Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa
File:                     3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          k6EvvYKjb448SxvFDGuAEJ/c9TK0N/+wvg/HSU2vl5w=
Subject key identifier:   BF:0F:97:B9:2B:92:D2:6B:A8:FB:67:52:B9:65:BA:98:91:5F:9B:1B
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       4BCCCCAFC4F62931D269D2B190E89CCC25C4979D
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        170.247.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:cc:af:c4:f6:29:31:d2:69:d2:b1:90:e8:9c:cc:25:c4:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=BF0F97B92B92D26BA8FB6752B965BA98915F9B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:83:da:ad:73:7e:fb:49:28:c9:26:db:ba:
                    3c:6e:90:6b:96:6c:f9:72:9a:db:69:05:ee:78:0c:
                    e8:a3:e1:8b:61:60:48:44:c6:e0:c0:63:a8:8d:6c:
                    3f:21:aa:51:a7:01:6a:cc:39:8d:be:85:35:bc:2f:
                    dd:9f:71:fe:ec:76:e5:d7:08:13:82:0b:8c:56:da:
                    57:99:e0:a2:64:7f:c3:96:5d:96:bd:a2:8d:2a:88:
                    71:c7:ea:4f:11:8a:31:84:8f:fb:4a:66:15:1a:bd:
                    80:3e:0a:8c:47:7e:1c:f0:2c:3b:ff:34:64:eb:18:
                    52:02:62:13:c8:a4:63:c1:7c:77:cb:25:fc:00:6e:
                    f8:39:4d:2d:b2:48:e5:de:97:0c:78:48:7a:5d:17:
                    5e:18:b6:43:ce:7a:3c:bf:5f:6b:e5:29:e1:63:70:
                    4c:33:08:16:74:4f:8d:a0:60:92:b1:e2:ec:41:9d:
                    11:0a:20:e4:ba:b5:e6:e0:f9:b8:20:e4:ff:f2:08:
                    6e:9c:3d:5b:10:04:fb:13:8d:b0:cf:f3:24:81:c8:
                    6c:53:37:90:05:9f:9b:53:49:68:a9:19:9e:b9:3d:
                    8e:2d:75:b0:fd:38:ac:70:fe:29:17:42:ba:48:e0:
                    90:a7:28:03:d7:a1:e5:8f:0b:e9:bd:f4:35:cd:1c:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:97:B9:2B:92:D2:6B:A8:FB:67:52:B9:65:BA:98:91:5F:9B:1B
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:16:00:22:3b:d3:51:a8:85:46:56:65:69:0f:e8:ac:ea:
         fa:82:b9:d8:02:c4:3b:90:af:62:c0:3f:90:b7:ad:6f:4c:13:
         67:51:61:5b:0b:37:3a:c2:b7:be:e4:63:f8:0e:c8:29:12:3e:
         1c:b6:c5:c5:91:64:4c:5f:20:2c:9e:e4:d0:66:57:08:11:95:
         df:02:b4:40:98:fe:f1:98:ac:a5:19:1a:c6:0c:03:05:c4:63:
         a0:d1:60:2e:b3:1a:d9:bf:bb:a0:ec:16:9a:cd:85:59:95:50:
         7e:81:f9:90:72:f5:bf:22:b3:63:43:fa:94:3f:c2:54:13:2f:
         bd:9f:e5:b5:6a:4c:a1:62:ca:6a:67:e4:4b:c0:2d:e6:d3:d8:
         22:42:1e:b5:93:71:a8:a9:f5:9a:a3:ad:d9:dc:ec:b5:a4:b4:
         1a:36:d9:1b:e1:46:81:05:71:51:1d:03:ff:3d:37:38:0a:b9:
         2e:28:f6:1f:3c:3c:9a:a1:f0:a5:8a:e8:bd:36:e5:c6:d0:38:
         07:85:c9:8f:ce:e5:ae:36:27:d7:bb:04:02:78:1d:f4:b3:e2:
         a1:52:c9:92:ae:10:89:a6:92:b4:95:4f:e6:60:ee:da:d5:31:
         4b:67:24:78:c4:fe:6e:f8:31:8d:68:ad:67:ed:a1:28:a4:4f:
         1c:3c:f7:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS8zMr8T2KTHSadKxkOiczCXEl50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5NkI5NkExRENCMjA1RjI3NkJGQ0VGM0Y2NUIyMzMz
MjVEMDc4ODAeFw0yNDAzMDQxOTIxMTJaFw0yNTAzMDMxOTI2MTJaMDMxMTAvBgNV
BAMTKEJGMEY5N0I5MkI5MkQyNkJBOEZCNjc1MkI5NjVCQTk4OTE1RjlCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDIParXN++0koySbbujxukGuW
bPlymttpBe54DOij4YthYEhExuDAY6iNbD8hqlGnAWrMOY2+hTW8L92fcf7sduXX
CBOCC4xW2leZ4KJkf8OWXZa9oo0qiHHH6k8RijGEj/tKZhUavYA+CoxHfhzwLDv/
NGTrGFICYhPIpGPBfHfLJfwAbvg5TS2ySOXelwx4SHpdF14YtkPOejy/X2vlKeFj
cEwzCBZ0T42gYJKx4uxBnREKIOS6tebg+bgg5P/yCG6cPVsQBPsTjbDP8ySByGxT
N5AFn5tTSWipGZ65PY4tdbD9OKxw/ikXQrpI4JCnKAPXoeWPC+m99DXNHESpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvw+XuSuS0muo+2dSuWW6mJFfmxswHwYDVR0j
BBgwFoAU1Za5ah3LIF8na/zvP2WyMzJdB4gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FEZkNocGRhRHQ2bkV5NE5yTHJ5aU1lZ0RCRG5KV0d5ZDk4dHBWU0xo
TDgvMC9ENTk2Qjk2QTFEQ0IyMDVGMjc2QkZDRUYzRjY1QjIzMzMyNUQwNzg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1OTZCOTZBMURDQjIwNUYy
NzZCRkNFRjNGNjVCMjMzMzI1RDA3ODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBRGZDaHBkYUR0Nm5FeTROckxyeWlNZWdEQkRuSldHeWQ5OHRwVlNMaEw4LzAv
MzEzNzMwMmUzMjM0MzcyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9yYwDQYJKoZIhvcNAQELBQADggEBABtyFgAi
O9NRqIVGVmVpD+is6vqCudgCxDuQr2LAP5C3rW9ME2dRYVsLNzrCt77kY/gOyCkS
Phy2xcWRZExfICye5NBmVwgRld8CtECY/vGYrKUZGsYMAwXEY6DRYC6zGtm/u6Ds
FprNhVmVUH6B+ZBy9b8is2ND+pQ/wlQTL72f5bVqTKFiympn5EvALebT2CJCHrWT
caip9Zqjrdnc7LWktBo22RvhRoEFcVEdA/89NzgKuS4o9h88PJqh8KWK6L025cbQ
OAeFyY/O5a42J9e7BAJ4HfSz4qFSyZKuEImmkrSVT+Zg7trVMUtnJHjE/m74MY1o
rWftoSikTxw89yg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org