Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231342e302f32332d3233203d3e20323733353638.roa
File:                     3137302e3233382e3231342e302f32332d3233203d3e20323733353638.roa (raw, json)
Hash identifier:          i5SIYqpwUqF42ZXh5Ya9o4oIE2vteAmSW7CsugXv+xI=
Subject key identifier:   AE:C5:48:E0:42:AA:C7:83:AF:BB:5C:1A:3B:6F:38:E1:09:58:20:5E
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       7AE2FF4E52F435FF36505EBCEBB5393DCACA2380
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231342e302f32332d3233203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:53 +0000
ROA not before:           Tue 31 Oct 2023 18:33:53 +0000
ROA not after:            Tue 29 Oct 2024 18:38:53 +0000
asID:                     273568
IP address blocks:        170.238.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e2:ff:4e:52:f4:35:ff:36:50:5e:bc:eb:b5:39:3d:ca:ca:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:53 2023 GMT
            Not After : Oct 29 18:38:53 2024 GMT
        Subject: CN=AEC548E042AAC783AFBB5C1A3B6F38E10958205E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:79:5e:93:ca:53:26:61:c5:12:3e:4a:9b:
                    9b:06:04:5f:df:78:cf:85:46:3e:ec:e3:27:d7:99:
                    5b:4c:9c:ff:ef:19:43:60:eb:18:50:14:62:6b:b7:
                    3f:d9:df:3d:8a:c0:a5:ff:8a:ca:b4:80:b4:c3:97:
                    65:e5:c2:00:58:61:dd:1f:47:68:c6:cf:aa:70:a6:
                    ee:d6:d7:7d:ba:7b:ba:5c:de:2a:8d:98:b2:98:f3:
                    25:4e:cd:fb:3b:b0:87:3c:90:d0:bb:d3:bb:3c:7e:
                    6a:0f:29:88:7c:91:b6:d2:d1:c5:38:bd:97:54:3d:
                    2e:82:a3:79:0e:2f:80:86:e0:0d:25:c1:6c:a8:4b:
                    6d:ae:af:b1:6d:1d:7e:9e:d6:38:35:79:45:28:8f:
                    42:22:10:62:ac:3c:36:c4:74:e9:ac:87:e3:15:ea:
                    1d:8f:b5:d7:4c:95:06:5a:aa:a2:dd:96:b0:66:f9:
                    b1:89:16:8d:b9:a8:61:1b:ca:b4:42:a0:1c:fa:1a:
                    3a:f4:d0:60:df:60:3f:de:6d:d4:de:19:d6:14:a0:
                    87:cf:39:ba:4c:50:39:9e:b0:0c:c5:1f:1e:2b:b7:
                    e8:a5:90:12:e9:60:62:b3:2d:ba:1e:b8:c1:06:0d:
                    25:90:42:c8:87:b1:0e:33:8c:3f:af:3d:24:93:04:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:48:E0:42:AA:C7:83:AF:BB:5C:1A:3B:6F:38:E1:09:58:20:5E
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/3137302e3233382e3231342e302f32332d3233203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:bc:ed:45:1c:b8:9f:86:c5:f2:26:f1:e3:55:81:75:0d:
         3f:cd:8f:38:41:1d:83:07:11:96:69:46:8b:7a:83:9b:72:42:
