Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa
File:                     3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa (raw, json)
Hash identifier:          KHz42NFgDNH/hos3Vc2zvxF40fo/hd97BA9TtTMq6oU=
Subject key identifier:   81:27:CF:1F:67:A3:4D:4D:B6:4D:D8:98:5B:D6:67:00:7E:FE:A8:A6
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       0D4170D7E9318B4D51E50C00F6D9379B1C39E253
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:53 +0000
ROA not before:           Wed 03 Apr 2024 22:05:53 +0000
ROA not after:            Wed 02 Apr 2025 22:10:53 +0000
asID:                     265017
IP address blocks:        170.84.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:41:70:d7:e9:31:8b:4d:51:e5:0c:00:f6:d9:37:9b:1c:39:e2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:53 2024 GMT
            Not After : Apr  2 22:10:53 2025 GMT
        Subject: CN=8127CF1F67A34D4DB64DD8985BD667007EFEA8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:8e:3b:bf:50:16:1a:89:2b:38:f5:1b:c7:
                    73:6b:49:ff:6f:4d:34:13:18:82:8a:8b:3f:c1:15:
                    01:48:fb:4c:50:96:92:7f:90:71:d6:ab:63:e0:ca:
                    d5:8c:12:19:2d:ef:e9:2b:17:0b:39:b6:30:44:b9:
                    ae:9e:87:6f:45:42:6a:4e:3d:3b:1d:dd:2f:71:89:
                    27:22:9f:cf:c9:ac:f4:4e:83:5a:ec:f7:02:3b:03:
                    cf:09:54:3d:2a:1a:65:f0:14:45:1a:28:80:7a:80:
                    c2:15:ab:ce:b1:be:d8:8c:b4:ad:e2:ed:0f:d0:0b:
                    b0:8a:e0:56:e5:c7:7f:49:ea:86:56:ac:3b:6a:fb:
                    f1:b9:30:1e:fa:01:be:a0:83:86:57:26:49:4f:4e:
                    47:96:2e:7f:11:a2:d1:99:c5:20:24:77:06:89:e4:
                    65:a2:06:7d:ce:0b:f7:b3:9b:41:78:9e:54:69:f8:
                    52:7e:91:1e:49:a7:f5:87:45:29:9d:3d:29:ef:ab:
                    5f:04:82:1a:56:67:c9:f5:ae:86:53:1a:60:2e:da:
                    06:ac:f2:93:d2:4f:41:40:11:43:be:6d:8d:dc:97:
                    df:19:31:84:99:c8:df:47:31:43:b6:bd:fd:1a:27:
                    77:90:dd:76:35:11:7a:8e:7d:9d:fc:34:20:93:c7:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:CF:1F:67:A3:4D:4D:B6:4D:D8:98:5B:D6:67:00:7E:FE:A8:A6
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32322d3232203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:5d:d0:f0:a4:cf:93:47:1f:34:ae:88:6c:36:9c:13:fe:
         51:2b:57:12:2f:7f:5c:ed:f1:fc:71:da:b4:93:95:8d:30:ce:
         dd:9e:62:b8:18:3e:85:10:8e:dc:6a:ac:05:b7:50:2a:d2:55:
         bc:4c:f7:5d:ae:de:cc:18:f6:eb:ec:e7:aa:42:cd:80:92:1f:
         97:e0:50:3b:5d:95:42:96:7c:3c:f1:d6:15:b3:99:70:6f:88:
         eb:cb:96:c1:6e:5e:56:5a:28:07:f4:c0:d2:b6:86:01:bb:c2:
         88:9e:a9:62:1a:7d:bb:a9:29:c2:68:05:76:75:30:f3:1d:2a:
         62:4b:f2:8d:9d:c0:fe:a4:ee:57:4a:9b:2e:63:c6:d9:95:33:
         70:22:54:85:2d:63:5b:4d:0a:72:97:8c:f5:ae:93:72:c1:6d:
         51:8e:14:d5:0f:c7:b6:fd:51:5f:65:4e:ea:5e:b6:b3:df:c4:
         c9:22:1e:6e:3d:92:71:89:17:e6:51:16:79:3d:78:23:b7:61:
         1c:8b:36:a2:fa:73:c8:68:61:6a:76:98:0e:41:2b:05:d9:db:
         2b:62:07:50:01:44:15:be:90:b4:9f:fd:f6:e1:27:f7:94:e6:
         c3:dd:1e:11:ff:c1:bb:fa:52:35:72:bd:35:98:00:96:73:01:
         a3:bb:47:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDUFw1+kxi01R5QwA9tk3mxw54lMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxMTcyRDExRjgzQUY5NzBFNDc3RDFCRUMwOTE0MjEw
MzJEOEI5MjAeFw0yNDA0MDMyMjA1NTNaFw0yNTA0MDIyMjEwNTNaMDMxMTAvBgNV
BAMTKDgxMjdDRjFGNjdBMzRENERCNjRERDg5ODVCRDY2NzAwN0VGRUE4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5I47v1AWGokrOPUbx3NrSf9v
TTQTGIKKiz/BFQFI+0xQlpJ/kHHWq2PgytWMEhkt7+krFws5tjBEua6eh29FQmpO
PTsd3S9xiScin8/JrPROg1rs9wI7A88JVD0qGmXwFEUaKIB6gMIVq86xvtiMtK3i
7Q/QC7CK4Fblx39J6oZWrDtq+/G5MB76Ab6gg4ZXJklPTkeWLn8RotGZxSAkdwaJ
5GWiBn3OC/ezm0F4nlRp+FJ+kR5Jp/WHRSmdPSnvq18EghpWZ8n1roZTGmAu2gas
8pPST0FAEUO+bY3cl98ZMYSZyN9HMUO2vf0aJ3eQ3XY1EXqOfZ38NCCTx6yVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgSfPH2ejTU22TdiYW9ZnAH7+qKYwHwYDVR0j
BBgwFoAU0hFy0R+Dr5cOR30b7AkUIQMti5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNFTm5yVEZnZGh2Ylp1QjZWcTZTTVlpanMxdVpiYUR1RWo3QjkyNUN2
TW0vMS9EMjExNzJEMTFGODNBRjk3MEU0NzdEMUJFQzA5MTQyMTAzMkQ4QjkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMTE3MkQxMUY4M0FGOTcw
RTQ3N0QxQkVDMDkxNDIxMDMyRDhCOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzRU5uclRGZ2RodmJadUI2VnE2U01ZaWpzMXVaYmFEdUVqN0I5MjVDdk1tLzEv
MzEzNzMwMmUzODM0MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVIwwDQYJKoZIhvcNAQELBQADggEBAKhoXdDw
pM+TRx80rohsNpwT/lErVxIvf1zt8fxx2rSTlY0wzt2eYrgYPoUQjtxqrAW3UCrS
VbxM912u3swY9uvs56pCzYCSH5fgUDtdlUKWfDzx1hWzmXBviOvLlsFuXlZaKAf0
wNK2hgG7woieqWIafbupKcJoBXZ1MPMdKmJL8o2dwP6k7ldKmy5jxtmVM3AiVIUt
Y1tNCnKXjPWuk3LBbVGOFNUPx7b9UV9lTupetrPfxMkiHm49knGJF+ZRFnk9eCO3
YRyLNqL6c8hoYWp2mA5BKwXZ2ytiB1ABRBW+kLSf/fbhJ/eU5sPdHhH/wbv6UjVy
vTWYAJZzAaO7R2w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org