Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
File:                     3137302e302e3130302e302f32322d3232203d3e20323634393637.roa (raw, json)
Hash identifier:          toWDiMY7n96wU31YSduXzpxWEKRvbKsTnM79tpuzQ4E=
Subject key identifier:   D3:96:CA:B7:6F:09:06:11:4E:C9:FF:37:09:32:7C:20:87:F1:AB:64
Certificate issuer:       /CN=12A563E6CB281950568A88ACEA43BC4A417021A9
Certificate serial:       0D456F6AA62C099BFF08749E61758F594D09ECC8
Authority key identifier: 12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
Signing time:             Thu 21 Jul 2022 20:21:28 +0000
ROA not before:           Thu 21 Jul 2022 20:16:28 +0000
ROA not after:            Thu 20 Jul 2023 20:21:28 +0000
asID:                     264967
IP address blocks:        170.0.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:45:6f:6a:a6:2c:09:9b:ff:08:74:9e:61:75:8f:59:4d:09:ec:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A563E6CB281950568A88ACEA43BC4A417021A9
        Validity
            Not Before: Jul 21 20:16:28 2022 GMT
            Not After : Jul 20 20:21:28 2023 GMT
        Subject: CN=D396CAB76F0906114EC9FF3709327C2087F1AB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:96:ab:51:80:b1:e2:8a:aa:e8:09:aa:00:
                    43:11:c0:29:e1:2c:54:53:be:02:d1:68:c1:40:b4:
                    29:53:16:40:45:4d:c7:7a:8e:15:dd:6d:ca:57:62:
                    20:f9:0a:73:19:31:13:a0:54:d2:36:fd:8d:51:50:
                    c2:11:ba:bb:92:a8:28:20:a4:f1:43:09:0f:d3:c7:
                    fd:0a:2f:36:ed:49:7c:31:0c:5f:85:5d:e3:11:9f:
                    27:f2:46:7e:d0:d8:14:66:b5:a8:d7:88:27:b2:f7:
                    71:48:a7:ef:2f:ee:11:c5:69:c4:1e:07:40:a4:34:
                    f0:3a:34:be:43:10:2d:99:c6:71:ab:bc:43:d9:9b:
                    78:ef:d9:ec:37:8b:47:89:f8:ee:14:c6:a2:81:20:
                    71:1d:7f:fc:b0:b4:dd:75:a4:c1:20:1f:aa:dd:06:
                    e7:1e:95:72:64:bc:62:5d:df:4e:ce:d8:73:fb:5f:
                    85:07:50:89:c2:09:67:6c:21:91:b3:b5:ba:45:c4:
                    0b:24:cc:f2:14:34:8e:0d:c9:b2:be:5d:4b:12:d9:
                    9d:e0:ea:9a:8e:c6:29:f9:8b:f3:02:2a:dd:6f:53:
                    63:6d:d8:11:60:d8:63:3c:08:b1:dc:19:1b:c9:ef:
                    a5:dc:2f:82:63:26:c4:a1:79:d3:1e:fa:cf:b1:6a:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:CA:B7:6F:09:06:11:4E:C9:FF:37:09:32:7C:20:87:F1:AB:64
            X509v3 Authority Key Identifier:
                keyid:12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:63:be:98:68:66:e4:62:18:76:b4:20:90:2d:af:d0:0b:14:
