Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39382e302f32332d3233203d3e20323636333235.roa
File:                     3137302e3233382e39382e302f32332d3233203d3e20323636333235.roa (raw, json)
Hash identifier:          10gJZ1uymb/qgy6SWDIdms+oLCrH4lX94rteGrc1ims=
Subject key identifier:   FD:63:D0:08:83:75:03:52:47:07:4D:69:2D:A1:E6:43:11:0E:A0:B1
Certificate issuer:       /CN=188A046D444E10CED499927BB4D6C4C4507B28DD
Certificate serial:       71F50512B12C190F8E411A54F96AE4900892BC34
Authority key identifier: 18:8A:04:6D:44:4E:10:CE:D4:99:92:7B:B4:D6:C4:C4:50:7B:28:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/188A046D444E10CED499927BB4D6C4C4507B28DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39382e302f32332d3233203d3e20323636333235.roa
Signing time:             Sat 04 Jun 2022 11:19:01 +0000
ROA not before:           Sat 04 Jun 2022 11:14:01 +0000
ROA not after:            Sat 03 Jun 2023 11:19:01 +0000
asID:                     266325
IP address blocks:        170.238.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:05:12:b1:2c:19:0f:8e:41:1a:54:f9:6a:e4:90:08:92:bc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188A046D444E10CED499927BB4D6C4C4507B28DD
        Validity
            Not Before: Jun  4 11:14:01 2022 GMT
            Not After : Jun  3 11:19:01 2023 GMT
        Subject: CN=FD63D0088375035247074D692DA1E643110EA0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:cc:1c:d0:c1:2d:7d:56:33:53:8e:c5:bd:
                    b7:2b:b5:dc:a4:58:88:1f:32:83:e3:25:e8:27:51:
                    df:00:78:a9:eb:f1:f2:41:37:22:04:7c:ba:76:5d:
                    74:a3:bd:1d:10:b5:87:4a:62:2c:d4:15:b9:46:b5:
                    45:4d:05:c3:72:b9:36:93:ce:fe:3d:63:ef:f8:cb:
                    6f:d3:ff:1a:ab:d2:4b:75:d3:06:87:8d:7e:cd:45:
                    52:89:27:75:ef:d5:a4:c2:91:3b:e9:41:4e:04:e6:
                    96:59:24:6a:13:25:69:19:ae:fa:52:f5:ba:09:5c:
                    ea:78:5c:2a:fe:97:02:38:b6:9b:7a:32:ca:5b:ec:
                    81:94:1c:32:91:dd:b7:c7:c1:4f:34:95:49:80:78:
                    da:d7:93:83:fd:de:03:cc:2c:f3:03:9d:29:76:35:
                    c6:9d:de:cf:83:9d:96:91:5f:ec:a4:b9:06:e0:f5:
                    f2:fe:dc:f6:2a:92:3c:b4:8e:d1:cf:b1:4c:33:76:
                    fd:c6:cb:49:15:be:08:7f:ee:d6:71:cc:99:a3:16:
                    7e:ea:b9:a8:f9:2b:ba:67:6e:bb:c5:7d:86:31:b4:
                    e9:d2:ea:5c:24:d9:7a:a8:a6:e3:22:7d:fc:34:93:
                    03:b8:80:35:53:54:cb:f3:35:b9:ae:1c:ad:36:71:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:D0:08:83:75:03:52:47:07:4D:69:2D:A1:E6:43:11:0E:A0:B1
            X509v3 Authority Key Identifier:
                keyid:18:8A:04:6D:44:4E:10:CE:D4:99:92:7B:B4:D6:C4:C4:50:7B:28:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/188A046D444E10CED499927BB4D6C4C4507B28DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/188A046D444E10CED499927BB4D6C4C4507B28DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39382e302f32332d3233203d3e20323636333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:15:74:3a:ca:a4:a5:b1:1b:9c:51:9c:21:5b:2d:2a:57:91:
         3d:70:09:00:97:1e:03:68:9b:7c:4f:5e:2e:dd:6c:f4:e5:f7:
         6b:70:2c:b9:f2:4c:7c:cb:18:c7:29:ed:90:62:ca:f7:c4:a6:
         bf:75:ea:42:95:4b:7a:48:2e:13:69:de:8d:a6:7d:9c:6d:0e:
         7c:fb:ac:a0:89:d6:ab:c6:05:cb:21:ac:97:34:3a:39:d2:02:
         96:6c:71:50:98:ba:f2:bf:e3:f1:9c:dc:08:3c:88:64:01:79:
         cc:c5:89:2c:56:9b:33:5c:b2:4a:84:dd:64:27:a7:47:9a:2a:
         9c:7d:9a:bc:c6:e4:31:d6:93:1e:4d:63:b6:8e:7d:05:a9:76:
         08:da:b3:20:77:42:2e:9e:b5:6a:4a:73:68:89:23:44:ac:b7:
         40:ee:0b:74:57:43:33:cf:b1:8b:f5:bd:3e:a7:d6:7c:b7:18:
         88:f0:00:57:0b:91:e8:4b:e1:0c:e8:bf:b2:f8:86:e1:2e:e5:
         ab:71:65:b4:e9:29:23:3b:6d:98:b7:e8:9c:8f:c2:f2:8d:16:
         82:16:a9:eb:7b:c2:cb:4e:ad:99:68:41:b1:aa:bd:80:02:1a:
         bf:5a:aa:16:ab:68:51:10:82:cd:a6:3f:e7:b8:c2:21:58:89:
         39:7b:e8:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcfUFErEsGQ+OQRpU+WrkkAiSvDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4QTA0NkQ0NDRFMTBDRUQ0OTk5MjdCQjRENkM0QzQ1
MDdCMjhERDAeFw0yMjA2MDQxMTE0MDFaFw0yMzA2MDMxMTE5MDFaMDMxMTAvBgNV
BAMTKEZENjNEMDA4ODM3NTAzNTI0NzA3NEQ2OTJEQTFFNjQzMTEwRUEwQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx8wc0MEtfVYzU47Fvbcrtdyk
WIgfMoPjJegnUd8AeKnr8fJBNyIEfLp2XXSjvR0QtYdKYizUFblGtUVNBcNyuTaT
zv49Y+/4y2/T/xqr0kt10waHjX7NRVKJJ3Xv1aTCkTvpQU4E5pZZJGoTJWkZrvpS
9boJXOp4XCr+lwI4tpt6Mspb7IGUHDKR3bfHwU80lUmAeNrXk4P93gPMLPMDnSl2
Ncad3s+DnZaRX+ykuQbg9fL+3PYqkjy0jtHPsUwzdv3Gy0kVvgh/7tZxzJmjFn7q
uaj5K7pnbrvFfYYxtOnS6lwk2XqopuMiffw0kwO4gDVTVMvzNbmuHK02cav3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/WPQCIN1A1JHB01pLaHmQxEOoLEwHwYDVR0j
BBgwFoAUGIoEbUROEM7UmZJ7tNbExFB7KN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmlwQjJOM1lwQWNjWWR1bThBdnV0TEF3Z1ROMVJVeXdBUlo0UEZBdGh1
UGEvMC8xODhBMDQ2RDQ0NEUxMENFRDQ5OTkyN0JCNEQ2QzRDNDUwN0IyOERELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4OEEwNDZENDQ0RTEwQ0VE
NDk5OTI3QkI0RDZDNEM0NTA3QjI4REQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpcEIyTjNZcEFjY1lkdW04QXZ1dExBd2dUTjFSVXl3QVJaNFBGQXRodVBhLzAv
MzEzNzMwMmUzMjMzMzgyZTM5MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq7mIwDQYJKoZIhvcNAQELBQADggEBAJUVdDrK
pKWxG5xRnCFbLSpXkT1wCQCXHgNom3xPXi7dbPTl92twLLnyTHzLGMcp7ZBiyvfE
pr916kKVS3pILhNp3o2mfZxtDnz7rKCJ1qvGBcshrJc0OjnSApZscVCYuvK/4/Gc
3Ag8iGQBeczFiSxWmzNcskqE3WQnp0eaKpx9mrzG5DHWkx5NY7aOfQWpdgjasyB3
Qi6etWpKc2iJI0Sst0DuC3RXQzPPsYv1vT6n1ny3GIjwAFcLkehL4Qzov7L4huEu
5atxZbTpKSM7bZi36JyPwvKNFoIWqet7wstOrZloQbGqvYACGr9aqharaFEQgs2m
P+e4wiFYiTl76GE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org