Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33362e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          iOLY5D9DaWmjbwqWm5UTPIuVUax88noiJDffe7/7a6A=
Subject key identifier:   19:98:B3:4A:D2:42:37:64:98:AF:44:08:2B:CA:F2:5C:1F:0B:0B:04
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       24C3E99A5A93C7A7A46BB0F488D2B2D9E5C1627A
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32342d3234203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:34 +0000
ROA not before:           Fri 02 Feb 2024 00:11:34 +0000
ROA not after:            Fri 31 Jan 2025 00:16:34 +0000
asID:                     265181
IP address blocks:        170.233.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c3:e9:9a:5a:93:c7:a7:a4:6b:b0:f4:88:d2:b2:d9:e5:c1:62:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:34 2024 GMT
            Not After : Jan 31 00:16:34 2025 GMT
        Subject: CN=1998B34AD242376498AF44082BCAF25C1F0B0B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:c7:87:4b:62:2c:02:eb:0d:40:c0:71:79:
                    1c:84:78:f1:c8:95:5a:88:91:a2:83:cd:53:4b:d0:
                    c5:43:e9:16:b3:5d:72:62:be:56:37:03:0b:80:fa:
                    f3:71:a2:d5:62:f4:ee:98:4b:88:6c:13:9f:2d:61:
                    0b:4f:09:81:ac:13:5b:55:70:c3:30:09:2f:65:8c:
                    27:93:13:05:cb:3a:ad:d8:a8:a8:8e:8d:8c:1c:c9:
                    7d:a7:bc:c2:cc:c6:f6:18:bb:91:a7:20:d5:46:8b:
                    37:4e:dd:32:62:65:0a:6b:8f:5d:22:06:0b:8e:2e:
                    0f:78:53:eb:ad:2d:52:36:fe:b3:6d:0b:f5:ca:ab:
                    1e:1c:38:78:bc:87:37:34:11:df:67:ff:c7:c9:c8:
                    06:53:bd:d2:6c:5a:03:f4:3b:95:3b:ef:0b:60:15:
                    38:20:7d:25:2a:b0:77:86:85:bc:15:44:a0:59:79:
                    cc:88:3b:ae:e7:8f:c9:e6:8a:b6:49:75:41:b1:49:
                    a5:f0:3d:ee:96:6b:cc:e5:13:74:1d:0f:e8:fd:5c:
                    3c:39:b3:48:a6:e7:6f:3b:dc:b4:54:7a:07:fb:3f:
                    cd:52:a6:8c:be:5b:e6:c1:37:9d:b0:55:ce:ff:f1:
                    a9:9f:7c:32:7e:80:6e:a3:24:83:59:f5:5f:87:f4:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:B3:4A:D2:42:37:64:98:AF:44:08:2B:CA:F2:5C:1F:0B:0B:04
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:42:59:7e:82:9a:f8:6f:21:ae:78:be:e5:9b:94:e9:1f:
         33:02:58:2b:84:29:9d:82:e1:87:5f:9f:94:f6:15:00:8c:11:
         7d:9b:5d:ba:17:f3:39:cd:52:ae:c8:cc:d0:90:15:1f:ba:ac:
         8d:30:d4:ea:26:d7:20:eb:b6:c5:9f:13:14:04:65:74:c4:38:
         52:e7:25:4b:9a:9f:d0:21:0e:24:3c:8b:0e:44:d3:74:e1:d1:
         9f:16:8d:d0:f6:94:55:17:fd:a3:f9:4a:3b:34:9d:3c:db:3f:
         6f:ea:28:72:4c:65:16:9c:ce:b4:b6:00:a9:4a:b5:75:95:67:
         ed:3b:a5:fe:d4:b7:18:7a:cd:5b:99:c1:fb:c2:b5:c3:5f:fc:
         22:0f:c6:ed:0c:a1:9d:13:8e:cd:13:e7:a3:3a:1c:2a:00:60:
         8a:41:2b:72:9a:15:82:12:a4:cd:86:2b:29:0e:56:78:57:b1:
         92:5f:6f:81:17:33:a0:61:03:19:22:a1:ba:91:ce:c0:2c:38:
         1e:29:34:bb:f8:9a:fe:d8:f8:63:2e:a2:ee:7d:3a:cc:4d:c6:
         b9:57:09:1c:ae:4c:3e:25:6c:b3:6e:87:7f:39:f9:66:8e:b6:
         fa:56:b6:fc:e2:41:ea:95:f5:3a:f4:2e:24:10:3e:ae:cf:1b:
         cc:e6:6b:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJMPpmlqTx6eka7D0iNKy2eXBYnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyMjIzQkNBNDRENEU2QUJDRjg2QjBGQUExNzM0QzAz
N0IxMTQ0NTAeFw0yNDAyMDIwMDExMzRaFw0yNTAxMzEwMDE2MzRaMDMxMTAvBgNV
BAMTKDE5OThCMzRBRDI0MjM3NjQ5OEFGNDQwODJCQ0FGMjVDMUYwQjBCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKqMeHS2IsAusNQMBxeRyEePHI
lVqIkaKDzVNL0MVD6RazXXJivlY3AwuA+vNxotVi9O6YS4hsE58tYQtPCYGsE1tV
cMMwCS9ljCeTEwXLOq3YqKiOjYwcyX2nvMLMxvYYu5GnINVGizdO3TJiZQprj10i
BguOLg94U+utLVI2/rNtC/XKqx4cOHi8hzc0Ed9n/8fJyAZTvdJsWgP0O5U77wtg
FTggfSUqsHeGhbwVRKBZecyIO67nj8nmirZJdUGxSaXwPe6Wa8zlE3QdD+j9XDw5
s0im52873LRUegf7P81Spoy+W+bBN52wVc7/8amffDJ+gG6jJINZ9V+H9MtXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGZizStJCN2SYr0QIK8ryXB8LCwQwHwYDVR0j
BBgwFoAU1iIjvKRNTmq8+GsPqhc0wDexFEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtoNG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5
d3cvMC9ENjIyMjNCQ0E0NEQ0RTZBQkNGODZCMEZBQTE3MzRDMDM3QjExNDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2MjIyM0JDQTQ0RDRFNkFC
Q0Y4NkIwRkFBMTczNEMwMzdCMTE0NDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhraDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzAv
MzEzNzMwMmUzMjMzMzMyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq6SQwDQYJKoZIhvcNAQELBQADggEBAD6DQll+
gpr4byGueL7lm5TpHzMCWCuEKZ2C4Ydfn5T2FQCMEX2bXboX8znNUq7IzNCQFR+6
rI0w1Oom1yDrtsWfExQEZXTEOFLnJUuan9AhDiQ8iw5E03Th0Z8WjdD2lFUX/aP5
Sjs0nTzbP2/qKHJMZRaczrS2AKlKtXWVZ+07pf7Utxh6zVuZwfvCtcNf/CIPxu0M
oZ0Tjs0T56M6HCoAYIpBK3KaFYISpM2GKykOVnhXsZJfb4EXM6BhAxkiobqRzsAs
OB4pNLv4mv7Y+GMuou59OsxNxrlXCRyuTD4lbLNuh385+WaOtvpWtvziQeqV9Tr0
LiQQPq7PG8zmaw8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org