Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3232302e302f32322d3234203d3e20323638303138.roa
File:                     3137392e39362e3232302e302f32322d3234203d3e20323638303138.roa (raw, json)
Hash identifier:          MdjuOWbaDDthqcuTKBlOcqxqJMopsS57OgHu5tbd0e4=
Subject key identifier:   96:62:B9:FE:67:3A:AD:DD:62:9B:1B:B1:3B:56:6D:D5:14:61:A9:47
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       3E7AC3F4C6654C8537642178B1211C3F95F49886
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3232302e302f32322d3234203d3e20323638303138.roa
Signing time:             Fri 04 Aug 2023 14:01:20 +0000
ROA not before:           Fri 04 Aug 2023 13:56:20 +0000
ROA not after:            Fri 02 Aug 2024 14:01:20 +0000
asID:                     268018
IP address blocks:        179.96.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7a:c3:f4:c6:65:4c:85:37:64:21:78:b1:21:1c:3f:95:f4:98:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Aug  4 13:56:20 2023 GMT
            Not After : Aug  2 14:01:20 2024 GMT
        Subject: CN=9662B9FE673AADDD629B1BB13B566DD51461A947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:20:3d:ff:8d:63:47:7b:31:a0:c3:8e:b1:
                    6a:c9:27:e5:26:24:ca:9d:b6:e5:88:6f:39:5c:e6:
                    2f:e6:d2:a2:a3:49:f1:e0:02:dd:da:cb:00:25:43:
                    f1:6f:23:8a:fa:30:5c:25:3b:e7:ff:39:4c:b2:23:
                    75:e5:8a:8f:1c:9f:14:7b:f8:32:2c:e1:04:a5:85:
                    7d:b5:28:d4:f1:0a:f6:11:a9:54:e7:f3:fd:53:0c:
                    2a:0e:c0:fe:23:b7:5f:04:fc:d3:a3:90:1b:cd:10:
                    64:07:10:9e:6d:c4:c1:a5:25:c1:ed:e3:04:6a:11:
                    09:3c:b1:b9:80:08:7e:4f:6d:b5:7c:34:6c:58:e8:
                    0c:29:96:72:80:e5:4a:7b:a7:d2:1d:be:b7:f6:29:
                    4f:a1:06:4c:44:d5:3e:cf:e7:7a:bb:29:c1:82:02:
                    ed:3f:81:30:7f:dd:d3:31:f8:72:fc:26:6f:66:30:
                    f6:0f:1a:7b:a0:30:0f:73:ac:3a:31:2e:25:27:52:
                    31:c8:a1:e7:66:56:4c:5f:c2:db:01:8d:69:fd:22:
                    82:0f:40:fb:f5:77:51:e0:f0:95:25:b6:c3:e8:2c:
                    72:cc:29:5a:5c:96:cd:c8:1c:1a:78:e6:e4:18:11:
                    7b:10:03:6a:51:b8:d2:6d:42:34:e9:be:f0:d7:80:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:62:B9:FE:67:3A:AD:DD:62:9B:1B:B1:3B:56:6D:D5:14:61:A9:47
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3232302e302f32322d3234203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:6e:9b:83:10:df:88:44:ce:00:5c:66:4a:9c:c1:0f:28:
         88:7d:33:f7:6c:83:ae:37:e6:3e:9b:a1:fb:70:ba:c6:8f:4c:
         f7:55:5b:3c:1f:95:44:df:f0:e5:71:97:19:17:c7:cc:63:e5:
         02:74:f2:e3:10:6e:11:51:3d:ef:eb:d3:ec:3f:eb:a4:34:52:
         00:b2:6e:99:85:6f:72:ee:7e:67:ff:43:a6:8c:7e:af:5e:d9:
         d1:6a:f1:32:6b:e9:73:4f:bc:be:eb:25:f6:ba:96:80:d3:53:
         48:28:fa:96:ea:fa:4e:f5:68:b8:e3:a5:8e:14:fd:c0:d2:fd:
         04:70:be:fd:13:df:f3:fd:7b:d3:06:4f:a0:16:08:ad:e8:40:
         dd:c2:eb:71:55:aa:5e:e8:9c:ce:c4:b9:0e:6b:39:d5:0d:ad:
         2d:63:13:bb:39:ee:0e:02:7a:b8:24:e0:64:64:3b:c0:bf:7a:
         80:98:c0:ba:6f:c9:f9:da:e6:73:61:5e:c1:d0:8b:d3:fb:ca:
         fa:1d:a6:ba:e5:ed:46:29:ec:80:b2:c0:7e:2d:d7:3b:9d:8f:
         d5:95:e0:bc:5d:ad:13:14:83:3b:68:b5:6f:ce:49:33:8e:79:
         2e:c5:2f:eb:43:9d:56:06:c7:b4:01:cc:83:db:f5:71:2a:92:
         06:d3:7e:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPnrD9MZlTIU3ZCF4sSEcP5X0mIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzA4MDQxMzU2MjBaFw0yNDA4MDIxNDAxMjBaMDMxMTAvBgNV
BAMTKDk2NjJCOUZFNjczQUFEREQ2MjlCMUJCMTNCNTY2REQ1MTQ2MUE5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkyA9/41jR3sxoMOOsWrJJ+Um
JMqdtuWIbzlc5i/m0qKjSfHgAt3aywAlQ/FvI4r6MFwlO+f/OUyyI3Xlio8cnxR7
+DIs4QSlhX21KNTxCvYRqVTn8/1TDCoOwP4jt18E/NOjkBvNEGQHEJ5txMGlJcHt
4wRqEQk8sbmACH5PbbV8NGxY6AwplnKA5Up7p9Idvrf2KU+hBkxE1T7P53q7KcGC
Au0/gTB/3dMx+HL8Jm9mMPYPGnugMA9zrDoxLiUnUjHIoedmVkxfwtsBjWn9IoIP
QPv1d1Hg8JUltsPoLHLMKVpcls3IHBp45uQYEXsQA2pRuNJtQjTpvvDXgK9PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlmK5/mc6rd1imxuxO1Zt1RRhqUcwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzNzM5MmUzOTM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzYNwwDQYJKoZIhvcNAQELBQADggEBAB3jbpuD
EN+IRM4AXGZKnMEPKIh9M/dsg6435j6boftwusaPTPdVWzwflUTf8OVxlxkXx8xj
5QJ08uMQbhFRPe/r0+w/66Q0UgCybpmFb3Lufmf/Q6aMfq9e2dFq8TJr6XNPvL7r
Jfa6loDTU0go+pbq+k71aLjjpY4U/cDS/QRwvv0T3/P9e9MGT6AWCK3oQN3C63FV
ql7onM7EuQ5rOdUNrS1jE7s57g4Cergk4GRkO8C/eoCYwLpvyfna5nNhXsHQi9P7
yvodprrl7UYp7ICywH4t1zudj9WV4LxdrRMUgztotW/OSTOOeS7FL+tDnVYGx7QB
zIPb9XEqkgbTfss=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org