Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e203238323230.roa
File:                     3137302e3135302e3230342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          xQ3oTtWojvijW5VQz6q57bFIZIP0rTNXl5/lAVEnYls=
Subject key identifier:   0E:14:AE:9F:A3:69:61:19:9B:E1:B5:25:56:58:28:ED:E8:07:A7:15
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       043FECECAE588AA8D59721BAD1AB511D1435EBFF
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:02:43 +0000
ROA not before:           Fri 16 Dec 2022 19:57:43 +0000
ROA not after:            Fri 15 Dec 2023 20:02:43 +0000
asID:                     28220
IP address blocks:        170.150.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:ec:ec:ae:58:8a:a8:d5:97:21:ba:d1:ab:51:1d:14:35:eb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:57:43 2022 GMT
            Not After : Dec 15 20:02:43 2023 GMT
        Subject: CN=0E14AE9FA36961199BE1B525565828EDE807A715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:b8:46:21:5b:a7:40:5a:f1:ec:c0:3e:34:
                    3a:ae:c1:c7:2f:2a:55:d6:55:ff:7c:92:8d:a9:7f:
                    04:2d:6d:31:58:8a:82:39:5f:6e:d5:ee:73:b1:c3:
                    7d:11:8d:69:46:13:28:26:56:55:53:b0:bf:22:3b:
                    4f:f5:1e:4d:85:fb:3d:80:53:d4:c3:30:96:03:48:
                    4d:b3:0b:24:3c:ac:0f:f8:d6:52:f2:22:a2:25:04:
                    e9:2e:56:8c:a8:03:88:e1:fb:a9:17:c8:e3:8f:52:
                    bc:0d:ca:55:45:d3:44:58:65:28:00:8f:4c:62:55:
                    39:e2:cd:87:77:e6:6f:96:95:bf:fb:8a:5e:0b:a1:
                    c8:ee:fe:22:e3:85:ce:f5:e3:2e:02:b2:40:74:32:
                    af:2e:38:d5:d8:47:18:30:3e:6a:97:fe:64:c3:f1:
                    68:cd:ae:80:e9:07:01:98:cf:08:3f:56:e2:7b:dd:
                    fb:97:d4:52:55:be:2b:f0:e5:b8:e8:88:0c:71:76:
                    5a:40:6f:06:8f:13:76:b6:02:0c:6d:f3:e5:a9:60:
                    70:ab:a3:28:73:6f:cc:25:70:61:31:8b:4b:a1:ec:
                    dc:b1:f9:23:35:0e:d2:41:28:87:67:d4:21:55:b2:
                    4c:5d:01:fc:57:75:f8:b9:a8:7d:81:10:54:0b:16:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:AE:9F:A3:69:61:19:9B:E1:B5:25:56:58:28:ED:E8:07:A7:15
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:3a:03:81:6c:5b:37:13:61:e2:89:02:ef:80:78:f7:a9:
         7f:71:4d:7e:46:49:c1:61:1c:8d:f7:10:42:2d:a5:fb:a6:33:
         f7:2f:bc:03:ba:ef:5d:5e:a9:d7:4b:fd:e0:1a:24:71:12:0d:
         30:d7:23:a7:5c:85:1e:ee:dc:1c:28:22:93:e5:8c:16:ad:08:
         e9:9a:b4:1b:ab:25:cc:f8:5a:e2:0b:32:d2:6b:f2:d6:a1:2b:
         77:18:cf:16:5f:bb:40:dd:23:96:28:db:54:77:39:09:2c:ae:
         71:68:dc:bf:80:f8:6c:22:64:6e:4a:93:81:89:0d:7e:8c:74:
         7a:5c:1f:0a:13:2a:56:01:4d:5b:a2:fd:e8:82:f5:1a:3d:91:
         67:bd:d7:51:ed:df:f3:cc:dc:04:7f:21:18:9a:fc:8c:54:24:
         dd:63:8b:5a:87:17:4b:71:06:37:62:2f:07:98:52:82:a2:44:
         f1:db:0b:68:04:6b:fd:93:6b:8d:1f:12:68:42:22:b8:5a:81:
         c8:e2:64:cf:e3:f5:75:a4:e4:81:28:5f:db:15:b8:b9:1e:6e:
         d1:a9:66:d0:dc:e9:bc:c5:02:3c:6c:3f:b1:a7:8d:5c:cd:0c:
         6a:ad:5d:94:81:c9:1c:70:a4:c4:f3:be:6e:08:1f:8b:a4:ef:
         6c:08:09:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBD/s7K5YiqjVlyG60atRHRQ16/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFNTREMTQ5NzMyMUMzNjVGMjhENTM5RjZGNEY4NUQy
OEYyQjhBNjAeFw0yMjEyMTYxOTU3NDNaFw0yMzEyMTUyMDAyNDNaMDMxMTAvBgNV
BAMTKDBFMTRBRTlGQTM2OTYxMTk5QkUxQjUyNTU2NTgyOEVERTgwN0E3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQO7hGIVunQFrx7MA+NDquwccv
KlXWVf98ko2pfwQtbTFYioI5X27V7nOxw30RjWlGEygmVlVTsL8iO0/1Hk2F+z2A
U9TDMJYDSE2zCyQ8rA/41lLyIqIlBOkuVoyoA4jh+6kXyOOPUrwNylVF00RYZSgA
j0xiVTnizYd35m+Wlb/7il4Locju/iLjhc714y4CskB0Mq8uONXYRxgwPmqX/mTD
8WjNroDpBwGYzwg/VuJ73fuX1FJVvivw5bjoiAxxdlpAbwaPE3a2Agxt8+WpYHCr
oyhzb8wlcGExi0uh7Nyx+SM1DtJBKIdn1CFVskxdAfxXdfi5qH2BEFQLFsFzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDhSun6NpYRmb4bUlVlgo7egHpxUwHwYDVR0j
BBgwFoAUjuVNFJcyHDZfKNU59vT4XSjyuKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC84RUU1NEQxNDk3MzIxQzM2NUYyOEQ1MzlGNkY0Rjg1RDI4RjJCOEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFRTU0RDE0OTczMjFDMzY1
RjI4RDUzOUY2RjRGODVEMjhGMkI4QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqlswwDQYJKoZIhvcNAQELBQADggEBABisOgOB
bFs3E2HiiQLvgHj3qX9xTX5GScFhHI33EEItpfumM/cvvAO6711eqddL/eAaJHES
DTDXI6dchR7u3BwoIpPljBatCOmatBurJcz4WuILMtJr8tahK3cYzxZfu0DdI5Yo
21R3OQksrnFo3L+A+GwiZG5Kk4GJDX6MdHpcHwoTKlYBTVui/eiC9Ro9kWe911Ht
3/PM3AR/IRia/IxUJN1ji1qHF0txBjdiLweYUoKiRPHbC2gEa/2Ta40fEmhCIrha
gcjiZM/j9XWk5IEoX9sVuLkebtGpZtDc6bzFAjxsP7GnjVzNDGqtXZSByRxwpMTz
vm4IH4uk72wICcQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org