Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32332d3233203d3e20323636343237.roa
File:                     3137302e38312e3134382e302f32332d3233203d3e20323636343237.roa (raw, json)
Hash identifier:          ZWdwrHYOlvsz6Gnhm8tiCWUY2ydQw2kXLsCNAaYdJII=
Subject key identifier:   BA:97:DC:35:70:BF:82:4F:1A:B2:3C:0C:CF:85:4E:A0:96:0C:6C:88
Certificate issuer:       /CN=721116431679FAB6BE0B0061F03C820E31FF5333
Certificate serial:       7596A0EB03BE96A22811975AF81E89165C58A207
Authority key identifier: 72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32332d3233203d3e20323636343237.roa
Signing time:             Tue 07 Nov 2023 13:02:36 +0000
ROA not before:           Tue 07 Nov 2023 12:57:36 +0000
ROA not after:            Tue 05 Nov 2024 13:02:36 +0000
asID:                     266427
IP address blocks:        170.81.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:96:a0:eb:03:be:96:a2:28:11:97:5a:f8:1e:89:16:5c:58:a2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721116431679FAB6BE0B0061F03C820E31FF5333
        Validity
            Not Before: Nov  7 12:57:36 2023 GMT
            Not After : Nov  5 13:02:36 2024 GMT
        Subject: CN=BA97DC3570BF824F1AB23C0CCF854EA0960C6C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:0b:89:28:f3:a4:eb:ef:fe:74:39:4e:71:
                    24:f1:8e:5c:6f:a0:7b:63:ac:2d:b8:c8:a3:a5:87:
                    28:da:40:f5:28:7a:86:b7:1e:82:9c:78:73:71:a4:
                    93:49:27:b0:35:d9:1a:c7:f3:1a:7e:5c:b6:d6:81:
                    4a:06:a3:0a:33:9d:8c:00:04:5e:fc:ff:b6:a5:a3:
                    87:c3:0b:49:23:8c:e8:3f:1f:fa:8b:8d:36:e7:66:
                    99:44:ab:51:6a:52:77:53:02:bc:07:14:11:e8:f0:
                    d0:73:07:f4:63:85:46:f1:34:db:ca:2a:54:c0:30:
                    b2:15:84:d8:63:ae:98:15:e3:c9:d7:8a:74:50:6d:
                    6d:fe:9d:5f:7c:2e:20:62:b1:7f:5a:ec:69:94:d5:
                    ce:2a:20:20:d1:f8:53:9b:f3:af:f7:55:91:f7:20:
                    02:60:29:3b:bd:d8:e1:48:da:6f:6b:92:bf:0d:e8:
                    96:d3:0f:fe:2e:0e:bc:e0:3d:f8:ae:52:dc:7b:30:
                    3b:0a:90:b9:94:6c:fa:fe:47:5f:df:54:a7:fb:ad:
                    e3:f1:21:80:b8:29:7b:51:40:62:15:07:fc:78:2d:
                    d6:c6:42:40:4f:47:16:b8:43:aa:2e:e3:3b:b3:82:
                    35:1f:7f:36:a8:95:57:f2:bb:c8:f6:b2:f2:56:ba:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:DC:35:70:BF:82:4F:1A:B2:3C:0C:CF:85:4E:A0:96:0C:6C:88
            X509v3 Authority Key Identifier:
                keyid:72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/721116431679FAB6BE0B0061F03C820E31FF5333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3134382e302f32332d3233203d3e20323636343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:59:e8:2d:e4:87:e0:54:c6:4b:ef:2d:05:49:a0:db:0c:a9:
         f6:33:f3:b2:77:0e:fc:67:2b:35:0a:f4:a3:28:90:bf:f9:30:
         95:46:a9:6b:9f:de:68:ec:a1:23:a3:84:ab:ff:9e:a0:36:28:
         58:c6:6c:31:f2:06:82:37:27:85:47:86:f2:3c:40:e0:63:18:
         8b:0d:b6:80:a2:68:20:0e:23:e3:c6:6c:f7:34:7a:22:87:8a:
         9a:91:d7:3a:2d:04:53:ce:0c:c6:6d:8d:61:c7:02:2b:f9:1b:
         a1:84:60:4b:7a:72:4a:2e:79:40:a1:6b:c3:68:b6:fc:6e:40:
         b3:c5:6e:50:33:cb:e2:c1:cd:c5:32:de:55:c4:a7:7b:2b:4c:
         f3:69:a7:11:3d:f1:31:6f:c5:99:41:8f:bb:67:84:9d:86:4c:
         76:73:14:84:12:29:c3:3d:ad:0c:d8:03:e9:3b:9e:cf:4a:ac:
         66:b4:23:7a:44:45:c2:44:9a:06:63:17:45:25:68:4a:92:33:
         9b:a9:12:22:26:e7:76:ed:bf:36:0d:11:ab:c5:9b:3f:b1:ca:
         77:bf:97:35:81:4a:38:be:36:ef:36:1d:ba:75:0f:07:fb:1a:
         28:c6:8b:02:bd:5a:2b:0e:fd:a6:04:79:fa:97:f1:f4:77:6e:
         89:8e:79:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdZag6wO+lqIoEZda+B6JFlxYogcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIxMTE2NDMxNjc5RkFCNkJFMEIwMDYxRjAzQzgyMEUz
MUZGNTMzMzAeFw0yMzExMDcxMjU3MzZaFw0yNDExMDUxMzAyMzZaMDMxMTAvBgNV
BAMTKEJBOTdEQzM1NzBCRjgyNEYxQUIyM0MwQ0NGODU0RUEwOTYwQzZDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFguJKPOk6+/+dDlOcSTxjlxv
oHtjrC24yKOlhyjaQPUoeoa3HoKceHNxpJNJJ7A12RrH8xp+XLbWgUoGowoznYwA
BF78/7alo4fDC0kjjOg/H/qLjTbnZplEq1FqUndTArwHFBHo8NBzB/RjhUbxNNvK
KlTAMLIVhNhjrpgV48nXinRQbW3+nV98LiBisX9a7GmU1c4qICDR+FOb86/3VZH3
IAJgKTu92OFI2m9rkr8N6JbTD/4uDrzgPfiuUtx7MDsKkLmUbPr+R1/fVKf7rePx
IYC4KXtRQGIVB/x4LdbGQkBPRxa4Q6ou4zuzgjUffzaolVfyu8j2svJWug81AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUupfcNXC/gk8asjwMz4VOoJYMbIgwHwYDVR0j
BBgwFoAUchEWQxZ5+ra+CwBh8DyCDjH/UzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpuNzZ3WjgxQm5la2hQSG1XRnc2NU1TNDU3Nzd1c3VoeXNRQlFRWTVD
OHEvMC83MjExMTY0MzE2NzlGQUI2QkUwQjAwNjFGMDNDODIwRTMxRkY1MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyMTExNjQzMTY3OUZBQjZC
RTBCMDA2MUYwM0M4MjBFMzFGRjUzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6bjc2d1o4MUJuZWtoUEhtV0Z3NjVNUzQ1Nzc3dXN1aHlzUUJRUVk1QzhxLzAv
MzEzNzMwMmUzODMxMmUzMTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqUZQwDQYJKoZIhvcNAQELBQADggEBAENZ6C3k
h+BUxkvvLQVJoNsMqfYz87J3DvxnKzUK9KMokL/5MJVGqWuf3mjsoSOjhKv/nqA2
KFjGbDHyBoI3J4VHhvI8QOBjGIsNtoCiaCAOI+PGbPc0eiKHipqR1zotBFPODMZt
jWHHAiv5G6GEYEt6ckoueUCha8NotvxuQLPFblAzy+LBzcUy3lXEp3srTPNppxE9
8TFvxZlBj7tnhJ2GTHZzFIQSKcM9rQzYA+k7ns9KrGa0I3pERcJEmgZjF0UlaEqS
M5upEiIm53btvzYNEavFmz+xyne/lzWBSji+Nu82Hbp1Dwf7GijGiwK9WisO/aYE
efqX8fR3bomOeRk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org