Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32332d3233203d3e20323635313431.roa
File:                     3137302e302e3231362e302f32332d3233203d3e20323635313431.roa (raw, json)
Hash identifier:          GzjlhSapFkQJPhPAD8Ob6VZ3bhYQjdvmAGp3mtxDFM8=
Subject key identifier:   D1:63:AD:9D:CE:AB:FF:40:FC:E3:60:97:28:EF:37:33:D9:4F:8A:3C
Certificate issuer:       /CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
Certificate serial:       75F454DCA728E0806325EF98506444539C3C7F9A
Authority key identifier: C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32332d3233203d3e20323635313431.roa
Signing time:             Thu 04 Jan 2024 16:47:04 +0000
ROA not before:           Thu 04 Jan 2024 16:42:04 +0000
ROA not after:            Thu 02 Jan 2025 16:47:04 +0000
asID:                     265141
IP address blocks:        170.0.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:54:dc:a7:28:e0:80:63:25:ef:98:50:64:44:53:9c:3c:7f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
        Validity
            Not Before: Jan  4 16:42:04 2024 GMT
            Not After : Jan  2 16:47:04 2025 GMT
        Subject: CN=D163AD9DCEABFF40FCE3609728EF3733D94F8A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:40:bf:ce:c7:09:96:82:06:1d:d7:e4:88:
                    4f:61:c5:c4:7c:84:4e:a8:cd:4c:17:65:7b:ad:99:
                    92:1f:f0:af:9f:3c:5f:fe:e0:5a:50:17:b4:87:71:
                    b7:79:6d:3b:0f:c7:d1:2c:df:9f:ac:22:5a:16:78:
                    3b:04:3e:06:9d:7d:90:6d:1d:84:d6:43:1d:70:d6:
                    19:ed:d0:44:ed:d7:82:3d:b9:56:7e:e8:98:ca:9a:
                    26:6a:de:23:43:7a:89:cd:26:22:83:65:de:56:e7:
                    57:40:b3:fc:f1:36:76:6d:d1:96:94:c5:18:a7:48:
                    c9:ad:66:e6:47:3e:c3:e3:a8:f0:09:32:bb:bc:31:
                    b8:1d:ce:64:1a:75:ee:a2:96:22:a4:32:26:98:d8:
                    2f:fa:74:e6:e3:c8:f3:b4:48:41:93:d6:7c:8b:8a:
                    a6:be:9d:dd:bc:b9:dc:27:bd:4d:01:91:95:79:09:
                    d9:b8:7d:fd:6a:08:d2:f4:da:0a:42:81:e5:9b:97:
                    ae:ef:66:f0:3b:52:44:d1:fd:8b:15:1e:ec:b0:28:
                    4e:2d:9c:c9:2c:ba:46:84:9a:e1:b3:61:d4:c7:2c:
                    49:da:e9:c7:50:2a:52:d3:c0:2d:02:8a:a2:72:3b:
                    c4:02:ce:fb:45:ee:9b:da:50:94:3d:fd:e2:c5:61:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:AD:9D:CE:AB:FF:40:FC:E3:60:97:28:EF:37:33:D9:4F:8A:3C
            X509v3 Authority Key Identifier:
                keyid:C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231362e302f32332d3233203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:54:44:e2:a5:67:02:48:4a:aa:49:71:7e:01:21:ef:27:fe:
         99:22:be:fe:98:1f:02:7f:7a:e8:d7:aa:e7:37:f4:39:94:fe:
         ae:78:83:c1:6f:77:8d:06:52:ca:e2:bd:a6:c8:50:57:6c:9e:
         b5:1b:68:13:f0:a1:2d:69:5d:24:63:b3:39:f3:ad:01:1b:55:
         ee:0e:47:11:17:59:14:da:45:0b:ff:8a:6d:0f:4f:63:b2:cf:
         90:b3:ab:76:86:fd:f4:4f:ab:54:44:33:4d:54:4c:a9:d3:51:
         19:a6:97:e5:1e:57:a1:d6:7c:a2:68:f2:cc:e9:77:11:5e:7f:
         d3:1d:c4:b4:41:7d:e6:2a:34:b5:83:2a:93:33:58:18:b0:d3:
         95:f5:8e:7c:29:10:d3:4c:48:bd:d5:53:ea:bd:a7:e8:30:0d:
         4f:ca:08:ba:09:08:34:60:d3:2c:43:61:53:d6:a5:e0:6c:27:
         ad:59:36:c9:d0:56:7d:dc:a4:a8:76:ac:6c:34:f7:da:29:04:
         95:a3:0d:43:6c:73:a9:8f:11:67:49:9c:2d:83:e1:4e:e2:81:
         5e:96:cc:9e:be:c0:e7:c1:b9:dc:90:8f:dc:fb:42:29:55:7a:
         3a:95:98:86:cf:21:4b:be:23:3f:d4:81:84:f6:32:0e:08:af:
         c8:b4:e5:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdfRU3Kco4IBjJe+YUGREU5w8f5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUwQzBGNUY3QzIyOURGNEM5QjlEM0YxRTY0ODU3NzAy
ODhDQTU0NDAeFw0yNDAxMDQxNjQyMDRaFw0yNTAxMDIxNjQ3MDRaMDMxMTAvBgNV
BAMTKEQxNjNBRDlEQ0VBQkZGNDBGQ0UzNjA5NzI4RUYzNzMzRDk0RjhBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpUC/zscJloIGHdfkiE9hxcR8
hE6ozUwXZXutmZIf8K+fPF/+4FpQF7SHcbd5bTsPx9Es35+sIloWeDsEPgadfZBt
HYTWQx1w1hnt0ETt14I9uVZ+6JjKmiZq3iNDeonNJiKDZd5W51dAs/zxNnZt0ZaU
xRinSMmtZuZHPsPjqPAJMru8MbgdzmQade6iliKkMiaY2C/6dObjyPO0SEGT1nyL
iqa+nd28udwnvU0BkZV5Cdm4ff1qCNL02gpCgeWbl67vZvA7UkTR/YsVHuywKE4t
nMksukaEmuGzYdTHLEna6cdQKlLTwC0CiqJyO8QCzvtF7pvaUJQ9/eLFYXarAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0WOtnc6r/0D842CXKO83M9lPijwwHwYDVR0j
BBgwFoAUxQwPX3winfTJudPx5khXcCiMpUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC9DNTBDMEY1RjdDMjI5REY0QzlCOUQzRjFFNjQ4NTc3MDI4OENBNTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MEMwRjVGN0MyMjlERjRD
OUI5RDNGMUU2NDg1NzcwMjg4Q0E1NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv
MzEzNzMwMmUzMDJlMzIzMTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqgDYMA0GCSqGSIb3DQEBCwUAA4IBAQDjVETipWcC
SEqqSXF+ASHvJ/6ZIr7+mB8Cf3ro16rnN/Q5lP6ueIPBb3eNBlLK4r2myFBXbJ61
G2gT8KEtaV0kY7M5860BG1XuDkcRF1kU2kUL/4ptD09jss+Qs6t2hv30T6tURDNN
VEyp01EZppflHleh1nyiaPLM6XcRXn/THcS0QX3mKjS1gyqTM1gYsNOV9Y58KRDT
TEi91VPqvafoMA1Pygi6CQg0YNMsQ2FT1qXgbCetWTbJ0FZ93KSodqxsNPfaKQSV
ow1DbHOpjxFnSZwtg+FO4oFelsyevsDnwbnckI/c+0IpVXo6lZiGzyFLviM/1IGE
9jIOCK/ItOU3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org