Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          7JwXStZfFYItPnjzpGAklWo4kLmsJlEP3VbftOdRK7k=
Subject key identifier:   52:10:4A:72:72:8B:B6:22:AF:CF:81:DB:61:59:3B:E6:5C:15:63:F4
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       0C271DEBD3624EE4CA2C35736DC38592D12A0574
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:51 +0000
ROA not before:           Wed 03 Apr 2024 22:05:51 +0000
ROA not after:            Wed 02 Apr 2025 22:10:51 +0000
asID:                     265017
IP address blocks:        170.84.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:1d:eb:d3:62:4e:e4:ca:2c:35:73:6d:c3:85:92:d1:2a:05:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:51 2024 GMT
            Not After : Apr  2 22:10:51 2025 GMT
        Subject: CN=52104A72728BB622AFCF81DB61593BE65C1563F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:8b:d0:31:f7:a6:98:36:58:53:dc:9a:d3:
                    b7:64:7b:74:88:a5:bf:22:b1:cd:54:02:f5:f1:58:
                    cd:5f:a1:59:c6:eb:c8:7a:f2:2d:3d:c1:15:10:25:
                    49:13:a6:72:cf:57:9e:ba:51:1b:4f:bf:77:28:dd:
                    a5:cd:04:c0:a4:e8:da:81:a3:a4:ff:f9:36:e8:d3:
                    d1:67:c3:29:08:e9:79:62:d7:fe:70:9b:bb:13:dd:
                    30:b8:9e:42:06:c6:5e:55:0c:24:9f:17:59:7f:44:
                    64:ea:27:5f:82:dc:3c:db:39:24:e0:dd:f9:8b:63:
                    34:ba:24:d5:6f:a4:c2:21:38:18:cf:a0:d8:fa:42:
                    e7:43:89:d2:53:2b:86:c9:b4:be:6e:7e:ab:82:0d:
                    75:1a:ab:9d:8b:2d:13:d1:85:a5:f6:d3:87:72:94:
                    92:31:52:df:d4:f5:17:8a:2b:b5:fd:1a:ce:26:d8:
                    e9:53:4c:e1:34:14:3d:43:13:fd:f4:72:08:61:93:
                    6c:b6:72:6e:1a:43:c1:7d:db:e4:8f:3b:87:b9:73:
                    02:fc:7b:ff:5d:b7:80:9e:ce:c0:68:d5:22:67:9e:
                    15:c3:c5:fd:06:c8:4e:a7:da:c2:f1:97:8d:97:b2:
                    c1:43:94:cd:15:29:c3:4e:42:62:fe:9e:12:80:d3:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:4A:72:72:8B:B6:22:AF:CF:81:DB:61:59:3B:E6:5C:15:63:F4
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134302e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:cb:8a:4b:aa:85:04:80:16:7d:75:32:12:70:c6:57:2f:
         64:a0:40:91:da:c5:60:a7:02:11:2e:20:fd:fe:a0:00:1f:e4:
         f9:28:60:8f:19:3d:ff:04:a6:a2:74:23:e8:55:80:21:e7:5e:
         08:1c:0a:59:b0:c2:34:76:5c:8f:1b:a7:20:8d:f6:f0:0d:b4:
         c6:b2:87:2c:37:3a:9a:43:16:c6:0d:c7:84:8b:28:72:0f:16:
         2a:97:da:4e:34:09:dc:e3:1f:76:db:0b:f8:01:65:e0:cf:bd:
         a8:34:79:f9:e9:9e:c3:a5:67:37:21:d4:ce:08:63:a4:08:c7:
         b3:16:0c:88:3d:2b:6e:5c:3d:b1:70:0e:f3:77:6d:9c:58:82:
         37:3f:4e:e6:1b:0a:8c:13:90:70:b8:2e:97:09:95:d6:36:20:
         40:43:07:b1:60:ea:16:ef:d0:d3:e7:d5:19:e4:12:8e:33:38:
         9d:f9:dd:10:a2:cb:c1:29:46:fe:98:c9:31:1b:87:68:6e:04:
         85:ca:f9:43:23:21:f5:e1:1d:41:34:82:1b:d1:dc:43:4d:69:
         b4:11:ba:14:c6:93:72:ba:52:cb:5c:a1:f0:5b:2f:06:97:4c:
         59:aa:09:fd:70:0a:d5:cf:51:fa:bb:6a:e2:a7:5a:eb:7b:df:
         eb:8e:f0:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDCcd69NiTuTKLDVzbcOFktEqBXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxMTcyRDExRjgzQUY5NzBFNDc3RDFCRUMwOTE0MjEw
MzJEOEI5MjAeFw0yNDA0MDMyMjA1NTFaFw0yNTA0MDIyMjEwNTFaMDMxMTAvBgNV
BAMTKDUyMTA0QTcyNzI4QkI2MjJBRkNGODFEQjYxNTkzQkU2NUMxNTYzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9YvQMfemmDZYU9ya07dke3SI
pb8isc1UAvXxWM1foVnG68h68i09wRUQJUkTpnLPV566URtPv3co3aXNBMCk6NqB
o6T/+Tbo09FnwykI6Xli1/5wm7sT3TC4nkIGxl5VDCSfF1l/RGTqJ1+C3DzbOSTg
3fmLYzS6JNVvpMIhOBjPoNj6QudDidJTK4bJtL5ufquCDXUaq52LLRPRhaX204dy
lJIxUt/U9ReKK7X9Gs4m2OlTTOE0FD1DE/30cghhk2y2cm4aQ8F92+SPO4e5cwL8
e/9dt4CezsBo1SJnnhXDxf0GyE6n2sLxl42XssFDlM0VKcNOQmL+nhKA0+3hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUhBKcnKLtiKvz4HbYVk75lwVY/QwHwYDVR0j
BBgwFoAU0hFy0R+Dr5cOR30b7AkUIQMti5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNFTm5yVEZnZGh2Ylp1QjZWcTZTTVlpanMxdVpiYUR1RWo3QjkyNUN2
TW0vMS9EMjExNzJEMTFGODNBRjk3MEU0NzdEMUJFQzA5MTQyMTAzMkQ4QjkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMTE3MkQxMUY4M0FGOTcw
RTQ3N0QxQkVDMDkxNDIxMDMyRDhCOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzRU5uclRGZ2RodmJadUI2VnE2U01ZaWpzMXVaYmFEdUVqN0I5MjVDdk1tLzEv
MzEzNzMwMmUzODM0MmUzMTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVIwwDQYJKoZIhvcNAQELBQADggEBAAPVy4pL
qoUEgBZ9dTIScMZXL2SgQJHaxWCnAhEuIP3+oAAf5PkoYI8ZPf8EpqJ0I+hVgCHn
XggcClmwwjR2XI8bpyCN9vANtMayhyw3OppDFsYNx4SLKHIPFiqX2k40CdzjH3bb
C/gBZeDPvag0efnpnsOlZzch1M4IY6QIx7MWDIg9K25cPbFwDvN3bZxYgjc/TuYb
CowTkHC4LpcJldY2IEBDB7Fg6hbv0NPn1RnkEo4zOJ353RCiy8EpRv6YyTEbh2hu
BIXK+UMjIfXhHUE0ghvR3ENNabQRuhTGk3K6UstcofBbLwaXTFmqCf1wCtXPUfq7
auKnWut73+uO8Do=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org