Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32342d3234203d3e20323635323035.roa
File:                     3136372e3235302e37302e302f32342d3234203d3e20323635323035.roa (raw, json)
Hash identifier:          q6ab8VoUQfBo/1UxWI1hcA1aHn4tZkgg4THaEwEjFJE=
Subject key identifier:   D4:A3:25:79:D7:C8:88:FF:5A:18:E8:49:0B:2C:35:D2:A3:10:60:CA
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       6A4EA988A5CB7DBD1901E88553FDDA4B8188B402
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32342d3234203d3e20323635323035.roa
Signing time:             Mon 22 Jan 2024 19:31:16 +0000
ROA not before:           Mon 22 Jan 2024 19:26:16 +0000
ROA not after:            Mon 20 Jan 2025 19:31:16 +0000
asID:                     265205
IP address blocks:        167.250.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4e:a9:88:a5:cb:7d:bd:19:01:e8:85:53:fd:da:4b:81:88:b4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Jan 22 19:26:16 2024 GMT
            Not After : Jan 20 19:31:16 2025 GMT
        Subject: CN=D4A32579D7C888FF5A18E8490B2C35D2A31060CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:d5:52:18:1e:fc:d0:16:8a:d5:b0:87:dc:
                    82:b9:d9:4d:41:f6:00:e1:ac:d6:ce:09:df:be:47:
                    af:cc:83:91:c4:31:f2:fe:df:02:3e:b2:af:ca:15:
                    c7:55:d9:2d:00:f9:29:9d:d6:64:f1:e6:1e:a3:ec:
                    c8:5b:23:bf:74:8a:4c:62:b7:34:3c:cb:94:db:3e:
                    0c:b8:ac:26:30:d5:b2:40:df:f2:2e:ff:0c:10:43:
                    f6:d7:7b:56:16:0d:69:0c:47:2e:d0:c9:26:02:04:
                    bf:a8:b9:8f:7d:da:3f:ea:66:05:d5:6b:98:a1:73:
                    0c:9b:5c:82:f9:f2:e0:da:76:a3:77:2a:5c:a9:1a:
                    71:4f:16:07:50:6d:87:73:4d:80:85:b3:c8:4f:eb:
                    f2:ff:cd:51:ca:39:ea:6f:e9:b2:5d:d9:4f:19:37:
                    8e:ed:f1:8f:73:82:77:5b:c6:77:10:73:e5:0c:36:
                    89:ca:04:e6:d5:6e:37:ec:61:ed:79:ea:dd:3c:c0:
                    50:26:a3:7c:a4:67:e5:bb:8f:c7:7b:bb:35:4e:8a:
                    2b:71:10:a7:2c:04:36:2b:f6:9f:85:01:f4:23:df:
                    44:7c:61:3c:77:1d:70:44:d1:e6:7f:90:7d:d5:e3:
                    83:4b:46:9b:4b:44:2a:bf:bd:4f:b0:fb:e6:ed:7e:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:25:79:D7:C8:88:FF:5A:18:E8:49:0B:2C:35:D2:A3:10:60:CA
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e37302e302f32342d3234203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:25:1b:70:9e:d7:3a:de:a2:b1:8c:8a:4c:bc:2b:f0:83:1f:
         82:7b:9c:7d:49:ae:bb:e2:a1:92:48:ce:5d:b6:70:f4:15:93:
         1f:b5:09:29:a9:94:28:dd:49:88:bb:5f:1d:85:25:06:f7:e5:
         59:c4:2b:dc:4b:80:da:a1:41:ba:2a:c9:1e:84:3a:c0:f5:8a:
         42:a7:d4:c8:7f:f2:4a:b5:f7:b7:a3:ba:9a:a5:a4:0d:00:64:
         91:c8:f5:fd:82:6d:6a:d8:38:08:7b:01:83:f6:73:fa:65:a2:
         2a:88:87:0f:d2:85:f2:df:c1:df:8d:4b:e8:16:82:e8:4b:10:
         90:72:3e:06:bf:a3:63:b5:e6:ec:a2:e9:de:a7:31:a4:f2:65:
         0e:3e:49:cd:ef:1a:b8:ce:72:01:f1:55:fb:52:24:b4:db:f7:
         d3:c7:8c:52:ab:51:7d:5c:37:4e:05:8c:58:1c:ca:f0:33:97:
         53:a3:77:3c:9e:91:a2:22:4e:23:fa:cf:bf:21:cf:07:87:5c:
         3f:29:28:c6:d3:c3:9c:20:00:9f:22:46:da:5f:ef:6b:8a:21:
         6b:89:79:b5:2b:30:62:3b:4e:bc:b1:e7:75:0b:b8:66:dd:18:
         81:e5:c7:cf:dc:ce:55:9e:76:87:fd:39:bf:f2:8d:99:71:91:
         f5:e0:a8:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUak6piKXLfb0ZAeiFU/3aS4GItAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2QjMwNDFCMjkzMThBQjk5QTNBMDQ2OEQzMThDQTFF
MEUyNDI3NjAeFw0yNDAxMjIxOTI2MTZaFw0yNTAxMjAxOTMxMTZaMDMxMTAvBgNV
BAMTKEQ0QTMyNTc5RDdDODg4RkY1QTE4RTg0OTBCMkMzNUQyQTMxMDYwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85tVSGB780BaK1bCH3IK52U1B
9gDhrNbOCd++R6/Mg5HEMfL+3wI+sq/KFcdV2S0A+Smd1mTx5h6j7MhbI790ikxi
tzQ8y5TbPgy4rCYw1bJA3/Iu/wwQQ/bXe1YWDWkMRy7QySYCBL+ouY992j/qZgXV
a5ihcwybXIL58uDadqN3KlypGnFPFgdQbYdzTYCFs8hP6/L/zVHKOepv6bJd2U8Z
N47t8Y9zgndbxncQc+UMNonKBObVbjfsYe156t08wFAmo3ykZ+W7j8d7uzVOiitx
EKcsBDYr9p+FAfQj30R8YTx3HXBE0eZ/kH3V44NLRptLRCq/vU+w++btfigFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1KMledfIiP9aGOhJCyw10qMQYMowHwYDVR0j
BBgwFoAUdmswQbKTGKuZo6BGjTGMoeDiQnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlMyMVV4U0d2N0tMQm1tWFdpOXBkSmtyb1pWUXphTHJ6WVh0Qkp6Sk1y
QWcvMS83NjZCMzA0MUIyOTMxOEFCOTlBM0EwNDY4RDMxOENBMUUwRTI0Mjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2NkIzMDQxQjI5MzE4QUI5
OUEzQTA0NjhEMzE4Q0ExRTBFMjQyNzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTMjFVeFNHdjdLTEJtbVhXaTlwZEprcm9aVlF6YUxyellYdEJKekpNckFnLzEv
MzEzNjM3MmUzMjM1MzAyZTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+kYwDQYJKoZIhvcNAQELBQADggEBAIYlG3Ce
1zreorGMiky8K/CDH4J7nH1JrrvioZJIzl22cPQVkx+1CSmplCjdSYi7Xx2FJQb3
5VnEK9xLgNqhQboqyR6EOsD1ikKn1Mh/8kq197ejupqlpA0AZJHI9f2CbWrYOAh7
AYP2c/ploiqIhw/ShfLfwd+NS+gWguhLEJByPga/o2O15uyi6d6nMaTyZQ4+Sc3v
GrjOcgHxVftSJLTb99PHjFKrUX1cN04FjFgcyvAzl1OjdzyekaIiTiP6z78hzweH
XD8pKMbTw5wgAJ8iRtpf72uKIWuJebUrMGI7Tryx53ULuGbdGIHlx8/czlWedof9
Ob/yjZlxkfXgqAc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org