Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3232203d3e20323636333134.roa
File:                     3137302e3233382e35322e302f32322d3232203d3e20323636333134.roa (raw, json)
Hash identifier:          HJVO81j1gunB3yaDKcoU8PwVF9pJnM3P+EPpihfr2ho=
Subject key identifier:   E0:FA:EA:54:B3:9A:3F:AB:3B:88:22:3C:00:C6:C8:5B:79:2C:CD:83
Certificate issuer:       /CN=4523B98C8A5D03211CD644C7D826F6AD10BE0C7D
Certificate serial:       349246385C9DD075FD23FBA28252C3ABA9302752
Authority key identifier: 45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3232203d3e20323636333134.roa
Signing time:             Fri 23 Aug 2024 20:05:50 +0000
ROA not before:           Fri 23 Aug 2024 20:00:50 +0000
ROA not after:            Fri 22 Aug 2025 20:05:50 +0000
asID:                     266314
IP address blocks:        170.238.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:92:46:38:5c:9d:d0:75:fd:23:fb:a2:82:52:c3:ab:a9:30:27:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4523B98C8A5D03211CD644C7D826F6AD10BE0C7D
        Validity
            Not Before: Aug 23 20:00:50 2024 GMT
            Not After : Aug 22 20:05:50 2025 GMT
        Subject: CN=E0FAEA54B39A3FAB3B88223C00C6C85B792CCD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:22:08:f2:1b:d4:8d:15:6a:59:35:1f:5e:
                    f0:ee:4c:d2:21:59:c2:c1:1a:5e:cd:56:83:08:42:
                    4e:f3:ca:f0:6b:17:78:02:11:85:78:d4:e4:61:ae:
                    7b:15:f4:48:12:00:c6:1f:06:e4:3c:6e:a8:27:49:
                    b1:79:c7:3f:ea:0b:92:bc:1c:a8:fb:ba:2f:25:fd:
                    b0:35:c3:04:a6:a2:5c:ec:a2:9a:01:80:cd:08:ea:
                    b1:24:8e:10:56:f2:ca:37:65:c4:5a:61:2c:82:c6:
                    f5:ba:15:ed:8d:92:86:53:b1:87:c3:7f:60:25:ac:
                    c2:2d:be:5b:d6:fa:e2:ac:2e:9a:67:d5:c2:a8:b1:
                    f7:22:79:cc:4b:0e:69:4f:c5:68:88:2e:9a:af:4e:
                    f8:59:1a:80:60:83:4d:60:37:1d:e1:fe:f5:13:b9:
                    02:1e:e1:0c:c0:89:ed:ac:c8:4a:fd:b3:77:70:13:
                    39:45:f6:d1:09:ca:68:79:75:90:0c:d9:35:e3:70:
                    84:14:ab:f8:6a:b7:ce:75:7f:1e:e1:31:33:de:87:
                    cf:f7:0c:eb:26:a6:4b:90:59:25:bb:56:2e:b9:6a:
                    13:fe:d7:c1:e1:55:92:0a:35:b2:73:b1:01:5b:3c:
                    63:2f:2d:f0:7d:b3:4f:3f:18:b5:da:0e:73:82:f3:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:EA:54:B3:9A:3F:AB:3B:88:22:3C:00:C6:C8:5B:79:2C:CD:83
            X509v3 Authority Key Identifier:
                keyid:45:23:B9:8C:8A:5D:03:21:1C:D6:44:C7:D8:26:F6:AD:10:BE:0C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523B98C8A5D03211CD644C7D826F6AD10BE0C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/3137302e3233382e35322e302f32322d3232203d3e20323636333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:7c:9b:f0:3a:1d:66:03:5e:9c:2a:12:da:5a:07:64:d0:
         6a:27:23:f7:f1:1c:50:81:6c:66:a0:8e:ed:f7:df:57:d2:bb:
         4d:eb:40:e6:bf:b9:37:9a:7f:4a:1a:e1:65:d3:4c:50:30:d1:
         d7:49:60:3b:41:88:b6:31:60:f6:2d:48:67:22:2f:b3:cf:f3:
         1c:89:96:f2:cc:75:96:11:46:0d:57:44:df:60:96:92:2f:d4:
         c5:5e:e0:14:0a:6b:d8:ae:77:f8:10:ea:2d:e5:76:b6:9e:f5:
         39:b2:86:5c:4b:bb:a5:f6:13:12:73:ca:ea:63:72:e0:d8:fa:
         9c:1e:ea:a4:73:c7:66:7b:7f:ef:21:23:18:1a:1e:e6:01:91:
         5f:ba:55:6f:88:69:bc:a5:c9:f9:d9:02:e8:b5:86:42:48:b4:
         68:9d:0e:19:eb:bd:ca:b3:e0:6e:ac:a7:ba:1b:cb:96:83:ba:
         46:10:16:44:4a:50:77:c3:a7:62:e6:15:00:8e:dd:fa:ec:b4:
         f0:c4:5a:94:76:dc:24:3f:08:90:38:40:27:7a:24:01:4a:16:
         bc:bb:b8:21:87:44:ee:08:ef:be:6b:19:a2:2f:84:a7:20:43:
         77:92:f2:41:10:4e:39:d8:af:39:42:6f:46:3e:a6:4d:0d:9b:
         0e:07:78:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNJJGOFyd0HX9I/uiglLDq6kwJ1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUyM0I5OEM4QTVEMDMyMTFDRDY0NEM3RDgyNkY2QUQx
MEJFMEM3RDAeFw0yNDA4MjMyMDAwNTBaFw0yNTA4MjIyMDA1NTBaMDMxMTAvBgNV
BAMTKEUwRkFFQTU0QjM5QTNGQUIzQjg4MjIzQzAwQzZDODVCNzkyQ0NEODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchCII8hvUjRVqWTUfXvDuTNIh
WcLBGl7NVoMIQk7zyvBrF3gCEYV41ORhrnsV9EgSAMYfBuQ8bqgnSbF5xz/qC5K8
HKj7ui8l/bA1wwSmolzsopoBgM0I6rEkjhBW8so3ZcRaYSyCxvW6Fe2NkoZTsYfD
f2AlrMItvlvW+uKsLppn1cKosfciecxLDmlPxWiILpqvTvhZGoBgg01gNx3h/vUT
uQIe4QzAie2syEr9s3dwEzlF9tEJymh5dZAM2TXjcIQUq/hqt851fx7hMTPeh8/3
DOsmpkuQWSW7Vi65ahP+18HhVZIKNbJzsQFbPGMvLfB9s08/GLXaDnOC85qnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4PrqVLOaP6s7iCI8AMbIW3kszYMwHwYDVR0j
BBgwFoAURSO5jIpdAyEc1kTH2Cb2rRC+DH0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUJMM1I1SGR6ZG12NTVwMm1lQ3NiTUNGa1BOc3ViRVZCeGlrQWZldkZv
N3QvMC80NTIzQjk4QzhBNUQwMzIxMUNENjQ0QzdEODI2RjZBRDEwQkUwQzdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MjNCOThDOEE1RDAzMjEx
Q0Q2NDRDN0Q4MjZGNkFEMTBCRTBDN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VCTDNSNUhkemRtdjU1cDJtZUNzYk1DRmtQTnN1YkVWQnhpa0FmZXZGbzd0LzAv
MzEzNzMwMmUzMjMzMzgyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq7jQwDQYJKoZIhvcNAQELBQADggEBABemfJvw
Oh1mA16cKhLaWgdk0GonI/fxHFCBbGagju3331fSu03rQOa/uTeaf0oa4WXTTFAw
0ddJYDtBiLYxYPYtSGciL7PP8xyJlvLMdZYRRg1XRN9glpIv1MVe4BQKa9iud/gQ
6i3ldrae9TmyhlxLu6X2ExJzyupjcuDY+pwe6qRzx2Z7f+8hIxgaHuYBkV+6VW+I
abylyfnZAui1hkJItGidDhnrvcqz4G6sp7oby5aDukYQFkRKUHfDp2LmFQCO3frs
tPDEWpR23CQ/CJA4QCd6JAFKFry7uCGHRO4I775rGaIvhKcgQ3eS8kEQTjnYrzlC
b0Y+pk0Nmw4HeOY=
-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:31 2024 by rpki-client on console-fra.rpki-client.org