Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3234203d3e20323634383831.roa
File:                     3137302e37392e32302e302f32322d3234203d3e20323634383831.roa (raw, json)
Hash identifier:          VMTGQQWIp2bsRaQbac/VjtjoCuD9xJK30nAKqggXXi0=
Subject key identifier:   D7:C1:45:4E:B4:63:8D:7D:BC:C3:6C:2F:81:8C:FB:4E:60:95:5E:BA
Certificate issuer:       /CN=DE165093213A05EE33EFC42523BC4AB18F104C4C
Certificate serial:       57955D05ABE4F231173A98669F155B4EA0DA5946
Authority key identifier: DE:16:50:93:21:3A:05:EE:33:EF:C4:25:23:BC:4A:B1:8F:10:4C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3234203d3e20323634383831.roa
Signing time:             Fri 27 Jan 2023 13:51:03 +0000
ROA not before:           Fri 27 Jan 2023 13:46:03 +0000
ROA not after:            Fri 26 Jan 2024 13:51:03 +0000
asID:                     264881
IP address blocks:        170.79.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:95:5d:05:ab:e4:f2:31:17:3a:98:66:9f:15:5b:4e:a0:da:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE165093213A05EE33EFC42523BC4AB18F104C4C
        Validity
            Not Before: Jan 27 13:46:03 2023 GMT
            Not After : Jan 26 13:51:03 2024 GMT
        Subject: CN=D7C1454EB4638D7DBCC36C2F818CFB4E60955EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:a5:a4:21:31:c1:2e:c2:42:7c:55:b9:e1:
                    8c:16:63:90:27:a7:7c:2a:b0:31:d7:9c:40:a6:03:
                    68:c6:c5:88:ad:1c:55:ae:fd:6d:85:49:e2:45:ce:
                    90:48:7a:7c:d4:0b:e1:26:d8:e8:c9:61:c6:ed:02:
                    37:a6:1a:8c:b9:6d:3d:7c:44:4c:3a:b3:c4:37:70:
                    6f:fb:1c:60:9b:66:3d:49:74:2e:ec:ff:1b:18:16:
                    e9:1a:18:b7:24:60:b5:1a:81:b4:56:bd:52:05:64:
                    bb:f1:48:9a:9d:44:e7:e9:f8:e2:dd:05:c0:d5:ee:
                    70:78:48:53:b4:d4:6e:1d:63:13:96:69:7a:76:d3:
                    35:a1:81:05:bc:88:3f:ab:c7:41:12:db:e3:c5:c3:
                    be:ac:1d:a3:5e:0a:43:3f:29:93:6a:7e:9a:85:90:
                    c9:0d:1e:4d:49:d8:76:f6:3c:f3:c4:12:bb:bb:24:
                    e0:17:46:61:ef:66:2f:ec:ff:eb:15:09:d4:40:ef:
                    46:04:2c:08:a3:32:b1:2a:7a:bf:2d:0d:1a:97:90:
                    3d:41:77:2d:bd:b4:d3:b0:43:a0:4e:de:15:a5:11:
                    c0:3b:29:44:d0:44:02:0a:e3:bb:6d:0e:f4:78:e3:
                    6f:b2:40:42:af:98:e4:80:03:ab:f3:55:34:bc:c7:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C1:45:4E:B4:63:8D:7D:BC:C3:6C:2F:81:8C:FB:4E:60:95:5E:BA
            X509v3 Authority Key Identifier:
                keyid:DE:16:50:93:21:3A:05:EE:33:EF:C4:25:23:BC:4A:B1:8F:10:4C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE165093213A05EE33EFC42523BC4AB18F104C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/3137302e37392e32302e302f32322d3234203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:d2:6f:6e:63:5c:fd:57:c1:ca:9b:b0:30:eb:7f:f0:a3:
