Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          VoLmEP+S2bT7TGTNnHNZ426p9lb1dC6mnn+GI5ClUi0=
Subject key identifier:   D2:9E:EC:90:78:27:98:06:5C:D8:C7:83:09:0C:7A:84:0C:CA:F0:FA
Certificate issuer:       /CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
Certificate serial:       3653ED47A7066CB555E1DE1E0837DBCF9128FF6A
Authority key identifier: 10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa
Signing time:             Mon 04 Mar 2024 19:23:18 +0000
ROA not before:           Mon 04 Mar 2024 19:18:18 +0000
ROA not after:            Mon 03 Mar 2025 19:23:18 +0000
asID:                     266448
IP address blocks:        170.82.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:53:ed:47:a7:06:6c:b5:55:e1:de:1e:08:37:db:cf:91:28:ff:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DEC0A55B9A627408EE1F1B0E2C098588812FB5
        Validity
            Not Before: Mar  4 19:18:18 2024 GMT
            Not After : Mar  3 19:23:18 2025 GMT
        Subject: CN=D29EEC90782798065CD8C783090C7A840CCAF0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:66:01:ff:62:67:4c:c3:34:cd:9d:7b:cb:
                    11:10:1b:68:6e:b6:fc:e6:89:00:e5:c9:3e:7c:8b:
                    40:77:29:21:31:ed:fc:62:b2:43:75:85:04:7f:f8:
                    db:f3:4c:21:0c:e1:07:4a:0f:e5:a0:53:60:a5:ae:
                    f4:32:e4:57:6c:86:97:29:38:33:34:bd:9f:f2:54:
                    cc:da:7d:99:88:8a:8d:ae:2f:3e:77:51:9c:f7:fc:
                    60:4d:bf:3d:a2:61:30:03:da:16:1f:65:13:99:5c:
                    8f:9f:f6:42:9b:f8:5f:ef:b3:46:2b:0b:2c:da:71:
                    8c:86:04:17:c7:34:91:71:87:df:80:00:ee:74:64:
                    13:c4:07:a8:ad:51:16:ad:16:e6:14:0c:51:9a:6a:
                    25:e3:c1:89:0e:14:67:82:9c:03:d6:09:84:92:97:
                    f5:06:85:72:81:61:bd:a6:08:a9:7c:60:89:cb:f7:
                    e7:41:ea:a0:b6:0a:65:8d:d4:78:56:06:6b:80:e1:
                    bf:57:e3:d4:96:18:fb:0d:b7:7f:10:be:14:4d:e2:
                    98:ec:18:91:5c:d9:71:d7:b7:ee:73:0c:2a:af:90:
                    b2:10:ee:6b:34:1b:1f:e3:aa:79:49:bc:14:d5:5b:
                    e0:5f:10:36:3e:2a:b1:d2:0e:a7:76:57:66:67:76:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9E:EC:90:78:27:98:06:5C:D8:C7:83:09:0C:7A:84:0C:CA:F0:FA
            X509v3 Authority Key Identifier:
                keyid:10:DE:C0:A5:5B:9A:62:74:08:EE:1F:1B:0E:2C:09:85:88:81:2F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10DEC0A55B9A627408EE1F1B0E2C098588812FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/0/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:06:58:f2:c3:be:e4:2d:fb:10:8a:d6:db:49:96:b2:f5:63:
