Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32322d3234203d3e203631393031.roa (raw, json)
Hash identifier:          mS1+jHWaXJV/T5AO+hMLI4SQtUmaJlhLY/tvwUkRgDc=
Subject key identifier:   9E:A9:E4:E8:B9:E9:43:11:C8:F1:F3:05:29:45:2B:40:5C:D2:94:BD
Certificate issuer:       /CN=0257CBD843A248AFF657DA292BC180FA6D42C4D9
Certificate serial:       75D50386325F90F285E13BF3570929BA9C3304C2
Authority key identifier: 02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa
Signing time:             Mon 05 Sep 2022 17:56:33 +0000
ROA not before:           Mon 05 Sep 2022 17:51:33 +0000
ROA not after:            Mon 04 Sep 2023 17:56:33 +0000
asID:                     61901
IP address blocks:        170.254.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d5:03:86:32:5f:90:f2:85:e1:3b:f3:57:09:29:ba:9c:33:04:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257CBD843A248AFF657DA292BC180FA6D42C4D9
        Validity
            Not Before: Sep  5 17:51:33 2022 GMT
            Not After : Sep  4 17:56:33 2023 GMT
        Subject: CN=9EA9E4E8B9E94311C8F1F30529452B405CD294BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:91:b0:f8:57:b3:e7:d9:70:0b:60:bb:44:
                    e5:e0:61:83:08:8f:0d:b4:d6:4a:d1:aa:88:c7:a3:
                    ab:50:11:e6:ed:c1:a3:ea:3a:8f:bc:63:57:c7:eb:
                    30:e3:0d:38:33:ad:2e:ad:4a:ae:74:67:1d:df:ed:
                    49:a3:96:75:93:39:06:82:17:4a:60:7d:8f:3f:2f:
                    01:e2:e8:0b:fa:17:d3:43:c4:89:af:4f:a1:f9:3f:
                    8b:78:d0:54:50:09:fb:79:e7:d3:43:6d:1b:be:49:
                    8b:cb:23:ce:a0:aa:2c:19:86:ef:dc:b4:39:d6:5c:
                    c9:54:5b:aa:f3:c1:7d:84:cb:26:fa:95:5f:dc:5f:
                    3e:ce:2e:70:3e:63:15:e4:ac:5c:35:05:c4:fe:87:
                    55:71:32:93:d6:a3:23:2a:d3:e3:8b:6c:bd:04:fa:
                    3d:9a:6e:48:20:d8:d7:09:6b:c8:2b:34:2a:6b:ff:
                    58:6e:f2:ea:f6:29:83:da:ab:1a:5e:08:91:46:64:
                    83:48:76:d5:c3:b6:a3:52:0e:77:a6:97:b5:dd:86:
                    dc:6e:41:8a:0c:56:1a:c9:8d:5a:aa:48:72:bb:fe:
                    84:55:a4:9c:a4:95:45:9c:25:70:0c:c0:ec:ac:3c:
                    05:ab:82:e7:d2:ed:30:80:78:63:43:f7:8b:bc:55:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:E4:E8:B9:E9:43:11:C8:F1:F3:05:29:45:2B:40:5C:D2:94:BD
            X509v3 Authority Key Identifier:
                keyid:02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:70:c4:f9:90:29:3e:15:ac:dd:f1:82:ee:cc:71:2c:b1:26:
         87:52:39:9c:b4:a4:cb:4a:45:da:37:b7:94:71:51:b9:91:36:
         6f:20:6b:d4:28:42:37:9d:0b:44:56:9b:bb:01:f2:6b:ce:72:
         b0:5a:fb:0b:24:83:4d:3e:1c:99:dc:f3:82:9a:03:28:53:c5:
         1a:53:c0:ca:ed:45:c2:39:d1:d9:ca:a6:f9:c1:fe:4c:e4:72:
         38:1f:3e:57:ca:c9:ab:87:c3:97:36:92:a3:1b:06:b9:21:8c:
         f1:3e:59:59:6c:0e:0d:55:60:59:c6:0e:6d:69:43:1c:63:40:
         e6:87:7e:1e:e3:dc:1c:fc:66:2c:5b:fb:6a:af:76:30:5d:dc:
         84:73:26:95:91:21:59:30:cb:39:4e:b9:58:7a:7a:23:e0:8d:
         fe:64:da:69:d9:7d:ba:b4:1e:13:43:52:54:1a:1e:2b:7a:51:
         54:6b:bc:5e:4c:3e:8a:72:b8:50:f8:71:3a:2c:f1:df:dc:a9:
         24:66:af:0c:b3:88:a9:a2:d2:a9:96:fb:1d:78:5f:cc:f0:91:
         73:cd:85:36:44:42:c2:55:80:ef:04:87:66:e8:70:0a:fa:10:
         84:b1:f9:20:84:53:5c:73:cc:56:5d:ca:b0:c3:c7:d9:d0:22:
         1f:c9:a3:6b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUddUDhjJfkPKF4TvzVwkpupwzBMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI1N0NCRDg0M0EyNDhBRkY2NTdEQTI5MkJDMTgwRkE2
RDQyQzREOTAeFw0yMjA5MDUxNzUxMzNaFw0yMzA5MDQxNzU2MzNaMDMxMTAvBgNV
BAMTKDlFQTlFNEU4QjlFOTQzMTFDOEYxRjMwNTI5NDUyQjQwNUNEMjk0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJa5Gw+Fez59lwC2C7ROXgYYMI
jw201krRqojHo6tQEebtwaPqOo+8Y1fH6zDjDTgzrS6tSq50Zx3f7UmjlnWTOQaC
F0pgfY8/LwHi6Av6F9NDxImvT6H5P4t40FRQCft559NDbRu+SYvLI86gqiwZhu/c
tDnWXMlUW6rzwX2Eyyb6lV/cXz7OLnA+YxXkrFw1BcT+h1VxMpPWoyMq0+OLbL0E
+j2abkgg2NcJa8grNCpr/1hu8ur2KYPaqxpeCJFGZINIdtXDtqNSDneml7Xdhtxu
QYoMVhrJjVqqSHK7/oRVpJyklUWcJXAMwOysPAWrgufS7TCAeGND94u8VcuDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnqnk6LnpQxHI8fMFKUUrQFzSlL0wHwYDVR0j
BBgwFoAUAlfL2EOiSK/2V9opK8GA+m1CxNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC8wMjU3Q0JEODQzQTI0OEFGRjY1N0RBMjkyQkMxODBGQTZENDJDNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyNTdDQkQ4NDNBMjQ4QUZG
NjU3REEyOTJCQzE4MEZBNkQ0MkM0RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxTFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzAv
MzEzNzMwMmUzMjM1MzQyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqv40MA0GCSqGSIb3DQEBCwUAA4IBAQBicMT5kCk+
Fazd8YLuzHEssSaHUjmctKTLSkXaN7eUcVG5kTZvIGvUKEI3nQtEVpu7AfJrznKw
WvsLJINNPhyZ3POCmgMoU8UaU8DK7UXCOdHZyqb5wf5M5HI4Hz5Xysmrh8OXNpKj
Gwa5IYzxPllZbA4NVWBZxg5taUMcY0Dmh34e49wc/GYsW/tqr3YwXdyEcyaVkSFZ
MMs5TrlYenoj4I3+ZNpp2X26tB4TQ1JUGh4relFUa7xeTD6KcrhQ+HE6LPHf3Kkk
Zq8Ms4ipotKplvsdeF/M8JFzzYU2RELCVYDvBIdm6HAK+hCEsfkghFNcc8xWXcqw
w8fZ0CIfyaNr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org