Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32332d3233203d3e20323635303632.roa
File:                     3137302e3233312e3135362e302f32332d3233203d3e20323635303632.roa (raw, json)
Hash identifier:          tRY3JTPK2+7c78hhx5YiI3j08m4fU8a3LI/33UTvMxU=
Subject key identifier:   3B:C9:23:05:02:D1:FB:03:9A:C4:12:50:F0:29:8D:7D:14:FC:8F:A9
Certificate issuer:       /CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
Certificate serial:       03038F7264ADE54259F1BAC26AF0DED1A361EDC5
Authority key identifier: 07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32332d3233203d3e20323635303632.roa
Signing time:             Mon 11 Sep 2023 20:47:25 +0000
ROA not before:           Mon 11 Sep 2023 20:42:25 +0000
ROA not after:            Mon 09 Sep 2024 20:47:25 +0000
asID:                     265062
IP address blocks:        170.231.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:03:8f:72:64:ad:e5:42:59:f1:ba:c2:6a:f0:de:d1:a3:61:ed:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
        Validity
            Not Before: Sep 11 20:42:25 2023 GMT
            Not After : Sep  9 20:47:25 2024 GMT
        Subject: CN=3BC9230502D1FB039AC41250F0298D7D14FC8FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:bd:b1:55:3d:74:77:28:38:45:0b:1f:dc:
                    a0:f6:75:2c:33:72:21:dd:b7:9a:5a:c7:06:d3:34:
                    ac:0e:6f:14:77:15:cc:55:d2:a3:c9:14:51:ef:09:
                    31:74:7e:fa:d3:ae:b1:83:61:1f:b1:01:81:38:18:
                    09:f2:34:19:82:69:ce:28:2f:65:dd:01:dd:7b:90:
                    ea:4e:93:26:9d:b3:b2:b1:2d:18:b4:65:c9:52:c9:
                    c2:cd:46:be:f9:1e:5d:32:c7:96:cb:e8:aa:fc:ae:
                    d4:d8:1b:12:73:f8:9c:a3:5d:86:48:71:6c:0f:cf:
                    f2:86:3c:60:f3:95:b5:d8:a3:92:db:50:13:e2:ba:
                    b9:ce:8b:3a:db:52:5e:2f:f6:b3:5c:8b:a9:14:e5:
                    62:cc:7a:a7:70:d3:76:e7:80:ef:a4:5b:35:81:ea:
                    84:d6:6e:b2:e9:c8:c3:7b:25:b4:3b:55:3d:35:8e:
                    8f:c1:6c:bd:90:3c:e6:1f:8f:68:d1:e6:d3:9d:06:
                    a4:05:32:9b:df:a6:0e:a1:5f:46:ba:f4:63:13:07:
                    45:79:2a:a3:13:c2:fb:ca:9f:92:02:4e:58:ff:24:
                    11:f6:e2:6a:85:a2:2a:82:c5:46:e1:2c:d9:63:06:
                    c5:68:01:b0:ac:e8:a3:bc:ba:ae:7b:38:fb:5b:b5:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:23:05:02:D1:FB:03:9A:C4:12:50:F0:29:8D:7D:14:FC:8F:A9
            X509v3 Authority Key Identifier:
                keyid:07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32332d3233203d3e20323635303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:12:3a:0c:59:13:8a:c9:4f:9b:e7:de:4c:db:1e:d7:a7:
         80:82:e3:ee:f7:6a:21:6e:33:53:f7:b6:d0:5d:f1:41:36:cb:
         9f:4e:3e:2c:e9:4e:88:24:0c:aa:34:b3:6e:bc:43:bb:9a:b5:
         ac:17:18:25:ee:96:b3:12:25:9f:3e:1d:49:72:f3:ed:de:f7:
         da:31:e4:2b:de:60:86:78:cf:7a:e4:1d:c1:bb:30:52:6a:65:
         c1:43:57:62:ad:06:2e:e3:e3:fe:a7:cd:9d:c7:c8:97:08:cd:
         b0:7a:43:73:ce:73:95:9c:a7:c3:bb:36:e6:8b:5b:90:dc:2d:
         b6:80:27:ec:4a:48:ae:90:b3:ea:8b:17:bd:cd:ef:38:ec:29:
         5a:fa:27:4b:69:8f:b6:71:56:bd:ea:7e:de:05:a3:0c:0d:b9:
         2c:13:63:ac:82:1b:03:d8:1c:55:bb:e4:4c:00:2f:2f:be:bc:
         2a:89:99:41:2d:c1:32:9f:20:36:81:de:3b:84:ba:56:b3:81:
         cc:8a:42:34:c7:7c:03:f4:63:6b:6f:97:2a:1c:fa:6b:85:28:
         96:cb:d5:c0:9f:fc:cf:de:76:25:d3:d5:13:eb:ea:9e:de:69:
         12:15:08:27:f7:cd:ed:e4:00:40:8a:b8:dd:7d:2c:86:76:a2:
         78:9f:da:7f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAwOPcmSt5UJZ8brCavDe0aNh7cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDczRkZEREI2OEY0MDczRkQxMEMyREZGRjRFREZDN0ZG
OTBGMUJCOTAeFw0yMzA5MTEyMDQyMjVaFw0yNDA5MDkyMDQ3MjVaMDMxMTAvBgNV
BAMTKDNCQzkyMzA1MDJEMUZCMDM5QUM0MTI1MEYwMjk4RDdEMTRGQzhGQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXL2xVT10dyg4RQsf3KD2dSwz
ciHdt5paxwbTNKwObxR3FcxV0qPJFFHvCTF0fvrTrrGDYR+xAYE4GAnyNBmCac4o
L2XdAd17kOpOkyads7KxLRi0ZclSycLNRr75Hl0yx5bL6Kr8rtTYGxJz+JyjXYZI
cWwPz/KGPGDzlbXYo5LbUBPiurnOizrbUl4v9rNci6kU5WLMeqdw03bngO+kWzWB
6oTWbrLpyMN7JbQ7VT01jo/BbL2QPOYfj2jR5tOdBqQFMpvfpg6hX0a69GMTB0V5
KqMTwvvKn5ICTlj/JBH24mqFoiqCxUbhLNljBsVoAbCs6KO8uq57OPtbtb5LAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUO8kjBQLR+wOaxBJQ8CmNfRT8j6kwHwYDVR0j
BBgwFoAUBz/922j0Bz/RDC3/9O38f/kPG7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw
WjQvMC8wNzNGRkREQjY4RjQwNzNGRDEwQzJERkZGNEVERkM3RkY5MEYxQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3M0ZGRERCNjhGNDA3M0ZE
MTBDMkRGRkY0RURGQzdGRjkwRjFCQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarnnDANBgkqhkiG9w0BAQsFAAOCAQEAoSwS
OgxZE4rJT5vn3kzbHtengILj7vdqIW4zU/e20F3xQTbLn04+LOlOiCQMqjSzbrxD
u5q1rBcYJe6WsxIlnz4dSXLz7d732jHkK95ghnjPeuQdwbswUmplwUNXYq0GLuPj
/qfNncfIlwjNsHpDc85zlZynw7s25otbkNwttoAn7EpIrpCz6osXvc3vOOwpWvon
S2mPtnFWvep+3gWjDA25LBNjrIIbA9gcVbvkTAAvL768KomZQS3BMp8gNoHeO4S6
VrOBzIpCNMd8A/Rja2+XKhz6a4UolsvVwJ/8z952JdPVE+vqnt5pEhUIJ/fN7eQA
QIq43X0shnaieJ/afw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org