Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39322e302f32332d3233203d3e20323632363439.roa
File:                     3137302e3233382e39322e302f32332d3233203d3e20323632363439.roa (raw, json)
Hash identifier:          ZhSytYbHx7nXcpD+evjoMYLIhhl8PbSp3126MVk8DYw=
Subject key identifier:   2A:BE:18:C6:DF:8A:E1:48:8F:76:5A:6F:B4:F6:14:F0:F6:F1:DD:FC
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       5660260E28E94D1A205AD6348FF60E68DFDC112A
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39322e302f32332d3233203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:24 +0000
ROA not before:           Wed 16 Nov 2022 22:22:24 +0000
ROA not after:            Wed 15 Nov 2023 22:27:24 +0000
asID:                     262649
IP address blocks:        170.238.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:60:26:0e:28:e9:4d:1a:20:5a:d6:34:8f:f6:0e:68:df:dc:11:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:24 2022 GMT
            Not After : Nov 15 22:27:24 2023 GMT
        Subject: CN=2ABE18C6DF8AE1488F765A6FB4F614F0F6F1DDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:a5:8a:d2:99:a0:5a:dd:a3:d2:a4:55:08:
                    14:99:22:da:42:23:bd:a2:33:d2:45:75:c4:ce:a5:
                    c7:bb:2a:7b:1e:c7:6a:76:0c:4a:6c:e5:e0:1f:de:
                    8e:f3:a4:d4:3f:f7:3a:2f:08:3d:39:54:44:4b:0f:
                    da:56:65:4b:65:86:d8:0d:d2:7e:ca:c3:b7:59:d2:
                    f6:c7:f2:33:b0:65:d1:cf:a9:e1:1e:3a:df:be:e1:
                    20:4b:12:43:e1:fc:57:fd:20:f0:13:b1:27:9b:6f:
                    9d:af:7b:85:26:f3:b3:94:23:db:98:00:4d:3a:ad:
                    3d:a7:36:0e:02:87:ac:a0:79:d5:cf:6c:db:f1:39:
                    0d:46:56:20:6c:7b:8d:df:48:3b:88:ab:89:7c:7e:
                    b8:ca:2a:de:5d:5b:1e:aa:18:ea:0d:ad:96:5e:fa:
                    78:ac:ff:a0:61:a8:26:0b:c7:fe:8e:5c:51:b3:ba:
                    7a:7c:c1:32:18:73:26:b6:42:8c:71:b2:84:23:c1:
                    bf:49:9d:3c:d9:98:c6:76:b2:9e:e6:d6:b2:58:a1:
                    c3:21:c4:27:0d:d6:b1:d0:56:9a:33:d8:09:4e:09:
                    22:a1:21:af:fe:47:6e:51:f0:6e:c9:6a:23:5c:f9:
                    0d:33:30:d5:93:af:ff:c6:ce:01:be:31:1b:4d:40:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:18:C6:DF:8A:E1:48:8F:76:5A:6F:B4:F6:14:F0:F6:F1:DD:FC
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3137302e3233382e39322e302f32332d3233203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:3b:8a:96:da:04:8b:76:b3:37:0c:d6:87:2b:ba:53:b4:28:
         d1:58:a3:13:3d:c8:1f:e2:3f:87:bf:8e:69:25:ae:d9:65:2e:
         ed:d6:b5:28:ed:d9:cb:8e:e2:01:8f:9e:c5:8f:ee:b9:0a:9f:
         96:32:5a:19:e2:db:8e:33:59:c5:49:0d:35:98:a9:df:a2:65:
         f3:ea:94:27:e7:19:2d:39:34:a4:24:fe:50:98:49:4c:6a:95:
         76:79:55:92:5a:d8:2a:b9:c4:cd:3b:01:b8:f2:f6:6e:6c:b5:
         eb:24:67:b8:55:a1:9c:59:cb:45:d8:29:40:ac:73:27:b1:af:
         0c:9a:9d:f8:55:5a:98:80:f8:47:8d:21:c4:eb:35:e6:e7:d4:
         85:d5:db:5f:2a:9b:e9:6d:b4:67:ae:6b:f1:68:b9:d6:d8:af:
         c4:84:15:ec:7a:0b:5b:11:0c:1f:27:67:de:a2:e5:99:25:5d:
         0e:29:45:89:60:b4:9d:87:d5:d3:75:90:5e:ba:d3:45:91:f7:
         28:f9:89:02:4a:b5:87:d8:af:9b:96:98:02:ed:f3:57:da:3e:
         a2:88:3a:55:55:3a:36:cf:18:d4:19:25:d4:5a:63:27:64:ab:
         14:91:f2:d3:b5:bd:4c:15:58:6c:59:0d:34:eb:de:c2:79:42:
         28:8f:c9:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVmAmDijpTRogWtY0j/YOaN/cESowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxQzM2MjMxMEY0NDhBRTcwNDNDM0Y4OERGQTYxQzc0
MjE3NzY0RTAeFw0yMjExMTYyMjIyMjRaFw0yMzExMTUyMjI3MjRaMDMxMTAvBgNV
BAMTKDJBQkUxOEM2REY4QUUxNDg4Rjc2NUE2RkI0RjYxNEYwRjZGMURERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDaWK0pmgWt2j0qRVCBSZItpC
I72iM9JFdcTOpce7Knsex2p2DEps5eAf3o7zpNQ/9zovCD05VERLD9pWZUtlhtgN
0n7Kw7dZ0vbH8jOwZdHPqeEeOt++4SBLEkPh/Ff9IPATsSebb52ve4Um87OUI9uY
AE06rT2nNg4Ch6ygedXPbNvxOQ1GViBse43fSDuIq4l8frjKKt5dWx6qGOoNrZZe
+nis/6BhqCYLx/6OXFGzunp8wTIYcya2QoxxsoQjwb9JnTzZmMZ2sp7m1rJYocMh
xCcN1rHQVpoz2AlOCSKhIa/+R25R8G7JaiNc+Q0zMNWTr//GzgG+MRtNQNATAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKr4Yxt+K4UiPdlpvtPYU8Pbx3fwwHwYDVR0j
BBgwFoAUfRw2IxD0SK5wQ8P4jfphx0IXdk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hETHk3Y1hrcldXWjZScUt2OUN2S2Z2dVlwQ2FHOFJKVDYxRmduSlBn
M3QvMC83RDFDMzYyMzEwRjQ0OEFFNzA0M0MzRjg4REZBNjFDNzQyMTc3NjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdEMUMzNjIzMTBGNDQ4QUU3
MDQzQzNGODhERkE2MUM3NDIxNzc2NEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4REx5N2NYa3JXV1o2UnFLdjlDdktmdnVZcENhRzhSSlQ2MUZnbkpQZzN0LzAv
MzEzNzMwMmUzMjMzMzgyZTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq7lwwDQYJKoZIhvcNAQELBQADggEBAMo7ipba
BIt2szcM1ocrulO0KNFYoxM9yB/iP4e/jmklrtllLu3WtSjt2cuO4gGPnsWP7rkK
n5YyWhni244zWcVJDTWYqd+iZfPqlCfnGS05NKQk/lCYSUxqlXZ5VZJa2Cq5xM07
Abjy9m5steskZ7hVoZxZy0XYKUCscyexrwyanfhVWpiA+EeNIcTrNebn1IXV218q
m+lttGeua/FoudbYr8SEFex6C1sRDB8nZ96i5ZklXQ4pRYlgtJ2H1dN1kF6600WR
9yj5iQJKtYfYr5uWmALt81faPqKIOlVVOjbPGNQZJdRaYydkqxSR8tO1vUwVWGxZ
DTTr3sJ5QiiPyfM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org