Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139332e302f32342d3234203d3e203631383332.roa
File:                     3137302e38312e3139332e302f32342d3234203d3e203631383332.roa (raw, json)
Hash identifier:          WesAg9TcLOUax0DZf6zd7u0VzxgnRGd5EZfOslSSKfU=
Subject key identifier:   2F:6E:57:2D:A5:7A:D7:D6:0E:B1:09:67:5E:7F:DD:D9:FE:37:2B:78
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       5858603AB7674243E2D29A8548CA99BD5AD64187
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139332e302f32342d3234203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:46 +0000
ROA not before:           Thu 05 Oct 2023 17:46:46 +0000
ROA not after:            Thu 03 Oct 2024 17:51:46 +0000
asID:                     61832
IP address blocks:        170.81.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:60:3a:b7:67:42:43:e2:d2:9a:85:48:ca:99:bd:5a:d6:41:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:46 2023 GMT
            Not After : Oct  3 17:51:46 2024 GMT
        Subject: CN=2F6E572DA57AD7D60EB109675E7FDDD9FE372B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:85:61:89:b4:6b:b9:a0:2f:b5:1a:74:13:
                    d2:86:16:f5:4e:88:1e:ae:a7:a1:fe:1a:43:20:c0:
                    18:46:ce:51:c6:bd:69:cc:90:18:f1:c4:6f:a6:bd:
                    91:b9:d4:8a:53:44:97:47:47:a2:df:70:af:d1:4a:
                    91:5a:3d:12:0e:28:cc:7e:f1:8f:a8:16:1d:71:de:
                    ae:a5:52:db:3e:36:96:b5:9a:b7:a6:06:8a:05:70:
                    64:9e:bb:87:64:19:4f:48:ba:f5:a8:25:2d:c1:eb:
                    5f:1e:93:8e:1f:b4:fa:a9:1a:77:73:06:06:ff:07:
                    cc:e8:bf:a5:ce:48:d1:9e:35:4d:79:a9:32:3b:73:
                    ed:72:23:f0:bb:b1:d2:79:db:9d:63:f3:5c:cb:f0:
                    d3:c0:38:c3:1b:bd:15:60:c3:7d:2e:27:7a:5d:bb:
                    e1:f7:be:95:d7:b0:0a:40:cf:18:2b:03:14:8d:91:
                    82:d3:cb:53:1e:11:41:4e:e8:4c:1d:66:16:77:0a:
                    a4:ec:ea:79:8a:ce:66:f1:d0:64:b8:a2:06:12:5b:
                    ed:8a:2e:4c:ca:5c:ea:7b:97:65:6d:e5:44:14:f9:
                    11:b3:d8:1e:e0:06:7a:ec:9d:54:88:7a:65:b3:05:
                    b5:3c:8b:4b:16:af:6f:c3:b9:b2:46:34:61:ff:55:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:57:2D:A5:7A:D7:D6:0E:B1:09:67:5E:7F:DD:D9:FE:37:2B:78
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137302e38312e3139332e302f32342d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:91:f7:c5:0a:ac:2e:22:73:9a:0a:7a:44:be:4b:e3:80:
         cc:03:24:f3:14:57:dc:cf:c4:bf:2b:f4:c9:15:50:84:6d:67:
         d9:d1:17:80:5a:5c:d2:26:a9:de:15:8e:81:1a:d3:24:3a:a1:
         39:b7:2f:4e:2d:0d:0c:cd:0d:d7:61:1d:ad:03:f8:81:53:f3:
         90:4c:5c:28:34:68:6a:e7:37:55:3b:59:6d:15:d7:9e:16:34:
         23:30:75:51:70:3f:8e:cb:17:4f:c8:03:70:94:65:9c:12:05:
         95:f9:e1:65:ba:05:2e:cd:61:36:65:a6:62:80:00:6e:69:a2:
         2c:1a:d4:ce:03:c4:0c:df:8b:b3:b9:84:f6:82:af:f8:e4:90:
         32:fb:c2:a2:a8:82:b1:a2:42:03:c3:09:81:65:35:e4:07:55:
         16:6b:6f:46:7f:8e:0b:b1:95:a7:ef:2f:4e:7c:eb:7b:12:7c:
         f8:26:f1:f9:11:41:cc:5d:e2:62:da:21:31:23:21:1e:1a:ad:
         ee:91:c6:aa:8d:64:e0:be:b2:39:f1:da:6f:15:32:92:18:0f:
         52:34:7d:b5:3f:67:e8:29:74:93:be:c7:58:9f:14:e9:d8:2f:
         4a:c6:6b:9a:78:fd:b9:f8:37:bc:84:78:97:ff:86:7c:16:ec:
         6e:a4:f5:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWFhgOrdnQkPi0pqFSMqZvVrWQYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzEwMDUxNzQ2NDZaFw0yNDEwMDMxNzUxNDZaMDMxMTAvBgNV
BAMTKDJGNkU1NzJEQTU3QUQ3RDYwRUIxMDk2NzVFN0ZEREQ5RkUzNzJCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaeoVhibRruaAvtRp0E9KGFvVO
iB6up6H+GkMgwBhGzlHGvWnMkBjxxG+mvZG51IpTRJdHR6LfcK/RSpFaPRIOKMx+
8Y+oFh1x3q6lUts+Npa1mremBooFcGSeu4dkGU9IuvWoJS3B618ek44ftPqpGndz
Bgb/B8zov6XOSNGeNU15qTI7c+1yI/C7sdJ5251j81zL8NPAOMMbvRVgw30uJ3pd
u+H3vpXXsApAzxgrAxSNkYLTy1MeEUFO6EwdZhZ3CqTs6nmKzmbx0GS4ogYSW+2K
LkzKXOp7l2Vt5UQU+RGz2B7gBnrsnVSIemWzBbU8i0sWr2/DubJGNGH/VbQXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUL25XLaV619YOsQlnXn/d2f43K3gwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzNzMwMmUzODMxMmUzMTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlHBMA0GCSqGSIb3DQEBCwUAA4IBAQBBP5H3xQqs
LiJzmgp6RL5L44DMAyTzFFfcz8S/K/TJFVCEbWfZ0ReAWlzSJqneFY6BGtMkOqE5
ty9OLQ0MzQ3XYR2tA/iBU/OQTFwoNGhq5zdVO1ltFdeeFjQjMHVRcD+OyxdPyANw
lGWcEgWV+eFlugUuzWE2ZaZigABuaaIsGtTOA8QM34uzuYT2gq/45JAy+8KiqIKx
okIDwwmBZTXkB1UWa29Gf44LsZWn7y9OfOt7Enz4JvH5EUHMXeJi2iExIyEeGq3u
kcaqjWTgvrI58dpvFTKSGA9SNH21P2foKXSTvsdYnxTp2C9KxmuaeP25+De8hHiX
/4Z8FuxupPVj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org