Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32332d3233203d3e20323731303038.roa
File:                     3137302e3235342e3132302e302f32332d3233203d3e20323731303038.roa (raw, json)
Hash identifier:          4/pcU9yK7df0KRgrljxpvJhfJMa2xzeeAXpedvV08W0=
Subject key identifier:   25:93:A3:E5:71:D1:DB:DF:7A:A6:36:66:E5:04:AE:0E:45:E4:2D:7C
Certificate issuer:       /CN=8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F
Certificate serial:       04F9C4920E12A3C4AC14B8AA8EA6D62B253CAF18
Authority key identifier: 8E:1A:68:8E:CA:72:F4:7A:60:FB:39:CC:A6:5F:F7:CE:51:E9:D7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32332d3233203d3e20323731303038.roa
Signing time:             Tue 05 Jul 2022 13:35:41 +0000
ROA not before:           Tue 05 Jul 2022 13:30:41 +0000
ROA not after:            Tue 04 Jul 2023 13:35:41 +0000
asID:                     271008
IP address blocks:        170.254.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f9:c4:92:0e:12:a3:c4:ac:14:b8:aa:8e:a6:d6:2b:25:3c:af:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F
        Validity
            Not Before: Jul  5 13:30:41 2022 GMT
            Not After : Jul  4 13:35:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:c0:a6:e8:07:dc:45:ef:2f:61:07:ce:9c:
                    8b:ea:0c:8c:8e:9b:db:9b:68:ff:4c:f0:a6:31:43:
                    25:2a:bb:33:2d:6b:84:82:e3:83:8e:1c:64:1b:e0:
                    01:cb:bb:bb:04:ee:e6:55:71:a8:7b:dd:12:59:78:
                    3d:d3:d4:a9:4c:93:2f:e9:d6:dd:85:3d:3d:e9:f4:
                    66:9c:be:64:f7:4e:26:cd:13:8e:90:e9:36:2e:83:
                    c3:ce:3d:fb:a0:d4:9f:8c:ab:fd:03:16:83:4b:da:
                    b1:cf:48:a7:79:c5:65:21:0f:8b:29:86:17:73:1b:
                    af:ae:95:e3:87:5f:18:fa:54:50:21:83:be:2a:2e:
                    ef:31:7f:6c:f3:d6:5a:b6:fa:72:9d:b2:a6:dc:6e:
                    e9:cf:e6:ad:d9:30:23:f6:91:df:e3:42:c4:72:6b:
                    21:ca:62:fe:fa:c6:03:26:b8:9e:76:a4:98:fc:05:
                    e5:60:92:77:c8:f7:46:16:2d:f5:41:b0:90:48:b4:
                    32:33:18:e0:27:14:64:2b:3a:cf:11:97:ad:47:84:
                    33:35:04:4a:c4:72:4a:fd:0e:13:ef:f1:e4:39:7c:
                    5d:45:b7:b8:30:b9:12:7b:5e:7a:fe:4e:75:72:b6:
                    10:8c:c1:76:80:75:fe:89:01:7c:f1:ea:1f:2b:b6:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:A3:E5:71:D1:DB:DF:7A:A6:36:66:E5:04:AE:0E:45:E4:2D:7C
            X509v3 Authority Key Identifier:
                keyid:8E:1A:68:8E:CA:72:F4:7A:60:FB:39:CC:A6:5F:F7:CE:51:E9:D7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1A688ECA72F47A60FB39CCA65FF7CE51E9D70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/3137302e3235342e3132302e302f32332d3233203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:79:85:42:29:40:af:5d:1c:09:96:67:e3:31:f6:30:f5:
         b1:47:9d:ef:bd:5b:1f:b3:e4:cc:8a:7e:25:52:1e:63:db:e3:
         b6:96:01:71:5f:d0:e3:3f:f4:4d:8b:ee:30:f0:0d:66:ea:2b:
         b7:9c:86:2d:5b:e6:51:d5:5b:b1:36:53:cb:9d:e3:f7:1e:03:
         e1:97:38:85:b7:c9:35:81:8a:ee:a9:5e:44:85:62:bc:8c:c9:
         88:12:c5:eb:0c:3c:68:e7:94:ad:87:d6:86:ed:6f:fc:9e:cd:
         90:a2:aa:26:c5:14:46:da:62:b4:80:50:d6:74:b1:d8:92:ba:
         73:c4:28:3c:aa:c3:98:63:b1:4c:12:3e:bf:24:5b:cb:cd:a0:
         1d:63:d6:db:e4:61:73:e0:e8:f4:e3:81:8d:92:7f:1e:d0:19:
         15:1d:ff:55:af:1c:50:e0:1c:9a:45:7f:f5:26:f4:2b:97:fa:
         92:c8:3d:c0:74:a3:97:37:85:2b:bd:92:d7:2f:29:14:18:f5:
         68:d7:56:da:fb:7e:90:52:e2:5f:fa:a8:64:09:0a:16:f0:f0:
         d1:82:bb:fd:a5:98:18:3d:ca:67:aa:16:75:c5:93:9b:a1:7a:
         a6:d9:c8:b2:21:d9:59:67:0c:9e:fd:a0:fa:8b:5e:c8:97:35:
         2e:df:52:2c
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUBPnEkg4So8SsFLiqjqbWKyU8rxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxQTY4OEVDQTcyRjQ3QTYwRkIzOUNDQTY1RkY3Q0U1
MUU5RDcwRjAeFw0yMjA3MDUxMzMwNDFaFw0yMzA3MDQxMzM1NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc5QUMwQTZFODA3REM0NUVG
MkY2MTA3Q0U5QzhCRUEwQzhDOEU5QkRCOUI2OEZGNENGMEE2MzE0MzI1MkFCQjMz
MkQ2Qjg0ODJFMzgzOEUxQzY0MUJFMDAxQ0JCQkJCMDRFRUU2NTU3MUE4N0JERDEy
NTk3ODNERDNENEE5NEM5MzJGRTlENkREODUzRDNERTlGNDY2OUNCRTY0Rjc0RTI2
Q0QxMzhFOTBFOTM2MkU4M0MzQ0UzREZCQTBENDlGOENBQkZEMDMxNjgzNEJEQUIx
Q0Y0OEE3NzlDNTY1MjEwRjhCMjk4NjE3NzMxQkFGQUU5NUUzODc1RjE4RkE1NDUw
MjE4M0JFMkEyRUVGMzE3RjZDRjNENjVBQjZGQTcyOURCMkE2REM2RUU5Q0ZFNkFE
RDkzMDIzRjY5MURGRTM0MkM0NzI2QjIxQ0E2MkZFRkFDNjAzMjZCODlFNzZBNDk4
RkMwNUU1NjA5Mjc3QzhGNzQ2MTYyREY1NDFCMDkwNDhCNDMyMzMxOEUwMjcxNDY0
MkIzQUNGMTE5N0FENDc4NDMzMzUwNDRBQzQ3MjRBRkQwRTEzRUZGMUU0Mzk3QzVE
NDVCN0I4MzBCOTEyN0I1RTdBRkU0RTc1NzJCNjEwOENDMTc2ODA3NUZFODkwMTdD
RjFFQTFGMkJCNjMwMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx5rApugH3EXvL2EHzpyL6gyMjpvbm2j/TPCmMUMlKrszLWuEguOD
jhxkG+ABy7u7BO7mVXGoe90SWXg909SpTJMv6dbdhT096fRmnL5k904mzROOkOk2
LoPDzj37oNSfjKv9AxaDS9qxz0inecVlIQ+LKYYXcxuvrpXjh18Y+lRQIYO+Ki7v
MX9s89ZatvpynbKm3G7pz+at2TAj9pHf40LEcmshymL++sYDJriedqSY/AXlYJJ3
yPdGFi31QbCQSLQyMxjgJxRkKzrPEZetR4QzNQRKxHJK/Q4T7/HkOXxdRbe4MLkS
e156/k51crYQjMF2gHX+iQF88eofK7YwLQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCWTo+Vx0dvfeqY2ZuUErg5F5C18MB8GA1UdIwQYMBaAFI4aaI7KcvR6YPs5zKZf
985R6dcPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c5ckVRaFZqaXNLOFEy
N3IxM3paSkszMnNYUTRDUkZCUFZTOEtOaFpCaVdCLzAvOEUxQTY4OEVDQTcyRjQ3
QTYwRkIzOUNDQTY1RkY3Q0U1MUU5RDcwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84RTFBNjg4RUNBNzJGNDdBNjBGQjM5Q0NBNjVGRjdDRTUxRTlE
NzBGLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOXJFUWhWamlzSzhRMjdyMTN6
WkpLMzJzWFE0Q1JGQlBWUzhLTmhaQmlXQi8wLzMxMzczMDJlMzIzNTM0MmUzMTMy
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzEzMDMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGq/ngwDQYJKoZIhvcNAQELBQADggEBAEGzeYVCKUCvXRwJlmfjMfYw9bFHne+9
Wx+z5MyKfiVSHmPb47aWAXFf0OM/9E2L7jDwDWbqK7echi1b5lHVW7E2U8ud4/ce
A+GXOIW3yTWBiu6pXkSFYryMyYgSxesMPGjnlK2H1obtb/yezZCiqibFFEbaYrSA
UNZ0sdiSunPEKDyqw5hjsUwSPr8kW8vNoB1j1tvkYXPg6PTjgY2Sfx7QGRUd/1Wv
HFDgHJpFf/Um9CuX+pLIPcB0o5c3hSu9ktcvKRQY9WjXVtr7fpBS4l/6qGQJChbw
8NGCu/2lmBg9ymeqFnXFk5uheqbZyLIh2VlnDJ79oPqLXsiXNS7fUiw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org