Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3332203d3e203631373937.roa
File:                     3137302e3234362e3233322e302f32322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          8+uBzExUIouWvqMqHEPNt47IlfSOFGwCm/9an0upfAk=
Subject key identifier:   B4:B1:A4:F2:61:AB:ED:3B:37:35:D4:AE:4C:4B:66:54:DA:C1:E8:42
Certificate issuer:       /CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
Certificate serial:       4DF224CC2989ED4FC0B47C000CCF498CDF336F3B
Authority key identifier: BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3332203d3e203631373937.roa
Signing time:             Thu 31 Aug 2023 14:08:48 +0000
ROA not before:           Thu 31 Aug 2023 14:03:48 +0000
ROA not after:            Thu 29 Aug 2024 14:08:48 +0000
asID:                     61797
IP address blocks:        170.246.232.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:24:cc:29:89:ed:4f:c0:b4:7c:00:0c:cf:49:8c:df:33:6f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Validity
            Not Before: Aug 31 14:03:48 2023 GMT
            Not After : Aug 29 14:08:48 2024 GMT
        Subject: CN=B4B1A4F261ABED3B3735D4AE4C4B6654DAC1E842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ae:19:08:b0:b7:18:88:db:28:89:3d:59:85:
                    a2:7e:6d:40:59:a7:ed:86:69:03:ac:d2:85:98:5d:
                    96:06:0a:53:0b:79:9e:5b:08:8c:89:0b:86:e5:ff:
                    de:68:19:01:d8:fa:35:3c:dd:de:60:01:ed:53:05:
                    cb:33:55:86:7b:25:61:ea:33:fd:ac:e9:de:4d:4e:
                    f5:52:f8:fa:d9:e2:be:b9:86:1d:63:ad:f2:82:df:
                    5c:34:39:e4:3f:54:3a:6c:28:6c:b8:7b:f9:a9:65:
                    7d:c2:dd:fb:cb:66:31:d7:13:c9:47:93:e9:ad:80:
                    07:a1:f3:3e:62:64:d3:3e:45:b8:06:f6:44:af:fd:
                    10:0b:e0:fa:25:9c:9f:50:00:7d:3d:8f:f3:d9:00:
                    46:2e:20:b7:cd:6c:ec:c7:a1:36:30:ef:21:54:b9:
                    c6:a8:6f:68:56:75:bf:00:3d:75:04:94:f2:80:bd:
                    63:30:ec:1a:be:1d:a6:25:46:6f:89:43:b3:d3:0d:
                    a6:45:0d:c3:49:30:f8:f2:f2:50:c8:28:53:28:af:
                    6a:c0:44:e0:27:84:1d:59:2c:8f:db:0e:5a:c7:70:
                    12:0c:4d:b7:93:99:82:e7:71:0f:cc:7f:e6:a0:b4:
                    80:8e:c0:a5:40:91:c1:31:d6:ad:c5:31:c4:8e:b9:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:A4:F2:61:AB:ED:3B:37:35:D4:AE:4C:4B:66:54:DA:C1:E8:42
            X509v3 Authority Key Identifier:
                keyid:BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:ee:94:dd:27:d1:2f:2e:d9:fe:57:31:d6:41:4b:15:37:
         be:0b:f3:90:d5:1d:cd:bf:56:0d:34:52:ec:99:b0:41:57:91:
         6e:df:df:ff:45:ca:d9:65:5b:05:18:0a:ea:1a:e5:59:f7:a3:
         82:f3:e5:5b:24:de:a3:fd:d8:4b:62:5c:0d:07:33:f4:52:d9:
         f8:15:2c:f6:22:43:1b:42:5c:68:51:98:97:53:a2:24:b5:50:
         09:48:fb:08:bb:fb:4c:2b:78:7c:2d:c5:db:91:3b:d8:e3:3e:
         ae:8f:64:20:20:cb:2d:b4:07:5b:8c:f8:4b:1c:6e:b7:50:71:
         05:ca:2c:99:08:50:00:95:09:25:1e:69:3f:41:eb:95:97:99:
         f7:ae:ba:96:75:65:f4:cb:0b:6a:4f:6d:0c:fd:f2:cb:94:aa:
         b2:6e:b2:a8:36:63:02:05:97:83:d2:c4:2e:37:c5:ee:b9:ab:
         21:d4:70:2b:5b:06:48:b7:5d:18:6c:b9:e3:0d:40:9b:82:95:
         86:80:b6:05:b5:82:9d:06:77:c8:23:41:72:21:14:a4:15:2a:
         a1:8c:93:d2:d6:29:d0:f3:c5:13:51:0d:2b:87:8c:80:82:83:
         41:f1:fe:de:b6:08:23:69:7e:97:21:50:1a:ef:46:e8:a8:54:
         af:03:fa:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTfIkzCmJ7U/AtHwADM9JjN8zbzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDNzYzNDk0MEUwNjdBNDg2NEVEMUMzOTlBODAyRjAz
MjBDRDRBNDAeFw0yMzA4MzExNDAzNDhaFw0yNDA4MjkxNDA4NDhaMDMxMTAvBgNV
BAMTKEI0QjFBNEYyNjFBQkVEM0IzNzM1RDRBRTRDNEI2NjU0REFDMUU4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprhkIsLcYiNsoiT1ZhaJ+bUBZ
p+2GaQOs0oWYXZYGClMLeZ5bCIyJC4bl/95oGQHY+jU83d5gAe1TBcszVYZ7JWHq
M/2s6d5NTvVS+PrZ4r65hh1jrfKC31w0OeQ/VDpsKGy4e/mpZX3C3fvLZjHXE8lH
k+mtgAeh8z5iZNM+RbgG9kSv/RAL4PolnJ9QAH09j/PZAEYuILfNbOzHoTYw7yFU
ucaob2hWdb8APXUElPKAvWMw7Bq+HaYlRm+JQ7PTDaZFDcNJMPjy8lDIKFMor2rA
ROAnhB1ZLI/bDlrHcBIMTbeTmYLncQ/Mf+agtICOwKVAkcEx1q3FMcSOuQ4LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtLGk8mGr7Ts3NdSuTEtmVNrB6EIwHwYDVR0j
BBgwFoAUvcdjSUDgZ6SGTtHDmagC8DIM1KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG
SjEvMC9CREM3NjM0OTQwRTA2N0E0ODY0RUQxQzM5OUE4MDJGMDMyMENENEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JEQzc2MzQ5NDBFMDY3QTQ4
NjRFRDFDMzk5QTgwMkYwMzIwQ0Q0QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv
MzEzNzMwMmUzMjM0MzYyZTMyMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9ugwDQYJKoZIhvcNAQELBQADggEBAJDF7pTd
J9EvLtn+VzHWQUsVN74L85DVHc2/Vg00UuyZsEFXkW7f3/9FytllWwUYCuoa5Vn3
o4Lz5Vsk3qP92EtiXA0HM/RS2fgVLPYiQxtCXGhRmJdToiS1UAlI+wi7+0wreHwt
xduRO9jjPq6PZCAgyy20B1uM+EscbrdQcQXKLJkIUACVCSUeaT9B65WXmfeuupZ1
ZfTLC2pPbQz98suUqrJusqg2YwIFl4PSxC43xe65qyHUcCtbBki3XRhsueMNQJuC
lYaAtgW1gp0Gd8gjQXIhFKQVKqGMk9LWKdDzxRNRDSuHjICCg0Hx/t62CCNpfpch
UBrvRuioVK8D+qE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org