Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3137302e3234372e37322e302f32322d3234203d3e203532353434.roa
File:                     3137302e3234372e37322e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          H6DPYuIaGbIej05NNYhjVyx0YIiUsRAWA+6WuQrT/gk=
Subject key identifier:   79:71:95:AB:67:42:D5:17:37:37:25:9D:6D:7C:A5:62:2F:7E:7E:4B
Certificate issuer:       /CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
Certificate serial:       12739706829AEBCB07B7A3EAEC2CF779AC1DF20C
Authority key identifier: 31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3137302e3234372e37322e302f32322d3234203d3e203532353434.roa
Signing time:             Thu 05 Jan 2023 14:21:49 +0000
ROA not before:           Thu 05 Jan 2023 14:16:49 +0000
ROA not after:            Thu 04 Jan 2024 14:21:49 +0000
asID:                     52544
IP address blocks:        170.247.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:73:97:06:82:9a:eb:cb:07:b7:a3:ea:ec:2c:f7:79:ac:1d:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
        Validity
            Not Before: Jan  5 14:16:49 2023 GMT
            Not After : Jan  4 14:21:49 2024 GMT
        Subject: CN=797195AB6742D5173737259D6D7CA5622F7E7E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:a6:cc:5b:58:04:24:f8:81:1f:af:a1:22:
                    41:1c:44:8b:23:d6:d7:68:03:51:93:5e:40:71:be:
                    4a:76:77:fe:5e:ef:cd:ff:a2:03:d0:d2:c1:cd:b4:
                    61:1a:f4:38:82:d6:b1:db:21:08:52:30:4a:0a:ec:
                    8d:c3:68:7c:d1:be:49:f1:93:30:ff:0e:b3:33:6b:
                    54:31:ff:3e:e0:20:5a:84:93:9b:6a:c7:ea:82:9d:
                    e4:98:6c:32:bb:44:f5:ee:e7:26:90:48:a3:af:0e:
                    64:20:75:09:95:95:f2:dd:69:38:23:e4:af:8a:60:
                    aa:ce:ad:b5:0c:00:b8:e0:9f:81:9e:c1:b6:99:ff:
                    2c:9a:b0:37:68:6e:d6:81:c6:e9:06:63:fa:73:4a:
                    e8:25:09:d2:eb:d2:14:b7:de:bf:65:61:db:f5:c8:
                    60:b3:c8:a5:6a:d7:a8:82:e5:79:e4:5d:d0:93:07:
                    22:de:fc:d9:5e:44:dd:ec:8b:6d:9f:0a:51:b0:70:
                    6b:fc:5c:78:86:8a:09:bf:54:86:81:9f:1c:fd:cc:
                    a5:d3:0c:35:67:bb:03:46:15:6f:b0:e9:6c:45:9b:
                    b2:8d:89:71:27:89:7e:b1:05:6c:54:c8:19:7d:22:
                    c9:fa:dd:04:1a:8b:7c:cd:c0:4f:3c:a3:e3:86:c3:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:95:AB:67:42:D5:17:37:37:25:9D:6D:7C:A5:62:2F:7E:7E:4B
            X509v3 Authority Key Identifier:
