Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32332d3233203d3e20323632353136.roa
File:                     3137302e38302e36342e302f32332d3233203d3e20323632353136.roa (raw, json)
Hash identifier:          GhAruvIrPxkWjN7hIt+DzwFpOH8EGt3vHl0zxMoUYmE=
Subject key identifier:   43:CF:0C:9D:F1:FD:03:D1:72:F6:20:71:78:19:34:81:D6:9A:8C:C6
Certificate issuer:       /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial:       37E4A5AE836413837BA3AE97E846ABCCFDEB764B
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32332d3233203d3e20323632353136.roa
Signing time:             Fri 10 Mar 2023 01:20:01 +0000
ROA not before:           Fri 10 Mar 2023 01:15:01 +0000
ROA not after:            Fri 08 Mar 2024 01:20:01 +0000
asID:                     262516
IP address blocks:        170.80.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e4:a5:ae:83:64:13:83:7b:a3:ae:97:e8:46:ab:cc:fd:eb:76:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Validity
            Not Before: Mar 10 01:15:01 2023 GMT
            Not After : Mar  8 01:20:01 2024 GMT
        Subject: CN=43CF0C9DF1FD03D172F6207178193481D69A8CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:d9:81:51:f9:a2:87:28:85:2d:fe:7b:46:
                    07:fe:33:f2:c1:2c:a3:41:38:df:b1:cd:6c:9a:e7:
                    23:6f:26:ec:7a:e4:97:62:3c:80:50:f0:e8:d9:cd:
                    0c:8a:01:c1:0a:11:31:07:74:21:8f:91:ec:92:fb:
                    b8:01:d8:8d:b6:57:af:e8:4f:02:e8:97:36:37:1a:
                    89:59:d5:6b:39:b3:47:77:61:5a:17:14:b8:eb:e8:
                    b2:07:60:67:3e:d2:6a:fd:3a:1d:40:4b:30:b0:0a:
                    58:39:d3:8a:8c:b4:bd:57:91:f1:af:5c:49:ff:57:
                    3f:9c:4e:4e:29:6f:77:56:d7:b7:45:92:9f:ea:e2:
                    5d:a7:d4:a4:6e:d7:3f:58:51:9f:63:87:da:5c:74:
                    1d:ca:9c:3a:ea:98:d6:84:30:5c:92:75:0f:3c:60:
                    ae:f6:35:f1:4c:dd:5a:38:50:4a:52:5a:a1:50:99:
                    49:95:1b:bb:f0:b3:20:d1:23:27:aa:b0:14:d1:33:
                    2f:98:1d:32:ba:6d:12:f9:22:ae:96:b8:cd:b7:45:
                    9a:30:68:c5:63:f4:73:34:14:a3:5e:ef:85:8a:89:
                    e7:16:07:e3:9b:1d:62:47:e4:94:ea:20:06:84:4f:
                    95:39:9e:d5:8f:b2:25:3b:d0:70:bd:2a:5c:f8:ef:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CF:0C:9D:F1:FD:03:D1:72:F6:20:71:78:19:34:81:D6:9A:8C:C6
            X509v3 Authority Key Identifier:
                keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32332d3233203d3e20323632353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:90:96:06:a4:1d:34:50:8a:36:b6:dc:12:a0:4f:fe:1e:
         e4:bb:89:11:42:00:3f:9a:cd:fc:70:35:1a:7e:b9:9c:13:6a:
         fe:a5:a7:06:eb:f9:45:5f:7d:1e:72:63:cd:f1:f4:d3:d6:4e:
         14:2e:e0:9d:e4:9a:8c:10:f0:84:33:89:e5:f9:44:ee:80:1f:
         93:32:2e:52:1b:c1:37:1d:df:1f:dc:2b:36:c3:2a:a3:56:06:
         d5:fa:8d:89:86:5d:41:a4:90:b6:e1:45:ed:8a:0f:9d:30:ec:
         b9:09:d7:de:ac:08:e3:ad:ff:46:78:4e:77:0e:0d:f7:57:c6:
         c9:1c:4c:0c:a4:63:68:80:db:8a:80:a0:ee:45:cf:0f:da:c7:
         19:4e:6a:6f:2f:66:84:57:db:76:50:99:51:f4:77:5b:a6:86:
         c5:64:bd:64:79:89:a6:e7:e0:9d:de:ac:28:70:c5:0e:1d:72:
         12:f8:48:04:8f:b5:1f:09:68:1b:2b:9c:7e:d4:62:cf:28:df:
         e4:a3:ea:4b:65:aa:8e:52:1f:ff:ba:a8:d4:0d:19:b3:f2:d2:
         8d:c8:89:90:8f:99:51:a4:8b:aa:af:17:0c:7e:0a:b3:d1:a3:
         bb:91:17:c8:b1:ea:e6:44:66:3c:ed:0a:ad:14:73:f0:c2:2a:
         7a:82:3a:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN+SlroNkE4N7o66X6EarzP3rdkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y5NjZEOTk1RTBFMDU5NTcwRDRCNTcwMTYwNzJBRkM4
QjQ5NEVEMDAeFw0yMzAzMTAwMTE1MDFaFw0yNDAzMDgwMTIwMDFaMDMxMTAvBgNV
BAMTKDQzQ0YwQzlERjFGRDAzRDE3MkY2MjA3MTc4MTkzNDgxRDY5QThDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpdmBUfmihyiFLf57Rgf+M/LB
LKNBON+xzWya5yNvJux65JdiPIBQ8OjZzQyKAcEKETEHdCGPkeyS+7gB2I22V6/o
TwLolzY3GolZ1Ws5s0d3YVoXFLjr6LIHYGc+0mr9Oh1ASzCwClg504qMtL1XkfGv
XEn/Vz+cTk4pb3dW17dFkp/q4l2n1KRu1z9YUZ9jh9pcdB3KnDrqmNaEMFySdQ88
YK72NfFM3Vo4UEpSWqFQmUmVG7vwsyDRIyeqsBTRMy+YHTK6bRL5Iq6WuM23RZow
aMVj9HM0FKNe74WKiecWB+ObHWJH5JTqIAaET5U5ntWPsiU70HC9Klz476e5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ88MnfH9A9Fy9iBxeBk0gdaajMYwHwYDVR0j
BBgwFoAUz5ZtmV4OBZVw1LVwFgcq/ItJTtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR01UUmpGZlpIR2F2VXpLWHVyWlU3TnFuUXBjSEhkSG9YVkNDNm43U0RU
aUIvMC9DRjk2NkQ5OTVFMEUwNTk1NzBENEI1NzAxNjA3MkFGQzhCNDk0RUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGOTY2RDk5NUUwRTA1OTU3
MEQ0QjU3MDE2MDcyQUZDOEI0OTRFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNVFJqRmZaSEdhdlV6S1h1clpVN05xblFwY0hIZEhvWFZDQzZuN1NEVGlCLzAv
MzEzNzMwMmUzODMwMmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzUzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlBAMA0GCSqGSIb3DQEBCwUAA4IBAQBvXZCWBqQd
NFCKNrbcEqBP/h7ku4kRQgA/ms38cDUafrmcE2r+pacG6/lFX30ecmPN8fTT1k4U
LuCd5JqMEPCEM4nl+UTugB+TMi5SG8E3Hd8f3Cs2wyqjVgbV+o2Jhl1BpJC24UXt
ig+dMOy5CdferAjjrf9GeE53Dg33V8bJHEwMpGNogNuKgKDuRc8P2scZTmpvL2aE
V9t2UJlR9HdbpobFZL1keYmm5+Cd3qwocMUOHXIS+EgEj7UfCWgbK5x+1GLPKN/k
o+pLZaqOUh//uqjUDRmz8tKNyImQj5lRpIuqrxcMfgqz0aO7kRfIsermRGY87Qqt
FHPwwip6gjp6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org