Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
File:                     3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa (raw, json)
Hash identifier:          tuCdfYJPvnF8JQsC8RQmXopi333oCWZLDX2D7Wlor28=
Subject key identifier:   F7:50:BF:B6:C3:6D:CC:35:49:3F:BA:BE:7C:42:BD:C4:0A:AF:0A:28
Certificate issuer:       /CN=4F38B9A9DB9C979FA8DE949E660050126FB77039
Certificate serial:       351B0211A2363B57B89522B25B589EB5872672CA
Authority key identifier: 4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa
Signing time:             Mon 18 Sep 2023 19:17:56 +0000
ROA not before:           Mon 18 Sep 2023 19:12:56 +0000
ROA not after:            Mon 16 Sep 2024 19:17:56 +0000
asID:                     272193
IP address blocks:        170.247.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1b:02:11:a2:36:3b:57:b8:95:22:b2:5b:58:9e:b5:87:26:72:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F38B9A9DB9C979FA8DE949E660050126FB77039
        Validity
            Not Before: Sep 18 19:12:56 2023 GMT
            Not After : Sep 16 19:17:56 2024 GMT
        Subject: CN=F750BFB6C36DCC35493FBABE7C42BDC40AAF0A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:cd:4b:17:07:de:8b:e4:08:87:70:7e:78:
                    5f:9b:76:81:f7:ec:27:6e:43:bd:98:20:6f:96:76:
                    23:e7:e4:86:6a:f0:d1:f6:c2:e5:97:98:c3:6f:1e:
                    36:7a:71:e8:b1:a4:0d:77:1c:94:8d:ec:d8:9f:28:
                    69:e0:c1:b2:fb:c4:de:58:dc:56:3d:75:ea:b0:8e:
                    52:a4:c6:70:ac:42:49:b7:55:ea:29:4d:30:74:1c:
                    5b:c0:ba:bb:8f:3d:9f:36:be:02:c6:d7:ef:be:8f:
                    86:a0:ed:b2:17:67:9a:29:25:fb:2e:27:1f:fd:23:
                    bc:44:29:a1:0b:74:e9:ff:a4:d7:d4:64:1b:f7:e7:
                    71:ba:1f:74:09:d4:f4:e8:c2:60:99:11:da:bc:37:
                    df:7e:21:53:c6:c2:68:d6:e5:bd:b1:79:48:f0:65:
                    fd:d7:2a:ef:28:e2:f2:27:77:7b:ef:17:31:2b:5b:
                    75:4c:5f:4b:5f:98:af:b8:a0:b8:58:50:c3:97:06:
                    97:66:9f:92:14:9d:eb:c6:79:53:96:32:7a:7f:c3:
                    3f:3c:54:ae:61:d9:0b:9a:af:08:2f:fa:40:86:f2:
                    ea:3c:97:00:dd:d2:37:96:1e:95:a7:a8:e1:1d:e4:
                    20:92:26:29:99:21:f2:3b:c6:4c:a5:96:7d:7b:cf:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:50:BF:B6:C3:6D:CC:35:49:3F:BA:BE:7C:42:BD:C4:0A:AF:0A:28
            X509v3 Authority Key Identifier:
                keyid:4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/3137302e3234372e3130382e302f32322d3232203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:9c:f3:17:29:d9:c2:6f:e5:b9:9d:4e:08:bb:20:44:b0:02:
         a3:51:b0:76:1d:12:9d:93:96:95:4b:a3:2a:d6:6e:c4:78:5e:
         5c:0b:b9:3a:08:c2:dd:0d:82:a8:66:73:3c:d0:5a:d3:2b:a9:
         e5:d7:49:63:91:79:47:5b:3b:6c:06:1b:5e:92:16:75:e9:47:
         2e:f3:57:34:0a:9f:a5:c3:21:7d:bd:ee:3f:7e:6c:29:d0:6d:
         30:7f:95:8e:78:07:dd:1d:d7:db:7f:b3:a4:7c:f4:53:43:78:
         27:8d:0a:1b:8d:79:2d:27:9b:8d:b4:7a:db:02:a7:f2:b7:ed:
         51:4e:43:02:89:f4:5e:c8:c6:ac:f1:0e:a8:cf:9f:e4:ec:c2:
         77:14:19:db:96:c5:ed:52:26:fd:3e:93:99:56:c7:d9:03:c1:
         e2:10:1e:2a:1d:32:0c:c2:aa:6f:bd:44:2b:1f:4e:28:fe:92:
         df:cc:2c:c5:d3:92:e6:9c:15:39:c2:cf:4c:3a:13:46:22:0a:
         85:06:4f:f6:88:84:20:e9:04:0c:5e:94:59:60:d5:34:ee:dc:
         4a:e1:46:af:17:56:04:0a:5d:f6:93:a2:ce:19:23:64:7a:1c:
         74:8d:4c:e9:53:ea:46:70:cb:cf:00:11:ea:eb:b7:fc:d3:1a:
         dc:77:8b:77
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNRsCEaI2O1e4lSKyW1ietYcmcsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYzOEI5QTlEQjlDOTc5RkE4REU5NDlFNjYwMDUwMTI2
RkI3NzAzOTAeFw0yMzA5MTgxOTEyNTZaFw0yNDA5MTYxOTE3NTZaMDMxMTAvBgNV
BAMTKEY3NTBCRkI2QzM2RENDMzU0OTNGQkFCRTdDNDJCREM0MEFBRjBBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyM1LFwfei+QIh3B+eF+bdoH3
7CduQ72YIG+WdiPn5IZq8NH2wuWXmMNvHjZ6ceixpA13HJSN7NifKGngwbL7xN5Y
3FY9deqwjlKkxnCsQkm3VeopTTB0HFvAuruPPZ82vgLG1+++j4ag7bIXZ5opJfsu
Jx/9I7xEKaELdOn/pNfUZBv353G6H3QJ1PTowmCZEdq8N99+IVPGwmjW5b2xeUjw
Zf3XKu8o4vInd3vvFzErW3VMX0tfmK+4oLhYUMOXBpdmn5IUnevGeVOWMnp/wz88
VK5h2Quarwgv+kCG8uo8lwDd0jeWHpWnqOEd5CCSJimZIfI7xkylln17z8fPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU91C/tsNtzDVJP7q+fEK9xAqvCigwHwYDVR0j
BBgwFoAUTzi5qducl5+o3pSeZgBQEm+3cDkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZvNnhDZlNXYmhTQUtkTEpaNUd5Q2djU2NDQUdxdXUxZVlWZXdHRnNN
ajcvMC80RjM4QjlBOURCOUM5NzlGQThERTk0OUU2NjAwNTAxMjZGQjc3MDM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGMzhCOUE5REI5Qzk3OUZB
OERFOTQ5RTY2MDA1MDEyNkZCNzcwMzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWbzZ4Q2ZTV2JoU0FLZExKWjVHeUNnY1NjQ0FHcXV1MWVZVmV3R0ZzTWo3LzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMjMxMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3bDANBgkqhkiG9w0BAQsFAAOCAQEALZzz
FynZwm/luZ1OCLsgRLACo1Gwdh0SnZOWlUujKtZuxHheXAu5OgjC3Q2CqGZzPNBa
0yup5ddJY5F5R1s7bAYbXpIWdelHLvNXNAqfpcMhfb3uP35sKdBtMH+VjngH3R3X
23+zpHz0U0N4J40KG415LSebjbR62wKn8rftUU5DAon0XsjGrPEOqM+f5OzCdxQZ
25bF7VIm/T6TmVbH2QPB4hAeKh0yDMKqb71EKx9OKP6S38wsxdOS5pwVOcLPTDoT
RiIKhQZP9oiEIOkEDF6UWWDVNO7cSuFGrxdWBApd9pOizhkjZHocdI1M6VPqRnDL
zwAR6uu3/NMa3HeLdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org