:99:1A:6E:DB:9E:FD:25:0C:14:97:9D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/3137302e38312e36302e302f32322d3332203d3e20323636343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:ed:ea:88:58:0c:d3:1c:e3:ae:03:a5:ca:c7:c7:76:f8:
         93:ee:6e:d3:44:7e:55:e4:2e:22:ef:02:37:b4:35:49:ef:a2:
         29:80:3c:47:83:ea:7d:0c:0d:c8:b2:8a:70:10:36:48:bd:7a:
         1b:7c:de:e8:fc:0c:79:9f:d9:dd:bc:02:49:95:1e:56:41:c5:
         bd:6a:f7:60:a3:cd:9b:1d:44:aa:d7:47:bd:cf:7e:da:f5:66:
         49:16:6a:74:93:5a:f8:54:a0:88:42:e2:de:eb:7e:b3:03:3e:
         dd:1b:28:89:c9:7e:d6:3e:d7:90:45:58:81:8f:a9:3a:db:71:
         78:0c:f2:3a:d7:87:45:b6:b3:5a:ed:6b:99:08:a1:2f:eb:af:
         66:93:fa:94:4a:6d:46:40:a9:c8:57:57:64:f1:36:51:78:27:
         54:c0:8c:d5:3d:d3:a0:4c:b8:bb:79:a0:7d:34:0a:dc:51:39:
         35:c8:55:70:70:87:d0:55:f0:38:48:90:b7:c1:37:48:79:06:
         4b:22:bf:ac:9b:d4:b5:f9:52:02:d3:f3:2f:d4:d5:92:a6:ec:
         cb:ff:25:05:9f:72:fd:03:33:06:d8:7a:2f:4e:8f:a7:81:c0:
         fe:24:e7:c9:6a:18:03:2e:02:b4:cd:d4:75:21:79:5a:cc:90:
         88:71:4d:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXKvR4DOjXUckHhRFeV6CWXLPOKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNCNEI5NDU1ODNDNUU4ODk5MUE2RURCOUVGRDI1MEMx
NDk3OURBNTAeFw0yMzAxMjQxODIwNDBaFw0yNDAxMjMxODI1NDBaMDMxMTAvBgNV
BAMTKDlCQzIzNTRGOTgzQUI1RjZBOTM2Q0ZBQTY2REYxNkE2MDREOEM0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8aCMbiUQkEDSm81Z7x4SQ062
rZCmIhe62lQBqDhWW0fubzlnUoD6q9q0Tn5bIZJyjo7maZBS9U2ngzxp2TZUAXah
fu2UXC/snL7eMvCcS/GsoylluA+TJhKEftqhJUn9dLJK9Vjpp8Vd7LAAQHpmnkEc
O6FAdrBULKpioeuRjPNsuKdRXxx41X0kT8KTM9jo46iI9RhjojxF51gAJsb/Boz0
NJUstMx5F1Gu3cFxAASabjDuAbWGket8AC+wLkr+twhwMWRGqdPCyt6G4/FpokGJ
402jPmELKZ5MB6p/BkIrCzI3b8dduRuHZFILNNHZcczEKL6poufehBH85/qPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm8I1T5g6tfapNs+qZt8WpgTYxEwwHwYDVR0j
BBgwFoAUbLS5RVg8XoiZGm7bnv0lDBSXnaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhLRXFoelIyUDVFeFdiczdrYXhjRThGWXFTTWZFUXpvMnVreVhxa1dK
ZzcvMC82Q0I0Qjk0NTU4M0M1RTg4OTkxQTZFREI5RUZEMjUwQzE0OTc5REE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZDQjRCOTQ1NTgzQzVFODg5
OTFBNkVEQjlFRkQyNTBDMTQ5NzlEQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4S0VxaHpSMlA1RXhXYnM3a2F4Y0U4RllxU01mRVF6bzJ1a3lYcWtXSmc3LzAv
MzEzNzMwMmUzODMxMmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlE8MA0GCSqGSIb3DQEBCwUAA4IBAQBb9O3qiFgM
0xzjrgOlysfHdviT7m7TRH5V5C4i7wI3tDVJ76IpgDxHg+p9DA3IsopwEDZIvXob
fN7o/Ax5n9ndvAJJlR5WQcW9avdgo82bHUSq10e9z37a9WZJFmp0k1r4VKCIQuLe
636zAz7dGyiJyX7WPteQRViBj6k623F4DPI614dFtrNa7WuZCKEv669mk/qUSm1G
QKnIV1dk8TZReCdUwIzVPdOgTLi7eaB9NArcUTk1yFVwcIfQVfA4SJC3wTdIeQZL
Ir+sm9S1+VIC0/Mv1NWSpuzL/yUFn3L9AzMG2HovTo+ngcD+JOfJahgDLgK0zdR1
IXlazJCIcU03
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org