         85:12:5d:af:2b:d7:5a:70:c3:8d:5b:a8:ff:e4:f9:c0:16:87:
         b3:72:0a:67:a7:99:1c:26:06:56:bb:33:93:8d:04:10:18:69:
         bb:63:7d:b9:e3:ee:14:d2:40:f0:a9:ee:3c:54:b7:64:37:2f:
         ff:a0:c4:ed:fd:17:dc:aa:e4:1d:6e:99:17:06:62:cc:86:af:
         d8:b3:36:13:e5:1c:b3:45:b5:d7:a6:17:50:6f:7b:9e:0a:14:
         9d:f4:4d:54:7d:90:01:44:ba:f4:18:60:d5:5e:bf:f7:0e:5f:
         74:56:fb:b4:74:46:f2:cb:b2:c2:11:f8:00:22:90:6a:4e:0a:
         69:34:d6:33:5b:89:00:3c:6f:bc:5d:d5:24:a2:a3:bc:af:cd:
         7d:95:a1:5e:83:0a:f6:f8:b3:17:d2:a0:96:cf:6d:dd:50:f5:
         63:d0:1c:cb:b9:ae:51:be:96:73:b0:18:b8:64:3f:a5:e8:1e:
         27:e3:39:c5:f5:7e:2e:2e:45:02:b4:02:aa:42:6a:05:83:39:
         cf:93:49:5c:ec:13:54:c4:27:11:5f:dc:c7:c6:db:34:af:34:
         dc:bb:eb:b4:0d:7a:32:b1:06:0f:ae:83:ab:9c:88:a5:44:9a:
         5c:36:9a:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV5VdBavk8jEXOphmnxVbTqDaWUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxNjUwOTMyMTNBMDVFRTMzRUZDNDI1MjNCQzRBQjE4
RjEwNEM0QzAeFw0yMzAxMjcxMzQ2MDNaFw0yNDAxMjYxMzUxMDNaMDMxMTAvBgNV
BAMTKEQ3QzE0NTRFQjQ2MzhEN0RCQ0MzNkMyRjgxOENGQjRFNjA5NTVFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgL6WkITHBLsJCfFW54YwWY5An
p3wqsDHXnECmA2jGxYitHFWu/W2FSeJFzpBIenzUC+Em2OjJYcbtAjemGoy5bT18
REw6s8Q3cG/7HGCbZj1JdC7s/xsYFukaGLckYLUagbRWvVIFZLvxSJqdROfp+OLd
BcDV7nB4SFO01G4dYxOWaXp20zWhgQW8iD+rx0ES2+PFw76sHaNeCkM/KZNqfpqF
kMkNHk1J2Hb2PPPEEru7JOAXRmHvZi/s/+sVCdRA70YELAijMrEqer8tDRqXkD1B
dy29tNOwQ6BO3hWlEcA7KUTQRAIK47ttDvR442+yQEKvmOSAA6vzVTS8xyahAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU18FFTrRjjX28w2wvgYz7TmCVXrowHwYDVR0j
BBgwFoAU3hZQkyE6Be4z78QlI7xKsY8QTEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZn
YzYvMC9ERTE2NTA5MzIxM0EwNUVFMzNFRkM0MjUyM0JDNEFCMThGMTA0QzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFMTY1MDkzMjEzQTA1RUUz
M0VGQzQyNTIzQkM0QUIxOEYxMDRDNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTU3FUcGlDTEVKbkQxZW82dG9vU3NRM0xwMkxSTDIzdEdONzNEckRGZ2M2LzAv
MzEzNzMwMmUzNzM5MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzgzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk8UMA0GCSqGSIb3DQEBCwUAA4IBAQB6VNJvbmNc
/VfBypuwMOt/8KOFEl2vK9dacMONW6j/5PnAFoezcgpnp5kcJgZWuzOTjQQQGGm7
Y3254+4U0kDwqe48VLdkNy//oMTt/RfcquQdbpkXBmLMhq/YszYT5RyzRbXXphdQ
b3ueChSd9E1UfZABRLr0GGDVXr/3Dl90Vvu0dEbyy7LCEfgAIpBqTgppNNYzW4kA
PG+8XdUkoqO8r819laFegwr2+LMX0qCWz23dUPVj0BzLua5RvpZzsBi4ZD+l6B4n
4znF9X4uLkUCtAKqQmoFgznPk0lc7BNUxCcRX9zHxts0rzTcu+u0DXoysQYProOr
nIilRJpcNpof
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org