Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa
File:                     3137302e3233382e36302e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier:          rwKKUXSMHYsRg+0hgVgngphffJJTAM0uauxIj62+tE4=
Subject key identifier:   5E:00:FF:E9:DC:A1:8D:1E:A9:55:8A:EE:A9:91:CC:C1:91:BA:BD:96
Certificate issuer:       /CN=FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE
Certificate serial:       1BFA094B80A3152B6D626CE198835123FFF52B25
Authority key identifier: FE:CB:93:CC:8D:E3:AD:1A:4B:E2:3B:79:C3:9A:C6:89:33:5F:8B:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa
Signing time:             Thu 16 Nov 2023 20:00:00 +0000
ROA not before:           Thu 16 Nov 2023 19:55:00 +0000
ROA not after:            Thu 14 Nov 2024 20:00:00 +0000
asID:                     61649
IP address blocks:        170.238.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fa:09:4b:80:a3:15:2b:6d:62:6c:e1:98:83:51:23:ff:f5:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE
        Validity
            Not Before: Nov 16 19:55:00 2023 GMT
            Not After : Nov 14 20:00:00 2024 GMT
        Subject: CN=5E00FFE9DCA18D1EA9558AEEA991CCC191BABD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:25:aa:2e:16:13:f7:07:43:cb:90:57:d5:
                    d8:15:29:42:ac:25:be:8a:47:8c:da:f6:7e:e0:b5:
                    52:61:26:16:9b:c4:4b:b2:94:ef:96:be:be:51:26:
                    43:82:4d:4f:f9:01:b4:0d:4a:01:79:de:ec:dc:d1:
                    79:95:15:75:ed:25:26:be:39:05:b7:1b:f0:17:a0:
                    18:cc:47:d7:48:f1:64:86:0c:72:21:8a:e8:c6:83:
                    21:6c:ee:33:7f:66:7f:c5:26:ad:cd:28:10:11:a6:
                    c2:f7:a2:fb:8a:b1:d6:aa:4a:dc:74:ba:e5:f7:5c:
                    5c:0b:5c:52:59:da:23:b8:3e:d1:44:27:97:69:b3:
                    36:7e:04:6d:b9:3b:f8:04:a5:8d:d1:65:fb:82:6e:
                    96:1b:49:c9:b9:c4:4d:2e:0c:b2:83:42:4a:f6:ac:
                    1b:28:5e:c0:1e:13:99:81:a0:2e:df:75:20:be:2f:
                    15:ab:0c:20:b5:2e:09:d3:b1:f0:5d:6b:74:3f:40:
                    c6:6e:88:30:a0:69:3f:fb:3c:28:98:59:c7:e6:61:
                    f9:2b:49:42:8a:13:9c:21:13:b9:ca:e5:60:51:d2:
                    0a:e4:af:a2:a8:4a:a0:ab:f9:6e:35:4a:b3:07:e9:
                    12:8a:2f:5d:6f:4f:46:07:03:73:e5:5f:0a:19:ce:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:FF:E9:DC:A1:8D:1E:A9:55:8A:EE:A9:91:CC:C1:91:BA:BD:96
            X509v3 Authority Key Identifier:
                keyid:FE:CB:93:CC:8D:E3:AD:1A:4B:E2:3B:79:C3:9A:C6:89:33:5F:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FECB93CC8DE3AD1A4BE23B79C39AC689335F8BCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3137302e3233382e36302e302f32322d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:8d:45:ff:84:18:f2:3a:e1:e8:c6:de:86:1a:48:e4:c4:20:
         92:d8:86:2a:b0:03:f1:6e:a0:4f:4f:4e:db:4b:c8:c0:eb:c1:
         66:2d:5b:bf:70:6b:76:6c:14:d9:e2:0a:d9:d6:94:f3:f8:fc:
         eb:33:ec:ce:84:21:17:88:9c:cd:0a:87:62:01:9b:be:4d:55:
         83:0e:bf:c3:5e:b3:8f:6c:b2:31:c1:83:5c:29:3b:58:8d:dd:
         e8:3c:ab:66:ec:f6:aa:1c:a9:d0:56:f7:92:d9:d2:d6:88:7b:
         bc:35:21:52:c5:4d:78:64:fa:cb:07:db:29:cc:ee:a4:96:dd:
         76:2e:37:ab:31:f3:1e:12:45:80:76:a2:89:ac:73:45:38:8e:
         f6:b2:e5:b6:ed:86:b4:c0:ed:2c:1a:b4:27:28:6e:22:cd:21:
         35:70:f1:35:5e:1a:a7:b1:cb:d7:7f:a7:3b:eb:0f:e7:7d:24:
         ce:fe:ad:9b:f0:3f:71:6a:8c:08:be:f2:91:03:30:ad:da:ef:
         e0:82:b5:f4:c5:9b:ff:1a:d3:cb:e6:48:92:d9:ce:df:d4:f1:
         75:36:a5:c7:94:b2:87:85:fe:d3:83:f6:86:d7:41:8a:92:bb:
         87:ec:f1:7e:9a:66:95:51:e6:65:a3:c2:a8:0c:95:4b:1f:db:
         be:8e:db:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG/oJS4CjFSttYmzhmINRI//1KyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVDQjkzQ0M4REUzQUQxQTRCRTIzQjc5QzM5QUM2ODkz
MzVGOEJDRTAeFw0yMzExMTYxOTU1MDBaFw0yNDExMTQyMDAwMDBaMDMxMTAvBgNV
BAMTKDVFMDBGRkU5RENBMThEMUVBOTU1OEFFRUE5OTFDQ0MxOTFCQUJEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKiWqLhYT9wdDy5BX1dgVKUKs
Jb6KR4za9n7gtVJhJhabxEuylO+Wvr5RJkOCTU/5AbQNSgF53uzc0XmVFXXtJSa+
OQW3G/AXoBjMR9dI8WSGDHIhiujGgyFs7jN/Zn/FJq3NKBARpsL3ovuKsdaqStx0
uuX3XFwLXFJZ2iO4PtFEJ5dpszZ+BG25O/gEpY3RZfuCbpYbScm5xE0uDLKDQkr2
rBsoXsAeE5mBoC7fdSC+LxWrDCC1LgnTsfBda3Q/QMZuiDCgaT/7PCiYWcfmYfkr
SUKKE5whE7nK5WBR0grkr6KoSqCr+W41SrMH6RKKL11vT0YHA3PlXwoZzku7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXgD/6dyhjR6pVYruqZHMwZG6vZYwHwYDVR0j
BBgwFoAU/suTzI3jrRpL4jt5w5rGiTNfi84wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZKZWZod0NuREJhaUVEYnVuN3JnUjJ6V3dYaTFxb2J6SGtaR2lKcTFK
SHcvMC9GRUNCOTNDQzhERTNBRDFBNEJFMjNCNzlDMzlBQzY4OTMzNUY4QkNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFQ0I5M0NDOERFM0FEMUE0
QkUyM0I3OUMzOUFDNjg5MzM1RjhCQ0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWSmVmaHdDbkRCYWlFRGJ1bjdyZ1Iyeld3WGkxcW9iekhrWkdpSnExSkh3LzAv
MzEzNzMwMmUzMjMzMzgyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqu48MA0GCSqGSIb3DQEBCwUAA4IBAQCyjUX/hBjy
OuHoxt6GGkjkxCCS2IYqsAPxbqBPT07bS8jA68FmLVu/cGt2bBTZ4grZ1pTz+Pzr
M+zOhCEXiJzNCodiAZu+TVWDDr/DXrOPbLIxwYNcKTtYjd3oPKtm7PaqHKnQVveS
2dLWiHu8NSFSxU14ZPrLB9spzO6klt12LjerMfMeEkWAdqKJrHNFOI72suW27Ya0
wO0sGrQnKG4izSE1cPE1XhqnscvXf6c76w/nfSTO/q2b8D9xaowIvvKRAzCt2u/g
grX0xZv/GtPL5kiS2c7f1PF1NqXHlLKHhf7Tg/aG10GKkruH7PF+mmaVUeZlo8Ko
DJVLH9u+jts6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org