Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
File:                     3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (raw, json)
Hash identifier:          B5MdNwaZleZcmqSw4Zj+yT9CDRxRSOdbsdo3F1d7W5E=
Subject key identifier:   72:16:EE:DE:E7:88:E2:E0:A4:45:0F:8C:D1:1A:DF:60:E2:1B:02:C2
Certificate issuer:       /CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
Certificate serial:       35EF54626D61915F14668F43BCC9CAD932EAD56B
Authority key identifier: 57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
Signing time:             Thu 14 Mar 2024 19:59:49 +0000
ROA not before:           Thu 14 Mar 2024 19:54:49 +0000
ROA not after:            Thu 13 Mar 2025 19:59:49 +0000
asID:                     265061
IP address blocks:        170.231.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:54:62:6d:61:91:5f:14:66:8f:43:bc:c9:ca:d9:32:ea:d5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
        Validity
            Not Before: Mar 14 19:54:49 2024 GMT
            Not After : Mar 13 19:59:49 2025 GMT
        Subject: CN=7216EEDEE788E2E0A4450F8CD11ADF60E21B02C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:b1:2e:e9:bc:92:12:11:00:3a:0e:50:16:
                    94:c6:2a:e4:37:3c:9d:ca:9c:49:e2:07:31:73:7b:
                    06:64:54:6b:96:9b:8d:d5:6e:4c:9a:f5:9d:98:91:
                    24:a0:93:81:26:47:ac:bd:ee:47:7f:a2:1f:82:7d:
                    c5:10:8f:f3:d4:3c:17:67:c3:30:af:79:ef:c2:ba:
                    71:3c:12:0d:42:84:67:65:fe:0b:f4:e2:60:53:7f:
                    6a:1d:ee:58:90:c0:c9:62:04:a8:b4:10:0c:ba:36:
                    70:ae:6d:f7:0a:f5:c3:69:fc:62:19:77:bb:42:c4:
                    ac:34:39:f8:0a:0c:46:18:d6:fc:96:18:89:5b:7e:
                    60:b7:a5:06:0b:b6:d3:60:7a:32:77:85:75:f2:c9:
                    2d:97:dc:fb:9b:97:4d:7e:a8:93:02:53:35:2c:3e:
                    89:6a:db:04:bd:40:ed:15:af:94:0a:e8:2e:f3:a4:
                    0b:83:84:76:ed:12:8c:51:32:d7:5d:68:bc:b9:4c:
                    38:4f:08:36:fe:67:86:98:e9:88:c6:1f:be:ca:9d:
                    d9:bd:7b:d0:14:e6:15:13:29:1a:57:d7:30:28:dc:
                    e1:14:d1:96:5e:4f:a6:19:29:58:09:56:b9:3e:e2:
                    00:d7:d1:58:5b:9c:c9:97:81:d3:a3:68:88:5b:a9:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:EE:DE:E7:88:E2:E0:A4:45:0F:8C:D1:1A:DF:60:E2:1B:02:C2
            X509v3 Authority Key Identifier:
                keyid:57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:92:26:92:87:84:a5:93:d7:99:f6:5d:72:19:e2:11:5f:cd:
         9d:a2:c0:20:b0:3c:60:3a:54:65:8d:71:c5:d8:79:d1:13:aa:
         e0:97:7d:f9:0c:16:22:c6:9f:20:43:85:8a:0b:cc:c2:0e:f4:
         b7:d5:1c:e6:f2:6f:f6:7b:d0:34:25:f0:8a:97:2e:ee:2f:25:
         a5:05:7c:c3:34:59:a4:a5:c7:5f:d0:f2:53:bd:c2:7d:96:0a:
         3b:4c:43:02:62:3a:a6:c8:66:cc:9c:28:f6:60:84:dc:ef:2c:
         fd:92:90:8c:02:a8:f5:20:e9:03:c9:be:b2:0f:05:d9:5c:f9:
         49:08:46:67:7d:7c:2c:cf:4e:0f:c8:78:12:9e:bf:64:07:24:
         f5:ae:9b:46:dd:1b:fe:0e:49:b4:16:51:51:c0:43:ed:3d:d8:
         ab:39:6c:cd:f7:b8:9f:b7:8a:68:b9:ff:6e:6e:96:78:fc:9c:
         41:fe:ec:a2:48:f2:18:9c:16:44:85:4d:15:dd:41:7c:82:ca:
         d4:9a:55:3d:15:63:d4:6e:88:fc:56:c4:5f:2a:54:13:b2:0c:
         95:95:ac:e8:15:57:e7:05:91:ac:81:67:b6:3f:f7:15:e4:bb:
         60:c2:ee:04:45:a0:9b:01:54:b7:e3:49:ef:0e:a1:a4:41:c2:
         fa:b1:90:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNe9UYm1hkV8UZo9DvMnK2TLq1WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2MDVCRDZFMkRBNUM4N0E4QjQ0MzdGODMzNEE1RjEz
MjBDNDFDNzAeFw0yNDAzMTQxOTU0NDlaFw0yNTAzMTMxOTU5NDlaMDMxMTAvBgNV
BAMTKDcyMTZFRURFRTc4OEUyRTBBNDQ1MEY4Q0QxMUFERjYwRTIxQjAyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFrEu6bySEhEAOg5QFpTGKuQ3
PJ3KnEniBzFzewZkVGuWm43Vbkya9Z2YkSSgk4EmR6y97kd/oh+CfcUQj/PUPBdn
wzCvee/CunE8Eg1ChGdl/gv04mBTf2od7liQwMliBKi0EAy6NnCubfcK9cNp/GIZ
d7tCxKw0OfgKDEYY1vyWGIlbfmC3pQYLttNgejJ3hXXyyS2X3Publ01+qJMCUzUs
Polq2wS9QO0Vr5QK6C7zpAuDhHbtEoxRMtddaLy5TDhPCDb+Z4aY6YjGH77Kndm9
e9AU5hUTKRpX1zAo3OEU0ZZeT6YZKVgJVrk+4gDX0VhbnMmXgdOjaIhbqSm7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUchbu3ueI4uCkRQ+M0RrfYOIbAsIwHwYDVR0j
BBgwFoAUV2Bb1uLaXIeotEN/gzSl8TIMQccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VRMmNvY1B3ZFFuRjZHM0txYnoxTEZ5RG5XYTFYRGVuVzJzb01UMTZw
Z2IvMC81NzYwNUJENkUyREE1Qzg3QThCNDQzN0Y4MzM0QTVGMTMyMEM0MUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3NjA1QkQ2RTJEQTVDODdB
OEI0NDM3RjgzMzRBNUYxMzIwQzQxQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVUTJjb2NQd2RRbkY2RzNLcWJ6MUxGeURuV2ExWERlblcyc29NVDE2cGdiLzAv
MzEzNzMwMmUzMjMzMzEyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq5zgwDQYJKoZIhvcNAQELBQADggEBALySJpKH
hKWT15n2XXIZ4hFfzZ2iwCCwPGA6VGWNccXYedETquCXffkMFiLGnyBDhYoLzMIO
9LfVHObyb/Z70DQl8IqXLu4vJaUFfMM0WaSlx1/Q8lO9wn2WCjtMQwJiOqbIZsyc
KPZghNzvLP2SkIwCqPUg6QPJvrIPBdlc+UkIRmd9fCzPTg/IeBKev2QHJPWum0bd
G/4OSbQWUVHAQ+092Ks5bM33uJ+3imi5/25ulnj8nEH+7KJI8hicFkSFTRXdQXyC
ytSaVT0VY9RuiPxWxF8qVBOyDJWVrOgVV+cFkayBZ7Y/9xXku2DC7gRFoJsBVLfj
Se8OoaRBwvqxkOU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org