Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3234203d3e20323636323839.roa
File:                     3137302e37392e302e302f32322d3234203d3e20323636323839.roa (raw, json)
Hash identifier:          vQoSNBzow6BEO9kDkJs+ciBAkb2tTUup5N5R+rPFsMQ=
Subject key identifier:   F5:21:B1:3A:8C:63:BB:9F:32:72:62:2C:CB:91:FD:FF:AD:A7:35:13
Certificate issuer:       /CN=CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C
Certificate serial:       37EFB9AD9CBB4CA7561DD3A5F238E765131B1457
Authority key identifier: CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3234203d3e20323636323839.roa
Signing time:             Mon 17 Jul 2023 23:00:00 +0000
ROA not before:           Mon 17 Jul 2023 22:55:00 +0000
ROA not after:            Mon 15 Jul 2024 23:00:00 +0000
asID:                     266289
IP address blocks:        170.79.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:b9:ad:9c:bb:4c:a7:56:1d:d3:a5:f2:38:e7:65:13:1b:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C
        Validity
            Not Before: Jul 17 22:55:00 2023 GMT
            Not After : Jul 15 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:ab:7e:f4:9e:a7:37:3c:47:c7:00:0a:4e:
                    97:ef:00:9f:33:06:1f:a9:db:12:c4:07:19:a9:3f:
                    44:18:2a:99:78:84:23:53:e8:e4:e6:8b:c0:41:20:
                    e0:3b:49:b8:6f:95:9b:ce:09:ec:fb:e7:d1:fe:a2:
                    ca:6f:0d:64:77:08:81:f8:3a:90:f4:36:97:c0:21:
                    b5:ea:ab:c3:e6:45:ef:af:58:10:f0:68:24:8b:0c:
                    fb:89:d5:9b:81:48:06:67:48:cf:ab:11:6e:b1:16:
                    8f:76:fe:1d:1f:35:e5:7a:61:a1:b1:1d:a8:23:6a:
                    ad:84:93:43:e4:78:7a:24:f7:f7:1b:a1:8a:0f:2c:
                    e7:0c:d4:ea:7e:90:65:3a:38:39:67:3b:39:f6:35:
                    7c:56:4c:a5:8d:ab:aa:4b:f1:58:5f:da:85:2d:5c:
                    50:a4:d6:25:8d:7d:53:14:25:b8:cf:98:dd:5a:19:
                    79:3e:ab:04:f4:dd:25:fa:b3:68:92:6d:97:bf:87:
                    aa:6f:9d:51:f8:12:0f:20:a0:42:d0:35:82:96:44:
                    88:3e:f6:95:fc:c0:82:19:9e:d4:58:c1:b7:57:40:
                    86:46:81:a8:42:2f:f0:32:de:b4:6f:92:51:92:18:
                    5f:3e:ba:9b:f2:78:fb:13:9e:66:80:69:7e:92:eb:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:21:B1:3A:8C:63:BB:9F:32:72:62:2C:CB:91:FD:FF:AD:A7:35:13
            X509v3 Authority Key Identifier:
                keyid:CF:5F:C3:9C:AA:8D:DA:A0:86:EC:7A:FC:20:96:F9:16:A4:C7:1B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF5FC39CAA8DDAA086EC7AFC2096F916A4C71B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3234203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:da:3e:be:94:ca:72:80:bf:5f:4a:38:a3:a1:55:5f:ab:
         92:3f:aa:ae:6e:bd:fd:c6:e3:4a:4c:11:ee:d2:8e:c8:31:e2:
         dc:64:4b:9d:c2:39:0d:91:11:bf:42:7b:c7:39:bd:8d:c4:fd:
         44:bb:86:da:64:61:01:43:a4:bd:55:93:a1:2e:29:9d:30:3a:
         7d:55:b7:a9:c6:e0:20:7d:79:e3:83:c4:15:df:e5:ad:e5:eb:
         4a:c8:da:f1:c9:91:79:df:c7:8c:57:7d:8c:2b:e3:f6:ee:c9:
         29:41:33:c7:93:6e:2c:bf:41:1b:57:07:51:7b:ee:a4:8c:f0:
         e6:08:a6:21:18:8a:56:8c:38:21:a0:33:60:d4:38:4d:10:e7:
         4a:a9:cc:66:4f:dd:9a:93:3f:1c:39:95:02:74:52:d7:ed:74:
         e8:14:44:31:a3:3b:ac:d3:b6:a0:2a:6c:d5:07:61:c5:fb:da:
         d1:57:ff:31:c2:48:72:9e:14:dd:ad:65:04:aa:1d:f9:28:3f:
         80:ec:da:a9:bb:11:01:ec:11:e6:15:f2:8d:9a:bc:ff:1a:39:
         90:63:43:1b:89:99:47:e4:4f:fc:e9:9c:a4:9e:9d:72:22:95:
         c2:23:ec:ff:23:e9:9a:91:e8:00:61:c8:24:df:17:f2:f3:1c:
         32:30:4d:80
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUN++5rZy7TKdWHdOl8jjnZRMbFFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y1RkMzOUNBQThEREFBMDg2RUM3QUZDMjA5NkY5MTZB
NEM3MUIwQzAeFw0yMzA3MTcyMjU1MDBaFw0yNDA3MTUyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZCQUFCN0VGNDlFQTczNzND
NDdDNzAwMEE0RTk3RUYwMDlGMzMwNjFGQTlEQjEyQzQwNzE5QTkzRjQ0MTgyQTk5
Nzg4NDIzNTNFOEU0RTY4QkMwNDEyMEUwM0I0OUI4NkY5NTlCQ0UwOUVDRkJFN0Qx
RkVBMkNBNkYwRDY0NzcwODgxRjgzQTkwRjQzNjk3QzAyMUI1RUFBQkMzRTY0NUVG
QUY1ODEwRjA2ODI0OEIwQ0ZCODlENTlCODE0ODA2Njc0OENGQUIxMTZFQjExNjhG
NzZGRTFEMUYzNUU1N0E2MUExQjExREE4MjM2QUFEODQ5MzQzRTQ3ODdBMjRGN0Y3
MUJBMThBMEYyQ0U3MENENEVBN0U5MDY1M0EzODM5NjczQjM5RjYzNTdDNTY0Q0E1
OERBQkFBNEJGMTU4NUZEQTg1MkQ1QzUwQTRENjI1OEQ3RDUzMTQyNUI4Q0Y5OERE
NUExOTc5M0VBQjA0RjRERDI1RkFCMzY4OTI2RDk3QkY4N0FBNkY5RDUxRjgxMjBG
MjBBMDQyRDAzNTgyOTY0NDg4M0VGNjk1RkNDMDgyMTk5RUQ0NThDMUI3NTc0MDg2
NDY4MUE4NDIyRkYwMzJERUI0NkY5MjUxOTIxODVGM0VCQTlCRjI3OEZCMTM5RTY2
ODA2OTdFOTJFQkIyMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtrqrfvSepzc8R8cACk6X7wCfMwYfqdsSxAcZqT9EGCqZeIQjU+jk
5ovAQSDgO0m4b5Wbzgns++fR/qLKbw1kdwiB+DqQ9DaXwCG16qvD5kXvr1gQ8Ggk
iwz7idWbgUgGZ0jPqxFusRaPdv4dHzXlemGhsR2oI2qthJND5Hh6JPf3G6GKDyzn
DNTqfpBlOjg5Zzs59jV8VkyljauqS/FYX9qFLVxQpNYljX1TFCW4z5jdWhl5PqsE
9N0l+rNokm2Xv4eqb51R+BIPIKBC0DWClkSIPvaV/MCCGZ7UWMG3V0CGRoGoQi/w
Mt60b5JRkhhfPrqb8nj7E55mgGl+kuuyEQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FPUhsTqMY7ufMnJiLMuR/f+tpzUTMB8GA1UdIwQYMBaAFM9fw5yqjdqghux6/CCW
+RakxxsMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NqNW82OUtZR2t3ZlhQ
b3A0d0hOQlM1aXRVTEN4UlBZdGl6clpLRHVodUhXLzAvQ0Y1RkMzOUNBQThEREFB
MDg2RUM3QUZDMjA5NkY5MTZBNEM3MUIwQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjVGQzM5Q0FBOEREQUEwODZFQzdBRkMyMDk2RjkxNkE0Qzcx
QjBDLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DajVvNjlLWUdrd2ZYUG9wNHdI
TkJTNWl0VUxDeFJQWXRpenJaS0R1aHVIVy8wLzMxMzczMDJlMzczOTJlMzAyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMjM4Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqTwAw
DQYJKoZIhvcNAQELBQADggEBAAAu2j6+lMpygL9fSjijoVVfq5I/qq5uvf3G40pM
Ee7Sjsgx4txkS53COQ2REb9Ce8c5vY3E/US7htpkYQFDpL1Vk6EuKZ0wOn1Vt6nG
4CB9eeODxBXf5a3l60rI2vHJkXnfx4xXfYwr4/buySlBM8eTbiy/QRtXB1F77qSM
8OYIpiEYilaMOCGgM2DUOE0Q50qpzGZP3ZqTPxw5lQJ0UtftdOgURDGjO6zTtqAq
bNUHYcX72tFX/zHCSHKeFN2tZQSqHfkoP4Ds2qm7EQHsEeYV8o2avP8aOZBjQxuJ
mUfkT/zpnKSenXIilcIj7P8j6ZqR6ABhyCTfF/LzHDIwTYA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org