Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
File:                     3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          CrNCAcOcGSKAiDoOB2f7rzxrsl2UbVf4SlRljT/iTuw=
Subject key identifier:   D8:AA:D5:59:B9:53:46:A9:46:AC:54:B3:C0:53:AB:BC:24:89:41:B0
Certificate issuer:       /CN=FC43B2BCCAC255474D6E14420AD8458F1319AC96
Certificate serial:       61FF62149DDFE4B3D2AB62BC69F4B520A8E5CC57
Authority key identifier: FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
Signing time:             Mon 16 Oct 2023 17:00:01 +0000
ROA not before:           Mon 16 Oct 2023 16:55:01 +0000
ROA not after:            Mon 14 Oct 2024 17:00:01 +0000
asID:                     264342
IP address blocks:        170.245.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ff:62:14:9d:df:e4:b3:d2:ab:62:bc:69:f4:b5:20:a8:e5:cc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC43B2BCCAC255474D6E14420AD8458F1319AC96
        Validity
            Not Before: Oct 16 16:55:01 2023 GMT
            Not After : Oct 14 17:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:54:38:7f:00:55:de:4e:16:c4:e7:67:47:
                    d6:01:0d:7e:0a:47:61:64:7e:f3:35:d2:23:83:c4:
                    5e:81:f5:a6:6a:f8:5e:1a:9e:28:6f:bf:14:a9:e5:
                    ef:2c:65:26:34:a2:4c:f3:49:8a:d8:9d:5f:ce:c1:
                    89:e3:1a:2f:b5:3f:9f:49:e7:43:e8:9a:57:a0:96:
                    90:ce:50:61:e6:9f:1d:57:1a:33:ed:2c:b0:76:8c:
                    08:cb:b1:b5:2a:87:3f:59:fe:51:d5:bd:16:aa:4b:
                    d0:60:ea:18:04:5e:94:e3:c6:00:60:e4:ee:16:61:
                    b7:88:28:fd:b2:c5:55:72:58:1f:47:3e:c4:67:bc:
                    ed:f4:8d:c4:f8:03:a8:e1:77:44:77:71:19:86:8f:
                    0b:a5:6e:ca:6d:70:b2:9e:9e:25:84:22:98:86:33:
                    8a:7f:85:67:31:56:ef:14:d0:a8:53:43:c3:cd:1a:
                    ef:e9:72:a1:b9:a6:96:17:83:33:c5:bb:28:79:b5:
                    a0:c2:58:35:2b:a5:55:53:6c:51:13:7b:b4:75:e3:
                    c1:82:f8:1f:ec:7f:18:2a:64:61:05:db:82:aa:93:
                    00:ee:8a:e9:bc:9b:8e:bc:1e:1a:50:32:c1:f0:24:
                    e1:e8:71:a4:97:b2:10:f1:fb:38:6b:71:a6:57:a0:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AA:D5:59:B9:53:46:A9:46:AC:54:B3:C0:53:AB:BC:24:89:41:B0
            X509v3 Authority Key Identifier:
                keyid:FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:8d:a0:cf:44:06:ff:05:2e:ad:17:76:f0:80:d1:22:38:
         48:7b:8e:24:12:f4:69:3e:ef:fe:00:dd:b9:e7:11:09:55:2d:
         72:be:2f:f6:e6:20:fd:00:59:5d:c1:6a:bc:52:ac:2e:18:ab:
         d3:ad:d7:cf:b5:18:de:21:c2:3b:54:10:f5:21:f9:cf:9f:f9:
         c4:56:59:3f:c4:da:78:ce:41:06:72:e4:de:5f:b0:0b:85:4e:
         c7:00:21:cd:17:9f:13:ac:3d:d8:1b:5f:5b:0a:84:35:7c:3f:
         b8:c6:31:cc:e1:e6:89:74:10:28:77:6a:cb:88:6f:7a:e3:2a:
         e7:3b:b3:d6:da:31:df:8b:0e:4c:e2:8c:3f:53:5f:4c:f9:9c:
