Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
File:                     3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          Z46P/33GDq63YjnPc5eNgTZVCcUVUpHFFgM/lRDKA5g=
Subject key identifier:   68:04:9E:1B:5E:E4:84:BD:2F:4E:3D:31:F1:59:55:4F:2D:C1:AF:CF
Certificate issuer:       /CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
Certificate serial:       0E53F2C143BA1309932F131F28D49A3C1C417CCD
Authority key identifier: C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
Signing time:             Thu 04 Jan 2024 15:21:48 +0000
ROA not before:           Thu 04 Jan 2024 15:16:48 +0000
ROA not after:            Thu 02 Jan 2025 15:21:48 +0000
asID:                     265141
IP address blocks:        170.0.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:f2:c1:43:ba:13:09:93:2f:13:1f:28:d4:9a:3c:1c:41:7c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
        Validity
            Not Before: Jan  4 15:16:48 2024 GMT
            Not After : Jan  2 15:21:48 2025 GMT
        Subject: CN=68049E1B5EE484BD2F4E3D31F159554F2DC1AFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:3d:fe:52:a7:2d:2d:34:09:02:48:f8:e6:
                    aa:d9:25:2d:3a:d8:0c:35:b0:63:16:15:15:51:1c:
                    7f:ab:94:0b:61:d0:1a:c0:fc:bd:6d:b0:95:8e:27:
                    8c:bf:12:2a:0f:b1:bd:71:90:9b:ee:fa:7c:cd:fc:
                    3f:8a:cf:26:19:00:49:ee:2a:fe:64:f9:4e:ed:5d:
                    5b:02:19:71:ee:4c:d4:ff:5d:33:a1:4a:f3:b5:05:
                    c0:ba:5b:2b:1a:bc:69:11:f0:09:ac:96:8d:09:8d:
                    2b:d4:14:97:d2:e4:dd:69:1d:ee:56:0b:26:d4:f4:
                    52:5e:7d:95:da:6e:78:2e:7c:84:23:ff:d8:83:d8:
                    05:6e:2e:a4:f3:d9:7a:ce:8f:77:4d:65:c0:17:22:
                    91:72:38:6d:86:21:18:fe:82:02:c7:3b:90:a2:58:
                    00:18:9f:a7:53:68:ce:55:b5:16:53:09:fe:98:0d:
                    dd:62:ec:6d:c9:20:5c:fc:f4:fa:cb:0d:a8:74:24:
                    cb:02:77:46:18:61:44:06:64:a1:16:ec:16:dc:4e:
                    74:8b:eb:d8:41:e4:7d:da:bf:50:01:ff:03:6c:95:
                    f9:c2:f7:87:c6:d5:7d:6b:e3:93:10:1d:dd:43:d6:
                    b0:a7:e3:97:ce:b3:0d:28:dd:54:31:d8:3c:70:74:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:9E:1B:5E:E4:84:BD:2F:4E:3D:31:F1:59:55:4F:2D:C1:AF:CF
            X509v3 Authority Key Identifier:
                keyid:C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:47:71:21:7a:91:61:6c:cc:c8:33:b1:99:31:bd:17:e1:
         85:eb:b2:82:a3:f8:e5:8c:3d:f0:94:52:2a:fa:e6:00:7b:ab:
         28:0d:37:33:be:2a:96:a3:88:7b:8f:43:88:2f:72:15:ff:aa:
         78:00:41:73:26:6f:a4:13:dd:2b:b7:0a:b9:8e:2b:57:1d:61:
         f0:0d:12:7b:d7:94:40:75:3c:2d:49:cb:d9:4f:fb:3f:61:cf:
         d7:19:cf:a3:f5:d1:b2:56:70:d2:f5:f6:91:d3:e5:e7:59:22:
         98:61:d2:9b:ab:41:62:80:3e:f4:b7:c1:bd:4a:69:99:87:54:
         5a:e0:c1:6a:ca:58:f8:60:0a:95:a0:23:73:fe:81:0b:89:a0:
         72:01:38:1c:26:3c:d5:f7:33:00:0e:c4:41:46:2b:bb:71:4a:
         80:16:16:3b:82:8a:0e:03:bb:34:e1:c3:61:c8:6e:09:2f:24:
         68:b7:58:71:84:2e:f8:bd:50:bc:a3:90:e1:87:6e:35:e5:a4:
         fe:6e:19:82:9e:92:b9:8b:f7:06:3f:92:ff:55:cb:67:26:e7:
         e5:c1:f9:70:a2:b4:46:e3:d8:99:38:75:e3:a9:76:a3:22:ea:
         c3:0e:7b:af:7f:89:fd:04:20:50:ca:9c:f1:f2:d6:7c:98:0e:
         70:a4:95:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDlPywUO6EwmTLxMfKNSaPBxBfM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUwQzBGNUY3QzIyOURGNEM5QjlEM0YxRTY0ODU3NzAy
ODhDQTU0NDAeFw0yNDAxMDQxNTE2NDhaFw0yNTAxMDIxNTIxNDhaMDMxMTAvBgNV
BAMTKDY4MDQ5RTFCNUVFNDg0QkQyRjRFM0QzMUYxNTk1NTRGMkRDMUFGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZj3+UqctLTQJAkj45qrZJS06
2Aw1sGMWFRVRHH+rlAth0BrA/L1tsJWOJ4y/EioPsb1xkJvu+nzN/D+KzyYZAEnu
Kv5k+U7tXVsCGXHuTNT/XTOhSvO1BcC6WysavGkR8Amslo0JjSvUFJfS5N1pHe5W
CybU9FJefZXabngufIQj/9iD2AVuLqTz2XrOj3dNZcAXIpFyOG2GIRj+ggLHO5Ci
WAAYn6dTaM5VtRZTCf6YDd1i7G3JIFz89PrLDah0JMsCd0YYYUQGZKEW7BbcTnSL
69hB5H3av1AB/wNslfnC94fG1X1r45MQHd1D1rCn45fOsw0o3VQx2DxwdF9fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaASeG17khL0vTj0x8VlVTy3Br88wHwYDVR0j
BBgwFoAUxQwPX3winfTJudPx5khXcCiMpUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhad0pMZUJETkF5UXVHaG5UdlNja3FTbXE3OVF1WGdCNDYzUm9OeW1j
djEvMC9DNTBDMEY1RjdDMjI5REY0QzlCOUQzRjFFNjQ4NTc3MDI4OENBNTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MEMwRjVGN0MyMjlERjRD
OUI5RDNGMUU2NDg1NzcwMjg4Q0E1NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYWndKTGVCRE5BeVF1R2huVHZTY2txU21xNzlRdVhnQjQ2M1JvTnltY3YxLzAv
MzEzNzMwMmUzMDJlMzIzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqgDbMA0GCSqGSIb3DQEBCwUAA4IBAQCsTUdxIXqR
YWzMyDOxmTG9F+GF67KCo/jljD3wlFIq+uYAe6soDTczviqWo4h7j0OIL3IV/6p4
AEFzJm+kE90rtwq5jitXHWHwDRJ715RAdTwtScvZT/s/Yc/XGc+j9dGyVnDS9faR
0+XnWSKYYdKbq0FigD70t8G9SmmZh1Ra4MFqylj4YAqVoCNz/oELiaByATgcJjzV
9zMADsRBRiu7cUqAFhY7gooOA7s04cNhyG4JLyRot1hxhC74vVC8o5Dhh2415aT+
bhmCnpK5i/cGP5L/VctnJuflwflworRG49iZOHXjqXajIurDDnuvf4n9BCBQypzx
8tZ8mA5wpJXl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org