Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32342d3234203d3e20323636333636.roa
File:                     3137302e38302e33322e302f32342d3234203d3e20323636333636.roa (raw, json)
Hash identifier:          qeFGJvilVTsnpUJNfvnkyJh6agZjmIONo4ydJ8Wyk/M=
Subject key identifier:   F8:63:0F:2B:E8:F9:2B:4D:9A:51:D5:7F:15:E1:28:45:CB:53:88:5E
Certificate issuer:       /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial:       6296C83D504D1EB8138C709F3CF70C840680A290
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32342d3234203d3e20323636333636.roa
Signing time:             Tue 11 Apr 2023 15:00:46 +0000
ROA not before:           Tue 11 Apr 2023 14:55:46 +0000
ROA not after:            Tue 09 Apr 2024 15:00:46 +0000
asID:                     266366
IP address blocks:        170.80.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:96:c8:3d:50:4d:1e:b8:13:8c:70:9f:3c:f7:0c:84:06:80:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
        Validity
            Not Before: Apr 11 14:55:46 2023 GMT
            Not After : Apr  9 15:00:46 2024 GMT
        Subject: CN=F8630F2BE8F92B4D9A51D57F15E12845CB53885E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:e9:aa:0e:bb:56:c3:24:a1:68:32:03:24:
                    bb:a6:20:31:96:4a:3c:a0:c2:4c:25:70:7d:af:5e:
                    2a:f5:35:46:f3:06:da:49:82:6c:f2:c0:a2:a7:70:
                    bd:1b:86:04:42:fd:8b:cd:64:01:6d:ed:08:01:b1:
                    ca:05:9c:20:f7:1c:a8:59:32:09:85:77:4b:82:ff:
                    1a:73:86:34:9d:20:84:78:0a:24:27:9d:63:b9:0a:
                    00:99:d4:64:2d:8d:53:d9:31:70:41:a7:a1:ae:27:
                    5f:4a:a2:72:fa:7a:a8:50:45:3b:d3:1a:fb:7b:2f:
                    06:78:c2:be:5c:f4:c0:c6:d2:9a:a8:53:47:f7:12:
                    ed:e5:6f:8e:4b:b0:0f:49:ab:f3:d7:52:85:ef:f7:
                    98:62:63:aa:78:e1:ff:e3:53:83:b9:4e:57:06:e8:
                    73:f1:67:95:a5:fc:b4:0c:75:0c:89:0c:b3:73:a1:
                    8d:bf:7e:29:24:87:19:fa:07:5e:4f:46:0b:77:ab:
                    cb:fb:51:e8:0c:33:7b:c4:78:9f:09:ce:77:60:51:
                    27:3d:fa:3b:68:a3:a9:05:ce:1f:20:10:5b:1a:c4:
                    31:f6:88:6d:88:53:96:a9:77:f9:96:3d:0d:1f:e4:
                    98:84:bc:88:82:f5:14:54:15:74:02:b0:8f:eb:71:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:0F:2B:E8:F9:2B:4D:9A:51:D5:7F:15:E1:28:45:CB:53:88:5E
            X509v3 Authority Key Identifier:
                keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33322e302f32342d3234203d3e20323636333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:88:b6:f0:e1:56:91:d0:1c:6d:03:5e:76:69:0f:72:64:42:
         6e:64:a4:4e:64:bc:72:9b:10:0f:d9:c0:b0:a9:c4:3b:b3:d4:
         04:78:36:2e:b8:dd:ca:da:8a:a9:f4:15:89:0d:6f:c7:4a:37:
         ee:93:28:b0:13:a3:07:d3:ae:31:f4:32:a4:73:9e:e7:a6:4e:
         59:7e:12:f9:c4:ff:45:3f:c5:4a:46:c3:af:92:e5:ec:2f:a8:
         a1:46:77:87:1b:91:d5:91:cf:4b:09:9b:7b:f8:bb:04:de:e8:
         8e:b1:16:2d:a3:61:59:de:b7:2f:41:8f:ca:3e:12:8c:ca:10:
         81:40:79:5a:db:ce:76:a3:80:37:d2:19:9f:17:ec:56:c1:a2:
         f4:8c:d9:bd:90:3e:94:34:c7:0c:8b:ff:0c:93:0e:49:72:a1:
         50:b5:0d:43:5c:42:3e:cb:23:1f:30:b5:89:81:69:ee:30:3d:
         29:c3:a1:9d:72:31:0c:b0:59:e6:18:15:06:78:b8:03:30:5b:
         fa:18:cf:f0:63:c8:1e:ba:f5:5b:ec:c4:c4:2b:62:41:9c:88:
         db:54:20:2d:03:5a:66:4a:a0:f6:d0:a7:a3:25:45:0a:92:be:
         39:11:de:cf:10:be:6e:52:e2:7c:d9:c6:62:9b:4a:65:1e:b4:
         32:11:2c:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYpbIPVBNHrgTjHCfPPcMhAaAopAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQwOURFQ0VFRTczRUVBQzMzN0ZBQTI1QUJDMTM3RERC
NjZCRUM3NjAeFw0yMzA0MTExNDU1NDZaFw0yNDA0MDkxNTAwNDZaMDMxMTAvBgNV
BAMTKEY4NjMwRjJCRThGOTJCNEQ5QTUxRDU3RjE1RTEyODQ1Q0I1Mzg4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsP+mqDrtWwyShaDIDJLumIDGW
SjygwkwlcH2vXir1NUbzBtpJgmzywKKncL0bhgRC/YvNZAFt7QgBscoFnCD3HKhZ
MgmFd0uC/xpzhjSdIIR4CiQnnWO5CgCZ1GQtjVPZMXBBp6GuJ19KonL6eqhQRTvT
Gvt7LwZ4wr5c9MDG0pqoU0f3Eu3lb45LsA9Jq/PXUoXv95hiY6p44f/jU4O5TlcG
6HPxZ5Wl/LQMdQyJDLNzoY2/fikkhxn6B15PRgt3q8v7UegMM3vEeJ8JzndgUSc9
+jtoo6kFzh8gEFsaxDH2iG2IU5apd/mWPQ0f5JiEvIiC9RRUFXQCsI/rcd4pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+GMPK+j5K02aUdV/FeEoRctTiF4wHwYDVR0j
BBgwFoAUpAnezu5z7qwzf6olq8E33bZr7HYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVUzUGJvWnVyS1ltUW90Y1pteVRicW5nQ2JaMTQxVlNUZ1ZHQ2tMN0hZ
aHQvMC9BNDA5REVDRUVFNzNFRUFDMzM3RkFBMjVBQkMxMzdEREI2NkJFQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0MDlERUNFRUU3M0VFQUMz
MzdGQUEyNUFCQzEzN0REQjY2QkVDNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FVM1Bib1p1cktZbVFvdGNabXlUYnFuZ0NiWjE0MVZTVGdWR0NrTDdIWWh0LzAv
MzEzNzMwMmUzODMwMmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlAgMA0GCSqGSIb3DQEBCwUAA4IBAQBiiLbw4VaR
0BxtA152aQ9yZEJuZKROZLxymxAP2cCwqcQ7s9QEeDYuuN3K2oqp9BWJDW/HSjfu
kyiwE6MH064x9DKkc57npk5ZfhL5xP9FP8VKRsOvkuXsL6ihRneHG5HVkc9LCZt7
+LsE3uiOsRYto2FZ3rcvQY/KPhKMyhCBQHla2852o4A30hmfF+xWwaL0jNm9kD6U
NMcMi/8Mkw5JcqFQtQ1DXEI+yyMfMLWJgWnuMD0pw6GdcjEMsFnmGBUGeLgDMFv6
GM/wY8geuvVb7MTEK2JBnIjbVCAtA1pmSqD20KejJUUKkr45Ed7PEL5uUuJ82cZi
m0plHrQyESwJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org