Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32342d3234203d3e20323634303834.roa
File:                     3137302e38312e3138342e302f32342d3234203d3e20323634303834.roa (raw, json)
Hash identifier:          82eIGTDa2tGdcjEuAzb5r+fX4d5zg/9JG4WgOkuAOnc=
Subject key identifier:   C2:7A:75:4F:C6:B4:FA:18:C7:0D:93:59:93:E1:01:79:A7:56:65:3B
Certificate issuer:       /CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Certificate serial:       43497186BFFF3BDF710A4E191A5EDC28424680D9
Authority key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32342d3234203d3e20323634303834.roa
Signing time:             Tue 22 Jun 2021 12:22:47 +0000
ROA not before:           Tue 22 Jun 2021 12:17:47 +0000
ROA not after:            Tue 21 Jun 2022 12:22:47 +0000
asID:                     264084
IP address blocks:        170.81.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:71:86:bf:ff:3b:df:71:0a:4e:19:1a:5e:dc:28:42:46:80:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Validity
            Not Before: Jun 22 12:17:47 2021 GMT
            Not After : Jun 21 12:22:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:22:c8:f6:24:81:61:23:4b:95:70:ec:ab:
                    72:07:e9:c0:4b:1f:7f:a0:2b:ea:fe:6e:37:7e:5c:
                    42:f3:71:97:bc:74:04:cb:36:75:01:80:fb:5d:97:
                    d3:24:71:99:f0:89:45:cc:3d:90:31:d2:26:86:06:
                    cb:e2:4d:82:02:b9:17:3a:43:f7:b1:e0:f7:2d:90:
                    8a:51:a9:c1:36:a2:22:46:67:dc:33:b3:4a:63:6a:
                    15:49:26:29:2c:49:8a:9d:1c:34:78:e0:b5:6a:f9:
                    80:9a:ba:ab:8c:8f:fb:73:7d:aa:8e:2a:69:81:70:
                    8b:2e:0b:a5:74:6b:fa:48:4f:d5:53:b0:ec:9f:3c:
                    51:c2:3a:4b:2c:3a:37:ed:19:d9:c7:dc:2d:2f:86:
                    f2:27:ac:d6:6a:7f:35:da:3b:3f:48:4a:15:4c:14:
                    94:08:9c:61:d9:79:52:a5:c6:3c:bc:6f:6c:55:32:
                    2a:cc:ac:e9:2a:ff:c5:76:02:25:3d:bc:26:96:97:
                    19:18:a3:ad:94:e5:1f:61:28:c8:a2:8b:c2:d4:ba:
                    42:0a:c5:9c:9d:2b:9b:01:c8:3d:9a:0a:d5:44:ad:
                    da:df:bb:34:f1:50:77:ed:72:34:26:2b:52:b1:be:
                    2c:d0:8f:8c:7d:78:4b:41:90:31:5c:9f:46:33:56:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:75:4F:C6:B4:FA:18:C7:0D:93:59:93:E1:01:79:A7:56:65:3B
            X509v3 Authority Key Identifier:
                keyid:68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/3137302e38312e3138342e302f32342d3234203d3e20323634303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:da:58:2e:89:6c:00:53:aa:0e:76:7c:9f:5b:a3:0a:46:ee:
         fc:ac:88:f5:67:52:cc:54:ae:63:96:10:8a:af:65:f5:cd:a7:
         c3:37:5a:8f:39:32:25:78:59:1c:7d:e8:b4:a6:2c:3e:f3:d4:
         04:34:98:4f:5a:4f:aa:25:f8:f9:be:f9:c2:05:62:8e:55:dd:
         18:99:bc:50:bf:cc:9f:12:e2:d5:ef:15:1e:6c:81:25:f2:44:
         6b:c3:57:a1:62:fb:db:e4:6e:34:ce:39:20:7a:a1:ad:41:fe:
         01:34:28:48:e0:3c:f7:e9:04:54:0b:cc:42:06:f7:bd:4a:e4:
         e0:dd:12:02:ba:ca:c9:87:26:d5:8e:8f:c3:98:66:14:37:15:
         1d:07:a3:e6:51:6e:47:5a:1d:6c:77:65:f1:14:9f:71:16:bb:
         86:a5:24:45:48:65:ec:6d:17:28:13:50:00:e5:da:26:5b:af:
         25:c4:d7:4b:aa:78:d8:20:82:a1:a6:93:61:91:cf:4e:e6:13:
         7b:23:3b:7b:c3:87:08:9b:79:a1:53:13:f4:c3:c6:af:ac:d6:
         92:a8:ab:65:ad:34:ee:a0:96:d0:5a:c4:60:18:15:d6:37:b9:
         9b:f8:93:fc:8e:0e:e9:5e:9f:35:1e:80:f6:c7:64:93:12:01:
         92:81:fb:62
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQ0lxhr//O99xCk4ZGl7cKEJGgNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhDMkE4RTRBRjg5QjgxMEIzMjA2RDEyODE3MDdDQzdE
QjRBNTRGNTAeFw0yMTA2MjIxMjE3NDdaFw0yMjA2MjExMjIyNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY0NjIyQzhGNjI0ODE2MTIz
NEI5NTcwRUNBQjcyMDdFOUMwNEIxRjdGQTAyQkVBRkU2RTM3N0U1QzQyRjM3MTk3
QkM3NDA0Q0IzNjc1MDE4MEZCNUQ5N0QzMjQ3MTk5RjA4OTQ1Q0MzRDkwMzFEMjI2
ODYwNkNCRTI0RDgyMDJCOTE3M0E0M0Y3QjFFMEY3MkQ5MDhBNTFBOUMxMzZBMjIy
NDY2N0RDMzNCMzRBNjM2QTE1NDkyNjI5MkM0OThBOUQxQzM0NzhFMEI1NkFGOTgw
OUFCQUFCOEM4RkZCNzM3REFBOEUyQTY5ODE3MDhCMkUwQkE1NzQ2QkZBNDg0RkQ1
NTNCMEVDOUYzQzUxQzIzQTRCMkMzQTM3RUQxOUQ5QzdEQzJEMkY4NkYyMjdBQ0Q2
NkE3RjM1REEzQjNGNDg0QTE1NEMxNDk0MDg5QzYxRDk3OTUyQTVDNjNDQkM2RjZD
NTUzMjJBQ0NBQ0U5MkFGRkM1NzYwMjI1M0RCQzI2OTY5NzE5MThBM0FEOTRFNTFG
NjEyOEM4QTI4QkMyRDRCQTQyMEFDNTlDOUQyQjlCMDFDODNEOUEwQUQ1NDRBRERB
REZCQjM0RjE1MDc3RUQ3MjM0MjYyQjUyQjFCRTJDRDA4RjhDN0Q3ODRCNDE5MDMx
NUM5RjQ2MzM1NjdCRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn0YiyPYkgWEjS5Vw7KtyB+nASx9/oCvq/m43flxC83GXvHQEyzZ1
AYD7XZfTJHGZ8IlFzD2QMdImhgbL4k2CArkXOkP3seD3LZCKUanBNqIiRmfcM7NK
Y2oVSSYpLEmKnRw0eOC1avmAmrqrjI/7c32qjippgXCLLguldGv6SE/VU7DsnzxR
wjpLLDo37RnZx9wtL4byJ6zWan812js/SEoVTBSUCJxh2XlSpcY8vG9sVTIqzKzp
Kv/FdgIlPbwmlpcZGKOtlOUfYSjIoovC1LpCCsWcnSubAcg9mgrVRK3a37s08VB3
7XI0JitSsb4s0I+MfXhLQZAxXJ9GM1Z7+wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMJ6dU/GtPoYxw2TWZPhAXmnVmU7MB8GA1UdIwQYMBaAFGjCqOSvibgQsyBtEoFw
fMfbSlT1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JHMXJtc1Bhdlk5UkxF
VDg3UUFUUDhMaHpBYjNyYmFIU0RmcGtDZFhQMzRGLzAvNjhDMkE4RTRBRjg5Qjgx
MEIzMjA2RDEyODE3MDdDQzdEQjRBNTRGNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82OEMyQThFNEFGODlCODEwQjMyMDZEMTI4MTcwN0NDN0RCNEE1
NEY1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRzFybXNQYXZZOVJMRVQ4N1FB
VFA4TGh6QWIzcmJhSFNEZnBrQ2RYUDM0Ri8wLzMxMzczMDJlMzgzMTJlMzEzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzAzODM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qlG4MA0GCSqGSIb3DQEBCwUAA4IBAQAp2lguiWwAU6oOdnyfW6MKRu78rIj1Z1LM
VK5jlhCKr2X1zafDN1qPOTIleFkcfei0piw+89QENJhPWk+qJfj5vvnCBWKOVd0Y
mbxQv8yfEuLV7xUebIEl8kRrw1ehYvvb5G40zjkgeqGtQf4BNChI4Dz36QRUC8xC
Bve9SuTg3RICusrJhybVjo/DmGYUNxUdB6PmUW5HWh1sd2XxFJ9xFruGpSRFSGXs
bRcoE1AA5domW68lxNdLqnjYIIKhppNhkc9O5hN7Izt7w4cIm3mhUxP0w8avrNaS
qKtlrTTuoJbQWsRgGBXWN7mb+JP8jg7pXp81HoD2x2STEgGSgfti
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org