         7f:d7:0e:9a:04:4c:6e:0d:59:4c:f6:f7:bf:93:d7:b9:9e:bf:
         35:ab:06:ff:5c:97:3f:4f:ad:04:1c:fe:4a:e7:f6:55:0b:9c:
         93:62:96:36:20:d5:fa:dd:07:40:9b:51:27:f2:ad:b8:bf:83:
         ef:84:2c:ab:0a:3b:31:3c:16:a2:14:c9:c7:e0:2a:ee:c1:cc:
         15:3a:36:24:cf:90:26:5e:de:1c:f4:e6:0c:67:ad:fd:f1:62:
         2f:24:ef:3f:f2:f8:d5:af:76:2f:0a:55:50:5e:40:35:1b:e1:
         4f:23:4f:7a
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUYf9iFJ3f5LPSq2K8afS1IKjlzFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM0M0IyQkNDQUMyNTU0NzRENkUxNDQyMEFEODQ1OEYx
MzE5QUM5NjAeFw0yMzEwMTYxNjU1MDFaFw0yNDEwMTQxNzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTlBRjU0Mzg3RjAwNTVERTRF
MTZDNEU3Njc0N0Q2MDEwRDdFMEE0NzYxNjQ3RUYzMzVEMjIzODNDNDVFODFGNUE2
NkFGODVFMUE5RTI4NkZCRjE0QTlFNUVGMkM2NTI2MzRBMjRDRjM0OThBRDg5RDVG
Q0VDMTg5RTMxQTJGQjUzRjlGNDlFNzQzRTg5QTU3QTA5NjkwQ0U1MDYxRTY5RjFE
NTcxQTMzRUQyQ0IwNzY4QzA4Q0JCMUI1MkE4NzNGNTlGRTUxRDVCRDE2QUE0QkQw
NjBFQTE4MDQ1RTk0RTNDNjAwNjBFNEVFMTY2MUI3ODgyOEZEQjJDNTU1NzI1ODFG
NDczRUM0NjdCQ0VERjQ4REM0RjgwM0E4RTE3NzQ0Nzc3MTE5ODY4RjBCQTU2RUNB
NkQ3MEIyOUU5RTI1ODQyMjk4ODYzMzhBN0Y4NTY3MzE1NkVGMTREMEE4NTM0M0Mz
Q0QxQUVGRTk3MkExQjlBNjk2MTc4MzMzQzVCQjI4NzlCNUEwQzI1ODM1MkJBNTU1
NTM2QzUxMTM3QkI0NzVFM0MxODJGODFGRUM3RjE4MkE2NDYxMDVEQjgyQUE5MzAw
RUU4QUU5QkM5QjhFQkMxRTFBNTAzMkMxRjAyNEUxRTg3MUE0OTdCMjEwRjFGQjM4
NkI3MUE2NTdBMDA1MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAma9UOH8AVd5OFsTnZ0fWAQ1+CkdhZH7zNdIjg8RegfWmavheGp4o
b78UqeXvLGUmNKJM80mK2J1fzsGJ4xovtT+fSedD6JpXoJaQzlBh5p8dVxoz7Syw
dowIy7G1Koc/Wf5R1b0WqkvQYOoYBF6U48YAYOTuFmG3iCj9ssVVclgfRz7EZ7zt
9I3E+AOo4XdEd3EZho8LpW7KbXCynp4lhCKYhjOKf4VnMVbvFNCoU0PDzRrv6XKh
uaaWF4MzxbsoebWgwlg1K6VVU2xRE3u0dePBgvgf7H8YKmRhBduCqpMA7orpvJuO
vB4aUDLB8CTh6HGkl7IQ8fs4a3GmV6AFOQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNiq1Vm5U0apRqxUs8BTq7wkiUGwMB8GA1UdIwQYMBaAFPxDsrzKwlVHTW4UQgrY
RY8TGayWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0eUZzOWtHN1pqdGJL
ZFV6V1VtdXNTRm5nOXlUSDFGd0NLZktrNW1XWExjLzAvRkM0M0IyQkNDQUMyNTU0
NzRENkUxNDQyMEFEODQ1OEYxMzE5QUM5Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQzQzQjJCQ0NBQzI1NTQ3NEQ2RTE0NDIwQUQ4NDU4RjEzMTlB
Qzk2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdHlGczlrRzdaanRiS2RVeldV
bXVzU0ZuZzl5VEgxRndDS2ZLazVtV1hMYy8wLzMxMzczMDJlMzIzNDM1MmUzMTMz
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzMzM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq9YgwDQYJKoZIhvcNAQELBQADggEBAIzzjaDPRAb/BS6tF3bwgNEiOEh7jiQS
9Gk+7/4A3bnnEQlVLXK+L/bmIP0AWV3BarxSrC4Yq9Ot18+1GN4hwjtUEPUh+c+f
+cRWWT/E2njOQQZy5N5fsAuFTscAIc0XnxOsPdgbX1sKhDV8P7jGMczh5ol0ECh3
asuIb3rjKuc7s9baMd+LDkzijD9TX0z5nH/XDpoETG4NWUz297+T17mevzWrBv9c
lz9PrQQc/krn9lULnJNiljYg1frdB0CbUSfyrbi/g++ELKsKOzE8FqIUycfgKu7B
zBU6NiTPkCZe3hz05gxnrf3xYi8k7z/y+NWvdi8KVVBeQDUb4U8jT3o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org