Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3232203d3e203532353932.roa
File:                     3137302e3234372e36342e302f32322d3232203d3e203532353932.roa (raw, json)
Hash identifier:          +cVhuTJ+Qbz6ogWumma23NFQ20pxsGxmHHeAHGOi7nc=
Subject key identifier:   04:58:54:C9:A3:9E:5F:83:34:FE:99:5F:5A:E3:20:81:99:A1:3C:BD
Certificate issuer:       /CN=0D17135664EB09ADB08E807D5096D1269D3D5F03
Certificate serial:       6B5E7C7F2B42DDBB1B9E8804FE59F306E136BBB5
Authority key identifier: 0D:17:13:56:64:EB:09:AD:B0:8E:80:7D:50:96:D1:26:9D:3D:5F:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3232203d3e203532353932.roa
Signing time:             Mon 28 Aug 2023 01:44:02 +0000
ROA not before:           Mon 28 Aug 2023 01:39:02 +0000
ROA not after:            Mon 26 Aug 2024 01:44:02 +0000
asID:                     52592
IP address blocks:        170.247.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5e:7c:7f:2b:42:dd:bb:1b:9e:88:04:fe:59:f3:06:e1:36:bb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D17135664EB09ADB08E807D5096D1269D3D5F03
        Validity
            Not Before: Aug 28 01:39:02 2023 GMT
            Not After : Aug 26 01:44:02 2024 GMT
        Subject: CN=045854C9A39E5F8334FE995F5AE3208199A13CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:1c:75:60:8c:36:f6:5e:60:64:db:4f:c5:
                    df:5b:d2:e1:9b:72:e3:42:10:db:3b:7a:b9:40:4f:
                    fd:fb:52:bb:17:85:1f:93:cb:12:d7:4d:18:c1:34:
                    43:7c:37:df:9f:57:83:20:6a:2b:a7:25:47:86:28:
                    85:c4:05:e1:8f:40:c5:93:ac:42:db:e2:d7:0b:d8:
                    8a:0d:39:4b:eb:99:ac:14:39:6a:b9:c8:e9:67:74:
                    93:fb:2d:b3:94:a0:53:ef:65:28:2f:8f:02:4a:e3:
                    4c:6d:77:22:86:d2:4e:e6:25:31:c3:e0:4a:ff:39:
                    3f:70:df:8c:b6:0c:82:83:0d:ed:94:28:ee:d9:8c:
                    1d:8e:06:a3:0c:24:13:b7:e2:51:9d:ee:0e:bf:bc:
                    7d:46:57:43:e4:25:14:18:e6:a2:a5:99:3c:98:ae:
                    11:55:6a:ef:82:23:06:87:d1:2e:89:af:5a:a0:09:
                    50:f5:cb:ae:6e:88:30:ef:6e:49:6d:84:bf:70:ca:
                    52:72:0a:6a:4e:61:20:dd:c9:01:a9:06:fd:1b:c6:
                    55:55:db:a8:a8:5c:60:0c:84:39:c9:18:91:20:fc:
                    d9:4f:20:2d:7e:3a:04:8d:4d:32:64:c8:f9:fa:24:
                    6f:44:2c:87:53:85:67:c8:dc:59:e0:f0:75:4c:9a:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:54:C9:A3:9E:5F:83:34:FE:99:5F:5A:E3:20:81:99:A1:3C:BD
            X509v3 Authority Key Identifier:
                keyid:0D:17:13:56:64:EB:09:AD:B0:8E:80:7D:50:96:D1:26:9D:3D:5F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3232203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:bd:9f:ce:25:bf:9a:76:61:af:b6:69:9b:b1:43:cf:e2:05:
         97:ab:4b:82:88:4a:54:00:67:59:2d:f3:4e:1c:a7:2f:8b:dc:
         d3:65:3c:dd:5c:05:9c:a3:a9:f6:ca:7f:68:c3:4b:ac:7f:c0:
         fc:6e:3f:25:fc:ab:bb:d6:a2:ac:ae:94:cd:86:41:b1:72:4a:
         2e:07:4d:86:3b:68:85:48:77:17:ed:46:1a:ed:a8:75:ea:96:
         f9:a2:05:97:55:03:c0:32:90:57:ea:ad:82:7e:7c:1d:6e:35:
         15:d6:bd:59:d5:de:67:a1:87:06:cc:c1:e4:ff:ce:06:f9:89:
         9d:2a:04:71:63:71:16:a8:02:23:d1:0d:1f:23:b1:85:57:11:
         6c:b1:d0:d0:4f:1c:e3:ca:f5:8c:41:36:75:2d:c9:fb:bb:e8:
         e7:9e:76:f8:da:ed:76:ca:d9:2c:11:4e:a7:8f:37:f8:8a:a7:
         22:2d:d2:f2:00:5f:c5:82:a5:e7:96:bc:58:3c:56:a2:a4:f4:
         d7:1c:de:b9:e8:84:5e:4a:1c:02:97:e4:62:18:d6:1a:64:5a:
         b6:b3:95:da:49:bb:75:67:6a:b7:01:c1:96:24:47:75:31:b4:
         53:88:d5:b9:7c:a5:80:04:91:21:77:f5:9c:bf:34:07:96:b7:
         57:2d:41:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa158fytC3bsbnogE/lnzBuE2u7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzEzNTY2NEVCMDlBREIwOEU4MDdENTA5NkQxMjY5
RDNENUYwMzAeFw0yMzA4MjgwMTM5MDJaFw0yNDA4MjYwMTQ0MDJaMDMxMTAvBgNV
BAMTKDA0NTg1NEM5QTM5RTVGODMzNEZFOTk1RjVBRTMyMDgxOTlBMTNDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+Rx1YIw29l5gZNtPxd9b0uGb
cuNCENs7erlAT/37UrsXhR+TyxLXTRjBNEN8N9+fV4MgaiunJUeGKIXEBeGPQMWT
rELb4tcL2IoNOUvrmawUOWq5yOlndJP7LbOUoFPvZSgvjwJK40xtdyKG0k7mJTHD
4Er/OT9w34y2DIKDDe2UKO7ZjB2OBqMMJBO34lGd7g6/vH1GV0PkJRQY5qKlmTyY
rhFVau+CIwaH0S6Jr1qgCVD1y65uiDDvbklthL9wylJyCmpOYSDdyQGpBv0bxlVV
26ioXGAMhDnJGJEg/NlPIC1+OgSNTTJkyPn6JG9ELIdThWfI3Fng8HVMmozpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBFhUyaOeX4M0/plfWuMggZmhPL0wHwYDVR0j
BBgwFoAUDRcTVmTrCa2wjoB9UJbRJp09XwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj
SFUvMC8wRDE3MTM1NjY0RUIwOUFEQjA4RTgwN0Q1MDk2RDEyNjlEM0Q1RjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEMTcxMzU2NjRFQjA5QURC
MDhFODA3RDUwOTZEMTI2OUQzRDVGMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWNFFSMXJib1FqdWNidUx6REJFWktXTFpybmp0UHlZek05a0ZjNm1XY0hVLzAv
MzEzNzMwMmUzMjM0MzcyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqvdAMA0GCSqGSIb3DQEBCwUAA4IBAQBwvZ/OJb+a
dmGvtmmbsUPP4gWXq0uCiEpUAGdZLfNOHKcvi9zTZTzdXAWco6n2yn9ow0usf8D8
bj8l/Ku71qKsrpTNhkGxckouB02GO2iFSHcX7UYa7ah16pb5ogWXVQPAMpBX6q2C
fnwdbjUV1r1Z1d5noYcGzMHk/84G+YmdKgRxY3EWqAIj0Q0fI7GFVxFssdDQTxzj
yvWMQTZ1Lcn7u+jnnnb42u12ytksEU6njzf4iqciLdLyAF/FgqXnlrxYPFaipPTX
HN656IReShwCl+RiGNYaZFq2s5XaSbt1Z2q3AcGWJEd1MbRTiNW5fKWABJEhd/Wc
vzQHlrdXLUHY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org