Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32332d3233203d3e20323635303232.roa
File:                     3137302e38342e35302e302f32332d3233203d3e20323635303232.roa (raw, json)
Hash identifier:          E27479tPz4L6T626yyk5HxUUcKFoyxhPHixqEKVJFEo=
Subject key identifier:   10:9A:26:EA:F1:AA:33:8E:71:E2:5E:EA:C8:BE:7E:83:CC:60:0F:8F
Certificate issuer:       /CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
Certificate serial:       7EE86E33C3A95E30A2EC5D69129D137A1D5C6C36
Authority key identifier: 69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32332d3233203d3e20323635303232.roa
Signing time:             Thu 29 Jun 2023 15:00:29 +0000
ROA not before:           Thu 29 Jun 2023 14:55:29 +0000
ROA not after:            Thu 27 Jun 2024 15:00:29 +0000
asID:                     265022
IP address blocks:        170.84.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e8:6e:33:c3:a9:5e:30:a2:ec:5d:69:12:9d:13:7a:1d:5c:6c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22
        Validity
            Not Before: Jun 29 14:55:29 2023 GMT
            Not After : Jun 27 15:00:29 2024 GMT
        Subject: CN=109A26EAF1AA338E71E25EEAC8BE7E83CC600F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:bd:89:27:1b:c7:b8:c3:38:e1:cc:a5:20:
                    cb:e5:92:53:a1:bd:39:97:bc:3d:a4:ac:12:14:e8:
                    66:7e:3c:35:32:1f:71:9d:4f:35:b1:a6:8a:d3:cd:
                    04:51:f0:05:ba:b6:4f:96:c4:15:0d:51:1f:6d:bc:
                    63:5b:2a:c2:5b:cd:27:02:42:5c:de:00:91:38:ff:
                    48:66:1e:4c:fc:a4:52:dd:98:9a:82:38:4a:44:e9:
                    0c:89:2e:60:c5:66:33:20:b8:d1:fa:3d:9a:ba:bc:
                    9d:31:44:a2:7f:0f:f1:ff:df:5d:19:f6:f3:0c:f3:
                    cb:36:15:bd:b9:4b:8c:13:51:24:04:08:b4:0c:75:
                    8c:94:e1:71:1b:27:3e:2b:6a:32:0c:b5:6d:22:ab:
                    c0:ea:40:ab:7a:61:67:c2:62:28:c0:ef:cf:39:3f:
                    7b:72:65:94:52:3a:73:93:9e:10:79:c6:8a:12:83:
                    8a:69:53:e7:e3:61:cc:2c:f7:2d:52:3e:78:a1:b0:
                    5a:2b:10:49:e4:23:ee:e9:6e:34:98:fb:ed:95:14:
                    e9:d4:71:d7:d0:e8:bb:35:f5:8b:75:88:aa:6e:57:
                    aa:2e:e0:0d:e3:d4:06:59:df:ea:4b:d4:88:b8:05:
                    5b:39:59:9b:77:c0:f9:d5:3f:ae:2b:a3:91:30:71:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9A:26:EA:F1:AA:33:8E:71:E2:5E:EA:C8:BE:7E:83:CC:60:0F:8F
            X509v3 Authority Key Identifier:
                keyid:69:6B:3E:EF:16:F9:57:B9:DF:CB:4C:6D:61:CB:A1:6C:38:0A:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696B3EEF16F957B9DFCB4C6D61CBA16C380A3A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/3137302e38342e35302e302f32332d3233203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:21:80:87:6f:a3:f6:81:77:30:f9:93:3c:23:2a:4d:0c:4a:
         02:5c:17:1f:37:a9:f1:c5:e1:04:39:2f:b4:ef:82:cc:df:be:
         88:1e:1d:d3:41:b2:3c:36:8d:d1:77:ae:ba:41:ab:8d:7c:fa:
         ee:1d:60:ae:9e:8e:a7:85:53:94:14:ba:8c:3f:17:08:f7:26:
         6d:f2:9e:62:ef:f1:89:9c:fd:32:d5:de:1b:d7:1c:6d:e5:8f:
         05:93:a9:cf:5b:87:90:63:67:6d:d8:53:7b:3c:6c:51:8d:68:
         61:48:29:fe:08:a8:6e:f2:cc:99:11:46:2f:f6:75:03:3a:11:
         86:35:25:03:86:ef:8c:23:a3:48:32:b2:6f:45:c5:29:b0:61:
         29:3d:01:bf:f4:70:0c:dd:cf:71:50:b5:72:cc:c6:31:cc:83:
         ed:8a:56:7a:13:61:b0:76:af:6e:0c:89:ae:f2:f6:d7:13:50:
         30:f3:f8:81:c3:21:8b:a2:c2:f6:2a:19:0c:73:15:d8:b8:2f:
         93:ba:47:a8:ec:43:67:8a:57:14:4a:0f:44:80:c6:8c:b8:93:
         cb:c2:43:e9:53:c3:38:fc:ed:19:08:ca:3f:7d:99:d1:21:2b:
         44:56:c3:20:b0:31:76:38:70:df:49:d5:0e:9c:6b:c2:54:06:
         7d:96:73:36
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfuhuM8OpXjCi7F1pEp0Teh1cbDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2QjNFRUYxNkY5NTdCOURGQ0I0QzZENjFDQkExNkMz
ODBBM0EyMjAeFw0yMzA2MjkxNDU1MjlaFw0yNDA2MjcxNTAwMjlaMDMxMTAvBgNV
BAMTKDEwOUEyNkVBRjFBQTMzOEU3MUUyNUVFQUM4QkU3RTgzQ0M2MDBGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNb2JJxvHuMM44cylIMvlklOh
vTmXvD2krBIU6GZ+PDUyH3GdTzWxporTzQRR8AW6tk+WxBUNUR9tvGNbKsJbzScC
QlzeAJE4/0hmHkz8pFLdmJqCOEpE6QyJLmDFZjMguNH6PZq6vJ0xRKJ/D/H/310Z
9vMM88s2Fb25S4wTUSQECLQMdYyU4XEbJz4rajIMtW0iq8DqQKt6YWfCYijA7885
P3tyZZRSOnOTnhB5xooSg4ppU+fjYcws9y1SPnihsForEEnkI+7pbjSY++2VFOnU
cdfQ6Ls19Yt1iKpuV6ou4A3j1AZZ3+pL1Ii4BVs5WZt3wPnVP64ro5EwcSTTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEJom6vGqM45x4l7qyL5+g8xgD48wHwYDVR0j
BBgwFoAUaWs+7xb5V7nfy0xtYcuhbDgKOiIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFUVHdkeTNTVW1vVFN4a1A1OTJiRW9SejY4NXJ1bkJEZ2ttTHBvejJL
Y3cvMC82OTZCM0VFRjE2Rjk1N0I5REZDQjRDNkQ2MUNCQTE2QzM4MEEzQTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY5NkIzRUVGMTZGOTU3QjlE
RkNCNEM2RDYxQ0JBMTZDMzgwQTNBMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhVFR3ZHkzU1Vtb1RTeGtQNTkyYkVvUno2ODVydW5CRGdrbUxwb3oyS2N3LzAv
MzEzNzMwMmUzODM0MmUzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlQyMA0GCSqGSIb3DQEBCwUAA4IBAQCEIYCHb6P2
gXcw+ZM8IypNDEoCXBcfN6nxxeEEOS+074LM376IHh3TQbI8No3Rd666QauNfPru
HWCuno6nhVOUFLqMPxcI9yZt8p5i7/GJnP0y1d4b1xxt5Y8Fk6nPW4eQY2dt2FN7
PGxRjWhhSCn+CKhu8syZEUYv9nUDOhGGNSUDhu+MI6NIMrJvRcUpsGEpPQG/9HAM
3c9xULVyzMYxzIPtilZ6E2Gwdq9uDImu8vbXE1Aw8/iBwyGLosL2KhkMcxXYuC+T
ukeo7ENnilcUSg9EgMaMuJPLwkPpU8M4/O0ZCMo/fZnRIStEVsMgsDF2OHDfSdUO
nGvCVAZ9lnM2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org