Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa
File:                     3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          bbMFT5o4RFGAKABI8EhOM5LKtccqjAqcGE0CvLjQcJs=
Subject key identifier:   DE:E9:E6:57:5B:13:B5:48:DA:F9:83:E4:F9:F4:23:89:F9:D9:DC:A1
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       6AAF43C20E32F323DF224089AD5F17B43E70A441
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        170.79.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:af:43:c2:0e:32:f3:23:df:22:40:89:ad:5f:17:b4:3e:70:a4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=DEE9E6575B13B548DAF983E4F9F42389F9D9DCA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:e4:42:2e:92:7d:17:92:44:64:88:31:e6:
                    fc:f4:ac:3d:9b:59:ad:f1:4a:2a:01:9d:25:c9:47:
                    a9:c4:df:51:73:2e:57:13:3b:83:61:d2:56:70:90:
                    a6:8b:a4:c7:75:8d:4e:a2:42:a5:a6:0f:4d:ac:ab:
                    99:70:ba:8f:29:7f:9b:ff:cf:c1:c5:84:a2:91:9b:
                    26:3c:0a:23:0d:6e:d0:eb:95:7a:02:e6:ca:ac:0f:
                    50:c2:d5:a2:37:6a:2b:0f:1b:20:66:c8:77:8e:d4:
                    df:4b:ea:c9:79:66:a4:99:af:12:6f:44:f5:8d:d9:
                    c6:5a:25:fd:f7:6b:28:47:3c:d8:48:f6:b9:fa:8f:
                    69:cf:18:3c:43:ff:3f:5a:18:3e:f3:a9:29:c1:7b:
                    be:f5:0e:36:96:dc:5f:a4:9a:ad:55:55:86:5f:6c:
                    ea:58:7a:81:1b:87:68:40:ee:bf:f9:c8:76:b9:91:
                    be:00:25:b8:86:72:f5:ba:bf:ff:3c:b2:23:04:45:
                    1b:b5:8a:f3:e2:59:08:bc:cf:09:c9:0b:e8:05:67:
                    c3:bd:20:1c:89:0e:c6:e3:ab:dd:30:4e:2d:25:96:
                    8c:39:4c:6b:89:22:75:f5:5d:0e:d2:b4:70:30:78:
                    14:52:f9:05:08:9c:5d:3e:c6:79:68:e1:38:61:be:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:E6:57:5B:13:B5:48:DA:F9:83:E4:F9:F4:23:89:F9:D9:DC:A1
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:78:38:2d:bc:49:64:78:35:38:3e:a1:60:7d:d6:8e:44:
         d2:ad:ce:b4:75:b9:f1:24:f4:71:00:bb:92:ce:f2:c8:d0:e2:
         76:f8:e2:51:ea:d8:48:74:e7:48:06:f4:da:5d:34:2b:14:6e:
         15:86:d7:a9:0b:ee:22:aa:bd:e2:4a:64:8f:aa:ba:2c:3b:30:
         43:0b:ed:7e:7d:3c:1f:80:f2:cd:84:a1:19:1e:63:de:e0:b7:
         33:6a:1a:39:e4:59:ba:2a:22:3e:76:9c:21:52:86:ad:e6:e5:
         52:9e:46:16:71:10:55:7a:f1:1e:d7:4b:ab:33:77:eb:9b:00:
         c7:c9:93:2e:2c:60:32:09:3a:0d:51:5b:5e:b7:77:9f:3c:f4:
         1b:b0:d8:3d:67:9a:0d:34:33:b6:15:7c:d3:75:2c:af:3b:91:
         56:75:89:60:a7:07:09:96:13:0c:81:3e:56:98:e1:bf:49:3d:
         cc:51:05:9b:98:7d:86:f4:0f:23:3b:f9:b5:1b:49:50:10:55:
         68:0a:58:83:67:1f:c8:15:e4:1a:58:01:49:8b:e3:82:3c:05:
         b8:6d:e7:e5:42:53:90:de:21:67:cf:7e:ce:79:37:c4:57:21:
         73:39:26:50:89:49:9e:74:1d:3a:7f:84:6b:3e:0e:f1:a8:36:
         34:13:65:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaq9Dwg4y8yPfIkCJrV8XtD5wpEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJCOUJCQzYwRjA4OTIxOERFRjBDMTFCMzI1QTdFQ0U4
RjAzNEJBRTAeFw0yMzExMzAxOTU1MDBaFw0yNDExMjgyMDAwMDBaMDMxMTAvBgNV
BAMTKERFRTlFNjU3NUIxM0I1NDhEQUY5ODNFNEY5RjQyMzg5RjlEOURDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y+RCLpJ9F5JEZIgx5vz0rD2b
Wa3xSioBnSXJR6nE31FzLlcTO4Nh0lZwkKaLpMd1jU6iQqWmD02sq5lwuo8pf5v/
z8HFhKKRmyY8CiMNbtDrlXoC5sqsD1DC1aI3aisPGyBmyHeO1N9L6sl5ZqSZrxJv
RPWN2cZaJf33ayhHPNhI9rn6j2nPGDxD/z9aGD7zqSnBe771DjaW3F+kmq1VVYZf
bOpYeoEbh2hA7r/5yHa5kb4AJbiGcvW6v/88siMERRu1ivPiWQi8zwnJC+gFZ8O9
IByJDsbjq90wTi0llow5TGuJInX1XQ7StHAweBRS+QUInF0+xnlo4ThhvqWZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3unmV1sTtUja+YPk+fQjifnZ3KEwHwYDVR0j
BBgwFoAUQrm7xg8Ikhje8MEbMlp+zo8DS64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMC80MkI5QkJDNjBGMDg5MjE4REVGMEMxMUIzMjVBN0VDRThGMDM0QkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyQjlCQkM2MEYwODkyMThE
RUYwQzExQjMyNUE3RUNFOEYwMzRCQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzAv
MzEzNzMwMmUzNzM5MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT+AwDQYJKoZIhvcNAQELBQADggEBAEuLeDgt
vElkeDU4PqFgfdaORNKtzrR1ufEk9HEAu5LO8sjQ4nb44lHq2Eh050gG9NpdNCsU
bhWG16kL7iKqveJKZI+quiw7MEML7X59PB+A8s2EoRkeY97gtzNqGjnkWboqIj52
nCFShq3m5VKeRhZxEFV68R7XS6szd+ubAMfJky4sYDIJOg1RW163d5889Buw2D1n
mg00M7YVfNN1LK87kVZ1iWCnBwmWEwyBPlaY4b9JPcxRBZuYfYb0DyM7+bUbSVAQ
VWgKWINnH8gV5BpYAUmL44I8Bbht5+VCU5DeIWfPfs55N8RXIXM5JlCJSZ50HTp/
hGs+DvGoNjQTZS4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org