Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
File:                     3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier:          +IFlquLz3ecKbv9TATH6Y9V4V+0hfkNlYf0AYFMhTt0=
Subject key identifier:   BD:71:7C:71:AE:CC:BA:36:49:E3:B5:75:60:29:02:A8:CD:49:A2:5D
Certificate issuer:       /CN=0EE2A2F6E45247C19519BD222EE94731C49C38B1
Certificate serial:       4E3287FCA421D5BB08635492FAC3652116FCA76A
Authority key identifier: 0E:E2:A2:F6:E4:52:47:C1:95:19:BD:22:2E:E9:47:31:C4:9C:38:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
Signing time:             Thu 04 Apr 2024 14:34:15 +0000
ROA not before:           Thu 04 Apr 2024 14:29:15 +0000
ROA not after:            Thu 03 Apr 2025 14:34:15 +0000
asID:                     52592
IP address blocks:        170.247.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:32:87:fc:a4:21:d5:bb:08:63:54:92:fa:c3:65:21:16:fc:a7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE2A2F6E45247C19519BD222EE94731C49C38B1
        Validity
            Not Before: Apr  4 14:29:15 2024 GMT
            Not After : Apr  3 14:34:15 2025 GMT
        Subject: CN=BD717C71AECCBA3649E3B575602902A8CD49A25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:92:4e:55:80:1b:01:dd:e2:aa:d3:18:ad:
                    5a:f0:0c:6b:4f:f8:89:03:a1:ac:86:10:ba:86:c4:
                    4f:39:58:a0:42:76:02:3a:46:2c:76:c6:b0:4a:80:
                    2e:70:88:84:66:e8:f8:57:f8:b9:c5:91:b6:21:b9:
                    76:77:c2:62:1e:a7:01:7b:87:0d:ad:02:67:76:80:
                    ba:b6:05:36:65:3f:85:79:f5:41:7a:8f:b1:b0:ee:
                    4a:eb:d7:f6:16:db:89:65:b3:b8:c2:a5:06:17:4d:
                    de:c8:4c:e8:27:2c:fa:7d:e5:4d:31:cb:01:9b:aa:
                    50:13:4a:30:b0:b7:1e:5a:e6:15:9f:e6:0d:f5:d7:
                    eb:db:3a:18:1e:1e:79:7a:09:dc:45:c4:39:1a:74:
                    06:cd:81:72:60:46:7e:fb:2e:1e:01:e6:02:ee:46:
                    6a:32:50:d9:f1:23:a2:3a:78:9b:db:c6:c6:96:b4:
                    0a:ad:f7:c8:4b:7d:32:24:b0:a2:8b:3b:89:52:92:
                    46:c8:38:30:be:b2:f5:78:2e:da:4a:e3:9b:0e:0b:
                    d9:65:08:84:15:fa:24:66:33:87:ff:a8:a5:fc:63:
                    14:4e:7f:b9:ac:6b:2c:07:3b:02:07:b7:c0:47:46:
                    19:b6:bb:85:7b:08:d1:eb:51:6d:7d:45:b6:1d:80:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:7C:71:AE:CC:BA:36:49:E3:B5:75:60:29:02:A8:CD:49:A2:5D
            X509v3 Authority Key Identifier:
                keyid:0E:E2:A2:F6:E4:52:47:C1:95:19:BD:22:2E:E9:47:31:C4:9C:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE2A2F6E45247C19519BD222EE94731C49C38B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/1/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:9a:48:56:46:72:32:72:77:51:a2:bd:24:b5:7f:bc:00:39:
         7c:cd:98:ac:e7:3d:b8:d9:0b:8b:da:f2:72:1c:5b:ac:bc:a5:
         62:c5:85:93:9c:95:c9:40:20:93:87:fb:29:ce:92:b5:0a:2d:
         97:d5:19:3e:a5:69:88:fd:bd:15:de:b4:4e:c7:59:cf:b3:45:
         b6:b9:f6:fb:f5:7c:b3:86:0b:e0:f7:69:9f:4e:33:d0:7f:36:
         08:bf:5c:de:76:6d:6a:cb:0e:78:71:09:d2:3a:93:b5:92:56:
         18:85:7e:aa:55:0f:52:99:e4:5f:4f:9c:99:82:97:57:5e:19:
         bf:f9:12:62:8a:ac:f4:25:00:61:35:01:e8:be:f6:e7:5b:1e:
         ba:5a:17:46:66:61:bb:75:61:5a:0b:a8:c0:6e:e9:45:00:9b:
         52:a1:a6:6a:79:92:ed:d8:0d:f7:5a:c7:9c:d7:9b:61:89:66:
         e9:a1:72:23:5e:e8:87:db:4f:f9:13:b7:be:62:55:ae:c8:81:
         37:ce:2e:4d:2a:38:98:b3:89:c8:36:60:51:ca:cd:11:ec:e7:
         0e:da:49:78:63:cd:bb:81:9b:3c:5a:3f:f7:24:ee:8a:d9:d8:
         1e:b0:01:7e:2b:82:ef:ad:eb:31:ee:82:e8:4d:33:75:59:65:
         5b:42:07:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTjKH/KQh1bsIY1SS+sNlIRb8p2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVFMkEyRjZFNDUyNDdDMTk1MTlCRDIyMkVFOTQ3MzFD
NDlDMzhCMTAeFw0yNDA0MDQxNDI5MTVaFw0yNTA0MDMxNDM0MTVaMDMxMTAvBgNV
BAMTKEJENzE3QzcxQUVDQ0JBMzY0OUUzQjU3NTYwMjkwMkE4Q0Q0OUEyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpZJOVYAbAd3iqtMYrVrwDGtP
+IkDoayGELqGxE85WKBCdgI6Rix2xrBKgC5wiIRm6PhX+LnFkbYhuXZ3wmIepwF7
hw2tAmd2gLq2BTZlP4V59UF6j7Gw7krr1/YW24lls7jCpQYXTd7ITOgnLPp95U0x
ywGbqlATSjCwtx5a5hWf5g311+vbOhgeHnl6CdxFxDkadAbNgXJgRn77Lh4B5gLu
RmoyUNnxI6I6eJvbxsaWtAqt98hLfTIksKKLO4lSkkbIODC+svV4LtpK45sOC9ll
CIQV+iRmM4f/qKX8YxROf7msaywHOwIHt8BHRhm2u4V7CNHrUW19RbYdgChpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvXF8ca7MujZJ47V1YCkCqM1Jol0wHwYDVR0j
BBgwFoAUDuKi9uRSR8GVGb0iLulHMcScOLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj
SFUvMS8wRUUyQTJGNkU0NTI0N0MxOTUxOUJEMjIyRUU5NDczMUM0OUMzOEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRTJBMkY2RTQ1MjQ3QzE5
NTE5QkQyMjJFRTk0NzMxQzQ5QzM4QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWNFFSMXJib1FqdWNidUx6REJFWktXTFpybmp0UHlZek05a0ZjNm1XY0hVLzEv
MzEzNzMwMmUzMjM0MzcyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqvdAMA0GCSqGSIb3DQEBCwUAA4IBAQCrmkhWRnIy
cndRor0ktX+8ADl8zZis5z242QuL2vJyHFusvKVixYWTnJXJQCCTh/spzpK1Ci2X
1Rk+pWmI/b0V3rROx1nPs0W2ufb79Xyzhgvg92mfTjPQfzYIv1zedm1qyw54cQnS
OpO1klYYhX6qVQ9SmeRfT5yZgpdXXhm/+RJiiqz0JQBhNQHovvbnWx66WhdGZmG7
dWFaC6jAbulFAJtSoaZqeZLt2A33Wsec15thiWbpoXIjXuiH20/5E7e+YlWuyIE3
zi5NKjiYs4nINmBRys0R7OcO2kl4Y827gZs8Wj/3JO6K2dgesAF+K4Lvresx7oLo
TTN1WWVbQgeH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org