         1d:03:66:a0:0b:d5:f6:c8:61:7d:e9:ec:43:9f:e5:69:c4:b4:
         b3:23:05:ad:a8:16:80:f0:7d:db:43:39:c1:97:ed:d4:a5:f5:
         f6:da:94:76:28:e8:5d:10:11:45:53:62:1f:bc:8f:90:b3:78:
         bd:0c:19:d7:5c:10:9e:81:cb:0a:da:9c:43:8a:92:2d:2d:f7:
         65:b2:46:6b:29:60:ff:1b:53:bb:a1:86:da:ca:39:69:bf:7d:
         60:34:af:c6:9b:b0:2d:ed:a3:6f:35:3c:09:36:2c:59:6f:04:
         60:75:63:1b:01:3e:d4:bc:95:f2:6e:1d:ab:d4:f4:e3:c5:9e:
         ee:79:56:67:02:8f:c1:9f:b6:01:ca:71:6d:b3:e9:b4:a9:6d:
         38:32:0e:04:58:23:62:f8:e1:65:b1:3d:fc:5b:b1:b9:69:ba:
         17:28:85:2f:df:e2:b0:8d:73:1a:a2:63:18:3f:34:2c:fd:3f:
         b0:e8:ac:e1:df:6b:05:d6:c4:a6:d0:b4:13:ba:e1:3b:19:6e:
         ff:4c:a4:34:99:00:69:12:65:1b:79:d6:b1:b8:46:f0:7e:cd:
         33:c4:97:13:df:82:50:ce:b5:34:89:dd:f2:c4:10:6f:17:08:
         58:69:58:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDUVvaqYsCZv/CHSeYXWPWU0J7MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJBNTYzRTZDQjI4MTk1MDU2OEE4OEFDRUE0M0JDNEE0
MTcwMjFBOTAeFw0yMjA3MjEyMDE2MjhaFw0yMzA3MjAyMDIxMjhaMDMxMTAvBgNV
BAMTKEQzOTZDQUI3NkYwOTA2MTE0RUM5RkYzNzA5MzI3QzIwODdGMUFCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyparUYCx4oqq6AmqAEMRwCnh
LFRTvgLRaMFAtClTFkBFTcd6jhXdbcpXYiD5CnMZMROgVNI2/Y1RUMIRuruSqCgg
pPFDCQ/Tx/0KLzbtSXwxDF+FXeMRnyfyRn7Q2BRmtajXiCey93FIp+8v7hHFacQe
B0CkNPA6NL5DEC2ZxnGrvEPZm3jv2ew3i0eJ+O4UxqKBIHEdf/ywtN11pMEgH6rd
BucelXJkvGJd307O2HP7X4UHUInCCWdsIZGztbpFxAskzPIUNI4NybK+XUsS2Z3g
6pqOxin5i/MCKt1vU2Nt2BFg2GM8CLHcGRvJ76XcL4JjJsShedMe+s+xakknAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU05bKt28JBhFOyf83CTJ8IIfxq2QwHwYDVR0j
BBgwFoAUEqVj5ssoGVBWiois6kO8SkFwIakwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pD
b2kvMC8xMkE1NjNFNkNCMjgxOTUwNTY4QTg4QUNFQTQzQkM0QTQxNzAyMUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyQTU2M0U2Q0IyODE5NTA1
NjhBODhBQ0VBNDNCQzRBNDE3MDIxQTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNRlZGZFVoV0ZCS1phNWd1S1NxUGluUkdpTW5uR3dqcGlVblVSYkdaQ29pLzAv
MzEzNzMwMmUzMDJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgBkMA0GCSqGSIb3DQEBCwUAA4IBAQCIY76YaGbk
Yhh2tCCQLa/QCxQdA2agC9X2yGF96exDn+VpxLSzIwWtqBaA8H3bQznBl+3UpfX2
2pR2KOhdEBFFU2IfvI+Qs3i9DBnXXBCegcsK2pxDipItLfdlskZrKWD/G1O7oYba
yjlpv31gNK/Gm7At7aNvNTwJNixZbwRgdWMbAT7UvJXybh2r1PTjxZ7ueVZnAo/B
n7YBynFts+m0qW04Mg4EWCNi+OFlsT38W7G5aboXKIUv3+KwjXMaomMYPzQs/T+w
6Kzh32sF1sSm0LQTuuE7GW7/TKQ0mQBpEmUbedaxuEbwfs0zxJcT34JQzrU0id3y
xBBvFwhYaViG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org