Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
File:                     3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier:          vW0eQLap1yVMbeRlIorgzOdmnbXYJ6ENzXPTOM7ASk4=
Subject key identifier:   2B:38:B0:02:2D:1C:AB:D1:9F:80:5B:5C:FA:A0:F6:2F:4A:BA:DF:7C
Certificate issuer:       /CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
Certificate serial:       46F91BE1892D99DCF5CCC6BBA908AAC962382D9C
Authority key identifier: CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
Signing time:             Tue 12 Mar 2024 16:27:58 +0000
ROA not before:           Tue 12 Mar 2024 16:22:58 +0000
ROA not after:            Tue 11 Mar 2025 16:27:58 +0000
asID:                     264233
IP address blocks:        170.80.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:1b:e1:89:2d:99:dc:f5:cc:c6:bb:a9:08:aa:c9:62:38:2d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
        Validity
            Not Before: Mar 12 16:22:58 2024 GMT
            Not After : Mar 11 16:27:58 2025 GMT
        Subject: CN=2B38B0022D1CABD19F805B5CFAA0F62F4ABADF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:98:51:5d:cf:d6:e7:3d:fc:8e:9a:3d:c7:
                    15:a9:ca:0f:d7:8a:47:0e:86:2d:d5:63:2a:dd:02:
                    4f:d3:c5:31:82:6b:e2:2b:e2:8c:20:c7:40:83:e3:
                    aa:27:eb:bd:0d:2c:16:3f:c4:26:d0:40:84:61:65:
                    19:61:30:d8:fa:c4:8b:b6:4b:7a:4d:20:2b:a8:21:
                    62:b2:be:d3:b3:8a:ad:e1:94:d2:54:ff:ae:ae:11:
                    06:60:15:b3:04:00:76:a8:19:05:e1:bd:92:2e:fb:
                    b5:c9:f1:81:44:01:ec:6d:ae:e8:87:9c:66:fc:28:
                    3a:2d:0a:b0:04:40:f4:ed:2c:46:3c:fe:24:1b:5c:
                    aa:17:a3:73:2e:44:7e:c2:3e:d2:a9:db:a9:39:a1:
                    f2:91:f1:51:0a:7d:68:72:57:dc:2f:54:6e:4f:b9:
                    56:f2:d7:a5:2f:26:8a:84:cd:35:8f:c4:97:8f:05:
                    25:f9:df:ab:2f:a8:c5:ca:81:4b:ae:0a:69:fa:4a:
                    71:a5:ac:88:57:ed:5a:4e:16:c7:23:49:ae:c9:31:
                    e8:97:6e:0d:fe:74:62:f0:8e:76:cc:e5:1a:74:7b:
                    86:f8:7a:6a:ae:d1:32:ee:9f:ae:8e:6f:23:6b:b8:
                    86:97:2c:e8:66:31:bf:ee:0e:5e:7f:ff:a8:c5:65:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:B0:02:2D:1C:AB:D1:9F:80:5B:5C:FA:A0:F6:2F:4A:BA:DF:7C
            X509v3 Authority Key Identifier:
                keyid:CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:92:f5:38:fb:59:af:97:03:a3:c8:84:4b:5b:24:50:3c:
         46:f9:44:e4:62:19:03:0a:58:1d:c9:71:62:82:e1:bf:0b:88:
         91:e0:58:7a:de:7a:29:aa:7d:b8:4d:bb:fe:ed:59:14:8c:b5:
         53:47:a4:ce:01:20:99:47:dc:f3:7a:d0:a5:86:fd:6d:ab:64:
         96:cf:a6:65:a7:1f:03:e4:bc:4b:24:5a:b3:57:99:d4:23:44:
         d8:5f:72:99:21:72:be:de:cb:c4:6f:64:ab:34:68:38:54:ae:
         e5:a9:d3:b9:2d:e1:14:bf:44:78:ff:14:c5:e5:96:18:ef:ec:
         c9:dc:84:ed:63:3b:a4:49:bd:ee:38:67:c5:a3:92:19:8e:1c:
         24:90:fd:64:9f:11:23:c2:b4:ba:f7:f7:27:7f:5d:0f:34:f5:
         37:05:c9:ff:4b:cf:4c:bc:8d:b5:13:08:8a:35:07:22:ce:d6:
         c5:6a:0a:be:c7:b0:37:b8:88:8c:dc:95:ff:f7:cc:91:41:3b:
         d7:7d:01:54:e3:49:2d:17:0d:72:74:50:1c:79:a6:a6:fd:15:
         d0:a2:cf:d3:d5:1d:75:8a:86:c9:7c:0d:a2:0d:2a:09:d4:00:
         10:a1:97:ab:70:04:83:90:0b:e0:57:a8:31:1e:06:1e:31:f2:
         91:7d:73:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURvkb4Yktmdz1zMa7qQiqyWI4LZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExRUFGNTI1NEEwODlEQUVGRDJEQjE5RkU2NTEwNEZE
Q0ZEODkzODAeFw0yNDAzMTIxNjIyNThaFw0yNTAzMTExNjI3NThaMDMxMTAvBgNV
BAMTKDJCMzhCMDAyMkQxQ0FCRDE5RjgwNUI1Q0ZBQTBGNjJGNEFCQURGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo5JhRXc/W5z38jpo9xxWpyg/X
ikcOhi3VYyrdAk/TxTGCa+Ir4owgx0CD46on670NLBY/xCbQQIRhZRlhMNj6xIu2
S3pNICuoIWKyvtOziq3hlNJU/66uEQZgFbMEAHaoGQXhvZIu+7XJ8YFEAextruiH
nGb8KDotCrAEQPTtLEY8/iQbXKoXo3MuRH7CPtKp26k5ofKR8VEKfWhyV9wvVG5P
uVby16UvJoqEzTWPxJePBSX536svqMXKgUuuCmn6SnGlrIhX7VpOFscjSa7JMeiX
bg3+dGLwjnbM5Rp0e4b4emqu0TLun66ObyNruIaXLOhmMb/uDl5//6jFZf0pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKziwAi0cq9GfgFtc+qD2L0q633wwHwYDVR0j
BBgwFoAUyh6vUlSgidrv0tsZ/mUQT9z9iTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMC9DQTFFQUY1MjU0QTA4OURBRUZEMkRCMTlGRTY1MTA0RkRDRkQ4OTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMUVBRjUyNTRBMDg5REFF
RkQyREIxOUZFNjUxMDRGRENGRDg5MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUU3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzAv
MzEzNzMwMmUzODMwMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUGQwDQYJKoZIhvcNAQELBQADggEBAD7IkvU4
+1mvlwOjyIRLWyRQPEb5RORiGQMKWB3JcWKC4b8LiJHgWHreeimqfbhNu/7tWRSM
tVNHpM4BIJlH3PN60KWG/W2rZJbPpmWnHwPkvEskWrNXmdQjRNhfcpkhcr7ey8Rv
ZKs0aDhUruWp07kt4RS/RHj/FMXllhjv7MnchO1jO6RJve44Z8WjkhmOHCSQ/WSf
ESPCtLr39yd/XQ809TcFyf9Lz0y8jbUTCIo1ByLO1sVqCr7HsDe4iIzclf/3zJFB
O9d9AVTjSS0XDXJ0UBx5pqb9FdCiz9PVHXWKhsl8DaINKgnUABChl6twBIOQC+BX
qDEeBh4x8pF9c0Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org