Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231302e302f32332d3233203d3e203532353933.roa
File:                     3137302e38332e3231302e302f32332d3233203d3e203532353933.roa (raw, json)
Hash identifier:          EkQ3XV5U/NWrLM3yAuhwAgx4DtJu9Dsv6fm3KF6KHZI=
Subject key identifier:   70:F0:BA:5E:76:37:4E:91:2F:9F:1F:7D:01:56:3D:20:FC:26:EF:02
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       0B9E4FA2F8E242595D7F0CEEABD0FBFEEEBAF5BB
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231302e302f32332d3233203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:18 +0000
ROA not before:           Tue 19 Sep 2023 12:47:18 +0000
ROA not after:            Tue 17 Sep 2024 12:52:18 +0000
asID:                     52593
IP address blocks:        170.83.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9e:4f:a2:f8:e2:42:59:5d:7f:0c:ee:ab:d0:fb:fe:ee:ba:f5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:18 2023 GMT
            Not After : Sep 17 12:52:18 2024 GMT
        Subject: CN=70F0BA5E76374E912F9F1F7D01563D20FC26EF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:a9:5e:88:69:ac:2e:df:10:3c:77:88:08:
                    64:aa:ba:b7:c1:0b:45:ff:65:d4:98:6e:17:77:2f:
                    6f:f5:bd:28:7c:37:ee:07:6f:46:0d:f4:39:18:ad:
                    61:05:a3:fd:67:c3:6f:21:0c:e6:bf:4d:6a:31:5c:
                    3c:ef:0b:92:d2:14:ed:72:5e:8b:63:cc:80:85:3e:
                    4a:b6:50:02:f4:14:f2:ab:f5:53:73:5c:c9:73:61:
                    d0:b0:08:1d:5a:db:64:46:e1:22:8e:dd:4d:97:9d:
                    5c:e5:1a:a9:8e:9f:4c:88:26:06:95:00:66:0c:88:
                    81:68:f5:a9:32:73:7f:c1:15:fe:63:66:74:bf:6c:
                    69:eb:48:6a:a7:e7:a8:bf:4c:37:9e:a4:cd:97:6b:
                    59:5c:38:e2:69:48:da:35:47:72:55:76:7c:ae:9d:
                    a8:55:75:49:a0:71:5b:65:28:3f:e6:96:a5:3b:03:
                    cb:38:8f:fc:ab:e3:c4:6e:32:30:34:e4:71:59:21:
                    53:db:2f:00:b4:9c:39:0f:08:79:1c:a1:02:ef:45:
                    4c:64:82:ce:9f:90:c5:2a:e3:ad:9e:27:b9:48:c6:
                    3c:76:71:ca:bf:c9:95:52:72:68:db:f6:0b:d1:af:
                    8a:63:23:7d:c5:59:6f:82:f3:e9:bc:ee:a5:3d:60:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:BA:5E:76:37:4E:91:2F:9F:1F:7D:01:56:3D:20:FC:26:EF:02
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137302e38332e3231302e302f32332d3233203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:e4:79:fa:15:e0:e2:af:f1:76:86:42:14:de:e3:80:c6:
         b1:46:12:f6:b1:63:ec:a9:cf:65:85:5b:66:c7:d5:b9:b0:ff:
         b2:0c:75:47:f3:4c:5f:1e:c6:32:3a:c5:a3:fb:82:18:c2:8c:
         7f:84:7c:5d:67:5c:16:b8:7c:d7:b6:b9:3c:0c:b4:3c:bf:8c:
         5f:88:1f:6d:a8:ed:49:62:0d:21:cb:a1:98:f1:92:da:a3:0f:
         13:04:dc:4c:f5:72:c6:eb:36:dd:40:33:ba:60:5f:19:eb:fc:
         4b:df:24:e3:be:44:d1:40:a8:01:c4:fb:7c:83:55:7e:b8:ba:
         df:b0:ef:c2:c8:d8:b3:b3:36:d0:a2:22:30:8a:b8:f9:d2:a8:
         85:4c:44:ff:e3:b3:de:a8:cb:29:01:39:eb:c9:d0:ae:65:09:
         d5:de:4e:4c:63:23:17:7f:79:a5:aa:d5:77:4f:fb:4d:2f:c2:
         4e:83:98:ec:39:9a:6d:9f:2d:14:10:da:65:c8:e4:90:f9:6c:
         bc:1f:bd:fc:f7:d6:9c:f9:de:d3:06:2d:09:cc:96:1f:ca:42:
         3a:1c:2a:3c:f2:8b:8f:ce:f0:c0:c8:35:75:fb:ae:97:da:3e:
         e7:3b:b5:24:b7:76:a1:f4:cc:6c:a9:a2:63:1c:ff:b4:1b:e7:
         94:dc:46:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC55PovjiQlldfwzuq9D7/u669bswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzN0ZGQ0MxRDYxNUMxNkVGMTI5OEEzNDQzNTg3RkJG
NjM2MUVFNjAeFw0yMzA5MTkxMjQ3MThaFw0yNDA5MTcxMjUyMThaMDMxMTAvBgNV
BAMTKDcwRjBCQTVFNzYzNzRFOTEyRjlGMUY3RDAxNTYzRDIwRkMyNkVGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDR6leiGmsLt8QPHeICGSqurfB
C0X/ZdSYbhd3L2/1vSh8N+4Hb0YN9DkYrWEFo/1nw28hDOa/TWoxXDzvC5LSFO1y
XotjzICFPkq2UAL0FPKr9VNzXMlzYdCwCB1a22RG4SKO3U2XnVzlGqmOn0yIJgaV
AGYMiIFo9akyc3/BFf5jZnS/bGnrSGqn56i/TDeepM2Xa1lcOOJpSNo1R3JVdnyu
nahVdUmgcVtlKD/mlqU7A8s4j/yr48RuMjA05HFZIVPbLwC0nDkPCHkcoQLvRUxk
gs6fkMUq462eJ7lIxjx2ccq/yZVScmjb9gvRr4pjI33FWW+C8+m87qU9YFUVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcPC6XnY3TpEvnx99AVY9IPwm7wIwHwYDVR0j
BBgwFoAUfDf/zB1hXBbvEpijRDWH+/Y2HuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN
SDcvMC83QzM3RkZDQzFENjE1QzE2RUYxMjk4QTM0NDM1ODdGQkY2MzYxRUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDMzdGRkNDMUQ2MTVDMTZF
RjEyOThBMzQ0MzU4N0ZCRjYzNjFFRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNU1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAv
MzEzNzMwMmUzODMzMmUzMjMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlPSMA0GCSqGSIb3DQEBCwUAA4IBAQAriOR5+hXg
4q/xdoZCFN7jgMaxRhL2sWPsqc9lhVtmx9W5sP+yDHVH80xfHsYyOsWj+4IYwox/
hHxdZ1wWuHzXtrk8DLQ8v4xfiB9tqO1JYg0hy6GY8ZLaow8TBNxM9XLG6zbdQDO6
YF8Z6/xL3yTjvkTRQKgBxPt8g1V+uLrfsO/CyNizszbQoiIwirj50qiFTET/47Pe
qMspATnrydCuZQnV3k5MYyMXf3mlqtV3T/tNL8JOg5jsOZptny0UENplyOSQ+Wy8
H73899ac+d7TBi0JzJYfykI6HCo88ouPzvDAyDV1+66X2j7nO7Ukt3ah9MxsqaJj
HP+0G+eU3Ea3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org