Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e38342e35362e302f32322d3234203d3e203238313436.roa
File:                     3137302e38342e35362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          4wZ+Te++7nZqpfFAzsU1uRNMiALjIQnw/TMQqmcXu1w=
Subject key identifier:   B9:42:13:E7:72:E3:A8:0C:9B:33:B6:5E:E8:29:96:E9:B5:4D:CF:AC
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       7F50D535A2D7BD865A3DDA622CC4E045D96EA193
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e38342e35362e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:49 +0000
ROA not before:           Wed 21 Dec 2022 17:11:49 +0000
ROA not after:            Wed 20 Dec 2023 17:16:49 +0000
asID:                     28146
IP address blocks:        170.84.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:50:d5:35:a2:d7:bd:86:5a:3d:da:62:2c:c4:e0:45:d9:6e:a1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:49 2022 GMT
            Not After : Dec 20 17:16:49 2023 GMT
        Subject: CN=B94213E772E3A80C9B33B65EE82996E9B54DCFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:d9:dd:6e:8b:d4:db:79:a2:b6:48:13:73:
                    6b:00:c9:bb:c5:bb:6c:3f:97:62:76:2f:94:d3:af:
                    ba:5d:30:06:ce:f6:28:6e:f2:aa:51:03:05:85:b2:
                    71:e7:81:65:c6:46:c0:ab:da:a6:e1:1a:05:6a:01:
                    0f:e9:4c:0f:2a:92:08:a7:89:bc:f3:27:ff:b6:05:
                    ef:8a:85:bb:b8:8c:b0:2a:d4:bc:39:50:09:cc:fd:
                    88:8a:83:10:b9:1c:02:c2:53:4b:77:ec:0a:7c:04:
                    39:d1:c5:c1:c5:38:98:ed:aa:78:ba:16:56:86:ef:
                    f2:69:5e:12:44:72:c3:02:67:d0:c7:91:2a:57:a3:
                    0d:a5:0f:5c:0a:16:f5:be:17:07:bb:ed:65:83:a2:
                    b2:bb:a4:5d:f1:17:23:64:22:8c:76:00:55:72:cc:
                    ad:a4:5d:c1:bb:80:24:23:6f:8d:7f:eb:c2:08:4b:
                    68:23:23:42:94:6d:25:3b:80:78:b5:0f:bc:f7:28:
                    3b:e5:a5:b8:ad:07:20:cb:66:ef:e1:3e:af:97:8c:
                    e3:22:2b:ef:13:79:e8:72:cc:bf:ed:2a:4e:98:f6:
                    22:03:16:37:94:2e:ec:6e:ab:f4:aa:4e:10:9f:5e:
                    5b:3c:df:78:fe:97:21:de:aa:2a:b5:27:25:56:17:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:42:13:E7:72:E3:A8:0C:9B:33:B6:5E:E8:29:96:E9:B5:4D:CF:AC
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e38342e35362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:27:b4:0b:19:52:1f:07:cb:ff:3d:89:19:49:e8:55:f3:1b:
         f1:59:93:3a:d8:db:c3:6a:11:82:f8:ac:f2:df:78:6a:80:a3:
         d6:fc:1b:51:15:bb:78:26:27:aa:c3:89:d0:cc:1e:5f:5a:a7:
         fe:0d:92:20:b3:d5:51:6f:bb:20:29:b3:96:30:b2:61:2f:08:
         ed:c3:a1:f4:d2:4a:f8:1e:2c:61:bd:c3:48:28:36:e1:35:c2:
         c7:41:cd:ba:c2:36:5e:3d:8c:0e:52:12:b8:e4:16:13:c4:58:
         3c:f5:b8:ad:4c:26:a4:33:73:39:55:c4:0e:52:3d:4b:e6:8c:
         a2:b2:ab:00:27:83:2f:d5:a7:ed:58:73:ec:2c:24:22:42:a1:
         92:b1:38:30:0c:3a:af:82:55:1b:58:d6:4d:b9:86:40:35:eb:
         f9:20:80:4f:a9:4b:72:e0:5c:62:2a:41:d7:92:71:ad:c0:84:
         51:1b:fc:dd:b7:09:98:54:7c:4b:e2:7b:dd:6c:a9:03:26:2c:
         f4:99:c2:3f:0d:48:64:f1:86:b1:ed:13:44:b5:ac:6d:36:a7:
         11:64:43:05:9c:52:a4:35:78:8a:6a:09:b9:bb:9d:98:f0:9d:
         3c:8e:72:ae:dc:8a:d7:45:41:57:06:c1:a0:65:12:c9:2b:db:
         ca:88:0b:3d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUf1DVNaLXvYZaPdpiLMTgRdluoZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFODQxRUFFNTg4MEY2Nzg3M0RCODg0NzI2OTk2OTI5
NDUwNzc4OTAeFw0yMjEyMjExNzExNDlaFw0yMzEyMjAxNzE2NDlaMDMxMTAvBgNV
BAMTKEI5NDIxM0U3NzJFM0E4MEM5QjMzQjY1RUU4Mjk5NkU5QjU0RENGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfdndbovU23mitkgTc2sAybvF
u2w/l2J2L5TTr7pdMAbO9ihu8qpRAwWFsnHngWXGRsCr2qbhGgVqAQ/pTA8qkgin
ibzzJ/+2Be+Khbu4jLAq1Lw5UAnM/YiKgxC5HALCU0t37Ap8BDnRxcHFOJjtqni6
FlaG7/JpXhJEcsMCZ9DHkSpXow2lD1wKFvW+Fwe77WWDorK7pF3xFyNkIox2AFVy
zK2kXcG7gCQjb41/68IIS2gjI0KUbSU7gHi1D7z3KDvlpbitByDLZu/hPq+XjOMi
K+8TeehyzL/tKk6Y9iIDFjeULuxuq/SqThCfXls833j+lyHeqiq1JyVWF5g3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuUIT53LjqAybM7Ze6CmW6bVNz6wwHwYDVR0j
BBgwFoAUuOhB6uWID2eHPbiEcmmWkpRQd4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMS9COEU4NDFFQUU1ODgwRjY3ODczREI4ODQ3MjY5OTY5Mjk0NTA3Nzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4RTg0MUVBRTU4ODBGNjc4
NzNEQjg4NDcyNjk5NjkyOTQ1MDc3ODkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzEv
MzEzNzMwMmUzODM0MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpUODANBgkqhkiG9w0BAQsFAAOCAQEAIye0CxlSHwfL
/z2JGUnoVfMb8VmTOtjbw2oRgvis8t94aoCj1vwbURW7eCYnqsOJ0MweX1qn/g2S
ILPVUW+7ICmzljCyYS8I7cOh9NJK+B4sYb3DSCg24TXCx0HNusI2Xj2MDlISuOQW
E8RYPPW4rUwmpDNzOVXEDlI9S+aMorKrACeDL9Wn7Vhz7CwkIkKhkrE4MAw6r4JV
G1jWTbmGQDXr+SCAT6lLcuBcYipB15JxrcCEURv83bcJmFR8S+J73WypAyYs9JnC
Pw1IZPGGse0TRLWsbTanEWRDBZxSpDV4imoJubudmPCdPI5yrtyK10VBVwbBoGUS
ySvbyogLPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org