Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3234203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32322d3234203d3e20323636333432.roa (raw, json)
Hash identifier:          m2xFu6Zx7NUNQhd1hNZCmvTCunTw2/+/nOraSM5Wz78=
Subject key identifier:   54:51:DD:97:97:95:82:BC:38:8F:0A:F4:FB:B1:77:7E:0E:B9:BA:7F
Certificate issuer:       /CN=A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF
Certificate serial:       420A06D0FD44044B034F958F68B41594AD13490A
Authority key identifier: A0:D3:1D:DE:3C:BC:05:FB:A3:00:9F:1C:10:5A:FD:6A:8C:61:E9:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3234203d3e20323636333432.roa
Signing time:             Tue 11 Jan 2022 01:01:41 +0000
ROA not before:           Tue 11 Jan 2022 00:56:41 +0000
ROA not after:            Tue 10 Jan 2023 01:01:41 +0000
asID:                     266342
IP address blocks:        170.239.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0a:06:d0:fd:44:04:4b:03:4f:95:8f:68:b4:15:94:ad:13:49:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF
        Validity
            Not Before: Jan 11 00:56:41 2022 GMT
            Not After : Jan 10 01:01:41 2023 GMT
        Subject: CN=5451DD97979582BC388F0AF4FBB1777E0EB9BA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:e4:5d:48:67:b7:0a:e8:2d:1e:d4:67:83:
                    66:56:23:33:dd:c4:49:50:f0:aa:4c:57:90:84:4a:
                    df:42:6f:bf:4b:fe:94:e4:af:23:86:d5:c6:28:13:
                    49:b8:aa:69:aa:e4:d9:5e:4d:2b:41:df:83:fb:f8:
                    3b:36:e0:0b:43:15:08:cf:56:9e:4d:f0:6d:46:bc:
                    0f:49:a3:54:21:b0:f7:21:0d:cd:f5:d0:7a:e5:6e:
                    dc:71:9b:93:73:53:b2:c9:c3:e4:df:17:6f:c5:2e:
                    0c:00:75:40:56:f9:32:15:71:ff:18:ad:d9:40:af:
                    06:02:96:d5:42:65:6e:11:f8:f8:ad:63:ce:c8:63:
                    44:ee:90:c3:60:b8:de:8b:f1:5c:bd:87:75:b3:df:
                    8c:69:85:80:bd:71:6c:52:78:81:23:9e:5b:9f:5e:
                    cd:d2:bd:18:ee:b7:ef:80:52:e4:30:66:dd:99:6f:
                    1f:d2:e9:c0:fd:9f:1a:92:a0:2c:2c:b4:a4:79:89:
                    42:2a:58:4f:0a:ad:cb:41:b6:94:08:ac:d7:88:15:
                    ab:a7:9c:f9:04:5e:96:83:56:19:64:dc:58:15:ef:
                    5b:5e:43:52:1f:b4:96:33:ab:40:60:ab:ef:d1:8a:
                    37:3a:73:7d:e7:b2:d7:20:e6:41:ee:8c:75:07:ac:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:51:DD:97:97:95:82:BC:38:8F:0A:F4:FB:B1:77:7E:0E:B9:BA:7F
            X509v3 Authority Key Identifier:
                keyid:A0:D3:1D:DE:3C:BC:05:FB:A3:00:9F:1C:10:5A:FD:6A:8C:61:E9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D31DDE3CBC05FBA3009F1C105AFD6A8C61E9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3234203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:ab:7e:ae:d7:d4:b3:67:9c:8f:3e:7c:4d:ad:9f:0c:a1:
         8d:7b:f5:01:ba:47:50:3c:46:4b:e4:be:98:32:b4:10:29:22:
         db:f1:86:52:25:4f:de:f9:c5:61:d1:3b:22:a5:76:8c:cc:ab:
         9a:fb:83:fc:62:0a:a9:11:9c:44:bc:2b:db:c1:70:ba:81:88:
         1c:38:cc:fd:d6:f2:a5:c2:7c:3e:43:d0:f4:46:ed:38:29:1b:
         c5:bd:d3:03:ff:6f:69:a5:26:d5:0b:ff:5c:99:a9:bf:18:70:
         5a:85:3b:8a:f4:56:7a:75:cd:1b:d3:b5:d1:9d:3f:34:87:8c:
         19:30:6e:17:3a:d1:94:9b:26:25:9c:6c:41:23:6f:e0:8c:18:
         b3:af:89:9b:2d:50:96:0f:80:14:31:48:13:79:73:78:ba:6f:
         6a:0e:76:4f:c1:0d:ed:89:d4:ce:d3:57:9d:22:c7:54:9a:94:
         49:16:f9:8d:7a:aa:24:2e:4c:86:a7:0c:5e:23:fc:2d:25:24:
         06:cd:18:41:78:d6:1f:19:7e:4b:96:0e:ef:f9:6e:92:9e:60:
         43:8e:31:67:93:62:91:e9:a3:b1:02:7d:b8:a9:74:b6:f2:4a:
         e4:e6:32:9a:e1:51:3c:9c:e1:7a:ac:e9:cd:b8:7b:a6:56:16:
         6b:47:63:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQgoG0P1EBEsDT5WPaLQVlK0TSQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBEMzFEREUzQ0JDMDVGQkEzMDA5RjFDMTA1QUZENkE4
QzYxRTlCRjAeFw0yMjAxMTEwMDU2NDFaFw0yMzAxMTAwMTAxNDFaMDMxMTAvBgNV
BAMTKDU0NTFERDk3OTc5NTgyQkMzODhGMEFGNEZCQjE3NzdFMEVCOUJBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbeRdSGe3CugtHtRng2ZWIzPd
xElQ8KpMV5CESt9Cb79L/pTkryOG1cYoE0m4qmmq5NleTStB34P7+Ds24AtDFQjP
Vp5N8G1GvA9Jo1QhsPchDc310Hrlbtxxm5NzU7LJw+TfF2/FLgwAdUBW+TIVcf8Y
rdlArwYCltVCZW4R+PitY87IY0TukMNguN6L8Vy9h3Wz34xphYC9cWxSeIEjnluf
Xs3SvRjut++AUuQwZt2Zbx/S6cD9nxqSoCwstKR5iUIqWE8KrctBtpQIrNeIFaun
nPkEXpaDVhlk3FgV71teQ1IftJYzq0Bgq+/Rijc6c33nstcg5kHujHUHrHSVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVFHdl5eVgrw4jwr0+7F3fg65un8wHwYDVR0j
BBgwFoAUoNMd3jy8BfujAJ8cEFr9aoxh6b8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dHRXdiREFOcUY3NWRMQ3R5QUZHSGY3QzgzbVg3RkJRWjdVaDk1aTRj
NXYvMC9BMEQzMURERTNDQkMwNUZCQTMwMDlGMUMxMDVBRkQ2QThDNjFFOUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwRDMxRERFM0NCQzA1RkJB
MzAwOUYxQzEwNUFGRDZBOEM2MUU5QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXR0V3YkRBTnFGNzVkTEN0eUFGR0hmN0M4M21YN0ZCUVo3VWg5NWk0YzV2LzAv
MzEzNzMwMmUzMjMzMzkyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq71AwDQYJKoZIhvcNAQELBQADggEBACjPq36u
19SzZ5yPPnxNrZ8MoY179QG6R1A8RkvkvpgytBApItvxhlIlT975xWHROyKldozM
q5r7g/xiCqkRnES8K9vBcLqBiBw4zP3W8qXCfD5D0PRG7TgpG8W90wP/b2mlJtUL
/1yZqb8YcFqFO4r0Vnp1zRvTtdGdPzSHjBkwbhc60ZSbJiWcbEEjb+CMGLOviZst
UJYPgBQxSBN5c3i6b2oOdk/BDe2J1M7TV50ix1SalEkW+Y16qiQuTIanDF4j/C0l
JAbNGEF41h8ZfkuWDu/5bpKeYEOOMWeTYpHpo7ECfbipdLbySuTmMprhUTyc4Xqs
6c24e6ZWFmtHYwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org