Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323633303733.roa
File:                     3137302e3234342e39372e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          Gusv16fTCc06G8WmkIiPoXmas9Vlm1l3siqfJY0FASE=
Subject key identifier:   1A:AD:8A:11:1C:B2:60:6C:18:9C:DB:CB:B0:BC:F7:BA:84:EF:7C:06
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       2F7B1D94D54BC305EFFCAF3FCD0FE2CA59E17C91
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323633303733.roa
Signing time:             Thu 23 Mar 2023 00:30:19 +0000
ROA not before:           Thu 23 Mar 2023 00:25:19 +0000
ROA not after:            Thu 21 Mar 2024 00:30:19 +0000
asID:                     263073
IP address blocks:        170.244.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7b:1d:94:d5:4b:c3:05:ef:fc:af:3f:cd:0f:e2:ca:59:e1:7c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 23 00:25:19 2023 GMT
            Not After : Mar 21 00:30:19 2024 GMT
        Subject: CN=1AAD8A111CB2606C189CDBCBB0BCF7BA84EF7C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:5d:e5:e2:cc:39:98:6c:5c:26:6c:72:64:
                    66:1e:a8:2c:58:85:41:6b:3d:73:b4:76:6f:2a:9c:
                    c5:48:fb:ca:7f:5a:ab:b3:23:0f:98:ca:d6:07:71:
                    3a:4e:19:a6:bc:0a:7e:65:d0:e4:e0:1c:01:fb:13:
                    be:43:e3:18:7b:92:12:5e:e5:80:0a:3e:af:53:07:
                    f5:ac:da:f2:bd:11:0d:75:ff:a0:c4:ed:10:99:d9:
                    d6:46:8e:5a:f7:79:83:73:55:a1:98:55:57:0f:e7:
                    b5:09:72:0f:18:1b:5b:62:89:a6:fb:29:77:a5:63:
                    c2:f3:d4:54:c1:09:d1:4f:f9:a1:97:e8:21:32:79:
                    b6:e2:3f:54:3d:cd:ba:cd:0c:f8:87:83:48:d4:1a:
                    ac:35:f5:c0:8e:1c:33:d7:68:11:bf:f9:e5:b2:50:
                    35:08:6d:ab:ac:8d:b7:02:b4:59:88:83:f8:62:da:
                    4c:08:32:3e:74:c2:c0:af:c4:89:cb:70:ea:68:da:
                    9c:ef:76:61:5b:3e:bd:21:a1:53:ce:ca:82:b2:fd:
                    49:a6:ea:6c:4e:18:54:a1:aa:be:0d:61:a1:30:d7:
                    ba:82:16:ad:31:58:c5:ec:5f:b3:17:48:9f:59:bc:
                    0d:21:bb:0c:22:42:0a:aa:b8:f3:1c:58:38:b1:1f:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:8A:11:1C:B2:60:6C:18:9C:DB:CB:B0:BC:F7:BA:84:EF:7C:06
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:30:17:5f:85:a0:55:25:a9:a3:80:30:30:86:b4:30:91:56:
         58:4d:da:b6:02:6d:2b:d0:af:b1:06:11:ca:49:30:45:05:8a:
         39:cc:de:be:a9:b7:d2:d1:35:ff:99:bb:7c:2f:88:8b:e5:a1:
         b3:15:25:9e:6f:4b:4b:f9:ec:fc:fd:82:bd:79:df:a5:d5:08:
         6c:f0:cf:78:a5:22:3f:03:66:58:3f:0f:bb:a4:19:7c:ca:03:
         92:14:8f:47:c1:d8:f5:e2:28:80:f7:61:6b:b2:13:86:f4:e7:
         24:a1:cd:94:f0:60:ba:c3:e4:51:6b:12:68:d5:3f:e2:0e:98:
         de:cb:c0:03:05:4a:20:9d:e2:6a:a3:fd:92:1a:6f:5b:f1:dd:
         f4:50:55:af:cb:fb:dc:57:00:cf:54:68:da:da:25:4f:27:c5:
         15:bc:6e:4a:06:90:57:89:03:b5:b7:ed:99:14:76:cf:1c:4b:
         66:5c:a1:5f:1f:b6:83:e1:e7:2a:7b:28:d5:b8:a6:fa:79:4d:
         27:31:db:3f:08:50:99:8b:d3:a0:99:c3:1b:b3:aa:33:3a:d1:
         8e:f9:a2:75:2a:c8:e2:3d:f7:45:2d:ef:ae:61:ce:82:b3:54:
         e5:33:f9:95:56:19:c7:0f:be:2e:75:34:93:42:43:3e:45:58:
         d4:2a:4b:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL3sdlNVLwwXv/K8/zQ/iylnhfJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4NkIyQTNFM0FEQjgwQTlGRDA4NDY0NDU2NEIzODhD
OThEOTNFOTAeFw0yMzAzMjMwMDI1MTlaFw0yNDAzMjEwMDMwMTlaMDMxMTAvBgNV
BAMTKDFBQUQ4QTExMUNCMjYwNkMxODlDREJDQkIwQkNGN0JBODRFRjdDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaV3l4sw5mGxcJmxyZGYeqCxY
hUFrPXO0dm8qnMVI+8p/WquzIw+YytYHcTpOGaa8Cn5l0OTgHAH7E75D4xh7khJe
5YAKPq9TB/Ws2vK9EQ11/6DE7RCZ2dZGjlr3eYNzVaGYVVcP57UJcg8YG1tiiab7
KXelY8Lz1FTBCdFP+aGX6CEyebbiP1Q9zbrNDPiHg0jUGqw19cCOHDPXaBG/+eWy
UDUIbausjbcCtFmIg/hi2kwIMj50wsCvxInLcOpo2pzvdmFbPr0hoVPOyoKy/Umm
6mxOGFShqr4NYaEw17qCFq0xWMXsX7MXSJ9ZvA0huwwiQgqquPMcWDixHz0tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGq2KERyyYGwYnNvLsLz3uoTvfAYwHwYDVR0j
BBgwFoAUrYayo+OtuAqf0IRkRWSziMmNk+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC9BRDg2QjJBM0UzQURCODBBOUZEMDg0NjQ0NTY0QjM4OEM5OEQ5M0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEODZCMkEzRTNBREI4MEE5
RkQwODQ2NDQ1NjRCMzg4Qzk4RDkzRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzMwMmUzMjM0MzQyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9GEwDQYJKoZIhvcNAQELBQADggEBAL0wF1+F
oFUlqaOAMDCGtDCRVlhN2rYCbSvQr7EGEcpJMEUFijnM3r6pt9LRNf+Zu3wviIvl
obMVJZ5vS0v57Pz9gr1536XVCGzwz3ilIj8DZlg/D7ukGXzKA5IUj0fB2PXiKID3
YWuyE4b05yShzZTwYLrD5FFrEmjVP+IOmN7LwAMFSiCd4mqj/ZIab1vx3fRQVa/L
+9xXAM9UaNraJU8nxRW8bkoGkFeJA7W37ZkUds8cS2ZcoV8ftoPh5yp7KNW4pvp5
TScx2z8IUJmL06CZwxuzqjM60Y75onUqyOI990Ut765hzoKzVOUz+ZVWGccPvi51
NJNCQz5FWNQqSyk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:40 2025 by rpki-client