Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa
File:                     3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (raw, json)
Hash identifier:          eTRkPLpDGicqzpHuQQ+IBKcC1sUrfpnvsoeF9fZaKdM=
Subject key identifier:   18:40:83:F6:85:9B:CF:F8:1C:34:95:D2:56:B0:62:31:5A:BE:43:22
Certificate issuer:       /CN=08955ACA1E6ED830C574209FC72217F211993283
Certificate serial:       1FC8706F24587544080344398D9AC86F15B5BE18
Authority key identifier: 08:95:5A:CA:1E:6E:D8:30:C5:74:20:9F:C7:22:17:F2:11:99:32:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08955ACA1E6ED830C574209FC72217F211993283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa
Signing time:             Thu 30 Nov 2023 20:28:13 +0000
ROA not before:           Thu 30 Nov 2023 20:23:13 +0000
ROA not after:            Thu 28 Nov 2024 20:28:13 +0000
asID:                     262322
IP address blocks:        170.254.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:70:6f:24:58:75:44:08:03:44:39:8d:9a:c8:6f:15:b5:be:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08955ACA1E6ED830C574209FC72217F211993283
        Validity
            Not Before: Nov 30 20:23:13 2023 GMT
            Not After : Nov 28 20:28:13 2024 GMT
        Subject: CN=184083F6859BCFF81C3495D256B062315ABE4322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:20:2b:54:33:ce:ec:8a:57:09:5f:a2:a6:
                    49:e5:6d:2b:72:3c:ee:47:6f:0a:ec:95:61:35:03:
                    46:ec:63:51:62:9b:90:3c:11:39:07:1b:2b:db:b7:
                    17:b6:76:7c:30:54:c9:37:3f:09:3a:78:f8:16:d9:
                    38:38:0f:28:54:75:d9:b4:4a:b0:7b:4d:51:a1:15:
                    7e:9a:1c:6f:b9:63:53:eb:73:18:a3:04:15:d0:f2:
                    b2:cd:92:e0:e9:6c:08:94:52:a8:ad:00:f7:08:0d:
                    15:f2:d5:27:b0:e7:7e:be:7d:e7:bd:59:d1:16:2e:
                    53:f3:e1:15:07:58:79:1a:33:43:af:91:ed:a7:28:
                    dc:1f:4e:6f:6c:58:c4:9e:7c:f2:59:5d:ea:ad:33:
                    79:2a:c7:39:6d:bb:c0:63:d2:ea:0e:16:49:49:a6:
                    e5:f4:a7:b5:19:59:b3:29:bb:f2:27:d0:01:3d:70:
                    e1:86:aa:ff:5b:5c:05:39:06:b7:1f:1d:5e:ef:d0:
                    6a:9e:13:4a:1a:68:38:b1:07:a2:e3:e5:d8:ee:44:
                    1e:15:a5:1f:af:07:14:a0:a2:67:dd:ff:52:f1:35:
                    e9:61:65:b9:88:69:b3:7e:45:23:1e:21:7f:ff:67:
                    9f:ef:dd:73:6c:c2:62:b7:5a:94:a0:14:0c:fd:7e:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:40:83:F6:85:9B:CF:F8:1C:34:95:D2:56:B0:62:31:5A:BE:43:22
            X509v3 Authority Key Identifier:
                keyid:08:95:5A:CA:1E:6E:D8:30:C5:74:20:9F:C7:22:17:F2:11:99:32:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/08955ACA1E6ED830C574209FC72217F211993283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08955ACA1E6ED830C574209FC72217F211993283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/0/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:75:2d:40:02:ff:4e:67:42:32:de:dd:fc:7a:0b:cc:f5:3a:
         5b:4b:85:a5:1f:a3:f1:c0:db:d8:de:85:12:1b:4f:b2:f3:8e:
         91:23:89:a3:15:93:45:cf:82:fe:15:4e:0c:22:c3:ca:59:b2:
         3d:29:96:1f:24:a8:93:c6:f5:30:aa:58:04:41:01:f0:9e:e4:
         9d:88:b8:4c:be:2f:f8:42:4c:73:4e:6c:47:f8:8c:60:89:20:
         27:e0:f3:d5:c3:27:cf:60:28:93:56:1c:a6:d0:a2:51:23:c7:
         ca:c7:dd:ed:ad:af:b6:a3:f8:fb:71:2f:b4:c1:b2:7c:35:37:
         4b:0e:29:b4:c3:a0:a7:5e:d7:5b:1e:cc:60:e1:e2:41:0c:b0:
         9e:a0:80:72:18:8e:ac:ac:94:86:e9:af:68:53:ee:74:e1:d4:
         f8:05:50:da:e1:e6:b3:89:76:54:6e:f6:62:7e:c0:b7:92:ed:
         4a:8d:aa:2d:6b:fc:29:b1:5c:b4:fe:dc:39:61:48:02:71:ad:
         80:a7:b0:5a:9a:94:27:2e:7d:5e:5e:84:86:cb:6c:72:5d:31:
         25:a2:f5:ee:eb:9e:fc:c3:4f:24:c1:95:37:3f:c8:e4:bb:50:
         9c:1d:e0:e4:cd:e0:6c:89:17:03:85:32:32:a4:11:9e:b9:1d:
         ee:59:a0:e5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH8hwbyRYdUQIA0Q5jZrIbxW1vhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg5NTVBQ0ExRTZFRDgzMEM1NzQyMDlGQzcyMjE3RjIx
MTk5MzI4MzAeFw0yMzExMzAyMDIzMTNaFw0yNDExMjgyMDI4MTNaMDMxMTAvBgNV
BAMTKDE4NDA4M0Y2ODU5QkNGRjgxQzM0OTVEMjU2QjA2MjMxNUFCRTQzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjSArVDPO7IpXCV+ipknlbSty
PO5HbwrslWE1A0bsY1Fim5A8ETkHGyvbtxe2dnwwVMk3Pwk6ePgW2Tg4DyhUddm0
SrB7TVGhFX6aHG+5Y1PrcxijBBXQ8rLNkuDpbAiUUqitAPcIDRXy1Sew536+fee9
WdEWLlPz4RUHWHkaM0Ovke2nKNwfTm9sWMSefPJZXeqtM3kqxzltu8Bj0uoOFklJ
puX0p7UZWbMpu/In0AE9cOGGqv9bXAU5BrcfHV7v0GqeE0oaaDixB6Lj5djuRB4V
pR+vBxSgomfd/1LxNelhZbmIabN+RSMeIX//Z5/v3XNswmK3WpSgFAz9fjnnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGECD9oWbz/gcNJXSVrBiMVq+QyIwHwYDVR0j
BBgwFoAUCJVayh5u2DDFdCCfxyIX8hGZMoMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq
SmsvMC8wODk1NUFDQTFFNkVEODMwQzU3NDIwOUZDNzIyMTdGMjExOTkzMjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4OTU1QUNBMUU2RUQ4MzBD
NTc0MjA5RkM3MjIxN0YyMTE5OTMyODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdvQ2NWYnlIS2tMQ2Y5NXprUnQzZnlpc2JIWWNuM285b1pZWjU2WlZiakprLzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+cDANBgkqhkiG9w0BAQsFAAOCAQEAEHUt
QAL/TmdCMt7d/HoLzPU6W0uFpR+j8cDb2N6FEhtPsvOOkSOJoxWTRc+C/hVODCLD
ylmyPSmWHySok8b1MKpYBEEB8J7knYi4TL4v+EJMc05sR/iMYIkgJ+Dz1cMnz2Ao
k1YcptCiUSPHysfd7a2vtqP4+3EvtMGyfDU3Sw4ptMOgp17XWx7MYOHiQQywnqCA
chiOrKyUhumvaFPudOHU+AVQ2uHms4l2VG72Yn7At5LtSo2qLWv8KbFctP7cOWFI
AnGtgKewWpqUJy59Xl6Ehstscl0xJaL17uue/MNPJMGVNz/I5LtQnB3g5M3gbIkX
A4UyMqQRnrkd7lmg5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org