Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32322d3232203d3e203532373635.roa (raw, json)
Hash identifier:          ROZvOun5GZhLwXTLZd6LJHSzPeORejvkJh9y2hHmBcU=
Subject key identifier:   59:B9:CF:90:0A:7F:32:67:8D:BD:79:E6:4B:F8:A4:BF:27:A3:5D:0A
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       1AD52953ED4E2182264C6F839368440E90DFADCD
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa
Signing time:             Tue 14 Nov 2023 18:23:13 +0000
ROA not before:           Tue 14 Nov 2023 18:18:13 +0000
ROA not after:            Tue 12 Nov 2024 18:23:13 +0000
asID:                     52765
IP address blocks:        170.239.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:29:53:ed:4e:21:82:26:4c:6f:83:93:68:44:0e:90:df:ad:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Nov 14 18:18:13 2023 GMT
            Not After : Nov 12 18:23:13 2024 GMT
        Subject: CN=59B9CF900A7F32678DBD79E64BF8A4BF27A35D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:b9:dd:2a:44:f8:de:14:8f:ba:73:80:69:
                    f4:a1:d9:4a:24:7d:70:2b:c5:ef:6a:f3:b5:ad:ab:
                    b5:16:5a:a1:08:58:71:1d:8a:81:c5:4c:df:2c:2f:
                    fb:05:ad:0f:d3:63:30:ac:d2:f6:5a:fe:c0:1b:80:
                    24:23:04:28:b4:97:d8:af:76:19:df:d6:79:c4:65:
                    3a:e4:95:f6:fb:1d:8e:b1:7f:35:81:a3:a4:45:69:
                    5c:e2:68:77:f2:59:ec:97:fd:55:c5:93:ec:52:26:
                    9e:2f:65:6d:77:d9:7a:f8:f7:c8:2b:fb:bf:64:6d:
                    35:62:be:72:b5:94:44:8e:f0:dc:86:18:30:81:41:
                    9a:6c:27:d7:63:1e:d0:5b:66:a2:61:11:07:74:79:
                    99:95:f2:6a:66:30:29:ba:00:4f:c2:43:64:7e:b7:
                    a4:e7:ca:64:cc:e1:a3:b8:a7:c4:be:5e:8e:57:b1:
                    1e:85:4f:25:ca:98:9c:f3:20:9f:3e:24:8b:5a:7e:
                    2b:cc:cd:4a:af:dd:6a:5b:46:d9:d5:00:37:84:e6:
                    37:b8:bf:a4:77:61:7c:9f:08:4c:98:28:0f:f3:da:
                    77:93:fa:0e:1a:ee:99:b8:9a:72:2d:75:71:13:02:
                    16:fe:0f:95:38:13:89:91:84:73:51:73:8b:be:6f:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B9:CF:90:0A:7F:32:67:8D:BD:79:E6:4B:F8:A4:BF:27:A3:5D:0A
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:40:de:6e:f7:4a:21:75:03:c0:34:32:77:95:57:69:80:
         48:b6:2c:ed:01:3e:01:65:b1:ee:28:1c:51:cd:8a:d8:84:9b:
         f6:e9:8f:28:0e:f6:a2:d9:66:b5:41:f9:1f:2a:3a:41:b3:bb:
         d6:58:9f:cb:c1:00:e4:f1:1f:91:3d:87:82:06:c6:c2:60:c7:
         09:f0:ba:78:f7:e0:7c:ec:06:2f:d3:b0:ce:6a:67:33:e2:da:
         35:f6:f1:b5:58:77:09:aa:19:b1:e9:12:49:59:e1:39:9d:9f:
         82:80:c8:44:c2:54:ae:90:43:ca:10:3f:d9:aa:e9:33:c6:2e:
         62:e7:c4:39:e1:72:6a:e5:be:10:1d:28:6c:a5:38:6e:a0:9f:
         ef:17:b6:f5:42:a0:d0:9b:ce:e6:af:90:35:42:cc:01:31:2e:
         13:3c:1d:76:fc:9f:6c:19:fb:a6:27:a4:36:3d:55:9e:b2:45:
         d3:ba:15:d1:65:96:02:58:6b:92:03:0b:32:50:a9:2d:51:3b:
         36:95:0e:07:0f:35:aa:58:08:e7:49:73:08:3a:8e:8e:48:1b:
         12:fd:9c:12:c9:73:20:cf:63:4a:cd:45:90:49:e4:d0:57:0d:
         40:08:ff:dc:64:03:73:7e:82:db:35:ea:2f:95:67:38:b7:44:
         85:96:3f:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGtUpU+1OIYImTG+Dk2hEDpDfrc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5NDBCREM2NzgyMDA1ODVGRUZGQzY0N0NBNkU1RUU2
RjMyQ0Q4QjAeFw0yMzExMTQxODE4MTNaFw0yNDExMTIxODIzMTNaMDMxMTAvBgNV
BAMTKDU5QjlDRjkwMEE3RjMyNjc4REJENzlFNjRCRjhBNEJGMjdBMzVEMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vbndKkT43hSPunOAafSh2Uok
fXArxe9q87Wtq7UWWqEIWHEdioHFTN8sL/sFrQ/TYzCs0vZa/sAbgCQjBCi0l9iv
dhnf1nnEZTrklfb7HY6xfzWBo6RFaVziaHfyWeyX/VXFk+xSJp4vZW132Xr498gr
+79kbTVivnK1lESO8NyGGDCBQZpsJ9djHtBbZqJhEQd0eZmV8mpmMCm6AE/CQ2R+
t6TnymTM4aO4p8S+Xo5XsR6FTyXKmJzzIJ8+JItafivMzUqv3WpbRtnVADeE5je4
v6R3YXyfCEyYKA/z2neT+g4a7pm4mnItdXETAhb+D5U4E4mRhHNRc4u+b/2rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWbnPkAp/MmeNvXnmS/ikvyejXQowHwYDVR0j
BBgwFoAUTZQL3GeCAFhf7/xkfKbl7m8yzYswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl
U1kvMC80RDk0MEJEQzY3ODIwMDU4NUZFRkZDNjQ3Q0E2RTVFRTZGMzJDRDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREOTQwQkRDNjc4MjAwNTg1
RkVGRkM2NDdDQTZFNUVFNkYzMkNEOEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSaG14N1lldVNYTnYySE4zaDhuMmJhcTNpem15TTlmSkhoY3hTVlZhZVNZLzAv
MzEzNzMwMmUzMjMzMzkyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqu9IMA0GCSqGSIb3DQEBCwUAA4IBAQBse0DebvdK
IXUDwDQyd5VXaYBItiztAT4BZbHuKBxRzYrYhJv26Y8oDvai2Wa1QfkfKjpBs7vW
WJ/LwQDk8R+RPYeCBsbCYMcJ8Lp49+B87AYv07DOamcz4to19vG1WHcJqhmx6RJJ
WeE5nZ+CgMhEwlSukEPKED/Zqukzxi5i58Q54XJq5b4QHShspThuoJ/vF7b1QqDQ
m87mr5A1QswBMS4TPB12/J9sGfumJ6Q2PVWeskXTuhXRZZYCWGuSAwsyUKktUTs2
lQ4HDzWqWAjnSXMIOo6OSBsS/ZwSyXMgz2NKzUWQSeTQVw1ACP/cZANzfoLbNeov
lWc4t0SFlj+v
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org