Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          Kv80BxfiyEjNN6uCrE9xikPe1Ep4aFyjAiuP1rGSdiY=
Subject key identifier:   85:81:55:7D:4A:F8:AB:B8:4A:B4:FB:40:1D:F1:1D:21:F9:F4:AD:28
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       147C4E807655E95FDF228DC2A074323CCD94A13F
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa
Signing time:             Wed 11 Oct 2023 14:28:44 +0000
ROA not before:           Wed 11 Oct 2023 14:23:44 +0000
ROA not after:            Wed 09 Oct 2024 14:28:44 +0000
asID:                     263482
IP address blocks:        170.83.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:4e:80:76:55:e9:5f:df:22:8d:c2:a0:74:32:3c:cd:94:a1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 11 14:23:44 2023 GMT
            Not After : Oct  9 14:28:44 2024 GMT
        Subject: CN=8581557D4AF8ABB84AB4FB401DF11D21F9F4AD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:d5:e4:7e:58:4f:8e:2b:3e:e9:ec:89:8e:
                    ba:67:0b:af:8e:9b:8d:dd:8a:d4:5b:57:c2:60:d3:
                    bc:1d:f3:36:f2:af:b1:f5:86:87:ec:95:63:a8:20:
                    2f:5b:22:68:92:18:a3:ab:c1:e5:b2:54:ba:45:9d:
                    37:26:6f:6a:e1:06:96:0c:ab:bd:57:c9:90:81:01:
                    1a:08:40:54:83:ac:12:3e:ad:90:a5:bf:65:1f:f4:
                    7d:55:19:74:4c:bf:07:aa:8b:df:51:a4:b5:b6:b4:
                    b5:17:82:12:6d:24:7b:8b:f9:b0:2e:eb:74:a7:cc:
                    1f:b2:bb:d3:53:75:0f:95:dd:88:1a:8a:04:30:b2:
                    fd:53:fc:4b:a3:92:3a:f6:79:25:77:54:ce:d5:04:
                    c9:60:36:a1:93:69:1a:4b:52:db:61:a2:d5:ec:75:
                    38:8a:bd:3b:19:40:0d:d2:d4:c7:02:c9:fd:95:93:
                    ff:06:46:b1:fa:b2:c2:00:ea:ee:f8:c3:fe:a8:e3:
                    f8:75:63:e7:11:e9:4f:09:aa:46:c4:62:24:f8:16:
                    99:1a:67:44:6f:a0:a8:8d:23:37:21:6a:8c:5d:c0:
                    4e:5b:d6:c3:51:02:f4:f7:40:9b:ef:dd:2d:4f:76:
                    20:24:02:ec:b8:b9:7e:6d:53:1d:5a:fd:68:f2:86:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:55:7D:4A:F8:AB:B8:4A:B4:FB:40:1D:F1:1D:21:F9:F4:AD:28
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:82:bb:15:4f:7e:c9:b3:b6:3f:34:e5:77:37:29:f0:cd:1c:
         2a:da:c1:f0:96:15:48:7e:41:1c:55:d0:7c:12:a3:10:8b:61:
         39:3e:0d:14:68:dc:f4:5c:50:b6:d6:ed:d8:e7:f0:83:25:06:
         33:b7:8f:fa:6c:1d:38:de:4e:a9:1f:7f:c9:b6:6c:0c:ee:6c:
         76:7e:67:bb:5d:e5:4c:c6:b7:33:fc:f5:c0:a4:3c:34:94:d3:
         e4:0d:d9:07:83:aa:a0:db:e4:3d:a8:60:5c:58:db:8a:d7:40:
         75:36:83:63:8b:a4:85:c0:c5:71:4a:13:bf:64:19:f8:a1:72:
         cb:30:04:4f:57:c2:b0:e1:87:52:ee:52:4f:2f:82:c9:e9:f6:
         9e:9a:8b:42:24:36:0d:8f:66:6a:21:74:69:0f:41:7b:37:98:
         d1:9e:2d:a2:d2:7a:99:7d:36:a4:b9:f4:f9:43:1e:5e:d9:9e:
         4f:bc:ec:d5:94:26:5c:cd:15:31:2e:5f:e5:c1:d9:11:5c:a0:
         2c:b6:56:82:0f:65:43:7d:24:c7:fb:65:49:a2:68:96:e4:d3:
         c4:82:1c:9d:59:db:3a:65:76:45:5f:b9:4f:ce:c7:30:e6:3c:
         68:f3:37:6b:4b:bc:07:b0:0a:39:ac:67:ca:e4:55:ca:2e:96:
         1a:35:96:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFHxOgHZV6V/fIo3CoHQyPM2UoT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEQ0I2QjgzODdBODdBMTQ1QkRERjk3Rjc4RTAzNTlF
QzRGRDNGQTAeFw0yMzEwMTExNDIzNDRaFw0yNDEwMDkxNDI4NDRaMDMxMTAvBgNV
BAMTKDg1ODE1NTdENEFGOEFCQjg0QUI0RkI0MDFERjExRDIxRjlGNEFEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwdXkflhPjis+6eyJjrpnC6+O
m43ditRbV8Jg07wd8zbyr7H1hofslWOoIC9bImiSGKOrweWyVLpFnTcmb2rhBpYM
q71XyZCBARoIQFSDrBI+rZClv2Uf9H1VGXRMvweqi99RpLW2tLUXghJtJHuL+bAu
63SnzB+yu9NTdQ+V3YgaigQwsv1T/Eujkjr2eSV3VM7VBMlgNqGTaRpLUtthotXs
dTiKvTsZQA3S1McCyf2Vk/8GRrH6ssIA6u74w/6o4/h1Y+cR6U8JqkbEYiT4Fpka
Z0RvoKiNIzchaoxdwE5b1sNRAvT3QJvv3S1PdiAkAuy4uX5tUx1a/Wjyhp5XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhYFVfUr4q7hKtPtAHfEdIfn0rSgwHwYDVR0j
BBgwFoAUA9y2uDh6h6FFvd+X944DWexP0/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8wM0RDQjZCODM4N0E4N0ExNDVCRERGOTdGNzhFMDM1OUVDNEZEM0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRENCNkI4Mzg3QTg3QTE0
NUJEREY5N0Y3OEUwMzU5RUM0RkQzRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAv
MzEzNzMwMmUzODMzMmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqU9QwDQYJKoZIhvcNAQELBQADggEBAAOCuxVP
fsmztj805Xc3KfDNHCrawfCWFUh+QRxV0HwSoxCLYTk+DRRo3PRcULbW7djn8IMl
BjO3j/psHTjeTqkff8m2bAzubHZ+Z7td5UzGtzP89cCkPDSU0+QN2QeDqqDb5D2o
YFxY24rXQHU2g2OLpIXAxXFKE79kGfihcsswBE9XwrDhh1LuUk8vgsnp9p6ai0Ik
Ng2PZmohdGkPQXs3mNGeLaLSepl9NqS59PlDHl7Znk+87NWUJlzNFTEuX+XB2RFc
oCy2VoIPZUN9JMf7ZUmiaJbk08SCHJ1Z2zpldkVfuU/OxzDmPGjzN2tLvAewCjms
Z8rkVcoulho1lk8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org