Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32332d3233203d3e20323636333636.roa
File:                     3137302e38302e33322e302f32332d3233203d3e20323636333636.roa (raw, json)
Hash identifier:          fOABSphVvOvZ9TpyJ4djZ/Uj+oskIurezttHgrMAGN4=
Subject key identifier:   15:80:7F:62:2E:68:32:9D:01:AD:8D:E1:FE:BD:30:EE:8B:45:B4:61
Certificate issuer:       /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial:       1D5006F73DF38E6E847F814D1B81477D59B1AC3C
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32332d3233203d3e20323636333636.roa
Signing time:             Tue 11 Apr 2023 15:00:44 +0000
ROA not before:           Tue 11 Apr 2023 14:55:44 +0000
ROA not after:            Tue 09 Apr 2024 15:00:44 +0000
asID:                     266366
IP address blocks:        170.80.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:06:f7:3d:f3:8e:6e:84:7f:81:4d:1b:81:47:7d:59:b1:ac:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
        Validity
            Not Before: Apr 11 14:55:44 2023 GMT
            Not After : Apr  9 15:00:44 2024 GMT
        Subject: CN=15807F622E68329D01AD8DE1FEBD30EE8B45B461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:df:81:61:a4:7d:66:1f:f6:70:3e:6f:26:
                    c6:5c:52:4e:34:06:87:6f:4b:33:93:e2:e0:50:ff:
                    fa:04:4d:13:2c:b8:9b:9a:af:4b:0f:7f:cd:13:9f:
                    7f:90:a3:97:3a:fb:2f:55:01:82:49:6e:ce:50:93:
                    9a:9b:3d:43:1a:8d:9c:cc:23:4d:51:52:54:f8:ed:
                    91:31:27:3f:41:3c:d3:0f:5d:5a:0b:b1:84:a4:71:
                    1c:4b:d2:27:94:45:84:ee:16:ad:b9:b7:be:d9:56:
                    6f:a4:5c:04:85:0b:e7:63:fd:0e:76:29:14:a1:b3:
                    8b:bf:df:84:48:6c:e2:34:0d:da:13:ff:9a:ad:9d:
                    31:ab:55:ee:c7:ca:e1:98:31:56:00:46:d0:36:2a:
                    0e:70:a6:10:ae:aa:ea:71:e6:59:2e:66:68:8c:64:
                    7b:b0:69:da:4b:1d:47:ac:20:67:57:f3:c1:23:4d:
                    22:12:4f:11:9b:46:cb:4a:5b:c4:4b:7b:43:89:11:
                    b3:87:50:f9:30:8b:c9:0c:fa:4d:77:1f:1e:d2:a7:
                    e7:73:a7:42:92:f6:9d:f5:da:86:05:78:ea:38:77:
                    aa:32:40:6b:a3:a6:61:6b:d5:e4:0b:e9:4b:57:46:
                    8e:0d:f3:e3:d0:4d:95:0c:59:07:6f:b1:1d:dd:36:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:80:7F:62:2E:68:32:9D:01:AD:8D:E1:FE:BD:30:EE:8B:45:B4:61
            X509v3 Authority Key Identifier:
                keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32332d3233203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:26:c8:6d:d6:57:10:48:c1:ee:bf:c5:90:fe:43:26:a9:04:
         2b:d7:da:4f:18:71:c4:72:e6:b0:b9:c0:0d:34:84:f7:6e:ad:
         d1:ab:7a:5f:b1:11:3f:3f:2b:51:97:02:fe:4c:8b:e5:63:c9:
         ef:f6:e0:14:4e:fa:07:44:52:b3:a1:3b:b5:ec:ac:74:60:e2:
         30:e1:9d:d1:07:a7:23:71:77:a1:59:9b:dc:19:17:b8:7f:43:
         89:c8:00:97:8b:16:5f:99:04:b8:2c:46:53:7f:a3:2a:d5:61:
         5e:20:29:0f:b1:40:13:17:ae:52:c3:5b:e7:b5:82:cf:81:72:
         e4:e3:c8:46:a2:35:90:a4:c0:cd:0e:0f:5b:2c:f0:15:52:6a:
         6c:9f:5a:a8:67:10:7e:1a:78:da:6f:67:39:83:8c:0f:c1:48:
         cd:6c:a5:b2:16:dc:9b:f8:7f:0f:a8:25:b2:a8:4d:07:4f:ab:
         b0:dd:58:13:9b:f9:f6:5b:a6:ba:9a:3b:e3:a3:9f:55:d1:ec:
         1b:ce:b0:59:b7:4d:e0:aa:e7:87:ec:45:17:e4:9b:fc:da:57:
         33:77:0b:60:f0:2f:36:34:ea:fa:db:45:b6:11:c2:70:9a:1f:
         c5:2a:d7:07:16:e3:d3:52:8f:f0:e9:79:9e:17:51:28:72:aa:
         47:7b:4d:9d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHVAG9z3zjm6Ef4FNG4FHfVmxrDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQwOURFQ0VFRTczRUVBQzMzN0ZBQTI1QUJDMTM3RERC
NjZCRUM3NjAeFw0yMzA0MTExNDU1NDRaFw0yNDA0MDkxNTAwNDRaMDMxMTAvBgNV
BAMTKDE1ODA3RjYyMkU2ODMyOUQwMUFEOERFMUZFQkQzMEVFOEI0NUI0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa9+BYaR9Zh/2cD5vJsZcUk40
BodvSzOT4uBQ//oETRMsuJuar0sPf80Tn3+Qo5c6+y9VAYJJbs5Qk5qbPUMajZzM
I01RUlT47ZExJz9BPNMPXVoLsYSkcRxL0ieURYTuFq25t77ZVm+kXASFC+dj/Q52
KRShs4u/34RIbOI0DdoT/5qtnTGrVe7HyuGYMVYARtA2Kg5wphCuqupx5lkuZmiM
ZHuwadpLHUesIGdX88EjTSISTxGbRstKW8RLe0OJEbOHUPkwi8kM+k13Hx7Sp+dz
p0KS9p312oYFeOo4d6oyQGujpmFr1eQL6UtXRo4N8+PQTZUMWQdvsR3dNkobAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFYB/Yi5oMp0BrY3h/r0w7otFtGEwHwYDVR0j
BBgwFoAUpAnezu5z7qwzf6olq8E33bZr7HYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVUzUGJvWnVyS1ltUW90Y1pteVRicW5nQ2JaMTQxVlNUZ1ZHQ2tMN0hZ
aHQvMC9BNDA5REVDRUVFNzNFRUFDMzM3RkFBMjVBQkMxMzdEREI2NkJFQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0MDlERUNFRUU3M0VFQUMz
MzdGQUEyNUFCQzEzN0REQjY2QkVDNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FVM1Bib1p1cktZbVFvdGNabXlUYnFuZ0NiWjE0MVZTVGdWR0NrTDdIWWh0LzAv
MzEzNzMwMmUzODMwMmUzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlAgMA0GCSqGSIb3DQEBCwUAA4IBAQAFJsht1lcQ
SMHuv8WQ/kMmqQQr19pPGHHEcuawucANNIT3bq3Rq3pfsRE/PytRlwL+TIvlY8nv
9uAUTvoHRFKzoTu17Kx0YOIw4Z3RB6cjcXehWZvcGRe4f0OJyACXixZfmQS4LEZT
f6Mq1WFeICkPsUATF65Sw1vntYLPgXLk48hGojWQpMDNDg9bLPAVUmpsn1qoZxB+
Gnjab2c5g4wPwUjNbKWyFtyb+H8PqCWyqE0HT6uw3VgTm/n2W6a6mjvjo59V0ewb
zrBZt03gqueH7EUX5Jv82lczdwtg8C82NOr620W2EcJwmh/FKtcHFuPTUo/w6Xme
F1EocqpHe02d
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org