Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232332e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          XuzLTiSch/qQfqkGi/uWiadbp2CPHAq56UzULz43moY=
Subject key identifier:   C2:BD:C9:98:39:1A:4D:6E:29:BE:85:29:EA:5E:6F:28:89:34:09:37
Certificate issuer:       /CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
Certificate serial:       706993B886FEE910E98C1E28EA357B56B6C3D9E1
Authority key identifier: D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 28 Feb 2022 19:03:35 +0000
ROA not before:           Mon 28 Feb 2022 18:58:35 +0000
ROA not after:            Mon 27 Feb 2023 19:03:35 +0000
asID:                     264137
IP address blocks:        170.0.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:93:b8:86:fe:e9:10:e9:8c:1e:28:ea:35:7b:56:b6:c3:d9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
        Validity
            Not Before: Feb 28 18:58:35 2022 GMT
            Not After : Feb 27 19:03:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:4c:aa:99:a3:a3:83:15:5d:2c:2d:bd:6b:
                    71:40:9e:4b:e4:ba:4a:c9:ca:fe:e1:f5:b7:de:bb:
                    22:f0:f9:cc:50:eb:a3:c8:9e:63:ad:2e:d7:90:43:
                    48:71:08:b9:36:b9:7a:74:d2:53:b6:b0:03:41:0f:
                    69:ca:09:22:81:cd:dc:98:a0:df:cf:7e:40:0d:71:
                    2f:3f:47:d4:e6:e7:8e:da:6f:78:ee:6b:3b:ab:29:
                    54:33:07:32:a2:cb:cf:ac:4d:9a:3c:0b:1b:e2:4d:
                    e8:6e:5a:d3:6e:ce:aa:11:7c:d3:4d:4a:14:54:d0:
                    43:c0:49:fe:fb:4c:81:5a:ed:44:f5:26:26:0e:ec:
                    e3:bb:8e:af:e4:84:78:12:29:12:b0:19:20:53:df:
                    78:38:98:f6:ce:4b:b6:c4:b5:76:bf:a6:67:47:db:
                    b8:71:27:a0:b4:fc:bf:5e:03:9c:ce:28:78:06:7e:
                    2a:79:d8:21:71:27:b3:80:e7:2c:e6:e4:ae:02:ab:
                    95:ac:3b:bc:8f:5e:25:3d:d2:28:30:61:3d:49:19:
                    38:5a:f8:1b:3e:07:f4:79:a4:75:a3:9f:b4:e3:23:
                    8c:9e:1b:92:99:da:9d:4d:1a:76:10:a7:40:06:cb:
                    71:1c:4d:e7:b5:f1:75:d9:32:3a:8e:fa:d3:20:6d:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BD:C9:98:39:1A:4D:6E:29:BE:85:29:EA:5E:6F:28:89:34:09:37
            X509v3 Authority Key Identifier:
                keyid:D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:11:3b:aa:bb:55:a9:35:e4:f7:45:b3:30:5a:6f:d1:e3:
         ec:bc:4f:c5:a5:05:52:d7:c8:5b:10:57:91:0b:fc:59:55:59:
         25:87:be:28:b9:c8:8b:35:10:00:cb:46:0a:66:88:92:3c:98:
         eb:21:14:f2:f8:a7:6c:44:48:27:96:50:b7:46:8d:25:14:f1:
         a3:46:3d:09:4e:ad:33:75:86:37:dd:90:a8:2c:25:04:04:9f:
         1b:11:db:60:9c:ca:70:cb:bd:6c:e5:5f:1d:20:5d:88:2c:96:
         75:4d:82:8e:42:b1:8b:30:b3:50:89:03:d5:12:09:ed:e6:58:
         ed:21:fc:b3:c6:95:04:57:65:ff:c8:fc:68:2a:12:86:9f:c5:
         85:74:42:23:e3:5c:09:d3:77:b2:99:b3:b3:ee:92:3f:da:39:
         23:39:d4:8d:ef:0f:d5:75:b9:bf:2a:87:f8:7a:d5:a6:2d:0e:
         22:c9:3a:ea:a6:e8:07:cf:ab:e4:16:ad:56:13:22:d3:e6:e4:
         b1:34:2c:19:81:c6:e3:4d:85:7a:a1:5e:a4:a5:5a:1b:52:19:
         53:24:62:a3:58:d5:44:90:d3:a0:4b:c2:90:8b:21:93:5a:82:
         a5:09:0c:32:68:22:12:dd:bd:b2:4b:7d:f6:8a:6c:1c:48:4e:
         76:0b:36:31
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUcGmTuIb+6RDpjB4o6jV7VrbD2eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDREMkQwM0JCMEUwRDkyQTgwMTBDRDYzMzM4QzNBNzdD
MUZDNDU3RjAeFw0yMjAyMjgxODU4MzVaFw0yMzAyMjcxOTAzMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUVGMDRDQUE5OUEzQTM4MzE1
NUQyQzJEQkQ2QjcxNDA5RTRCRTRCQTRBQzlDQUZFRTFGNUI3REVCQjIyRjBGOUND
NTBFQkEzQzg5RTYzQUQyRUQ3OTA0MzQ4NzEwOEI5MzZCOTdBNzREMjUzQjZCMDAz
NDEwRjY5Q0EwOTIyODFDRERDOThBMERGQ0Y3RTQwMEQ3MTJGM0Y0N0Q0RTZFNzhF
REE2Rjc4RUU2QjNCQUIyOTU0MzMwNzMyQTJDQkNGQUM0RDlBM0MwQjFCRTI0REU4
NkU1QUQzNkVDRUFBMTE3Q0QzNEQ0QTE0NTREMDQzQzA0OUZFRkI0QzgxNUFFRDQ0
RjUyNjI2MEVFQ0UzQkI4RUFGRTQ4NDc4MTIyOTEyQjAxOTIwNTNERjc4Mzg5OEY2
Q0U0QkI2QzRCNTc2QkZBNjY3NDdEQkI4NzEyN0EwQjRGQ0JGNUUwMzlDQ0UyODc4
MDY3RTJBNzlEODIxNzEyN0IzODBFNzJDRTZFNEFFMDJBQjk1QUMzQkJDOEY1RTI1
M0REMjI4MzA2MTNENDkxOTM4NUFGODFCM0UwN0Y0NzlBNDc1QTM5RkI0RTMyMzhD
OUUxQjkyOTlEQTlENEQxQTc2MTBBNzQwMDZDQjcxMUM0REU3QjVGMTc1RDkzMjNB
OEVGQUQzMjA2REVGNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArvBMqpmjo4MVXSwtvWtxQJ5L5LpKycr+4fW33rsi8PnMUOujyJ5j
rS7XkENIcQi5Nrl6dNJTtrADQQ9pygkigc3cmKDfz35ADXEvP0fU5ueO2m947ms7
qylUMwcyosvPrE2aPAsb4k3oblrTbs6qEXzTTUoUVNBDwEn++0yBWu1E9SYmDuzj
u46v5IR4EikSsBkgU994OJj2zku2xLV2v6ZnR9u4cSegtPy/XgOczih4Bn4qedgh
cSezgOcs5uSuAquVrDu8j14lPdIoMGE9SRk4WvgbPgf0eaR1o5+04yOMnhuSmdqd
TRp2EKdABstxHE3ntfF12TI6jvrTIG3vYQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMK9yZg5Gk1uKb6FKepebyiJNAk3MB8GA1UdIwQYMBaAFNTS0Duw4NkqgBDNYzOM
OnfB/EV/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ROUXVYQVhXMTd4Ujg0
MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzAvRDREMkQwM0JCMEUwRDky
QTgwMTBDRDYzMzM4QzNBNzdDMUZDNDU3Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENEQyRDAzQkIwRTBEOTJBODAxMENENjMzMzhDM0E3N0MxRkM0
NTdGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ETlF1WEFYVzE3eFI4NDF2OUJj
NVFtNUZlNlhGQ3BDeGNuWWVzcWFGbXRZdC8wLzMxMzczMDJlMzAyZTMyMzIzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDMxMzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKoA
3zANBgkqhkiG9w0BAQsFAAOCAQEAsZoRO6q7Vak15PdFszBab9Hj7LxPxaUFUtfI
WxBXkQv8WVVZJYe+KLnIizUQAMtGCmaIkjyY6yEU8vinbERIJ5ZQt0aNJRTxo0Y9
CU6tM3WGN92QqCwlBASfGxHbYJzKcMu9bOVfHSBdiCyWdU2CjkKxizCzUIkD1RIJ
7eZY7SH8s8aVBFdl/8j8aCoShp/FhXRCI+NcCdN3spmzs+6SP9o5IznUje8P1XW5
vyqH+HrVpi0OIsk66qboB8+r5BatVhMi0+bksTQsGYHG402FeqFepKVaG1IZUyRi
o1jVRJDToEvCkIshk1qCpQkMMmgiEt29skt99opsHEhOdgs2MQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org