Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323636343934.roa
File:                     3137302e3234342e39382e302f32342d3234203d3e20323636343934.roa (raw, json)
Hash identifier:          oxMJEZUhiycgDujNDfFNLk7P8ukiGowQ/gxlOALdlCs=
Subject key identifier:   A1:00:C5:C7:AA:12:85:ED:6D:9C:BC:60:15:7B:D4:7F:86:15:66:80
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       626B24B32FADD5D7A50ABE766898375EC8D415B2
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323636343934.roa
Signing time:             Wed 22 Mar 2023 19:32:04 +0000
ROA not before:           Wed 22 Mar 2023 19:27:04 +0000
ROA not after:            Wed 20 Mar 2024 19:32:04 +0000
asID:                     266494
IP address blocks:        170.244.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:24:b3:2f:ad:d5:d7:a5:0a:be:76:68:98:37:5e:c8:d4:15:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Mar 22 19:27:04 2023 GMT
            Not After : Mar 20 19:32:04 2024 GMT
        Subject: CN=A100C5C7AA1285ED6D9CBC60157BD47F86156680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:35:5f:94:b8:12:db:fa:6d:c5:36:84:bc:
                    8c:5a:00:31:64:c2:ac:48:a7:da:ed:1b:da:a8:69:
                    4c:fb:5f:90:d1:6e:89:bb:04:c2:ba:70:04:a6:54:
                    77:29:8d:0d:cd:58:3d:b9:a4:63:cd:d2:28:3a:03:
                    ce:cb:fd:2a:b7:28:71:38:73:6f:fa:53:53:c9:9e:
                    12:44:a6:5c:fa:3e:b5:b4:ed:db:e9:fe:e1:da:5b:
                    a5:cc:29:38:14:01:1e:3a:88:a9:81:78:46:39:31:
                    57:4d:b0:7e:76:8f:a8:a2:93:68:f5:1a:8e:f9:38:
                    b5:98:05:d4:a6:d8:47:da:85:e5:9d:69:23:ff:30:
                    25:77:6c:82:29:65:1c:ba:f7:09:21:75:d7:87:db:
                    b8:7c:11:f6:71:4e:b6:07:6d:50:16:9b:b3:f8:84:
                    5b:03:23:b2:f9:0d:53:6c:06:22:79:82:a6:34:14:
                    48:dd:1b:4b:fa:1e:2a:ef:1a:3a:95:e7:6b:21:fd:
                    8a:88:4e:de:2c:3e:03:98:01:bd:55:e4:9f:ae:88:
                    e7:5f:e2:3a:2c:3e:fc:5b:4f:0b:6b:95:22:96:2e:
                    cf:07:33:46:52:a7:c3:c6:97:70:da:e2:2b:0a:4e:
                    5b:23:45:31:34:fb:c8:52:20:7b:5c:d6:30:b1:8d:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:00:C5:C7:AA:12:85:ED:6D:9C:BC:60:15:7B:D4:7F:86:15:66:80
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e3234342e39382e302f32342d3234203d3e20323636343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3a:d0:c4:d9:6f:3e:4f:e3:d7:72:a1:ba:fc:16:a9:76:78:
         e7:ff:7b:2d:cc:3d:10:34:37:7e:15:41:79:89:71:95:62:7e:
         09:38:e0:2c:de:ab:14:a0:f3:81:a7:92:d3:a0:b9:ff:70:1f:
         1a:d0:65:d0:f4:fe:26:ea:30:57:d2:4f:f5:e8:bc:9e:29:4e:
         78:a2:7e:88:c2:99:bc:5f:20:ee:cb:92:9d:ec:f5:bc:f7:d8:
         67:b1:ef:e3:6d:0d:b3:b1:7f:f7:98:6a:91:a0:4f:06:a2:b2:
         9a:b4:2f:3a:c0:02:02:e2:da:5f:f8:5d:7e:03:b7:ac:84:e3:
         36:e2:c1:81:a3:db:87:04:af:27:1e:72:0d:d5:19:3c:87:fe:
         4e:60:a7:8d:3f:ac:21:1b:6c:d2:3e:f2:86:88:44:52:ce:ca:
         c7:db:e3:5d:d9:eb:48:b6:f1:00:b3:a9:1d:a5:76:b3:5a:a7:
         b6:fb:85:bf:0e:dc:ba:cd:5b:e9:04:58:78:27:1b:52:25:08:
         12:99:12:47:ab:26:4c:05:17:a6:01:10:c8:4d:5a:de:46:96:
         91:b9:ee:ce:cb:8b:2b:a2:e9:3f:60:88:84:fb:35:91:e5:31:
         b3:05:15:ce:7d:e7:b8:ea:1e:9c:6a:ad:a5:1d:c8:a4:6e:c3:
         25:d1:c7:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYmsksy+t1delCr52aJg3XsjUFbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4NkIyQTNFM0FEQjgwQTlGRDA4NDY0NDU2NEIzODhD
OThEOTNFOTAeFw0yMzAzMjIxOTI3MDRaFw0yNDAzMjAxOTMyMDRaMDMxMTAvBgNV
BAMTKEExMDBDNUM3QUExMjg1RUQ2RDlDQkM2MDE1N0JENDdGODYxNTY2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/zVflLgS2/ptxTaEvIxaADFk
wqxIp9rtG9qoaUz7X5DRbom7BMK6cASmVHcpjQ3NWD25pGPN0ig6A87L/Sq3KHE4
c2/6U1PJnhJEplz6PrW07dvp/uHaW6XMKTgUAR46iKmBeEY5MVdNsH52j6iik2j1
Go75OLWYBdSm2EfaheWdaSP/MCV3bIIpZRy69wkhddeH27h8EfZxTrYHbVAWm7P4
hFsDI7L5DVNsBiJ5gqY0FEjdG0v6HirvGjqV52sh/YqITt4sPgOYAb1V5J+uiOdf
4josPvxbTwtrlSKWLs8HM0ZSp8PGl3Da4isKTlsjRTE0+8hSIHtc1jCxjfznAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoQDFx6oShe1tnLxgFXvUf4YVZoAwHwYDVR0j
BBgwFoAUrYayo+OtuAqf0IRkRWSziMmNk+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMC9BRDg2QjJBM0UzQURCODBBOUZEMDg0NjQ0NTY0QjM4OEM5OEQ5M0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEODZCMkEzRTNBREI4MEE5
RkQwODQ2NDQ1NjRCMzg4Qzk4RDkzRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzAv
MzEzNzMwMmUzMjM0MzQyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9GIwDQYJKoZIhvcNAQELBQADggEBAFI60MTZ
bz5P49dyobr8Fql2eOf/ey3MPRA0N34VQXmJcZVifgk44CzeqxSg84GnktOguf9w
HxrQZdD0/ibqMFfST/XovJ4pTniifojCmbxfIO7Lkp3s9bz32Gex7+NtDbOxf/eY
apGgTwaispq0LzrAAgLi2l/4XX4Dt6yE4zbiwYGj24cErycecg3VGTyH/k5gp40/
rCEbbNI+8oaIRFLOysfb413Z60i28QCzqR2ldrNap7b7hb8O3LrNW+kEWHgnG1Il
CBKZEkerJkwFF6YBEMhNWt5GlpG57s7Liyui6T9giIT7NZHlMbMFFc5957jqHpxq
raUdyKRuwyXRx7Y=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:25 2023 by rpki-client on console-ams.rpki-client.org