Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130322e302f32342d3234203d3e20323635303932.roa
File:                     3137302e3233332e3130322e302f32342d3234203d3e20323635303932.roa (raw, json)
Hash identifier:          yPJnNDSSLUUaP5lnxYuhqt6gazt368pa5Qpot0ntKW0=
Subject key identifier:   DC:AC:66:43:01:16:08:3F:7A:85:05:03:EE:90:9A:80:9A:5D:3E:54
Certificate issuer:       /CN=280B5BA12BA201DB8232DCA902FFBEFEF58CAA93
Certificate serial:       60EBC3BE3280A43FC2DFC102684E37758C0AB12E
Authority key identifier: 28:0B:5B:A1:2B:A2:01:DB:82:32:DC:A9:02:FF:BE:FE:F5:8C:AA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130322e302f32342d3234203d3e20323635303932.roa
Signing time:             Tue 02 Aug 2022 17:36:30 +0000
ROA not before:           Tue 02 Aug 2022 17:31:30 +0000
ROA not after:            Tue 01 Aug 2023 17:36:30 +0000
asID:                     265092
IP address blocks:        170.233.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:eb:c3:be:32:80:a4:3f:c2:df:c1:02:68:4e:37:75:8c:0a:b1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280B5BA12BA201DB8232DCA902FFBEFEF58CAA93
        Validity
            Not Before: Aug  2 17:31:30 2022 GMT
            Not After : Aug  1 17:36:30 2023 GMT
        Subject: CN=DCAC66430116083F7A850503EE909A809A5D3E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:6c:a4:c3:c9:ab:f0:d4:a6:54:b8:77:72:
                    3a:8a:ee:fd:08:fc:7c:62:5a:c3:d7:32:7f:c6:62:
                    8d:8d:cc:e5:25:39:19:53:0c:24:f7:c9:e6:ea:93:
                    ab:04:f9:da:b4:40:f1:c7:65:f2:db:c7:cd:7a:10:
                    20:0b:4e:e3:44:a2:95:21:41:83:9a:10:36:60:af:
                    c3:f1:e2:e1:67:aa:22:93:ed:2b:21:07:e7:22:22:
                    81:62:55:49:7d:3f:74:bd:0f:c0:11:64:65:4d:ec:
                    cf:ef:f3:50:2b:c6:c9:a4:ea:60:65:03:90:ae:c1:
                    cf:cc:22:5c:f0:e1:34:54:3e:74:b6:ab:0f:09:35:
                    ce:13:ca:5d:ba:ee:30:2a:a5:e5:2c:52:0e:11:5e:
                    ed:ab:a6:5f:53:e7:31:1f:b2:30:ea:4f:a1:1b:76:
                    12:68:a6:84:e2:8b:f1:ed:f6:5d:8d:39:66:a5:bc:
                    de:e0:38:f0:2d:e5:14:76:2a:d0:27:9e:36:c8:79:
                    42:f9:8c:86:1e:48:91:74:c5:09:8a:58:6b:00:aa:
                    c7:90:75:4e:cd:1f:b3:6d:11:fe:c8:b4:0d:53:8d:
                    57:e0:c0:1d:a5:93:3f:20:00:ce:ac:e8:3e:ee:ac:
                    12:41:bb:5d:0a:35:71:8d:2f:2e:3a:8c:f3:7d:27:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:66:43:01:16:08:3F:7A:85:05:03:EE:90:9A:80:9A:5D:3E:54
            X509v3 Authority Key Identifier:
                keyid:28:0B:5B:A1:2B:A2:01:DB:82:32:DC:A9:02:FF:BE:FE:F5:8C:AA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280B5BA12BA201DB8232DCA902FFBEFEF58CAA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBrF5jJekmG7HW1qWyPiuXbogi4QmbiwafVnsvFksnNf/0/3137302e3233332e3130322e302f32342d3234203d3e20323635303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:be:3d:2d:5d:1c:c5:1d:20:57:a2:d0:98:3b:c3:28:32:
         b4:30:4b:36:11:c4:45:a6:9e:de:ed:a7:10:0f:0b:e4:89:77:
         a0:03:ea:e9:99:de:e1:24:01:4d:8a:e4:12:c9:4a:e8:7c:91:
         e4:c7:6d:c7:d9:b2:79:ff:dc:37:29:88:1c:07:d4:13:7d:92:
         d1:a8:17:64:6b:9e:e7:00:ef:91:52:7b:90:25:cf:09:d7:c1:
         32:ba:29:6b:50:a4:09:d5:a5:ca:fb:c0:e0:7a:77:74:24:86:
         ac:54:52:40:c7:01:ce:3e:8c:0a:e1:8f:47:f9:35:2f:3b:cd:
         bb:6b:dd:05:1f:30:d2:68:d7:d2:5b:6f:e5:eb:1f:dc:44:d5:
         5b:52:5e:15:59:b1:26:4a:da:94:97:5c:92:cb:92:e4:ff:d8:
         f9:11:e2:3f:e5:9f:bb:39:5e:f3:eb:ed:85:83:65:f5:d3:86:
         12:cb:92:98:c5:7f:57:5d:fb:6d:12:d0:d1:43:1f:2f:39:4f:
         f2:b3:7b:82:1e:f1:78:26:77:83:9e:76:9f:b7:97:3b:c0:8a:
         b5:2b:77:67:85:f6:7f:ff:b0:d7:63:30:1f:79:16:45:fb:43:
         ae:4b:31:2e:70:ac:f9:3a:9c:93:fe:51:45:2f:05:5e:7f:46:
         b2:74:6a:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYOvDvjKApD/C38ECaE43dYwKsS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwQjVCQTEyQkEyMDFEQjgyMzJEQ0E5MDJGRkJFRkVG
NThDQUE5MzAeFw0yMjA4MDIxNzMxMzBaFw0yMzA4MDExNzM2MzBaMDMxMTAvBgNV
BAMTKERDQUM2NjQzMDExNjA4M0Y3QTg1MDUwM0VFOTA5QTgwOUE1RDNFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOGykw8mr8NSmVLh3cjqK7v0I
/HxiWsPXMn/GYo2NzOUlORlTDCT3yebqk6sE+dq0QPHHZfLbx816ECALTuNEopUh
QYOaEDZgr8Px4uFnqiKT7SshB+ciIoFiVUl9P3S9D8ARZGVN7M/v81Arxsmk6mBl
A5Cuwc/MIlzw4TRUPnS2qw8JNc4Tyl267jAqpeUsUg4RXu2rpl9T5zEfsjDqT6Eb
dhJopoTii/Ht9l2NOWalvN7gOPAt5RR2KtAnnjbIeUL5jIYeSJF0xQmKWGsAqseQ
dU7NH7NtEf7ItA1TjVfgwB2lkz8gAM6s6D7urBJBu10KNXGNLy46jPN9J7L7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3KxmQwEWCD96hQUD7pCagJpdPlQwHwYDVR0j
BBgwFoAUKAtboSuiAduCMtypAv++/vWMqpMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJyRjVqSmVrbUc3SFcxcVd5UGl1WGJvZ2k0UW1iaXdhZlZuc3ZGa3Nu
TmYvMC8yODBCNUJBMTJCQTIwMURCODIzMkRDQTkwMkZGQkVGRUY1OENBQTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4MEI1QkExMkJBMjAxREI4
MjMyRENBOTAyRkZCRUZFRjU4Q0FBOTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCckY1akpla21HN0hXMXFXeVBpdVhib2dpNFFtYml3YWZWbnN2Rmtzbk5mLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpZjANBgkqhkiG9w0BAQsFAAOCAQEAlpq+
PS1dHMUdIFei0Jg7wygytDBLNhHERaae3u2nEA8L5Il3oAPq6Zne4SQBTYrkEslK
6HyR5Mdtx9myef/cNymIHAfUE32S0agXZGue5wDvkVJ7kCXPCdfBMropa1CkCdWl
yvvA4Hp3dCSGrFRSQMcBzj6MCuGPR/k1LzvNu2vdBR8w0mjX0ltv5esf3ETVW1Je
FVmxJkralJdcksuS5P/Y+RHiP+Wfuzle8+vthYNl9dOGEsuSmMV/V137bRLQ0UMf
LzlP8rN7gh7xeCZ3g552n7eXO8CKtSt3Z4X2f/+w12MwH3kWRftDrksxLnCs+Tqc
k/5RRS8FXn9GsnRqKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org