Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131342e302f32342d3234203d3e20323635303636.roa
File:                     3137302e3233312e3131342e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          Qt9LHInj3GzFZQC/niDXpx5ZJPsjE2HecvovPuQ2/2s=
Subject key identifier:   84:73:18:F9:BB:84:1A:7A:6F:C1:F6:11:90:1B:72:C7:DF:89:4E:A9
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       0D8BA10AFB2FD7293F7F1171A7E70630C96C6047
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131342e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        170.231.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8b:a1:0a:fb:2f:d7:29:3f:7f:11:71:a7:e7:06:30:c9:6c:60:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:b7:d6:8f:99:03:30:57:60:58:63:45:91:
                    14:d9:91:3a:b9:43:fa:d5:94:0f:07:46:50:78:e1:
                    2b:09:90:3c:69:7c:f9:cf:9a:8c:e9:d9:2e:14:9b:
                    c4:59:af:97:96:4d:37:c5:2f:98:09:c9:16:a6:9b:
                    0d:52:40:c0:e9:69:6b:0a:96:6f:e8:94:5a:bf:73:
                    32:8c:fb:00:92:4a:65:1d:5d:cb:32:d2:77:27:37:
                    11:28:e8:53:a0:20:1d:70:90:fa:6c:eb:a9:af:4a:
                    c9:2e:38:da:a0:80:22:10:23:2e:fb:1d:1b:32:3b:
                    63:39:2c:a1:04:f5:63:dc:cb:92:cc:ff:44:34:7b:
                    7d:20:ad:85:fc:c9:11:f8:36:11:2c:a3:88:f9:22:
                    f6:96:67:99:97:22:a0:16:5f:82:74:87:86:07:2e:
                    12:05:35:83:13:5c:16:41:13:da:ac:2e:36:b0:d0:
                    6a:86:67:fe:44:af:02:34:b1:ae:85:26:b3:94:e7:
                    dd:bd:ff:eb:b8:dd:ff:65:ea:01:48:66:af:ec:00:
                    50:20:8a:28:03:2b:0c:0c:8e:b4:f1:96:c2:0d:ce:
                    81:2c:39:93:47:03:ef:1a:fd:a1:28:8a:99:7a:ff:
                    8b:46:d9:ab:84:2d:60:92:4f:a9:ab:e5:71:73:e4:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:73:18:F9:BB:84:1A:7A:6F:C1:F6:11:90:1B:72:C7:DF:89:4E:A9
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137302e3233312e3131342e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:c8:a1:a0:05:18:e8:ac:50:57:77:90:66:01:6d:97:34:
         8c:32:d5:4f:d2:1d:8e:95:47:fa:69:af:98:22:b9:66:ba:7c:
         45:04:17:5d:db:80:e4:88:63:7a:d7:d3:b6:f1:89:6d:c0:cb:
         45:96:4e:db:fd:6f:82:19:44:91:dd:08:71:fe:83:00:7b:1a:
         21:fd:ac:28:e4:d9:60:d9:c6:28:35:0d:f4:e1:8b:d6:e4:6c:
         33:4c:7d:81:86:b9:8c:45:1c:0e:e8:4a:3c:26:a7:a6:64:57:
         15:be:66:e6:0c:0e:2d:a6:4c:47:ad:25:07:7b:d1:ac:ab:8f:
         58:41:ba:87:80:d7:08:4d:c6:f7:e9:b0:29:05:96:00:5d:7d:
         e2:32:a1:ca:e5:77:a7:07:6d:5a:75:af:e7:53:e5:c3:84:fc:
         12:53:d3:ee:22:ec:46:7d:cf:51:f0:4f:5c:d7:85:18:90:e5:
         b9:de:84:12:87:ec:cb:0c:35:3e:70:91:0e:22:2f:dd:2c:2b:
         22:5f:c5:7d:3e:66:f9:29:2f:d5:34:1b:3a:a9:fb:b0:5d:51:
         12:58:1d:88:b5:2f:ef:c2:7d:ff:f9:1a:90:2a:d0:d9:fe:c4:
         76:36:76:61:20:a9:1b:1c:e5:bb:a8:bf:7f:b9:22:13:b7:73:
         40:1f:b3:4e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUDYuhCvsv1yk/fxFxp+cGMMlsYEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGQTIwNzY2RDYzNzY4QkFGMzRBRDBBRUU1QzYwQkZD
MDNFRjk4ODAeFw0yMTA2MDUyMDMxMjhaFw0yMjA2MDQyMDM2MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk1NEI3RDY4Rjk5MDMzMDU3
NjA1ODYzNDU5MTE0RDk5MTNBQjk0M0ZBRDU5NDBGMDc0NjUwNzhFMTJCMDk5MDND
Njk3Q0Y5Q0Y5QThDRTlEOTJFMTQ5QkM0NTlBRjk3OTY0RDM3QzUyRjk4MDlDOTE2
QTY5QjBENTI0MEMwRTk2OTZCMEE5NjZGRTg5NDVBQkY3MzMyOENGQjAwOTI0QTY1
MUQ1RENCMzJEMjc3MjczNzExMjhFODUzQTAyMDFENzA5MEZBNkNFQkE5QUY0QUM5
MkUzOERBQTA4MDIyMTAyMzJFRkIxRDFCMzIzQjYzMzkyQ0ExMDRGNTYzRENDQjky
Q0NGRjQ0MzQ3QjdEMjBBRDg1RkNDOTExRjgzNjExMkNBMzg4RjkyMkY2OTY2Nzk5
OTcyMkEwMTY1RjgyNzQ4Nzg2MDcyRTEyMDUzNTgzMTM1QzE2NDExM0RBQUMyRTM2
QjBEMDZBODY2N0ZFNDRBRjAyMzRCMUFFODUyNkIzOTRFN0REQkRGRkVCQjhEREZG
NjVFQTAxNDg2NkFGRUMwMDUwMjA4QTI4MDMyQjBDMEM4RUI0RjE5NkMyMERDRTgx
MkMzOTkzNDcwM0VGMUFGREExMjg4QTk5N0FGRjhCNDZEOUFCODQyRDYwOTI0RkE5
QUJFNTcxNzNFNEZDQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqVS31o+ZAzBXYFhjRZEU2ZE6uUP61ZQPB0ZQeOErCZA8aXz5z5qM
6dkuFJvEWa+Xlk03xS+YCckWppsNUkDA6WlrCpZv6JRav3MyjPsAkkplHV3LMtJ3
JzcRKOhToCAdcJD6bOupr0rJLjjaoIAiECMu+x0bMjtjOSyhBPVj3MuSzP9ENHt9
IK2F/MkR+DYRLKOI+SL2lmeZlyKgFl+CdIeGBy4SBTWDE1wWQRParC42sNBqhmf+
RK8CNLGuhSazlOfdvf/ruN3/ZeoBSGav7ABQIIooAysMDI608ZbCDc6BLDmTRwPv
Gv2hKIqZev+LRtmrhC1gkk+pq+Vxc+T8yQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIRzGPm7hBp6b8H2EZAbcsffiU6pMB8GA1UdIwQYMBaAFB36IHZtY3aLrzStCu5c
YL/APvmIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzczVXd0QVJMMmdHb1h3
bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzAvMURGQTIwNzY2RDYzNzY4
QkFGMzRBRDBBRUU1QzYwQkZDMDNFRjk4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xREZBMjA3NjZENjM3NjhCQUYzNEFEMEFFRTVDNjBCRkMwM0VG
OTg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83M1V3dEFSTDJnR29Yd25vcTlU
a1g4VmV1M1F6aXVzc2lYY0hKUEgxQ1hUai8wLzMxMzczMDJlMzIzMzMxMmUzMTMx
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzMDM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq53IwDQYJKoZIhvcNAQELBQADggEBAHNdyKGgBRjorFBXd5BmAW2XNIwy1U/S
HY6VR/ppr5giuWa6fEUEF13bgOSIY3rX07bxiW3Ay0WWTtv9b4IZRJHdCHH+gwB7
GiH9rCjk2WDZxig1DfThi9bkbDNMfYGGuYxFHA7oSjwmp6ZkVxW+ZuYMDi2mTEet
JQd70ayrj1hBuoeA1whNxvfpsCkFlgBdfeIyocrld6cHbVp1r+dT5cOE/BJT0+4i
7EZ9z1HwT1zXhRiQ5bnehBKH7MsMNT5wkQ4iL90sKyJfxX0+ZvkpL9U0Gzqp+7Bd
URJYHYi1L+/Cff/5GpAq0Nn+xHY2dmEgqRsc5buov3+5IhO3c0Afs04=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org