         71:6a:fa:25:1c:f2:a1:44:69:ca:a9:76:a5:e1:59:3b:fb:52:
         b8:2d:7e:06:34:b4:54:1e:29:97:33:06:0c:bd:20:47:ce:07:
         62:1c:a2:6a:b3:06:f5:92:fc:09:ad:19:5b:4d:a2:17:d7:63:
         b5:42:dc:d4:19:b4:d3:47:07:b6:01:f1:6b:d0:20:6a:63:51:
         5b:08:16:c3:cb:5b:84:62:39:c9:a4:01:68:13:db:0d:3a:02:
         9a:f3:f2:38:d5:2a:9a:bc:fe:b9:e0:b9:c0:9e:75:e1:bb:3c:
         03:d7:51:a4:03:b5:3c:ee:71:d9:2d:1e:52:b6:95:64:f5:b5:
         72:69:0a:ec:e3:e7:0f:37:b6:b8:68:5b:57:4f:11:16:6c:c0:
         df:5d:2e:3c:ed:89:63:0b:c4:7d:fd:78:9e:aa:16:9c:bb:37:
         09:4c:75:79:fb:cc:a7:68:6c:df:c3:36:bd:8f:0a:41:02:0b:
         a9:d3:35:f7:a2:fd:ba:97:14:a2:51:c6:fa:fd:21:e4:0d:1f:
         86:a3:ee:d7:e0:73:cb:21:72:3a:77:d0:d1:34:0f:df:ef:c7:
         05:fc:64:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeuL/TlL0Nf82UF6867U5PcrKI4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0QTY0N0FGQTAwMkMwMzEwOUQ2QTMyMzM1NUUzNkFC
QTlDNzI4NDAeFw0yMzEwMzExODMzNTNaFw0yNDEwMjkxODM4NTNaMDMxMTAvBgNV
BAMTKEFFQzU0OEUwNDJBQUM3ODNBRkJCNUMxQTNCNkYzOEUxMDk1ODIwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Xlek8pTJmHFEj5Km5sGBF/f
eM+FRj7s4yfXmVtMnP/vGUNg6xhQFGJrtz/Z3z2KwKX/isq0gLTDl2XlwgBYYd0f
R2jGz6pwpu7W1326e7pc3iqNmLKY8yVOzfs7sIc8kNC707s8fmoPKYh8kbbS0cU4
vZdUPS6Co3kOL4CG4A0lwWyoS22ur7FtHX6e1jg1eUUoj0IiEGKsPDbEdOmsh+MV
6h2PtddMlQZaqqLdlrBm+bGJFo25qGEbyrRCoBz6Gjr00GDfYD/ebdTeGdYUoIfP
ObpMUDmesAzFHx4rt+ilkBLpYGKzLboeuMEGDSWQQsiHsQ4zjD+vPSSTBF9JAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrsVI4EKqx4Ovu1waO2844QlYIF4wHwYDVR0j
BBgwFoAUb0pkevoALAMQnWoyM1XjarqccoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNqam02UVNWOWVjSEp5cXZIUjd1d2Y0RUNkQVo4NFNNaWt1bmY4clpz
bUEvMC82RjRBNjQ3QUZBMDAyQzAzMTA5RDZBMzIzMzU1RTM2QUJBOUM3Mjg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGNEE2NDdBRkEwMDJDMDMx
MDlENkEzMjMzNTVFMzZBQkE5QzcyODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzamptNlFTVjllY0hKeXF2SFI3dXdmNEVDZEFaODRTTWlrdW5mOHJac21BLzAv
MzEzNzMwMmUzMjMzMzgyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMzM1MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaru1jANBgkqhkiG9w0BAQsFAAOCAQEAWs28
7UUcuJ+GxfIm8eNVgXUNP82POEEdgwcRlmlGi3qDm3JCcWr6JRzyoURpyql2peFZ
O/tSuC1+BjS0VB4plzMGDL0gR84HYhyiarMG9ZL8Ca0ZW02iF9djtULc1Bm000cH
tgHxa9AgamNRWwgWw8tbhGI5yaQBaBPbDToCmvPyONUqmrz+ueC5wJ514bs8A9dR
pAO1PO5x2S0eUraVZPW1cmkK7OPnDze2uGhbV08RFmzA310uPO2JYwvEff14nqoW
nLs3CUx1efvMp2hs38M2vY8KQQILqdM196L9upcUolHG+v0h5A0fhqPu1+BzyyFy
OnfQ0TQP3+/HBfxkaw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:12 2025 by rpki-client