Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3137302e3234362e36382e302f32322d3234203d3e20323633333631.roa
File:                     3137302e3234362e36382e302f32322d3234203d3e20323633333631.roa (raw, json)
Hash identifier:          5ELIR/Crsk8Q5/zk4d9gM1U0KGvov6dLR4ajT3jBN4A=
Subject key identifier:   D9:8B:B3:0F:7A:7B:E5:9C:23:FB:DD:96:B2:6E:CC:CD:59:DB:C1:51
Certificate issuer:       /CN=BBD51503988DC6E2131E817A069616041C6B024E
Certificate serial:       3A0B497D2AD24943AFA0F1EAF61F85172B4D5FCC
Authority key identifier: BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD51503988DC6E2131E817A069616041C6B024E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3137302e3234362e36382e302f32322d3234203d3e20323633333631.roa
Signing time:             Tue 18 Apr 2023 12:55:46 +0000
ROA not before:           Tue 18 Apr 2023 12:50:46 +0000
ROA not after:            Tue 16 Apr 2024 12:55:46 +0000
asID:                     263361
IP address blocks:        170.246.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0b:49:7d:2a:d2:49:43:af:a0:f1:ea:f6:1f:85:17:2b:4d:5f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD51503988DC6E2131E817A069616041C6B024E
        Validity
            Not Before: Apr 18 12:50:46 2023 GMT
            Not After : Apr 16 12:55:46 2024 GMT
        Subject: CN=D98BB30F7A7BE59C23FBDD96B26ECCCD59DBC151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:47:a6:3e:87:21:31:6f:bf:71:cd:9d:83:
                    c0:d0:85:09:10:71:90:46:74:fc:94:50:ff:26:f7:
                    eb:bf:c0:e6:ce:65:36:7b:05:6a:64:c0:88:4c:37:
                    ec:a6:3a:13:ad:9d:af:4a:e7:ab:77:e5:b4:58:0f:
                    2d:2d:5f:3a:77:19:f3:fb:53:4b:8a:ec:7f:84:17:
                    e6:4c:73:b7:af:97:66:06:10:9a:fd:c7:06:f4:68:
                    a5:97:4c:96:b9:57:0a:01:09:7e:e3:e4:f0:bb:cf:
                    26:ba:22:05:49:7e:30:08:98:95:f9:8d:86:a5:a5:
                    88:ec:b8:fb:92:a5:35:a3:60:fe:d5:60:73:f6:f0:
                    ad:62:39:d9:f1:52:ad:3a:92:42:03:c9:46:c3:e9:
                    3f:0c:59:47:ec:b8:27:9d:f2:73:2a:c3:7b:1b:ee:
                    dd:78:d9:da:20:95:22:60:c9:e1:ae:fa:85:3f:8c:
                    be:4e:1b:4e:87:1a:94:09:91:07:35:a6:34:0f:1c:
                    f5:04:84:44:e7:01:17:7c:99:78:bc:95:b7:d0:d2:
                    04:49:25:07:99:c6:e9:8e:86:50:27:03:9f:5e:e8:
                    f6:0a:52:f0:e6:7d:e6:36:12:be:65:cf:bf:f1:60:
                    fe:74:96:16:6f:32:f1:0a:19:a3:e9:66:b9:78:1f:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:B3:0F:7A:7B:E5:9C:23:FB:DD:96:B2:6E:CC:CD:59:DB:C1:51
            X509v3 Authority Key Identifier:
                keyid:BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/BBD51503988DC6E2131E817A069616041C6B024E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD51503988DC6E2131E817A069616041C6B024E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3137302e3234362e36382e302f32322d3234203d3e20323633333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:4b:11:f9:fa:1b:d1:16:01:e2:ac:e4:80:d1:f2:75:37:
         7f:8f:8f:32:57:56:61:62:d9:0b:27:08:6d:0d:d6:f9:99:f8:
         17:15:28:22:85:03:2d:6b:d5:35:82:0e:3d:a0:bd:2d:f2:d6:
         34:43:84:1e:47:b9:80:34:3c:2f:19:c4:18:1b:15:a3:24:1d:
         4d:1b:30:03:b0:2c:d4:2f:20:40:8b:1f:71:97:73:08:32:50:
         fc:a8:62:e5:7f:d5:67:1f:49:76:35:69:6d:a7:6f:e5:72:d5:
         4b:78:67:c7:79:af:eb:24:a4:4a:6b:5b:cd:99:78:43:48:38:
         1c:4c:00:d9:09:fb:91:7b:be:3c:fd:0d:f9:99:3b:7f:7d:ee:
         9b:ed:3d:ce:18:f9:62:69:ef:f3:db:d9:81:d0:62:9a:94:1b:
         84:bf:94:28:6b:98:b4:e4:c7:47:83:ab:21:f1:4a:db:d6:f2:
         a0:0d:2c:ec:fa:4c:18:2d:2e:bf:e8:d5:75:dc:a9:b3:f9:91:
         cc:80:90:c6:1a:f2:e9:ba:fb:71:20:42:d9:f5:4e:d7:58:f5:
         04:c3:f3:e1:b6:17:b1:9e:1a:87:46:d0:ff:bd:e9:e8:ea:c7:
         5e:be:08:4b:c0:b4:2f:f4:66:54:0d:73:58:da:2e:a2:27:2e:
         28:d3:02:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOgtJfSrSSUOvoPHq9h+FFytNX8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJENTE1MDM5ODhEQzZFMjEzMUU4MTdBMDY5NjE2MDQx
QzZCMDI0RTAeFw0yMzA0MTgxMjUwNDZaFw0yNDA0MTYxMjU1NDZaMDMxMTAvBgNV
BAMTKEQ5OEJCMzBGN0E3QkU1OUMyM0ZCREQ5NkIyNkVDQ0NENTlEQkMxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uEemPochMW+/cc2dg8DQhQkQ
cZBGdPyUUP8m9+u/wObOZTZ7BWpkwIhMN+ymOhOtna9K56t35bRYDy0tXzp3GfP7
U0uK7H+EF+ZMc7evl2YGEJr9xwb0aKWXTJa5VwoBCX7j5PC7zya6IgVJfjAImJX5
jYalpYjsuPuSpTWjYP7VYHP28K1iOdnxUq06kkIDyUbD6T8MWUfsuCed8nMqw3sb
7t142doglSJgyeGu+oU/jL5OG06HGpQJkQc1pjQPHPUEhETnARd8mXi8lbfQ0gRJ
JQeZxumOhlAnA59e6PYKUvDmfeY2Er5lz7/xYP50lhZvMvEKGaPpZrl4H05LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2YuzD3p75Zwj+92Wsm7MzVnbwVEwHwYDVR0j
BBgwFoAUu9UVA5iNxuITHoF6BpYWBBxrAk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5UOGhGWHRYYnFtWXNnZm9FNTNnUEc1eFVZUFExaVI5c1V3QTZqb0h3
NGcvMC9CQkQ1MTUwMzk4OERDNkUyMTMxRTgxN0EwNjk2MTYwNDFDNkIwMjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCRDUxNTAzOTg4REM2RTIx
MzFFODE3QTA2OTYxNjA0MUM2QjAyNEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOVDhoRlh0WGJxbVlzZ2ZvRTUzZ1BHNXhVWVBRMWlSOXNVd0E2am9IdzRnLzAv
MzEzNzMwMmUzMjM0MzYyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9kQwDQYJKoZIhvcNAQELBQADggEBAFGmSxH5
+hvRFgHirOSA0fJ1N3+PjzJXVmFi2QsnCG0N1vmZ+BcVKCKFAy1r1TWCDj2gvS3y
1jRDhB5HuYA0PC8ZxBgbFaMkHU0bMAOwLNQvIECLH3GXcwgyUPyoYuV/1WcfSXY1
aW2nb+Vy1Ut4Z8d5r+skpEprW82ZeENIOBxMANkJ+5F7vjz9DfmZO3997pvtPc4Y
+WJp7/Pb2YHQYpqUG4S/lChrmLTkx0eDqyHxStvW8qANLOz6TBgtLr/o1XXcqbP5
kcyAkMYa8um6+3EgQtn1TtdY9QTD8+G2F7GeGodG0P+96ejqx16+CEvAtC/0ZlQN
c1jaLqInLijTAnU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org