Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3234203d3e20323635313431.roa
File:                     3137302e302e3231362e302f32322d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          Mq61hdlIPZakYG2WXh0GnjYSmSly4+s33XUMq2l9APw=
Subject key identifier:   0B:A5:03:85:75:C5:BF:28:63:20:C2:5F:3C:40:55:A7:C5:68:D2:0C
Certificate issuer:       /CN=B2AD085A725187320DED5C6B7CF83F9A320DB218
Certificate serial:       2D45BD7DF0FB3723679A56BBA91EB2136300B90A
Authority key identifier: B2:AD:08:5A:72:51:87:32:0D:ED:5C:6B:7C:F8:3F:9A:32:0D:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3234203d3e20323635313431.roa
Signing time:             Tue 14 Jun 2022 13:12:25 +0000
ROA not before:           Tue 14 Jun 2022 13:07:25 +0000
ROA not after:            Tue 13 Jun 2023 13:12:25 +0000
asID:                     265141
IP address blocks:        170.0.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:45:bd:7d:f0:fb:37:23:67:9a:56:bb:a9:1e:b2:13:63:00:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD085A725187320DED5C6B7CF83F9A320DB218
        Validity
            Not Before: Jun 14 13:07:25 2022 GMT
            Not After : Jun 13 13:12:25 2023 GMT
        Subject: CN=0BA5038575C5BF286320C25F3C4055A7C568D20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:8f:1d:74:a5:61:b6:9a:b7:5c:51:e4:44:
                    96:64:d5:06:77:2d:cb:c0:af:e4:f6:32:60:5b:e7:
                    9d:94:b3:7a:1f:62:65:52:9e:3f:62:1d:dc:37:9b:
                    b0:fe:0a:43:60:ee:aa:5e:6f:b4:a7:8c:c6:b3:5f:
                    93:89:45:65:70:82:70:91:41:95:51:8e:0a:47:f2:
                    5e:93:4f:ec:f6:7e:d5:b7:af:c9:6b:07:77:14:33:
                    ef:be:e2:d4:6d:a8:fa:50:c4:5b:6e:15:79:d5:4d:
                    c7:e7:e5:59:ad:c9:95:70:5c:9f:91:73:af:c4:35:
                    8b:ee:34:4b:15:a6:a1:bb:d1:4b:96:a8:a3:7b:43:
                    20:d0:9f:77:b9:82:ec:ae:a6:15:c1:8f:28:45:88:
                    8e:86:22:61:c4:50:7b:66:74:26:5b:14:07:7a:c6:
                    32:fb:23:a2:86:69:ab:8a:29:55:1a:f0:23:b8:47:
                    49:f1:3d:96:00:e2:08:5e:a2:99:ac:90:a7:b7:5d:
                    31:0b:86:e2:a6:2a:6f:6d:0d:c9:ce:96:90:8e:1d:
                    d8:ce:82:fb:6e:fc:c5:a2:d5:24:36:0b:ca:a8:4c:
                    26:70:8c:05:75:28:bc:76:a7:07:d9:cb:e3:bc:64:
                    65:75:76:c1:8a:82:c5:f1:f2:55:2c:17:e3:c1:fe:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:03:85:75:C5:BF:28:63:20:C2:5F:3C:40:55:A7:C5:68:D2:0C
            X509v3 Authority Key Identifier:
                keyid:B2:AD:08:5A:72:51:87:32:0D:ED:5C:6B:7C:F8:3F:9A:32:0D:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32322d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:59:43:60:02:38:2a:78:16:3d:d2:aa:e1:ba:a7:2b:c2:b2:
         c6:b1:bf:52:db:43:85:68:81:bc:6a:ef:fe:be:ea:3d:7f:70:
         82:67:0b:b8:50:95:83:3c:5e:79:ff:25:7c:d3:40:35:ae:f8:
         35:38:5a:7a:12:6e:6b:6f:df:d0:c7:5f:3f:2f:b2:fe:8c:fd:
         ef:5e:7c:fe:e0:fa:00:b0:6b:3d:20:01:16:97:d1:2f:71:83:
         93:35:e5:60:93:b0:c7:6f:96:ad:ac:fc:1a:5c:e4:a1:ef:3d:
         b6:dd:bc:a8:58:19:e9:ab:d1:50:1f:e8:d4:71:03:71:8c:77:
         8a:b2:fa:01:03:06:bc:08:ef:e5:8d:09:d4:df:75:5e:51:75:
         36:33:36:55:d7:ab:4f:ef:02:47:70:7a:fb:71:31:e2:0b:32:
         c3:e6:78:dc:e9:ef:c3:14:bb:3a:8f:12:78:58:c8:0f:3b:11:
         dd:50:2c:ee:89:f5:6c:93:cc:95:c2:91:c5:81:69:ef:a8:33:
         a9:c5:7e:f7:a7:0e:6f:3d:ae:f9:46:a7:01:b1:c7:a9:1f:2e:
         2b:9d:3d:93:18:7a:38:32:d9:63:1c:dc:81:e2:35:23:5d:df:
         7b:d8:88:ac:13:33:d5:7e:ba:e5:50:3a:07:84:9a:3d:6e:3d:
         62:8a:c8:b9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULUW9ffD7NyNnmla7qR6yE2MAuQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBRDA4NUE3MjUxODczMjBERUQ1QzZCN0NGODNGOUEz
MjBEQjIxODAeFw0yMjA2MTQxMzA3MjVaFw0yMzA2MTMxMzEyMjVaMDMxMTAvBgNV
BAMTKDBCQTUwMzg1NzVDNUJGMjg2MzIwQzI1RjNDNDA1NUE3QzU2OEQyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiY8ddKVhtpq3XFHkRJZk1QZ3
LcvAr+T2MmBb552Us3ofYmVSnj9iHdw3m7D+CkNg7qpeb7SnjMazX5OJRWVwgnCR
QZVRjgpH8l6TT+z2ftW3r8lrB3cUM+++4tRtqPpQxFtuFXnVTcfn5VmtyZVwXJ+R
c6/ENYvuNEsVpqG70UuWqKN7QyDQn3e5guyuphXBjyhFiI6GImHEUHtmdCZbFAd6
xjL7I6KGaauKKVUa8CO4R0nxPZYA4gheopmskKe3XTELhuKmKm9tDcnOlpCOHdjO
gvtu/MWi1SQ2C8qoTCZwjAV1KLx2pwfZy+O8ZGV1dsGKgsXx8lUsF+PB/nrdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC6UDhXXFvyhjIMJfPEBVp8Vo0gwwHwYDVR0j
BBgwFoAUsq0IWnJRhzIN7VxrfPg/mjINshgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC9CMkFEMDg1QTcyNTE4NzMyMERFRDVDNkI3Q0Y4M0Y5QTMyMERCMjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQUQwODVBNzI1MTg3MzIw
REVENUM2QjdDRjgzRjlBMzIwREIyMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv
MzEzNzMwMmUzMDJlMzIzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDYMA0GCSqGSIb3DQEBCwUAA4IBAQBmWUNgAjgq
eBY90qrhuqcrwrLGsb9S20OFaIG8au/+vuo9f3CCZwu4UJWDPF55/yV800A1rvg1
OFp6Em5rb9/Qx18/L7L+jP3vXnz+4PoAsGs9IAEWl9EvcYOTNeVgk7DHb5atrPwa
XOSh7z223byoWBnpq9FQH+jUcQNxjHeKsvoBAwa8CO/ljQnU33VeUXU2MzZV16tP
7wJHcHr7cTHiCzLD5njc6e/DFLs6jxJ4WMgPOxHdUCzuifVsk8yVwpHFgWnvqDOp
xX73pw5vPa75RqcBscepHy4rnT2TGHo4MtljHNyB4jUjXd972IisEzPVfrrlUDoH
hJo9bj1iisi5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org