Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3232203d3e20323636343934.roa
File:                     3137302e3234342e39362e302f32322d3232203d3e20323636343934.roa (raw, json)
Hash identifier:          6vTHYQodbiXuIi/c/biFcgXcDdnGf15iq5W0yPfVGjc=
Subject key identifier:   FA:7A:0E:B5:E4:97:23:1B:DE:D9:EF:B7:33:48:65:C8:45:E8:0A:FA
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       6621362AA5BF258BB0CBE8DCE383CB8A729080FB
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3232203d3e20323636343934.roa
Signing time:             Wed 22 Mar 2023 19:32:04 +0000
ROA not before:           Wed 22 Mar 2023 19:27:04 +0000
ROA not after:            Wed 20 Mar 2024 19:32:04 +0000
asID:                     266494
IP address blocks:        170.244.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:21:36:2a:a5:bf:25:8b:b0:cb:e8:dc:e3:83:cb:8a:72:90:80:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 22 19:27:04 2023 GMT
            Not After : Mar 20 19:32:04 2024 GMT
        Subject: CN=FA7A0EB5E497231BDED9EFB7334865C845E80AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:98:54:a8:4f:17:4f:23:2d:c7:3d:c0:79:
                    79:64:a7:50:ca:4b:7c:16:90:69:ac:18:54:df:c2:
                    90:45:f6:54:fd:bb:5f:14:4f:24:61:ac:06:ba:26:
                    30:82:c4:90:c7:78:bb:5d:a5:a5:03:6e:55:1d:5f:
                    d0:83:02:f7:7a:a9:2b:67:2f:78:09:45:ef:68:ff:
                    8d:1b:36:17:d0:eb:55:e9:34:fc:43:2a:f1:0a:41:
                    36:13:06:ec:40:4a:0f:db:94:e3:1a:ab:24:c0:33:
                    a9:5b:a9:89:c4:95:12:0a:4f:28:9b:b6:03:50:2b:
                    29:16:80:87:bc:99:49:aa:b9:67:66:ba:ce:76:c5:
                    e7:41:76:eb:23:82:39:30:26:e1:7c:7f:f4:49:98:
                    4d:94:b0:b2:f2:82:26:66:3c:95:f4:a5:de:ff:04:
                    c4:32:59:bf:4d:97:a9:5c:ab:8b:6f:ab:f7:0b:0b:
                    8f:0a:b9:34:aa:15:dc:d1:48:67:28:87:7c:c4:da:
                    f6:28:81:25:05:01:fb:76:12:18:0d:01:26:55:8c:
                    c9:b6:23:2e:3d:be:f5:2f:27:50:f4:3c:f0:f5:08:
                    52:13:92:e4:d7:83:a9:0d:f2:1d:0b:ab:c1:f8:01:
                    fa:d6:31:fb:75:a4:cd:51:8c:d7:dd:f8:00:eb:ad:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7A:0E:B5:E4:97:23:1B:DE:D9:EF:B7:33:48:65:C8:45:E8:0A:FA
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39362e302f32322d3232203d3e20323636343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:28:5e:dc:2e:f7:a8:e4:ac:68:20:0c:66:53:10:e9:f5:
         5b:8f:45:c3:df:fd:52:5b:77:c0:eb:d2:ee:16:0d:d1:b9:e4:
         5a:c6:ba:bf:eb:62:a7:e5:29:f1:b1:6f:31:16:db:4f:26:66:
         ec:2e:d3:5f:fa:ba:d6:19:36:87:9b:97:e1:7c:f3:94:9b:aa:
         d0:01:e9:38:37:a7:a3:8a:6c:08:ff:16:d4:eb:62:87:97:57:
         5a:6b:d8:24:a0:8d:49:67:62:cc:35:74:e8:09:7c:1d:4e:81:
         9f:69:56:c5:8f:59:cd:1f:ed:ff:69:b1:9a:2a:3a:7e:c6:9d:
         c3:5b:f6:db:5d:7e:5c:17:8c:43:e1:53:aa:87:46:a7:4f:d6:
         82:3a:6f:32:81:b5:b8:aa:2c:ad:25:71:f5:ca:e4:38:d8:c2:
         46:b5:4b:3f:95:52:18:9a:94:1e:b0:24:d3:c9:c4:c8:fc:5b:
         ad:a7:16:b8:8a:d3:52:3f:d4:cf:6c:07:be:db:62:80:69:d4:
         a1:71:84:db:17:c9:d7:9a:c3:a0:02:f9:d9:ee:ff:e4:5e:ca:
         eb:c6:02:e5:e0:5a:c4:50:79:27:08:bc:e6:a0:8c:55:83:30:
         94:45:1d:bb:4e:a6:56:9b:3d:f9:77:c8:f2:c7:76:83:73:77:
         ea:3f:f9:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZiE2KqW/JYuwy+jc44PLinKQgPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4NkIyQTNFM0FEQjgwQTlGRDA4NDY0NDU2NEIzODhD
OThEOTNFOTAeFw0yMzAzMjIxOTI3MDRaFw0yNDAzMjAxOTMyMDRaMDMxMTAvBgNV
BAMTKEZBN0EwRUI1RTQ5NzIzMUJERUQ5RUZCNzMzNDg2NUM4NDVFODBBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ75hUqE8XTyMtxz3AeXlkp1DK
S3wWkGmsGFTfwpBF9lT9u18UTyRhrAa6JjCCxJDHeLtdpaUDblUdX9CDAvd6qStn
L3gJRe9o/40bNhfQ61XpNPxDKvEKQTYTBuxASg/blOMaqyTAM6lbqYnElRIKTyib
tgNQKykWgIe8mUmquWdmus52xedBdusjgjkwJuF8f/RJmE2UsLLygiZmPJX0pd7/
BMQyWb9Nl6lcq4tvq/cLC48KuTSqFdzRSGcoh3zE2vYogSUFAft2EhgNASZVjMm2
Iy49vvUvJ1D0PPD1CFITkuTXg6kN8h0Lq8H4AfrWMft1pM1RjNfd+ADrrRaVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+noOteSXIxve2e+3M0hlyEXoCvowHwYDVR0j
BBgwFoAUrYayo+OtuAqf0IRkRWSziMmNk+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC9BRDg2QjJBM0UzQURCODBBOUZEMDg0NjQ0NTY0QjM4OEM5OEQ5M0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEODZCMkEzRTNBREI4MEE5
RkQwODQ2NDQ1NjRCMzg4Qzk4RDkzRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzMwMmUzMjM0MzQyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9GAwDQYJKoZIhvcNAQELBQADggEBAG7fKF7c
Lveo5KxoIAxmUxDp9VuPRcPf/VJbd8Dr0u4WDdG55FrGur/rYqflKfGxbzEW208m
Zuwu01/6utYZNoebl+F885SbqtAB6Tg3p6OKbAj/FtTrYoeXV1pr2CSgjUlnYsw1
dOgJfB1OgZ9pVsWPWc0f7f9psZoqOn7GncNb9ttdflwXjEPhU6qHRqdP1oI6bzKB
tbiqLK0lcfXK5DjYwka1Sz+VUhialB6wJNPJxMj8W62nFriK01I/1M9sB77bYoBp
1KFxhNsXydeaw6AC+dnu/+ReyuvGAuXgWsRQeScIvOagjFWDMJRFHbtOplabPfl3
yPLHdoNzd+o/+Rk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org