                keyid:31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3137302e3234372e37322e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:d6:83:81:af:79:7b:5b:37:35:51:82:f1:c6:2e:69:17:
         cc:c5:df:ad:ed:30:94:9e:1b:63:b0:39:04:59:74:56:f7:d2:
         0b:e9:35:df:db:e2:60:75:91:1f:9f:0f:8b:ab:a0:02:5c:7f:
         9f:9c:2a:64:7a:22:a0:ac:88:e8:f2:90:49:0e:0a:18:15:e7:
         fd:23:32:3a:90:c8:09:59:b6:b3:f8:a7:cf:63:d0:1c:24:1e:
         03:5d:cf:f7:49:9d:1c:fd:31:8e:61:62:ac:1e:24:5b:40:83:
         a4:72:02:05:a9:99:df:6f:d3:fe:79:0e:fc:59:57:48:b4:80:
         a5:4c:2f:30:35:10:0d:e1:84:71:e3:94:34:64:30:36:7e:9e:
         a0:10:93:02:b5:9c:cf:32:99:00:bf:41:3e:76:d9:40:4b:65:
         79:96:41:f2:ba:de:42:f0:9d:d7:01:cc:b8:a6:31:d6:04:c4:
         86:a4:a8:3c:57:62:8c:bc:74:80:78:54:f1:1c:07:75:11:59:
         58:c3:c1:90:9d:93:44:a1:87:65:d5:36:f4:51:f4:bc:5e:84:
         3f:f7:f1:ec:4c:bf:02:94:f1:d6:a0:6e:6a:f6:63:b5:bf:d0:
         89:80:35:42:39:b3:96:9c:e3:dd:55:8d:8d:30:9f:f3:40:fb:
         27:b0:56:5c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEnOXBoKa68sHt6Pq7Cz3eawd8gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2MzBBN0E0MkM1NjkwOTU2ODJFRThGMzJGMTlEQkZF
NEJEODFGQzAeFw0yMzAxMDUxNDE2NDlaFw0yNDAxMDQxNDIxNDlaMDMxMTAvBgNV
BAMTKDc5NzE5NUFCNjc0MkQ1MTczNzM3MjU5RDZEN0NBNTYyMkY3RTdFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm66bMW1gEJPiBH6+hIkEcRIsj
1tdoA1GTXkBxvkp2d/5e783/ogPQ0sHNtGEa9DiC1rHbIQhSMEoK7I3DaHzRvknx
kzD/DrMza1Qx/z7gIFqEk5tqx+qCneSYbDK7RPXu5yaQSKOvDmQgdQmVlfLdaTgj
5K+KYKrOrbUMALjgn4GewbaZ/yyasDdobtaBxukGY/pzSuglCdLr0hS33r9lYdv1
yGCzyKVq16iC5XnkXdCTByLe/NleRN3si22fClGwcGv8XHiGigm/VIaBnxz9zKXT
DDVnuwNGFW+w6WxFm7KNiXEniX6xBWxUyBl9Isn63QQai3zNwE88o+OGw5H1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeXGVq2dC1Rc3NyWdbXylYi9+fkswHwYDVR0j
BBgwFoAUMWMKekLFaQlWgu6PMvGdv+S9gfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1
YzkvMC8zMTYzMEE3QTQyQzU2OTA5NTY4MkVFOEYzMkYxOURCRkU0QkQ4MUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxNjMwQTdBNDJDNTY5MDk1
NjgyRUU4RjMyRjE5REJGRTRCRDgxRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFY05Ibkd0Zml3eDZFeDRXMzRIUWpxSnkyajQxcEZQZ29idVpVYzRINWM5LzAv
MzEzNzMwMmUzMjM0MzcyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqvdIMA0GCSqGSIb3DQEBCwUAA4IBAQAUm9aDga95
e1s3NVGC8cYuaRfMxd+t7TCUnhtjsDkEWXRW99IL6TXf2+JgdZEfnw+Lq6ACXH+f
nCpkeiKgrIjo8pBJDgoYFef9IzI6kMgJWbaz+KfPY9AcJB4DXc/3SZ0c/TGOYWKs
HiRbQIOkcgIFqZnfb9P+eQ78WVdItIClTC8wNRAN4YRx45Q0ZDA2fp6gEJMCtZzP
MpkAv0E+dtlAS2V5lkHyut5C8J3XAcy4pjHWBMSGpKg8V2KMvHSAeFTxHAd1EVlY
w8GQnZNEoYdl1Tb0UfS8XoQ/9/HsTL8ClPHWoG5q9mO1v9CJgDVCObOWnOPdVY2N
MJ/zQPsnsFZc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org