Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
File:                     3137302e38342e34382e302f32332d3233203d3e20323635303232.roa (raw, json)
Hash identifier:          s5Lop0ofpG5wCFELNmOmEkLeU6obRW5g8bSQEc4ESPo=
Subject key identifier:   56:F8:A7:2E:70:EA:35:23:2F:1B:E3:BE:EA:83:38:13:E8:2D:B5:D6
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       31DBCC1005ACA707F636200A2104B9EFA55767AF
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:30 +0000
ROA not before:           Thu 29 Jun 2023 14:55:30 +0000
ROA not after:            Thu 27 Jun 2024 15:00:30 +0000
asID:                     265022
IP address blocks:        170.84.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:db:cc:10:05:ac:a7:07:f6:36:20:0a:21:04:b9:ef:a5:57:67:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:30 2023 GMT
            Not After : Jun 27 15:00:30 2024 GMT
        Subject: CN=56F8A72E70EA35232F1BE3BEEA833813E82DB5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:58:68:4a:32:46:20:e4:fc:85:59:79:9e:
                    6b:e5:42:9e:b9:f4:94:03:b4:fd:20:39:a5:a8:8a:
                    8a:75:89:3a:8d:00:50:d1:72:60:68:26:bc:00:77:
                    99:73:25:bb:b4:e5:55:df:17:e4:ff:c8:53:9b:27:
                    f3:c3:0b:2c:c9:e5:02:ab:21:8d:42:40:ac:24:a9:
                    f1:33:41:51:59:c6:1a:22:30:20:bd:78:66:ea:82:
                    f7:cd:ac:18:96:6b:64:57:0c:90:16:fc:1f:5f:da:
                    61:e4:4e:60:43:28:b3:2c:20:c7:24:44:07:5b:3c:
                    a9:2c:bc:4f:eb:8b:e0:00:1b:b5:ed:b8:03:29:2b:
                    35:32:22:1e:6b:7b:8a:4e:c0:0d:e1:2e:43:a1:50:
                    c6:c5:cc:88:d2:a7:bb:48:9d:d7:8d:56:a2:c7:46:
                    9c:93:d4:fe:a5:2e:e4:b3:ca:1c:17:75:6f:16:3c:
                    90:f8:a4:ca:d6:e5:e0:05:42:01:a1:f3:02:2a:98:
                    fc:28:87:88:36:43:ea:84:e1:6b:58:23:29:75:fc:
                    8d:99:33:f7:96:d9:6d:9c:0f:34:e4:0d:6c:c3:b5:
                    fa:e7:b2:41:83:b1:c6:9c:a4:61:29:7c:55:8b:95:
                    95:aa:3b:bd:62:02:9e:eb:2b:83:86:53:c7:7c:eb:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F8:A7:2E:70:EA:35:23:2F:1B:E3:BE:EA:83:38:13:E8:2D:B5:D6
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:11:ad:9e:d1:e9:62:e8:fd:46:1d:43:a6:23:f6:8b:93:e9:
         e5:0b:4b:39:c6:28:1f:e5:b3:7e:37:da:48:c7:df:c4:ca:7a:
         df:dd:51:d9:61:51:bc:99:d4:58:36:43:83:cf:b8:c8:d7:15:
         e3:39:d2:8b:59:3e:d2:09:33:7c:5c:d4:39:c9:8f:63:ef:5b:
         e1:2c:de:b1:2f:7b:e9:69:b3:6b:e0:fb:10:b7:1a:13:e5:9b:
         7e:ae:b6:6d:37:5a:29:16:ac:01:0a:ea:9d:e9:74:22:bf:a9:
         1c:7d:0e:4f:76:6b:7a:98:f7:61:d4:64:92:14:e9:6e:d4:a7:
         3f:da:53:c5:1c:d3:b8:a3:4b:84:02:b9:b0:f1:d7:00:cf:09:
         7d:35:ca:f4:c9:ca:bc:cd:c8:0b:e9:ed:55:fc:aa:d4:ba:ca:
         d8:c8:b8:b0:42:48:12:7b:50:90:b6:c4:3c:d1:7a:c0:14:b9:
         cc:88:9b:15:69:50:ca:02:9f:ff:ec:45:da:d5:3c:35:43:68:
         94:bc:29:97:0b:b0:8b:45:71:87:f8:ad:d5:ab:ec:80:d3:36:
         e3:32:1f:5d:cd:0e:dc:df:66:db:92:e0:e4:75:b1:37:e2:c6:
         36:99:78:53:6c:56:5a:08:5b:a8:18:5e:71:cc:9f:01:e0:8a:
         64:07:c5:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMdvMEAWspwf2NiAKIQS576VXZ68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2QjNFRUYxNkY5NTdCOURGQ0I0QzZENjFDQkExNkMz
ODBBM0EyMjAeFw0yMzA2MjkxNDU1MzBaFw0yNDA2MjcxNTAwMzBaMDMxMTAvBgNV
BAMTKDU2RjhBNzJFNzBFQTM1MjMyRjFCRTNCRUVBODMzODEzRTgyREI1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFVhoSjJGIOT8hVl5nmvlQp65
9JQDtP0gOaWoiop1iTqNAFDRcmBoJrwAd5lzJbu05VXfF+T/yFObJ/PDCyzJ5QKr
IY1CQKwkqfEzQVFZxhoiMCC9eGbqgvfNrBiWa2RXDJAW/B9f2mHkTmBDKLMsIMck
RAdbPKksvE/ri+AAG7XtuAMpKzUyIh5re4pOwA3hLkOhUMbFzIjSp7tIndeNVqLH
RpyT1P6lLuSzyhwXdW8WPJD4pMrW5eAFQgGh8wIqmPwoh4g2Q+qE4WtYIyl1/I2Z
M/eW2W2cDzTkDWzDtfrnskGDscacpGEpfFWLlZWqO71iAp7rK4OGU8d867IVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVvinLnDqNSMvG+O+6oM4E+gttdYwHwYDVR0j
BBgwFoAUaWs+7xb5V7nfy0xtYcuhbDgKOiIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFUVHdkeTNTVW1vVFN4a1A1OTJiRW9SejY4NXJ1bkJEZ2ttTHBvejJL
Y3cvMC82OTZCM0VFRjE2Rjk1N0I5REZDQjRDNkQ2MUNCQTE2QzM4MEEzQTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY5NkIzRUVGMTZGOTU3QjlE
RkNCNEM2RDYxQ0JBMTZDMzgwQTNBMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhVFR3ZHkzU1Vtb1RTeGtQNTkyYkVvUno2ODVydW5CRGdrbUxwb3oyS2N3LzAv
MzEzNzMwMmUzODM0MmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlQwMA0GCSqGSIb3DQEBCwUAA4IBAQACEa2e0eli
6P1GHUOmI/aLk+nlC0s5xigf5bN+N9pIx9/Eynrf3VHZYVG8mdRYNkODz7jI1xXj
OdKLWT7SCTN8XNQ5yY9j71vhLN6xL3vpabNr4PsQtxoT5Zt+rrZtN1opFqwBCuqd
6XQiv6kcfQ5Pdmt6mPdh1GSSFOlu1Kc/2lPFHNO4o0uEArmw8dcAzwl9Ncr0ycq8
zcgL6e1V/KrUusrYyLiwQkgSe1CQtsQ80XrAFLnMiJsVaVDKAp//7EXa1Tw1Q2iU
vCmXC7CLRXGH+K3Vq+yA0zbjMh9dzQ7c32bbkuDkdbE34sY2mXhTbFZaCFuoGF5x
zJ8B4IpkB8Vu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org