Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32322d3232203d3e20323634393639.roa
File:                     3137302e302e3131322e302f32322d3232203d3e20323634393639.roa (raw, json)
Hash identifier:          /yipQD+ZMwPjphqJnOBTV7rS6umCrZqPa/YE+kgoH44=
Subject key identifier:   94:0F:23:1F:19:B8:C5:5C:2C:82:D2:69:A8:1C:85:6B:5B:26:03:EE
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       76743524B3E3B91653D2C99D5CFD28F93AB6444F
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32322d3232203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:06:01 +0000
ROA not before:           Tue 31 Oct 2023 16:01:01 +0000
ROA not after:            Tue 29 Oct 2024 16:06:01 +0000
asID:                     264969
IP address blocks:        170.0.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:74:35:24:b3:e3:b9:16:53:d2:c9:9d:5c:fd:28:f9:3a:b6:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 16:01:01 2023 GMT
            Not After : Oct 29 16:06:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:46:64:49:3d:83:0c:53:e3:81:de:c4:81:
                    80:42:6e:3b:1f:5c:45:8d:49:f8:5d:1e:30:36:33:
                    3a:f3:39:a9:56:93:2a:65:7c:82:d5:86:c3:e1:6e:
                    88:3f:93:ce:96:08:90:30:d2:91:26:95:c3:24:65:
                    3b:ed:d3:06:7d:5d:ad:d3:10:0e:f6:13:55:25:9c:
                    87:21:07:42:7a:ad:9f:9a:b4:cf:7a:cc:ba:e7:a1:
                    c9:a9:92:26:00:f9:ad:5f:93:ae:64:e8:76:1e:b6:
                    b0:e4:f6:a7:67:a5:f1:f3:13:2f:04:48:73:ff:74:
                    ad:62:fe:45:b5:93:f7:17:57:25:d2:84:f7:2e:9e:
                    46:fa:ce:15:24:57:d0:d0:1b:9b:57:9f:7d:55:ac:
                    86:69:fb:8a:f4:44:74:6d:2f:70:de:1d:2f:af:4e:
                    95:0f:92:9b:25:61:65:0d:b8:9c:a6:66:47:37:b2:
                    22:d2:3b:d4:8d:1f:2c:dc:f0:e1:60:0f:28:af:3a:
                    3f:01:38:4e:f1:c6:16:27:f0:23:f3:2f:1c:78:24:
                    96:b0:33:7f:2c:58:79:39:6f:30:3e:ed:dc:0c:54:
                    fd:c1:05:fd:6f:0c:41:32:36:fb:11:eb:04:07:b1:
                    6d:9f:a5:bd:7c:6f:38:96:b0:3d:54:57:33:0a:82:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:23:1F:19:B8:C5:5C:2C:82:D2:69:A8:1C:85:6B:5B:26:03:EE
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/3137302e302e3131322e302f32322d3232203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:5f:24:d1:a5:06:27:d0:80:fa:1d:b3:3b:09:06:c4:97:
         1f:51:71:a9:b2:95:7d:bd:83:e8:61:02:49:d8:70:80:e8:ac:
         33:49:aa:93:c3:c2:7a:a8:79:e4:df:42:72:d0:f9:db:80:3e:
         5d:0f:01:81:ef:66:80:b5:80:83:ba:f4:05:64:8c:38:0f:c4:
         cf:b2:df:e6:39:e4:70:9c:dd:47:a7:1c:be:b6:74:58:a5:de:
         fa:77:ad:51:9f:d2:0f:e6:5f:4c:3e:72:98:e0:17:16:67:61:
         4b:98:35:9f:63:00:f5:b3:85:24:d5:46:93:40:3b:08:66:83:
         a3:49:8b:3a:bf:45:83:af:9e:fe:13:3f:0e:fc:c3:26:12:86:
         c3:e9:87:e8:75:55:23:95:e2:b7:45:54:b4:3b:ad:f1:7d:f0:
         1e:5a:60:94:20:4f:14:10:55:20:c8:cd:a8:18:18:ee:8d:6b:
         97:d9:a7:77:8d:c6:06:6f:89:36:68:e1:ba:5c:25:a2:f8:1a:
         83:d4:23:d4:5b:2e:81:39:d3:ab:4f:8b:5b:74:41:60:87:56:
         4b:fc:50:f5:cd:a7:4d:25:c3:f2:0e:d3:15:29:aa:08:d5:9d:
         22:a6:17:f5:36:d5:24:c6:14:20:91:4d:87:c9:3b:7d:d1:5d:
         39:a8:41:c3
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUdnQ1JLPjuRZT0smdXP0o+Tq2RE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzQkI2MUM3NkY0M0VFOEUwNkFFMzhBN0Q4NjhFNDVC
NUU5RjNCMDAeFw0yMzEwMzExNjAxMDFaFw0yNDEwMjkxNjA2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUY4QzQ2NjQ0OTNEODMwQzUz
RTM4MURFQzQ4MTgwNDI2RTNCMUY1QzQ1OEQ0OUY4NUQxRTMwMzYzMzNBRjMzOUE5
NTY5MzJBNjU3QzgyRDU4NkMzRTE2RTg4M0Y5M0NFOTYwODkwMzBEMjkxMjY5NUMz
MjQ2NTNCRUREMzA2N0Q1REFERDMxMDBFRjYxMzU1MjU5Qzg3MjEwNzQyN0FBRDlG
OUFCNENGN0FDQ0JBRTdBMUM5QTk5MjI2MDBGOUFENUY5M0FFNjRFODc2MUVCNkIw
RTRGNkE3NjdBNUYxRjMxMzJGMDQ0ODczRkY3NEFENjJGRTQ1QjU5M0Y3MTc1NzI1
RDI4NEY3MkU5RTQ2RkFDRTE1MjQ1N0QwRDAxQjlCNTc5RjdENTVBQzg2NjlGQjhB
RjQ0NDc0NkQyRjcwREUxRDJGQUY0RTk1MEY5MjlCMjU2MTY1MERCODlDQTY2NjQ3
MzdCMjIyRDIzQkQ0OEQxRjJDRENGMEUxNjAwRjI4QUYzQTNGMDEzODRFRjFDNjE2
MjdGMDIzRjMyRjFDNzgyNDk2QjAzMzdGMkM1ODc5Mzk2RjMwM0VFRERDMEM1NEZE
QzEwNUZENkYwQzQxMzIzNkZCMTFFQjA0MDdCMTZEOUZBNUJEN0M2RjM4OTZCMDNE
NTQ1NzMzMEE4MkUxRTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA74xGZEk9gwxT44HexIGAQm47H1xFjUn4XR4wNjM68zmpVpMqZXyC
1YbD4W6IP5POlgiQMNKRJpXDJGU77dMGfV2t0xAO9hNVJZyHIQdCeq2fmrTPesy6
56HJqZImAPmtX5OuZOh2Hraw5PanZ6Xx8xMvBEhz/3StYv5FtZP3F1cl0oT3Lp5G
+s4VJFfQ0BubV599VayGafuK9ER0bS9w3h0vr06VD5KbJWFlDbicpmZHN7Ii0jvU
jR8s3PDhYA8orzo/AThO8cYWJ/Aj8y8ceCSWsDN/LFh5OW8wPu3cDFT9wQX9bwxB
Mjb7EesEB7Ftn6W9fG84lrA9VFczCoLh6QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJQPIx8ZuMVcLILSaagchWtbJgPuMB8GA1UdIwQYMBaAFFM7thx29D7o4Grjin2G
jkW16fOwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgxNFEydXJ4OUM0UUpB
WEtFbnNYdmRkamhya1RTRHIxQU12SlpNTENCZ1RtLzAvNTMzQkI2MUM3NkY0M0VF
OEUwNkFFMzhBN0Q4NjhFNDVCNUU5RjNCMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MzNCQjYxQzc2RjQzRUU4RTA2QUUzOEE3RDg2OEU0NUI1RTlG
M0IwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84MTRRMnVyeDlDNFFKQVhLRW5z
WHZkZGpocmtUU0RyMUFNdkpaTUxDQmdUbS8wLzMxMzczMDJlMzAyZTMxMzEzMjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDM5MzYzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqoA
cDANBgkqhkiG9w0BAQsFAAOCAQEAcp9fJNGlBifQgPodszsJBsSXH1FxqbKVfb2D
6GECSdhwgOisM0mqk8PCeqh55N9CctD524A+XQ8Bge9mgLWAg7r0BWSMOA/Ez7Lf
5jnkcJzdR6ccvrZ0WKXe+netUZ/SD+ZfTD5ymOAXFmdhS5g1n2MA9bOFJNVGk0A7
CGaDo0mLOr9Fg6+e/hM/DvzDJhKGw+mH6HVVI5Xit0VUtDut8X3wHlpglCBPFBBV
IMjNqBgY7o1rl9mnd43GBm+JNmjhulwlovgag9Qj1FsugTnTq0+LW3RBYIdWS/xQ
9c2nTSXD8g7TFSmqCNWdIqYX9TbVJMYUIJFNh8k7fdFdOahBww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org