Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32342d3234203d3e20323634343931.roa
File:                     3137302e3234372e3235342e302f32342d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          r5FVtmR2J9U/fZlJQ02s5WyoASPEcu632jEy+wVrd38=
Subject key identifier:   D0:43:05:CF:01:84:42:31:5F:7D:EE:37:1A:55:59:5B:F1:57:41:45
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       3DC2EEB5C42048EF6782B3A8F4B0ECE4FB7D0152
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32342d3234203d3e20323634343931.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     264491
IP address blocks:        170.247.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c2:ee:b5:c4:20:48:ef:67:82:b3:a8:f4:b0:ec:e4:fb:7d:01:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=D04305CF018442315F7DEE371A55595BF1574145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:0f:b8:00:9b:9f:84:d0:a8:59:6b:e3:d1:
                    13:3e:cd:7c:a6:0d:15:06:03:8a:60:e5:5b:37:03:
                    73:28:e6:62:8a:d0:4d:d4:06:6d:de:50:ed:c0:e2:
                    4d:6c:39:48:c1:0f:9c:30:4c:8a:ce:df:11:82:00:
                    6d:72:3d:ae:a1:65:11:d5:88:5d:91:61:c8:12:85:
                    bf:d4:ea:8d:6e:3a:cd:09:74:cd:91:fe:03:5e:0a:
                    42:e1:e6:e6:d5:4d:61:de:93:f0:06:74:54:e1:af:
                    12:88:57:a4:26:9b:8c:eb:0a:51:55:3c:64:9a:27:
                    cf:6f:0f:d3:2b:6f:39:9b:1e:24:98:6e:97:5f:ee:
                    fb:77:29:fa:f2:e4:04:49:b3:a4:9c:dd:0c:25:89:
                    d9:47:1d:d5:eb:f5:b8:fa:5f:fc:f7:86:21:a5:4e:
                    5f:89:f3:da:d6:89:62:a2:62:9f:5d:11:88:e4:25:
                    6f:54:34:a8:38:e9:cb:e1:7b:9e:1e:a9:eb:a3:b8:
                    67:23:44:40:30:59:18:5a:4c:0d:6f:b2:5c:88:b5:
                    dc:a8:e6:6b:bb:67:37:2f:e7:1b:71:cb:c6:91:61:
                    99:be:c6:2e:c3:4f:1a:9d:84:52:35:0c:01:1e:02:
                    b7:f2:59:fe:27:b7:fb:0e:c6:0c:e1:3c:31:f3:9c:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:05:CF:01:84:42:31:5F:7D:EE:37:1A:55:59:5B:F1:57:41:45
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235342e302f32342d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:29:a4:56:58:dd:ab:d3:47:f0:3e:65:e0:99:b6:e0:f2:
         f2:6e:b3:fc:4b:2e:59:32:29:82:b4:c6:22:c6:86:30:22:cf:
         66:91:d8:07:ec:b1:04:a5:5c:06:e9:d3:8d:17:b4:d2:9f:80:
         e4:5d:81:5f:ae:5d:90:12:cd:ed:6c:ea:45:c8:18:6b:3d:8a:
         91:0a:fe:7e:8c:9b:c5:8e:57:60:94:17:b4:b6:5d:0e:c5:1a:
         9f:83:d8:2d:a5:18:61:69:30:df:cc:6b:52:a9:bc:4f:98:cf:
         36:88:da:9f:82:84:f7:6b:a2:9a:bc:73:57:fd:3c:f7:0a:f6:
         2d:c4:59:ad:b3:01:e0:8f:4d:d0:42:36:f3:59:79:f9:e6:02:
         83:48:ee:29:ad:60:a5:ae:51:c3:e5:7e:60:fe:40:c0:ce:ca:
         e6:65:40:6e:3f:f1:81:40:2b:12:69:5f:71:04:29:35:72:81:
         b3:df:d5:37:70:3f:a0:18:22:6a:96:cc:9a:3f:95:6c:15:ee:
         55:91:04:8f:f2:37:64:53:73:a9:97:2e:30:02:a3:e2:2d:b2:
         9b:6c:f7:80:3a:4c:66:b7:cc:ab:a1:3d:1d:43:fd:07:af:b9:
         ef:28:8f:7b:ed:72:17:58:6f:59:5e:73:b7:7d:c7:d9:a3:59:
         ee:f8:c9:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPcLutcQgSO9ngrOo9LDs5Pt9AVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5MjBFMEZBODY4ODY0NTEzMzcwQ0NDQTQ2NzFGNkI0
M0I2NUYyMjAeFw0yMjAyMDcxMjA0MjBaFw0yMzAyMDYxMjA5MjBaMDMxMTAvBgNV
BAMTKEQwNDMwNUNGMDE4NDQyMzE1RjdERUUzNzFBNTU1OTVCRjE1NzQxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDw+4AJufhNCoWWvj0RM+zXym
DRUGA4pg5Vs3A3Mo5mKK0E3UBm3eUO3A4k1sOUjBD5wwTIrO3xGCAG1yPa6hZRHV
iF2RYcgShb/U6o1uOs0JdM2R/gNeCkLh5ubVTWHek/AGdFThrxKIV6Qmm4zrClFV
PGSaJ89vD9MrbzmbHiSYbpdf7vt3Kfry5ARJs6Sc3QwlidlHHdXr9bj6X/z3hiGl
Tl+J89rWiWKiYp9dEYjkJW9UNKg46cvhe54eqeujuGcjREAwWRhaTA1vslyItdyo
5mu7Zzcv5xtxy8aRYZm+xi7DTxqdhFI1DAEeArfyWf4nt/sOxgzhPDHznA7FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0EMFzwGEQjFffe43GlVZW/FXQUUwHwYDVR0j
BBgwFoAUN5IOD6hohkUTNwzMpGcfa0O2XyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC8zNzkyMEUwRkE4Njg4NjQ1MTMzNzBDQ0NBNDY3MUY2QjQzQjY1RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3OTIwRTBGQTg2ODg2NDUx
MzM3MENDQ0E0NjcxRjZCNDNCNjVGMjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr3/jANBgkqhkiG9w0BAQsFAAOCAQEACxkp
pFZY3avTR/A+ZeCZtuDy8m6z/EsuWTIpgrTGIsaGMCLPZpHYB+yxBKVcBunTjRe0
0p+A5F2BX65dkBLN7WzqRcgYaz2KkQr+foybxY5XYJQXtLZdDsUan4PYLaUYYWkw
38xrUqm8T5jPNojan4KE92uimrxzV/089wr2LcRZrbMB4I9N0EI281l5+eYCg0ju
Ka1gpa5Rw+V+YP5AwM7K5mVAbj/xgUArEmlfcQQpNXKBs9/VN3A/oBgiapbMmj+V
bBXuVZEEj/I3ZFNzqZcuMAKj4i2ym2z3gDpMZrfMq6E9HUP9B6+57yiPe+1yF1hv
WV5zt33H2aNZ7vjJaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org