Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32322d3232203d3e20323635303636.roa
File:                     3137302e3233312e3131322e302f32322d3232203d3e20323635303636.roa (raw, json)
Hash identifier:          cnVsWehC3uX63m6m1lKV1ER790niCY59T7WqTE7xdX0=
Subject key identifier:   24:FA:49:A1:1E:92:E2:DD:D6:57:51:F3:91:FB:ED:B8:18:09:02:BC
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       6A53D12EA275D4FDE514507EFA505095FCCA360D
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32322d3232203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:33 +0000
ROA not before:           Sat 05 Jun 2021 20:31:33 +0000
ROA not after:            Sat 04 Jun 2022 20:36:33 +0000
asID:                     265066
IP address blocks:        170.231.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:d1:2e:a2:75:d4:fd:e5:14:50:7e:fa:50:50:95:fc:ca:36:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:33 2021 GMT
            Not After : Jun  4 20:36:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:85:1a:56:88:21:5f:c4:af:15:4e:b3:4a:
                    83:7b:b3:e2:2f:b9:b3:f2:e4:b8:0e:ef:69:0b:54:
                    78:17:70:a7:d4:31:12:5b:36:7d:99:a9:05:55:0a:
                    71:fd:94:fe:25:2d:ff:ee:bb:c3:63:a3:ce:16:08:
                    f3:db:a2:05:75:93:a0:cd:e4:fc:95:58:ce:8a:fc:
                    f9:c0:0e:11:85:25:8a:47:b6:17:13:54:04:c1:fb:
                    c8:ea:78:fe:3e:ab:53:68:09:6e:dd:93:aa:45:56:
                    0e:f4:66:5f:57:90:42:d7:73:97:a0:c1:97:1b:f3:
                    af:75:d7:84:87:9d:f5:ea:0e:c6:aa:f9:9c:83:5a:
                    91:86:92:72:e8:15:09:17:55:54:7a:c4:8e:6b:98:
                    32:56:ec:fb:e7:a9:79:47:b9:47:0f:5c:df:f9:d1:
                    de:23:ab:2f:2f:0a:19:88:f5:96:3e:bc:2e:87:64:
                    08:b3:f3:70:a5:5e:41:6c:75:1b:da:75:72:33:a2:
                    8e:8e:bd:5d:3a:ff:84:ae:6b:b4:88:c8:b4:ee:0f:
                    2a:20:5d:6b:1d:bb:fa:69:aa:ff:f0:c2:0b:ec:2d:
                    8c:63:a7:65:6e:a8:19:12:91:f2:f9:4c:92:6a:3a:
                    60:73:aa:1d:80:4f:04:20:1f:7e:51:68:80:be:70:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FA:49:A1:1E:92:E2:DD:D6:57:51:F3:91:FB:ED:B8:18:09:02:BC
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131322e302f32322d3232203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:47:d2:53:13:42:ff:ce:e9:4a:d4:6d:bd:fe:b2:ec:74:3b:
         3d:81:b7:6d:ec:64:b5:e7:aa:0a:0b:4a:11:6d:53:97:17:3d:
         55:2e:9d:e6:0a:d0:23:c4:c1:08:be:29:9e:e0:83:b5:6e:72:
         4f:e0:8b:64:87:f7:49:46:ab:3f:6a:3f:98:5d:7c:d1:90:df:
         89:39:c6:07:9f:f8:39:3b:f5:2d:ab:21:38:ba:c0:5f:82:3f:
         90:af:ef:04:62:05:a8:2a:e6:d6:36:96:1c:a5:e0:58:fb:fa:
         ea:6f:a7:cb:7c:92:a3:b7:36:5c:6e:a7:bf:a3:28:15:61:d7:
         22:0c:64:8b:8a:86:98:9c:0c:f6:65:6e:33:e0:e2:ce:46:53:
         1e:48:17:fc:fa:ce:24:7f:62:c3:9d:4d:93:f7:f9:1e:20:1c:
         86:2f:8e:9e:0e:78:35:ee:43:60:6d:6b:5d:69:1c:73:db:0c:
         dd:2c:07:d0:23:e3:74:bd:0f:b9:68:43:48:a4:10:3f:54:63:
         de:68:6e:62:6d:8f:73:ef:b6:7b:e6:fd:1d:aa:d2:a3:e7:53:
         fd:a3:84:69:d9:63:da:23:1e:20:27:6e:20:29:2d:a4:26:ab:
         e8:03:11:40:24:c8:0b:dc:05:51:c8:30:3b:8c:f4:d4:b4:a4:
         cf:2a:8f:86
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUalPRLqJ11P3lFFB++lBQlfzKNg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMzNaFw0yMjA2MDQyMDM2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdFQTg1MUE1Njg4MjE1RkM0
QUYxNTRFQjM0QTgzN0JCM0UyMkZCOUIzRjJFNEI4MEVFRjY5MEI1NDc4MTc3MEE3
RDQzMTEyNUIzNjdEOTlBOTA1NTUwQTcxRkQ5NEZFMjUyREZGRUVCQkMzNjNBM0NF
MTYwOEYzREJBMjA1NzU5M0EwQ0RFNEZDOTU1OENFOEFGQ0Y5QzAwRTExODUyNThB
NDdCNjE3MTM1NDA0QzFGQkM4RUE3OEZFM0VBQjUzNjgwOTZFREQ5M0FBNDU1NjBF
RjQ2NjVGNTc5MDQyRDc3Mzk3QTBDMTk3MUJGM0FGNzVENzg0ODc5REY1RUEwRUM2
QUFGOTlDODM1QTkxODY5MjcyRTgxNTA5MTc1NTU0N0FDNDhFNkI5ODMyNTZFQ0ZC
RTdBOTc5NDdCOTQ3MEY1Q0RGRjlEMURFMjNBQjJGMkYwQTE5ODhGNTk2M0VCQzJF
ODc2NDA4QjNGMzcwQTU1RTQxNkM3NTFCREE3NTcyMzNBMjhFOEVCRDVEM0FGRjg0
QUU2QkI0ODhDOEI0RUUwRjJBMjA1RDZCMURCQkZBNjlBQUZGRjBDMjBCRUMyRDhD
NjNBNzY1NkVBODE5MTI5MUYyRjk0QzkyNkEzQTYwNzNBQTFEODA0RjA0MjAxRjdF
NTE2ODgwQkU3MDlGNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx+qFGlaIIV/ErxVOs0qDe7PiL7mz8uS4Du9pC1R4F3Cn1DESWzZ9
makFVQpx/ZT+JS3/7rvDY6POFgjz26IFdZOgzeT8lVjOivz5wA4RhSWKR7YXE1QE
wfvI6nj+PqtTaAlu3ZOqRVYO9GZfV5BC13OXoMGXG/OvddeEh5316g7Gqvmcg1qR
hpJy6BUJF1VUesSOa5gyVuz756l5R7lHD1zf+dHeI6svLwoZiPWWPrwuh2QIs/Nw
pV5BbHUb2nVyM6KOjr1dOv+Ermu0iMi07g8qIF1rHbv6aar/8MIL7C2MY6dlbqgZ
EpHy+UySajpgc6odgE8EIB9+UWiAvnCfWwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCT6SaEekuLd1ldR85H77bgYCQK8MB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzIzMzMxMmUzMTMx
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzMDM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq53AwDQYJKoZIhvcNAQELBQADggEBAAlH0lMTQv/O6UrUbb3+sux0Oz2Bt23s
ZLXnqgoLShFtU5cXPVUuneYK0CPEwQi+KZ7gg7Vuck/gi2SH90lGqz9qP5hdfNGQ
34k5xgef+Dk79S2rITi6wF+CP5Cv7wRiBagq5tY2lhyl4Fj7+upvp8t8kqO3Nlxu
p7+jKBVh1yIMZIuKhpicDPZlbjPg4s5GUx5IF/z6ziR/YsOdTZP3+R4gHIYvjp4O
eDXuQ2Bta11pHHPbDN0sB9Aj43S9D7loQ0ikED9UY95obmJtj3Pvtnvm/R2q0qPn
U/2jhGnZY9ojHiAnbiApLaQmq+gDEUAkyAvcBVHIMDuM9NS0pM8qj4Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:51 2024 by rpki-client on console-fra.rpki-client.org