         d2:92:ae:e9:a9:28:f7:03:8a:09:ad:a8:b3:63:f2:62:f7:c0:
         50:ba:65:36:80:d9:e3:e2:e8:36:ca:b9:06:79:ab:1c:f1:29:
         ad:db:7f:4a:34:2c:c7:8b:4d:cf:95:1a:aa:0b:f9:82:6d:2c:
         26:61:a9:a1:b1:ca:ce:c1:c0:cf:d5:a6:81:ac:b3:3b:af:4c:
         b1:74:fb:80:01:25:7a:ea:b0:fe:b1:15:c1:e9:53:bc:d5:e9:
         f4:bc:f0:50:ec:18:d1:d5:11:28:b7:f5:7a:06:8f:ec:72:41:
         81:e0:d3:6d:02:5c:f9:a8:1b:18:d2:53:1a:ef:39:30:f4:d2:
         2c:44:74:87:b1:5b:6f:c3:68:17:8f:02:58:bf:35:bf:08:e6:
         9e:c3:4d:f8:49:23:ad:85:85:3d:94:5e:62:90:06:e2:1e:ed:
         1d:66:f6:de:0c:b2:cf:d6:23:89:51:6d:5f:b4:3e:40:09:32:
         32:7f:b6:b9:1f:11:90:dd:1b:ca:5f:7d:d2:76:90:83:a8:26:
         27:85:b9:6a:88:fb:af:a5:7b:4d:c9:19:fa:58:d8:38:ca:4f:
         fa:df:7f:e0:ea:c8:39:0c:55:3d:20:70:ab:ff:52:47:2b:be:
         f5:12:5a:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNlPtR6cGbLVV4d4eCDfbz5Eo/2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBERUMwQTU1QjlBNjI3NDA4RUUxRjFCMEUyQzA5ODU4
ODgxMkZCNTAeFw0yNDAzMDQxOTE4MThaFw0yNTAzMDMxOTIzMThaMDMxMTAvBgNV
BAMTKEQyOUVFQzkwNzgyNzk4MDY1Q0Q4Qzc4MzA5MEM3QTg0MENDQUYwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgmYB/2JnTMM0zZ17yxEQG2hu
tvzmiQDlyT58i0B3KSEx7fxiskN1hQR/+NvzTCEM4QdKD+WgU2ClrvQy5Fdshpcp
ODM0vZ/yVMzafZmIio2uLz53UZz3/GBNvz2iYTAD2hYfZROZXI+f9kKb+F/vs0Yr
CyzacYyGBBfHNJFxh9+AAO50ZBPEB6itURatFuYUDFGaaiXjwYkOFGeCnAPWCYSS
l/UGhXKBYb2mCKl8YInL9+dB6qC2CmWN1HhWBmuA4b9X49SWGPsNt38QvhRN4pjs
GJFc2XHXt+5zDCqvkLIQ7ms0Gx/jqnlJvBTVW+BfEDY+KrHSDqd2V2ZndmibAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0p7skHgnmAZc2MeDCQx6hAzK8PowHwYDVR0j
BBgwFoAUEN7ApVuaYnQI7h8bDiwJhYiBL7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1hOHZnNWhuakhQ
Y2IvMC8xMERFQzBBNTVCOUE2Mjc0MDhFRTFGMUIwRTJDMDk4NTg4ODEyRkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwREVDMEE1NUI5QTYyNzQw
OEVFMUYxQjBFMkMwOTg1ODg4MTJGQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5WjExUVR4ZW15OUptREFEUEF4VTVURzFzdDZROGZtYTh2ZzVobmpIUGNiLzAv
MzEzNzMwMmUzODMyMmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUt8wDQYJKoZIhvcNAQELBQADggEBAFkGWPLD
vuQt+xCK1ttJlrL1Y9KSrumpKPcDigmtqLNj8mL3wFC6ZTaA2ePi6DbKuQZ5qxzx
Ka3bf0o0LMeLTc+VGqoL+YJtLCZhqaGxys7BwM/VpoGsszuvTLF0+4ABJXrqsP6x
FcHpU7zV6fS88FDsGNHVESi39XoGj+xyQYHg020CXPmoGxjSUxrvOTD00ixEdIex
W2/DaBePAli/Nb8I5p7DTfhJI62FhT2UXmKQBuIe7R1m9t4Mss/WI4lRbV+0PkAJ
MjJ/trkfEZDdG8pffdJ2kIOoJieFuWqI+6+le03JGfpY2DjKT/rff+DqyDkMVT0g
cKv/UkcrvvUSWpQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org