Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33392e302f32342d3234203d3e20323634353234.roa
File:                     3137302e3234372e33392e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          kepf64mpGG5Pedhn6s3LDrLiBBXnCY18CX1FH4M45Vs=
Subject key identifier:   90:12:0A:8A:11:C6:4F:4D:29:FE:77:71:34:4B:82:2B:57:50:C4:59
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       75812C6184B5E1AB47DB49E2105EF1A1A6CBE691
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33392e302f32342d3234203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        170.247.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:81:2c:61:84:b5:e1:ab:47:db:49:e2:10:5e:f1:a1:a6:cb:e6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=90120A8A11C64F4D29FE7771344B822B5750C459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a8:31:a6:cf:2e:b4:f0:97:79:6e:b6:94:58:
                    68:44:48:92:49:5e:84:da:bf:c1:80:06:94:8e:11:
                    7a:79:c8:e8:cc:28:6c:a8:3a:69:06:64:01:ce:47:
                    63:1e:62:d4:f9:a4:b2:e2:c5:f2:2c:7b:c7:ad:49:
                    e2:c7:45:90:f5:49:3a:e4:97:fa:85:fa:f9:ae:99:
                    a9:b5:cc:6a:48:ae:eb:88:00:ca:8f:5c:a3:c3:7a:
                    ed:4e:db:81:38:5d:e5:b6:ec:4b:58:f0:a9:9e:4d:
                    63:84:dc:ce:b5:0e:80:92:af:20:6c:c5:1e:bd:0e:
                    51:3c:d0:92:82:6d:6d:40:ae:d7:7b:9c:94:e7:d0:
                    10:89:fc:a8:14:73:cf:b2:97:a0:15:17:df:4a:a1:
                    75:b8:b2:fd:bd:bd:2d:97:d2:1d:d9:3c:1b:62:92:
                    a2:30:c8:9f:6c:55:e3:48:6b:02:44:00:f2:d6:81:
                    2a:fa:34:ed:f1:99:4e:c7:a6:60:79:9b:d3:26:41:
                    5e:e3:f2:96:3e:07:aa:cf:f2:11:46:f7:73:e1:10:
                    fe:86:c3:3c:8a:00:a4:21:32:1e:84:6e:52:81:62:
                    c3:5f:2d:d9:8c:f3:70:59:33:0b:08:65:23:48:6f:
                    4b:3a:d9:19:95:7a:da:24:84:93:6b:3f:02:35:1f:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:12:0A:8A:11:C6:4F:4D:29:FE:77:71:34:4B:82:2B:57:50:C4:59
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33392e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:0e:a7:a3:79:1f:6c:68:a9:21:c6:15:12:99:a5:52:08:
         26:04:56:dd:71:58:cc:bc:7b:80:ee:5b:74:11:0b:72:a2:71:
         e2:cb:95:de:16:66:43:b2:a9:a7:ee:2f:83:03:46:96:bb:81:
         b5:60:0c:dc:0c:97:be:91:4d:55:8c:97:c9:8f:e0:10:3f:8e:
         ef:34:49:eb:3c:67:f5:29:c6:1e:56:49:d3:7a:a8:dd:60:10:
         21:52:b5:6f:a0:12:5f:d2:9a:e2:b8:6f:cf:98:46:63:c0:43:
         21:e9:6b:6b:a0:35:8f:f7:42:13:a6:01:c5:c9:be:28:24:3f:
         bf:16:29:f6:9a:b1:1b:5d:62:17:eb:3a:29:53:df:94:68:fa:
         e2:20:ea:71:fc:4f:88:27:e9:7c:67:34:8a:13:f3:46:4d:42:
         c8:80:75:00:c5:3a:38:50:f9:34:71:48:1c:90:e6:3f:92:61:
         be:ea:76:db:f3:4d:f9:e4:42:07:db:52:32:fb:77:c7:5a:ea:
         62:35:5d:01:aa:e7:1a:21:e7:50:94:c6:c0:67:f1:cb:9a:85:
         52:36:25:cc:cc:cf:f2:8e:ee:9d:5a:97:2f:1f:61:dd:c1:4f:
         bc:6b:e7:5a:5b:53:06:b8:ff:02:3c:7f:21:c3:be:9c:de:87:
         36:9f:eb:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdYEsYYS14atH20niEF7xoabL5pEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5NkI5NkExRENCMjA1RjI3NkJGQ0VGM0Y2NUIyMzMz
MjVEMDc4ODAeFw0yNDAzMDQxOTIxMTJaFw0yNTAzMDMxOTI2MTJaMDMxMTAvBgNV
BAMTKDkwMTIwQThBMTFDNjRGNEQyOUZFNzc3MTM0NEI4MjJCNTc1MEM0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqqDGmzy608Jd5braUWGhESJJJ
XoTav8GABpSOEXp5yOjMKGyoOmkGZAHOR2MeYtT5pLLixfIse8etSeLHRZD1STrk
l/qF+vmumam1zGpIruuIAMqPXKPDeu1O24E4XeW27EtY8KmeTWOE3M61DoCSryBs
xR69DlE80JKCbW1Artd7nJTn0BCJ/KgUc8+yl6AVF99KoXW4sv29vS2X0h3ZPBti
kqIwyJ9sVeNIawJEAPLWgSr6NO3xmU7HpmB5m9MmQV7j8pY+B6rP8hFG93PhEP6G
wzyKAKQhMh6EblKBYsNfLdmM83BZMwsIZSNIb0s62RmVetokhJNrPwI1H5OjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkBIKihHGT00p/ndxNEuCK1dQxFkwHwYDVR0j
BBgwFoAU1Za5ah3LIF8na/zvP2WyMzJdB4gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FEZkNocGRhRHQ2bkV5NE5yTHJ5aU1lZ0RCRG5KV0d5ZDk4dHBWU0xo
TDgvMC9ENTk2Qjk2QTFEQ0IyMDVGMjc2QkZDRUYzRjY1QjIzMzMyNUQwNzg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1OTZCOTZBMURDQjIwNUYy
NzZCRkNFRjNGNjVCMjMzMzI1RDA3ODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBRGZDaHBkYUR0Nm5FeTROckxyeWlNZWdEQkRuSldHeWQ5OHRwVlNMaEw4LzAv
MzEzNzMwMmUzMjM0MzcyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9ycwDQYJKoZIhvcNAQELBQADggEBAG3ADqej
eR9saKkhxhUSmaVSCCYEVt1xWMy8e4DuW3QRC3KiceLLld4WZkOyqafuL4MDRpa7
gbVgDNwMl76RTVWMl8mP4BA/ju80Ses8Z/Upxh5WSdN6qN1gECFStW+gEl/SmuK4
b8+YRmPAQyHpa2ugNY/3QhOmAcXJvigkP78WKfaasRtdYhfrOilT35Ro+uIg6nH8
T4gn6XxnNIoT80ZNQsiAdQDFOjhQ+TRxSByQ5j+SYb7qdtvzTfnkQgfbUjL7d8da
6mI1XQGq5xoh51CUxsBn8cuahVI2JczMz/KO7p1aly8fYd3BT7xr51pbUwa4/wI8
fyHDvpzehzaf680=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org