Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa (raw, json)
Hash identifier:          WdEkjEza2+CrtL+h9En3UufE5m6z3yoljTTCMTFpJFA=
Subject key identifier:   E4:8B:47:F6:48:C6:A0:73:F7:03:AF:69:AA:78:B0:1B:DA:F8:27:A6
Certificate issuer:       /CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
Certificate serial:       7509F65D9168D991C3CB82C96FCC4D9A849D92D0
Authority key identifier: 37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa
Signing time:             Thu 28 Mar 2024 14:28:04 +0000
ROA not before:           Thu 28 Mar 2024 14:23:04 +0000
ROA not after:            Thu 27 Mar 2025 14:28:04 +0000
asID:                     271293
IP address blocks:        170.233.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:09:f6:5d:91:68:d9:91:c3:cb:82:c9:6f:cc:4d:9a:84:9d:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
        Validity
            Not Before: Mar 28 14:23:04 2024 GMT
            Not After : Mar 27 14:28:04 2025 GMT
        Subject: CN=E48B47F648C6A073F703AF69AA78B01BDAF827A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:97:ec:53:83:67:8b:9a:3c:5d:b9:1e:87:
                    08:5e:f4:72:73:ed:78:56:34:82:1d:dd:cb:94:f4:
                    c0:4d:1e:fa:24:6a:e0:ec:9f:4b:67:91:41:39:52:
                    36:04:74:d4:68:a4:3b:f1:69:38:ac:dc:17:9d:82:
                    fc:2d:af:fc:ae:16:0b:d4:78:0a:2b:b9:81:17:e7:
                    89:2d:4b:8b:44:04:1e:b8:76:f1:67:b3:0f:28:0f:
                    da:ea:04:05:02:34:da:3c:5d:0a:e6:1b:42:9c:3a:
                    6c:ba:1b:d4:a3:cc:6b:cd:36:1f:44:93:31:2a:a9:
                    78:2b:64:ce:3a:0f:28:a5:4c:b1:73:08:19:ad:39:
                    1e:14:81:8b:56:90:df:39:c0:6b:6a:b1:b2:d1:15:
                    40:ad:51:6f:95:7a:f0:63:45:93:fa:97:93:dc:8a:
                    a7:76:41:9f:f0:c9:e9:22:2d:a5:05:b8:c5:ee:85:
                    32:5b:67:97:4d:36:1e:24:be:bc:93:22:f9:e8:f0:
                    bd:84:e5:2a:d6:f6:44:97:fd:60:fb:47:03:3c:2f:
                    52:21:2f:2c:04:19:58:7e:41:e0:cf:0d:48:7f:bd:
                    4d:29:44:01:88:f2:12:69:10:9b:fa:86:dd:3b:93:
                    5c:f9:c1:8e:b6:7a:05:34:03:fe:85:8c:97:48:2b:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:47:F6:48:C6:A0:73:F7:03:AF:69:AA:78:B0:1B:DA:F8:27:A6
            X509v3 Authority Key Identifier:
                keyid:37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:37:78:34:68:79:31:da:a6:79:db:36:28:32:df:b0:71:29:
         8f:80:46:c9:3b:86:f6:a1:e4:c8:2e:55:30:b0:95:08:a0:d2:
         21:f1:96:c9:ea:ba:62:89:3d:aa:f6:81:e8:8d:2e:eb:2e:c9:
         d7:e5:52:3b:b7:f5:f3:38:f8:88:2d:d1:cb:a3:57:69:95:da:
         bc:89:68:28:18:4f:cf:39:68:30:c8:04:cb:76:07:82:26:5b:
         58:c5:4a:3a:22:e7:b4:35:91:2b:a6:2d:5d:84:04:42:28:ae:
         61:5b:f4:22:17:1e:ce:04:93:71:07:fe:1b:b3:64:e0:a9:03:
         cd:a2:51:f5:67:77:25:8c:e6:83:e0:fa:7c:a2:0d:5c:eb:94:
         2b:81:fc:d4:02:70:56:36:78:5f:2f:22:99:c4:04:dd:11:96:
         13:c0:88:9d:42:85:eb:06:c9:8a:6f:1e:43:9c:f9:83:d6:eb:
         b7:ab:ba:b4:4a:14:6d:47:0a:ef:af:04:75:f2:72:86:43:ad:
         4b:f6:da:04:e8:63:a6:48:85:43:68:2a:50:0b:12:f4:ff:95:
         66:1e:63:ea:0b:d6:44:85:1f:02:aa:4a:da:58:ca:39:76:cf:
         55:e2:ab:ff:64:d7:c2:74:11:88:4b:95:91:d7:24:a2:4b:20:
         2a:99:1a:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdQn2XZFo2ZHDy4LJb8xNmoSdktAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc1MUUxNEY4M0UyQ0UwMEI4NUQ4RjRBOThDM0VEMDMz
MDEzODY5NDAeFw0yNDAzMjgxNDIzMDRaFw0yNTAzMjcxNDI4MDRaMDMxMTAvBgNV
BAMTKEU0OEI0N0Y2NDhDNkEwNzNGNzAzQUY2OUFBNzhCMDFCREFGODI3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17ZfsU4Nni5o8Xbkehwhe9HJz
7XhWNIId3cuU9MBNHvokauDsn0tnkUE5UjYEdNRopDvxaTis3Bedgvwtr/yuFgvU
eAoruYEX54ktS4tEBB64dvFnsw8oD9rqBAUCNNo8XQrmG0KcOmy6G9SjzGvNNh9E
kzEqqXgrZM46DyilTLFzCBmtOR4UgYtWkN85wGtqsbLRFUCtUW+VevBjRZP6l5Pc
iqd2QZ/wyekiLaUFuMXuhTJbZ5dNNh4kvryTIvno8L2E5SrW9kSX/WD7RwM8L1Ih
LywEGVh+QeDPDUh/vU0pRAGI8hJpEJv6ht07k1z5wY62egU0A/6FjJdIK+4rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5ItH9kjGoHP3A69pqniwG9r4J6YwHwYDVR0j
BBgwFoAUN1HhT4PizgC4XY9KmMPtAzAThpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBwVGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3Vj
WDgvMS8zNzUxRTE0RjgzRTJDRTAwQjg1RDhGNEE5OEMzRUQwMzMwMTM4Njk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3NTFFMTRGODNFMkNFMDBC
ODVEOEY0QTk4QzNFRDAzMzAxMzg2OTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwcFRkalAzZnZTQ1R0eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzEv
MzEzNzMwMmUzMjMzMzMyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrp8DANBgkqhkiG9w0BAQsFAAOCAQEAKTd4
NGh5Mdqmeds2KDLfsHEpj4BGyTuG9qHkyC5VMLCVCKDSIfGWyeq6Yok9qvaB6I0u
6y7J1+VSO7f18zj4iC3Ry6NXaZXavIloKBhPzzloMMgEy3YHgiZbWMVKOiLntDWR
K6YtXYQEQiiuYVv0IhcezgSTcQf+G7Nk4KkDzaJR9Wd3JYzmg+D6fKINXOuUK4H8
1AJwVjZ4Xy8imcQE3RGWE8CInUKF6wbJim8eQ5z5g9brt6u6tEoUbUcK768EdfJy
hkOtS/baBOhjpkiFQ2gqUAsS9P+VZh5j6gvWRIUfAqpK2ljKOXbPVeKr/2TXwnQR
iEuVkdckoksgKpkaKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org