Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
File:                     3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          eaJXa39REkoL81KW9z1pYg9xIOBt/lMkjMAa956WG9U=
Subject key identifier:   B5:17:FC:7C:A5:64:83:47:02:85:9B:A8:97:2C:EE:E5:56:E0:C7:8A
Certificate issuer:       /CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
Certificate serial:       2336302A47A3110CC4EBC8E46E4B07C0AC7781E4
Authority key identifier: 0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
Signing time:             Thu 07 Sep 2023 15:00:01 +0000
ROA not before:           Thu 07 Sep 2023 14:55:01 +0000
ROA not after:            Thu 05 Sep 2024 15:00:01 +0000
asID:                     264440
IP address blocks:        170.233.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:36:30:2a:47:a3:11:0c:c4:eb:c8:e4:6e:4b:07:c0:ac:77:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
        Validity
            Not Before: Sep  7 14:55:01 2023 GMT
            Not After : Sep  5 15:00:01 2024 GMT
        Subject: CN=3082010A0282010100A0E5885FF12FBBBC642014355FCE83590F95D58C4EF77352B726C785B88D7BE68990DE2D7A6CCEA079E13C492FDE9BA49B032FB0385F8929DB650EDB9074592247E9E7170B47D5D949008AF408B590C5D717E7ADE1B1D2CD1E3D8AF560D776A06821A2821DB4D0997DED897E89A940F112B099CB789F74E1546DF348F757ABD58FAB642112FD3B5508691634672EF6777E6460BE07BEE29B73F87F885077087E1ADCD4DB9706560A546DDD010BDD02DBD7D2441D0876D5BA63D2EBCCC336DA10903D8DF5A7479ACAC2692E1F8AABD60A9FE5B913D87C33AC719506AF6473676E1C6A9B5A4784AEEA7DA8E59DDB67641DE16FCC41C3EE81D00A1050DC7356D13F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:88:5f:f1:2f:bb:bc:64:20:14:35:5f:ce:
                    83:59:0f:95:d5:8c:4e:f7:73:52:b7:26:c7:85:b8:
                    8d:7b:e6:89:90:de:2d:7a:6c:ce:a0:79:e1:3c:49:
                    2f:de:9b:a4:9b:03:2f:b0:38:5f:89:29:db:65:0e:
                    db:90:74:59:22:47:e9:e7:17:0b:47:d5:d9:49:00:
                    8a:f4:08:b5:90:c5:d7:17:e7:ad:e1:b1:d2:cd:1e:
                    3d:8a:f5:60:d7:76:a0:68:21:a2:82:1d:b4:d0:99:
                    7d:ed:89:7e:89:a9:40:f1:12:b0:99:cb:78:9f:74:
                    e1:54:6d:f3:48:f7:57:ab:d5:8f:ab:64:21:12:fd:
                    3b:55:08:69:16:34:67:2e:f6:77:7e:64:60:be:07:
                    be:e2:9b:73:f8:7f:88:50:77:08:7e:1a:dc:d4:db:
                    97:06:56:0a:54:6d:dd:01:0b:dd:02:db:d7:d2:44:
                    1d:08:76:d5:ba:63:d2:eb:cc:c3:36:da:10:90:3d:
                    8d:f5:a7:47:9a:ca:c2:69:2e:1f:8a:ab:d6:0a:9f:
                    e5:b9:13:d8:7c:33:ac:71:95:06:af:64:73:67:6e:
                    1c:6a:9b:5a:47:84:ae:ea:7d:a8:e5:9d:db:67:64:
                    1d:e1:6f:cc:41:c3:ee:81:d0:0a:10:50:dc:73:56:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:17:FC:7C:A5:64:83:47:02:85:9B:A8:97:2C:EE:E5:56:E0:C7:8A
            X509v3 Authority Key Identifier:
                keyid:0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:af:42:f0:21:72:e3:11:f1:23:a2:eb:c4:a7:95:8e:29:40:
         10:11:17:39:f6:3c:4f:7e:4b:dd:aa:8b:d4:e4:84:21:04:43:
         c7:46:7a:16:3e:91:53:b7:f7:1d:30:6b:ff:ad:4c:cb:54:d2:
         52:6c:69:49:6c:91:8a:a1:72:8b:8d:a8:a5:36:b3:8f:ec:7c:
         0c:8f:30:8d:c5:ae:ba:ce:c9:78:94:f7:b9:2b:9b:80:b9:06:
         b3:55:19:f7:14:18:fc:d2:ae:54:fa:d6:b7:04:09:2d:55:2f:
         c6:4e:1f:dd:6f:fc:3e:57:a8:63:62:b9:e2:9e:b0:fb:b7:77:
         68:24:22:03:17:fa:b8:a3:51:6d:a9:6e:d0:c7:64:22:3d:0c:
         cc:01:f6:27:a7:87:91:42:d6:7e:05:aa:6b:3a:91:e4:13:da:
         73:53:b7:6a:1d:89:6d:94:9a:aa:54:ef:11:43:11:91:5a:ce:
         b2:a4:98:5d:d8:d1:97:5c:66:71:83:19:e8:3f:af:34:cc:5d:
         8a:61:22:73:e2:d5:77:dd:f5:26:18:7f:d6:f8:d8:c0:ff:f6:
         8d:ba:de:d3:5f:c8:d8:9d:c9:0b:2c:eb:dd:ee:7e:09:3b:8e:
         d8:9e:c3:69:e5:d8:f8:b5:8e:38:6d:37:0c:2b:ad:46:3c:2a:
         8b:d6:eb:1e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUIzYwKkejEQzE68jkbksHwKx3geQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM3RTVCQTkwRjhFOTZGRUVFMTI1NEZDQkEzQTEyM0NB
MUM3NDBEQTAeFw0yMzA5MDcxNDU1MDFaFw0yNDA5MDUxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTBFNTg4NUZGMTJGQkJCQzY0
MjAxNDM1NUZDRTgzNTkwRjk1RDU4QzRFRjc3MzUyQjcyNkM3ODVCODhEN0JFNjg5
OTBERTJEN0E2Q0NFQTA3OUUxM0M0OTJGREU5QkE0OUIwMzJGQjAzODVGODkyOURC
NjUwRURCOTA3NDU5MjI0N0U5RTcxNzBCNDdENUQ5NDkwMDhBRjQwOEI1OTBDNUQ3
MTdFN0FERTFCMUQyQ0QxRTNEOEFGNTYwRDc3NkEwNjgyMUEyODIxREI0RDA5OTdE
RUQ4OTdFODlBOTQwRjExMkIwOTlDQjc4OUY3NEUxNTQ2REYzNDhGNzU3QUJENThG
QUI2NDIxMTJGRDNCNTUwODY5MTYzNDY3MkVGNjc3N0U2NDYwQkUwN0JFRTI5Qjcz
Rjg3Rjg4NTA3NzA4N0UxQURDRDREQjk3MDY1NjBBNTQ2REREMDEwQkREMDJEQkQ3
RDI0NDFEMDg3NkQ1QkE2M0QyRUJDQ0MzMzZEQTEwOTAzRDhERjVBNzQ3OUFDQUMy
NjkyRTFGOEFBQkQ2MEE5RkU1QjkxM0Q4N0MzM0FDNzE5NTA2QUY2NDczNjc2RTFD
NkE5QjVBNDc4NEFFRUE3REE4RTU5RERCNjc2NDFERTE2RkNDNDFDM0VFODFEMDBB
MTA1MERDNzM1NkQxM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoOWIX/Evu7xkIBQ1X86DWQ+V1YxO93NStybHhbiNe+aJkN4temzO
oHnhPEkv3pukmwMvsDhfiSnbZQ7bkHRZIkfp5xcLR9XZSQCK9Ai1kMXXF+et4bHS
zR49ivVg13agaCGigh200Jl97Yl+ialA8RKwmct4n3ThVG3zSPdXq9WPq2QhEv07
VQhpFjRnLvZ3fmRgvge+4ptz+H+IUHcIfhrc1NuXBlYKVG3dAQvdAtvX0kQdCHbV
umPS68zDNtoQkD2N9adHmsrCaS4fiqvWCp/luRPYfDOscZUGr2RzZ24captaR4Su
6n2o5Z3bZ2Qd4W/MQcPugdAKEFDcc1bRPwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLUX/HylZINHAoWbqJcs7uVW4MeKMB8GA1UdIwQYMBaAFAx+W6kPjpb+7hJU/Lo6
Ejyhx0DaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0UzUHdrVzlTZUJzcXBl
UndjZm9Wa2VweG9iYzNNblBEN0xEajNjZTEyWFBaLzAvMEM3RTVCQTkwRjhFOTZG
RUVFMTI1NEZDQkEzQTEyM0NBMUM3NDBEQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wQzdFNUJBOTBGOEU5NkZFRUUxMjU0RkNCQTNBMTIzQ0ExQzc0
MERBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FM1B3a1c5U2VCc3FwZVJ3Y2Zv
VmtlcHhvYmMzTW5QRDdMRGozY2UxMlhQWi8wLzMxMzczMDJlMzIzMzMzMmUzMTM1
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNDM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq6ZwwDQYJKoZIhvcNAQELBQADggEBAAavQvAhcuMR8SOi68SnlY4pQBARFzn2
PE9+S92qi9TkhCEEQ8dGehY+kVO39x0wa/+tTMtU0lJsaUlskYqhcouNqKU2s4/s
fAyPMI3FrrrOyXiU97krm4C5BrNVGfcUGPzSrlT61rcECS1VL8ZOH91v/D5XqGNi
ueKesPu3d2gkIgMX+rijUW2pbtDHZCI9DMwB9ienh5FC1n4Fqms6keQT2nNTt2od
iW2UmqpU7xFDEZFazrKkmF3Y0ZdcZnGDGeg/rzTMXYphInPi1Xfd9SYYf9b42MD/
9o263tNfyNidyQss693ufgk7jtiew2nl2Pi1jjhtNwwrrUY8KovW6x4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org