Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3234203d3e20323636323837.roa
File:                     3137302e37392e36302e302f32322d3234203d3e20323636323837.roa (raw, json)
Hash identifier:          GFcGCii/zOFk5ToWW0mMPE5nkITJVVf0gSu67vVVYLg=
Subject key identifier:   3D:5B:82:1F:8D:DB:2D:AF:75:CF:8C:7E:BC:04:4E:F1:F4:43:1B:D7
Certificate issuer:       /CN=2A876EB3D8C19EC441483201BDB5CEB1C0C6640A
Certificate serial:       041C46B5818F4FACA8554EC5649AFF6C67661C7E
Authority key identifier: 2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3234203d3e20323636323837.roa
Signing time:             Tue 17 Oct 2023 20:11:05 +0000
ROA not before:           Tue 17 Oct 2023 20:06:05 +0000
ROA not after:            Tue 15 Oct 2024 20:11:05 +0000
asID:                     266287
IP address blocks:        170.79.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1c:46:b5:81:8f:4f:ac:a8:55:4e:c5:64:9a:ff:6c:67:66:1c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A876EB3D8C19EC441483201BDB5CEB1C0C6640A
        Validity
            Not Before: Oct 17 20:06:05 2023 GMT
            Not After : Oct 15 20:11:05 2024 GMT
        Subject: CN=3D5B821F8DDB2DAF75CF8C7EBC044EF1F4431BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:ec:97:9f:10:6a:6b:11:e1:89:c3:85:c9:
                    7d:0e:bb:4d:4f:a6:e5:7c:f6:f5:17:03:e2:21:d9:
                    07:b3:d2:a3:f2:17:e7:63:a2:7b:0a:e9:99:a8:cf:
                    df:3e:b5:c0:f0:b9:bd:6f:ae:59:43:8d:91:ab:c1:
                    6c:e6:79:df:1f:f3:52:22:bf:a1:27:17:7a:ac:bf:
                    fe:a5:28:40:81:9c:87:fb:87:fb:1c:72:d7:b5:6b:
                    62:57:65:26:b4:59:31:06:c3:16:db:8c:0f:a2:a1:
                    aa:a5:9e:5c:5a:a4:74:a7:5b:7e:d2:71:bb:b8:43:
                    83:eb:af:60:b4:58:9c:41:c1:0a:8e:b1:8f:4e:20:
                    9d:74:39:67:01:c6:8f:8d:93:5f:fe:37:84:d5:9c:
                    d2:3d:bb:b0:4e:25:4e:63:83:05:67:f0:b5:af:00:
                    3e:2a:80:b7:5c:2b:38:35:53:1c:e9:a4:40:99:fc:
                    b5:d1:0b:ca:5f:25:63:f9:36:99:54:8d:f9:27:67:
                    5b:0d:a5:d6:f9:14:c7:7d:ff:6e:9a:3a:a5:aa:fe:
                    68:36:7a:2e:7e:6c:ba:c7:ac:34:39:90:bb:4e:72:
                    2f:07:f2:af:90:9b:24:77:ee:5c:e3:8b:dc:20:21:
                    a9:bc:75:55:c1:0f:8e:b2:b8:ef:9c:4d:c9:97:58:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5B:82:1F:8D:DB:2D:AF:75:CF:8C:7E:BC:04:4E:F1:F4:43:1B:D7
            X509v3 Authority Key Identifier:
                keyid:2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/3137302e37392e36302e302f32322d3234203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:c1:27:da:77:1e:0d:12:1f:2a:d2:a2:14:1c:69:0b:c3:
         9e:79:a2:d9:92:9c:d7:01:5c:15:28:fb:10:46:9b:0b:57:36:
         1c:70:30:ed:71:fe:d5:65:03:2e:68:a9:dd:56:d7:6b:4a:46:
         e7:06:22:90:3c:5e:92:a2:e4:51:2a:53:35:bc:c5:19:7b:42:
         93:1b:04:ec:b6:b6:d5:c8:3c:6c:06:d8:53:71:0b:1a:09:64:
         48:4a:81:6e:8f:3a:0c:d1:1d:d4:ad:71:00:e4:81:ac:ed:a6:
         ad:0f:74:6f:b9:a2:08:63:13:4c:03:6b:40:3c:f1:a0:75:06:
         0a:a6:48:34:d3:0e:a9:dc:32:02:ef:58:88:18:85:84:01:5a:
         62:60:30:eb:65:31:88:67:b6:4a:6d:8e:bf:a4:aa:7a:ae:80:
         53:b9:31:fa:3a:43:94:77:d3:99:6c:14:4f:bf:d7:2b:9d:38:
         1d:f7:bf:69:d9:de:fa:c6:b1:cb:48:d3:d3:fe:33:b8:04:b1:
         f9:bb:6a:55:d3:68:0a:69:21:b3:e3:fb:57:16:2d:1c:c4:82:
         b0:6f:0f:e3:bc:15:c0:8e:bf:3e:b2:06:a9:e2:cc:8d:9d:d4:
         32:7d:3c:25:dd:43:82:69:8d:fb:ac:30:91:2f:5a:74:25:e9:
         a6:1f:cf:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBBxGtYGPT6yoVU7FZJr/bGdmHH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE4NzZFQjNEOEMxOUVDNDQxNDgzMjAxQkRCNUNFQjFD
MEM2NjQwQTAeFw0yMzEwMTcyMDA2MDVaFw0yNDEwMTUyMDExMDVaMDMxMTAvBgNV
BAMTKDNENUI4MjFGOEREQjJEQUY3NUNGOEM3RUJDMDQ0RUYxRjQ0MzFCRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNI+yXnxBqaxHhicOFyX0Ou01P
puV89vUXA+Ih2Qez0qPyF+djonsK6Zmoz98+tcDwub1vrllDjZGrwWzmed8f81Ii
v6EnF3qsv/6lKECBnIf7h/sccte1a2JXZSa0WTEGwxbbjA+ioaqlnlxapHSnW37S
cbu4Q4Prr2C0WJxBwQqOsY9OIJ10OWcBxo+Nk1/+N4TVnNI9u7BOJU5jgwVn8LWv
AD4qgLdcKzg1UxzppECZ/LXRC8pfJWP5NplUjfknZ1sNpdb5FMd9/26aOqWq/mg2
ei5+bLrHrDQ5kLtOci8H8q+QmyR37lzji9wgIam8dVXBD46yuO+cTcmXWGBDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPVuCH43bLa91z4x+vARO8fRDG9cwHwYDVR0j
BBgwFoAUKodus9jBnsRBSDIBvbXOscDGZAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhTcHRKSEZFTEVWM01tMnNQWWpqVDNpVFdEN2lkZllZVTFBWEtDUTZa
a2cvMC8yQTg3NkVCM0Q4QzE5RUM0NDE0ODMyMDFCREI1Q0VCMUMwQzY2NDBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBODc2RUIzRDhDMTlFQzQ0
MTQ4MzIwMUJEQjVDRUIxQzBDNjY0MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoU3B0SkhGRUxFVjNNbTJzUFlqalQzaVRXRDdpZGZZWVUxQVhLQ1E2WmtnLzAv
MzEzNzMwMmUzNzM5MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk88MA0GCSqGSIb3DQEBCwUAA4IBAQAJpsEn2nce
DRIfKtKiFBxpC8OeeaLZkpzXAVwVKPsQRpsLVzYccDDtcf7VZQMuaKndVtdrSkbn
BiKQPF6SouRRKlM1vMUZe0KTGwTstrbVyDxsBthTcQsaCWRISoFujzoM0R3UrXEA
5IGs7aatD3RvuaIIYxNMA2tAPPGgdQYKpkg00w6p3DIC71iIGIWEAVpiYDDrZTGI
Z7ZKbY6/pKp6roBTuTH6OkOUd9OZbBRPv9crnTgd979p2d76xrHLSNPT/jO4BLH5
u2pV02gKaSGz4/tXFi0cxIKwbw/jvBXAjr8+sgap4syNndQyfTwl3UOCaY37rDCR
L1p0JemmH8/p
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org