Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          37hmKnkKhAaIqawWqOstXCJSW38t+Q4c4MQNcy98ask=
Subject key identifier:   6A:C5:06:E6:80:6E:73:6C:C8:27:44:F0:AC:1C:68:45:53:81:24:1F
Certificate issuer:       /CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
Certificate serial:       68F322B455EA57DEC19C98373DB61522C70BB315
Authority key identifier: 0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
Signing time:             Thu 04 Apr 2024 22:55:27 +0000
ROA not before:           Thu 04 Apr 2024 22:50:27 +0000
ROA not after:            Thu 03 Apr 2025 22:55:27 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f3:22:b4:55:ea:57:de:c1:9c:98:37:3d:b6:15:22:c7:0b:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
        Validity
            Not Before: Apr  4 22:50:27 2024 GMT
            Not After : Apr  3 22:55:27 2025 GMT
        Subject: CN=6AC506E6806E736CC82744F0AC1C68455381241F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:21:92:3f:46:c1:3e:d6:2d:32:7a:bc:a1:
                    19:81:9f:23:b8:35:3d:6d:b4:72:51:f2:da:25:93:
                    db:19:85:2d:27:a1:55:a8:3e:83:32:88:08:c5:ac:
                    3b:e4:15:e9:b0:5b:1a:b7:3b:72:a7:fb:e7:9a:78:
                    ad:ba:e4:7d:18:25:a1:11:18:02:5c:ff:92:4e:fd:
                    54:c3:8d:5d:12:4f:89:a1:0b:e8:68:42:72:73:ab:
                    99:92:4c:a3:eb:a0:bb:d3:36:48:b1:85:c7:81:2a:
                    b2:1f:11:ec:d0:65:7f:ad:91:65:2f:dd:f8:7a:bb:
                    d3:9e:e5:cd:4d:bd:24:fd:70:9f:62:d9:6c:5e:c6:
                    1b:d9:40:20:4f:67:f3:fe:f7:91:19:73:55:ef:07:
                    f5:28:da:32:db:79:66:6a:1b:3a:ee:5e:14:5e:65:
                    e9:01:26:90:2b:2c:91:b2:37:34:d3:a6:88:75:23:
                    c4:45:4f:95:7a:b1:85:27:46:d4:bc:a0:00:a6:07:
                    06:3f:d9:e5:b4:19:ec:94:b5:42:d0:bc:10:30:14:
                    d4:97:f4:09:a4:09:bd:1f:39:c0:cb:a3:e4:15:c2:
                    53:f8:7e:df:96:30:9d:41:e5:0d:e1:3a:bd:fb:c0:
                    41:5b:01:98:bd:b6:bd:30:a3:07:b4:11:61:a8:1d:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C5:06:E6:80:6E:73:6C:C8:27:44:F0:AC:1C:68:45:53:81:24:1F
            X509v3 Authority Key Identifier:
                keyid:0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:fc:e8:c3:f6:55:93:6f:13:0f:47:d2:60:0c:ff:c0:cb:
         db:d3:ae:83:35:76:b2:50:07:91:40:60:e0:4f:1c:e7:6b:ca:
         e0:3c:0f:8d:16:d8:73:e1:f1:50:7e:cd:3d:5e:ca:7b:02:5e:
         f3:48:32:c3:19:21:49:44:bd:cf:92:a5:6f:9e:78:df:53:04:
         45:63:b4:86:24:63:07:2c:cb:a7:46:f7:29:d6:b6:99:8d:14:
         92:59:c6:c7:ed:c7:ce:22:5a:50:21:99:ac:87:f0:b4:01:30:
         e1:71:7e:48:c3:ec:e3:0e:05:5d:fa:b7:19:3e:ce:1c:08:bf:
         6f:9a:36:e1:94:2f:f5:73:77:cb:05:f4:ce:d3:67:c0:35:8c:
         ba:a9:94:14:93:77:dd:22:01:87:0c:e0:a5:3d:88:d2:18:e1:
         65:8f:2b:2d:bb:37:3a:b5:32:25:a9:94:7f:4e:b9:08:82:40:
         fc:29:6a:e8:ad:a8:00:2c:94:77:c6:98:45:09:f5:15:62:78:
         ff:7a:a5:3e:86:4d:5b:b9:83:cc:b5:86:1d:38:3f:e9:3b:81:
         78:a3:1a:35:e6:43:57:4b:26:20:88:3a:c4:e5:b7:22:0e:38:
         39:f1:b1:e2:2e:75:e3:07:b3:fb:4c:ad:36:ee:5a:46:fe:e7:
         ee:be:1f:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaPMitFXqV97BnJg3PbYVIscLsxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI1OEUzRDhBQkMzNEJCQjQ5OUYxNjA2NDA3QjA2NjIz
QjY5RjNDOTAeFw0yNDA0MDQyMjUwMjdaFw0yNTA0MDMyMjU1MjdaMDMxMTAvBgNV
BAMTKDZBQzUwNkU2ODA2RTczNkNDODI3NDRGMEFDMUM2ODQ1NTM4MTI0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8yGSP0bBPtYtMnq8oRmBnyO4
NT1ttHJR8tolk9sZhS0noVWoPoMyiAjFrDvkFemwWxq3O3Kn++eaeK265H0YJaER
GAJc/5JO/VTDjV0ST4mhC+hoQnJzq5mSTKProLvTNkixhceBKrIfEezQZX+tkWUv
3fh6u9Oe5c1NvST9cJ9i2WxexhvZQCBPZ/P+95EZc1XvB/Uo2jLbeWZqGzruXhRe
ZekBJpArLJGyNzTTpoh1I8RFT5V6sYUnRtS8oACmBwY/2eW0GeyUtULQvBAwFNSX
9AmkCb0fOcDLo+QVwlP4ft+WMJ1B5Q3hOr37wEFbAZi9tr0wowe0EWGoHWcNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUasUG5oBuc2zIJ0TwrBxoRVOBJB8wHwYDVR0j
BBgwFoAUC1jj2KvDS7tJnxYGQHsGYjtp88kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMi8wQjU4RTNEOEFCQzM0QkJCNDk5RjE2MDY0MDdCMDY2MjNCNjlGM0M5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNThFM0Q4QUJDMzRCQkI0
OTlGMTYwNjQwN0IwNjYyM0I2OUYzQzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzIv
MzEzNzMwMmUzODMzMmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzYzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlNkMA0GCSqGSIb3DQEBCwUAA4IBAQBQwfzow/ZV
k28TD0fSYAz/wMvb066DNXayUAeRQGDgTxzna8rgPA+NFthz4fFQfs09Xsp7Al7z
SDLDGSFJRL3PkqVvnnjfUwRFY7SGJGMHLMunRvcp1raZjRSSWcbH7cfOIlpQIZms
h/C0ATDhcX5Iw+zjDgVd+rcZPs4cCL9vmjbhlC/1c3fLBfTO02fANYy6qZQUk3fd
IgGHDOClPYjSGOFljystuzc6tTIlqZR/TrkIgkD8KWroragALJR3xphFCfUVYnj/
eqU+hk1buYPMtYYdOD/pO4F4oxo15kNXSyYgiDrE5bciDjg58bHiLnXjB7P7TK02
7lpG/ufuvh/a
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org