Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323636343934.roa
File:                     3137302e3234342e39372e302f32342d3234203d3e20323636343934.roa (raw, json)
Hash identifier:          N65g//VoCYxyVN64yAXY7lXgvo8m9I3JwXi/LLPxUIM=
Subject key identifier:   0D:C0:44:C7:B8:50:82:D0:17:B0:68:84:D5:40:40:6A:61:B9:E1:39
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       65C853965FB94CB625E6081A1373A2624AA724A0
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323636343934.roa
Signing time:             Wed 22 Mar 2023 19:32:03 +0000
ROA not before:           Wed 22 Mar 2023 19:27:03 +0000
ROA not after:            Wed 20 Mar 2024 19:32:03 +0000
asID:                     266494
IP address blocks:        170.244.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:53:96:5f:b9:4c:b6:25:e6:08:1a:13:73:a2:62:4a:a7:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 22 19:27:03 2023 GMT
            Not After : Mar 20 19:32:03 2024 GMT
        Subject: CN=0DC044C7B85082D017B06884D540406A61B9E139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ad:8d:26:4b:5d:b5:42:99:31:8e:e2:69:ab:
                    03:ca:45:d7:57:80:be:05:74:f3:fc:c5:dd:53:a1:
                    12:8e:75:8e:00:66:dd:af:ed:d4:56:c2:02:71:c5:
                    86:31:7d:10:6f:c0:6a:29:ad:f5:7c:bf:1c:bd:66:
                    9f:a3:b4:0b:00:f6:f0:56:bb:b9:79:82:81:05:ee:
                    be:52:e6:b4:e0:f8:c2:71:30:a9:e0:b8:24:28:01:
                    14:b9:34:3e:f1:f7:f1:0d:21:c3:0e:cf:48:61:aa:
                    55:32:a0:74:f2:e5:52:00:26:bf:94:3d:18:ca:6b:
                    dd:f8:13:55:9e:57:df:bd:0f:7c:52:7d:38:76:71:
                    61:6b:76:2d:22:44:1a:f4:d4:93:b6:5c:4f:5f:8e:
                    d5:c7:69:ef:79:10:5b:74:52:c2:a5:7a:f9:9c:1f:
                    7c:90:8a:e7:65:ab:32:46:76:c6:be:95:17:96:d6:
                    a9:a7:e0:ec:95:1e:39:91:8c:ba:e0:34:36:70:0a:
                    9d:3c:44:9f:1e:be:c7:24:45:54:17:6c:45:8d:0f:
                    87:05:39:0c:4c:39:d3:02:d3:65:4a:67:f4:9d:d1:
                    81:de:84:5b:70:bd:3a:ca:68:68:9b:9c:73:42:24:
                    82:a8:fc:83:1c:b1:3f:1d:2a:d4:6f:93:8a:ae:90:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C0:44:C7:B8:50:82:D0:17:B0:68:84:D5:40:40:6A:61:B9:E1:39
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39372e302f32342d3234203d3e20323636343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:b2:73:46:ff:43:0d:4c:0c:b6:bb:b7:17:b9:2a:38:50:76:
         ae:07:d2:69:c8:23:e1:22:85:69:16:72:d9:7d:58:45:e5:97:
         e9:3d:0a:1b:10:f6:8d:80:f5:df:2b:3f:1c:85:61:5f:c9:a9:
         18:93:0c:c1:bb:bf:d8:ad:ce:71:26:f0:32:59:df:14:ea:e4:
         b2:94:29:fa:2d:5e:f7:4c:1d:1b:bb:a3:a2:e8:fa:60:03:1d:
         e8:35:c2:04:62:04:aa:5f:d3:08:f7:68:08:0a:73:a4:0c:51:
         9e:a2:40:c4:b0:6c:4b:da:b9:9a:2f:1b:f2:8d:62:58:f3:47:
         73:b5:27:73:c0:f8:02:46:9a:ae:6a:43:93:11:fd:57:0a:10:
         ae:ee:e4:12:0e:f0:12:c5:57:38:4e:dc:35:ad:1b:bb:9f:5f:
         57:44:41:97:d0:e8:b3:8d:e8:52:ce:d6:85:31:84:1d:9f:8c:
         85:8f:09:4a:0a:75:09:df:e1:87:74:09:e8:b4:31:45:e4:d1:
         3e:d2:37:b4:ed:1f:4c:a9:aa:cc:99:27:68:31:bf:c5:32:40:
         0b:d0:0e:92:1f:2e:ad:3b:63:d1:d9:ed:42:c7:c0:a0:00:d3:
         86:e4:e3:cc:e6:c9:17:27:2c:b6:fc:66:2a:f6:78:87:4d:21:
         b1:a7:8d:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZchTll+5TLYl5ggaE3OiYkqnJKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4NkIyQTNFM0FEQjgwQTlGRDA4NDY0NDU2NEIzODhD
OThEOTNFOTAeFw0yMzAzMjIxOTI3MDNaFw0yNDAzMjAxOTMyMDNaMDMxMTAvBgNV
BAMTKDBEQzA0NEM3Qjg1MDgyRDAxN0IwNjg4NEQ1NDA0MDZBNjFCOUUxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5rY0mS121QpkxjuJpqwPKRddX
gL4FdPP8xd1ToRKOdY4AZt2v7dRWwgJxxYYxfRBvwGoprfV8vxy9Zp+jtAsA9vBW
u7l5goEF7r5S5rTg+MJxMKnguCQoARS5ND7x9/ENIcMOz0hhqlUyoHTy5VIAJr+U
PRjKa934E1WeV9+9D3xSfTh2cWFrdi0iRBr01JO2XE9fjtXHae95EFt0UsKlevmc
H3yQiudlqzJGdsa+lReW1qmn4OyVHjmRjLrgNDZwCp08RJ8evsckRVQXbEWND4cF
OQxMOdMC02VKZ/Sd0YHehFtwvTrKaGibnHNCJIKo/IMcsT8dKtRvk4qukCZlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDcBEx7hQgtAXsGiE1UBAamG54TkwHwYDVR0j
BBgwFoAUrYayo+OtuAqf0IRkRWSziMmNk+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC9BRDg2QjJBM0UzQURCODBBOUZEMDg0NjQ0NTY0QjM4OEM5OEQ5M0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEODZCMkEzRTNBREI4MEE5
RkQwODQ2NDQ1NjRCMzg4Qzk4RDkzRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzMwMmUzMjM0MzQyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9GEwDQYJKoZIhvcNAQELBQADggEBAM6yc0b/
Qw1MDLa7txe5KjhQdq4H0mnII+EihWkWctl9WEXll+k9ChsQ9o2A9d8rPxyFYV/J
qRiTDMG7v9itznEm8DJZ3xTq5LKUKfotXvdMHRu7o6Lo+mADHeg1wgRiBKpf0wj3
aAgKc6QMUZ6iQMSwbEvauZovG/KNYljzR3O1J3PA+AJGmq5qQ5MR/VcKEK7u5BIO
8BLFVzhO3DWtG7ufX1dEQZfQ6LON6FLO1oUxhB2fjIWPCUoKdQnf4Yd0Cei0MUXk
0T7SN7TtH0ypqsyZJ2gxv8UyQAvQDpIfLq07Y9HZ7ULHwKAA04bk48zmyRcnLLb8
Zir2eIdNIbGnjVQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org