Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e203238323230.roa
File:                     3137302e3135302e3131322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          8Crf3EIdv6CqElhGquCWsoY+yNXnAtnI42HJzf/y1Wo=
Subject key identifier:   53:AF:56:23:00:8C:F7:99:7A:B6:8C:32:84:92:DF:AF:3A:E2:28:16
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       4419080194EB0D5544CD964F225F7117142F7EB4
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:02:06 +0000
ROA not before:           Fri 16 Dec 2022 19:57:06 +0000
ROA not after:            Fri 15 Dec 2023 20:02:06 +0000
asID:                     28220
IP address blocks:        170.150.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:19:08:01:94:eb:0d:55:44:cd:96:4f:22:5f:71:17:14:2f:7e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:57:06 2022 GMT
            Not After : Dec 15 20:02:06 2023 GMT
        Subject: CN=53AF5623008CF7997AB68C328492DFAF3AE22816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:e7:3a:9b:c4:d0:99:81:a7:5d:a7:f6:56:
                    41:d1:4f:86:0e:d6:d8:bd:58:ca:94:e7:35:df:d1:
                    7e:47:36:5c:a3:19:d1:cf:3a:27:26:0f:d0:a2:8a:
                    09:51:6f:37:e8:20:8d:c9:78:b4:b7:95:a5:17:41:
                    d1:9d:81:ab:a9:ce:0b:33:c8:1e:10:e4:4d:8a:75:
                    60:74:94:0d:da:32:eb:f0:69:ee:60:26:3c:2d:55:
                    45:fe:93:12:df:d4:5d:48:af:1b:1b:fe:c8:a3:16:
                    bc:c4:ae:1a:c7:da:da:21:21:a7:3b:76:bb:3d:4e:
                    cd:32:9d:1e:18:d5:8f:64:df:19:47:b3:48:db:39:
                    42:d1:f2:07:ef:a0:02:85:70:7c:c9:82:0f:57:02:
                    0a:43:47:60:4a:26:0b:f1:b8:b0:4c:7b:4b:60:02:
                    65:66:6e:ce:38:21:97:8d:0b:56:2a:f5:60:64:0c:
                    c7:ac:15:44:02:2a:2f:e6:c6:65:7b:af:ba:7c:d4:
                    af:ab:a4:81:bc:cd:ba:aa:ad:75:9f:2d:fe:cc:bb:
                    bd:7c:44:9b:74:8a:87:73:ce:17:3d:85:c9:47:81:
                    1a:f9:39:d8:fc:cb:45:93:6f:4e:63:25:c4:37:ff:
                    3a:20:ea:44:aa:ab:7d:53:1f:c7:b2:49:82:9a:ea:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AF:56:23:00:8C:F7:99:7A:B6:8C:32:84:92:DF:AF:3A:E2:28:16
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:d4:21:39:d9:7a:8d:24:e6:ea:91:a6:fd:25:c7:88:2a:
         ef:ef:fe:22:c9:06:20:ea:8a:3e:16:a0:b6:e6:d4:91:ee:74:
         a5:93:0b:80:29:a0:d2:19:84:bd:85:f1:40:1b:7c:9a:8e:04:
         f7:07:50:db:6f:10:af:de:4a:2e:40:10:a4:95:09:a2:3b:40:
         95:00:40:fc:e7:26:96:9a:3a:03:69:1a:22:f3:b9:94:18:ce:
         63:eb:2f:bf:b8:fe:c0:35:4b:35:f8:9e:23:27:d0:30:37:0f:
         98:3c:ad:b4:7c:b4:f9:ca:fd:1a:ff:1f:04:59:26:68:87:70:
         9d:4d:1f:82:d3:8b:9b:43:ae:34:22:6e:bb:e5:46:0a:bb:bb:
         3b:6c:1c:10:4e:e3:d4:44:d8:df:b5:6a:c4:24:0a:63:f2:27:
         63:c1:36:4e:51:b9:e1:a6:af:9f:e5:53:34:c7:8f:a4:b9:c7:
         0c:44:6b:e7:a1:1f:0a:7f:3c:a5:50:c7:5f:51:9b:f0:bb:6e:
         90:d9:8f:52:62:f2:53:2e:5f:65:f5:b8:c9:e8:b5:a9:15:6e:
         a9:be:b0:71:7f:df:1c:e8:e9:f2:2a:64:86:e8:51:a9:61:31:
         b6:4e:6a:f1:85:c3:41:88:14:d0:18:cd:a0:aa:1f:8e:9f:d7:
         51:ef:cc:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURBkIAZTrDVVEzZZPIl9xFxQvfrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFNTREMTQ5NzMyMUMzNjVGMjhENTM5RjZGNEY4NUQy
OEYyQjhBNjAeFw0yMjEyMTYxOTU3MDZaFw0yMzEyMTUyMDAyMDZaMDMxMTAvBgNV
BAMTKDUzQUY1NjIzMDA4Q0Y3OTk3QUI2OEMzMjg0OTJERkFGM0FFMjI4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOuc6m8TQmYGnXaf2VkHRT4YO
1ti9WMqU5zXf0X5HNlyjGdHPOicmD9CiiglRbzfoII3JeLS3laUXQdGdgaupzgsz
yB4Q5E2KdWB0lA3aMuvwae5gJjwtVUX+kxLf1F1Irxsb/sijFrzErhrH2tohIac7
drs9Ts0ynR4Y1Y9k3xlHs0jbOULR8gfvoAKFcHzJgg9XAgpDR2BKJgvxuLBMe0tg
AmVmbs44IZeNC1Yq9WBkDMesFUQCKi/mxmV7r7p81K+rpIG8zbqqrXWfLf7Mu718
RJt0iodzzhc9hclHgRr5Odj8y0WTb05jJcQ3/zog6kSqq31TH8eySYKa6v9ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU69WIwCM95l6towyhJLfrzriKBYwHwYDVR0j
BBgwFoAUjuVNFJcyHDZfKNU59vT4XSjyuKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC84RUU1NEQxNDk3MzIxQzM2NUYyOEQ1MzlGNkY0Rjg1RDI4RjJCOEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFRTU0RDE0OTczMjFDMzY1
RjI4RDUzOUY2RjRGODVEMjhGMkI4QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzNzMwMmUzMTM1MzAyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqlnAwDQYJKoZIhvcNAQELBQADggEBAJcu1CE5
2XqNJObqkab9JceIKu/v/iLJBiDqij4WoLbm1JHudKWTC4ApoNIZhL2F8UAbfJqO
BPcHUNtvEK/eSi5AEKSVCaI7QJUAQPznJpaaOgNpGiLzuZQYzmPrL7+4/sA1SzX4
niMn0DA3D5g8rbR8tPnK/Rr/HwRZJmiHcJ1NH4LTi5tDrjQibrvlRgq7uztsHBBO
49RE2N+1asQkCmPyJ2PBNk5RueGmr5/lUzTHj6S5xwxEa+ehHwp/PKVQx19Rm/C7
bpDZj1Ji8lMuX2X1uMnotakVbqm+sHF/3xzo6fIqZIboUalhMbZOavGFw0GIFNAY
zaCqH46f11HvzCU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org