Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa
File:                     3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (raw, json)
Hash identifier:          VudybU558tGmmjgiPy5di1xM00TChWXT9F3nYcMZsY4=
Subject key identifier:   F6:3C:30:58:6C:91:38:13:82:A8:14:F6:C5:0E:39:75:88:AA:0F:F7
Certificate issuer:       /CN=1477F1BD82C9178B38F3754FB5C414666133B78A
Certificate serial:       64E2F2FBCE13953AA6FFED08FFCDC99B75526972
Authority key identifier: 14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1477F1BD82C9178B38F3754FB5C414666133B78A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa
Signing time:             Tue 08 Nov 2022 14:46:13 +0000
ROA not before:           Tue 08 Nov 2022 14:41:13 +0000
ROA not after:            Tue 07 Nov 2023 14:46:13 +0000
asID:                     265050
IP address blocks:        170.150.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e2:f2:fb:ce:13:95:3a:a6:ff:ed:08:ff:cd:c9:9b:75:52:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1477F1BD82C9178B38F3754FB5C414666133B78A
        Validity
            Not Before: Nov  8 14:41:13 2022 GMT
            Not After : Nov  7 14:46:13 2023 GMT
        Subject: CN=F63C30586C91381382A814F6C50E397588AA0FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:06:a4:71:36:f8:6d:46:94:a7:8e:5c:03:
                    03:e0:40:06:b8:8f:d6:7d:81:f1:7c:dc:fc:21:4f:
                    c6:f9:19:09:81:61:bc:67:9b:17:00:68:b4:63:03:
                    6d:8c:c4:01:7c:fc:d6:94:5d:6a:aa:2a:ad:b7:98:
                    26:24:47:45:e0:cb:67:93:f5:84:3d:67:4c:9d:f0:
                    5a:ae:2c:4e:30:d6:28:5e:bb:41:d1:9b:eb:21:93:
                    f0:d9:3d:1f:79:8d:12:92:c7:cc:b8:87:2a:b4:a8:
                    08:95:6c:3a:73:bc:79:eb:b5:f0:d1:d6:fd:dc:a2:
                    ce:d5:65:19:56:e2:c9:29:f4:b2:d2:37:b0:32:d6:
                    54:e0:b7:bf:ff:56:64:b8:f7:c4:d7:04:37:3b:af:
                    7b:27:b8:74:0c:98:75:0c:ce:bf:b7:db:3a:0e:40:
                    30:91:35:2b:e1:c4:8a:2b:ac:fc:47:88:68:14:aa:
                    d8:24:0e:68:a0:ec:40:65:47:1b:f2:0c:74:f3:40:
                    3c:e1:ba:80:d7:9b:b8:db:54:7a:ab:34:7c:e5:97:
                    e4:17:45:4a:ae:43:b5:85:2b:f2:11:5f:8f:cd:d6:
                    c6:25:a7:a1:8b:33:48:a6:6d:a5:f4:ff:59:cf:c0:
                    c0:63:85:f5:07:2c:55:13:36:4f:8f:17:96:d3:4d:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:30:58:6C:91:38:13:82:A8:14:F6:C5:0E:39:75:88:AA:0F:F7
            X509v3 Authority Key Identifier:
                keyid:14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1477F1BD82C9178B38F3754FB5C414666133B78A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:40:ec:77:6b:ec:6a:5e:18:cc:7a:fc:e0:dd:2d:57:27:
         3f:e1:b5:90:20:b5:1b:4b:45:8b:9a:d9:fe:e1:7c:08:e6:b9:
         f6:db:3c:c9:8c:e2:2c:fb:86:38:0d:51:19:8b:98:c8:d3:13:
         d6:5d:0e:8a:bd:00:d0:55:a4:2b:2b:3a:37:57:66:f1:a3:b4:
         dd:79:d4:e0:79:9e:52:b8:d3:ec:33:31:06:33:20:44:15:57:
         c1:6d:cf:12:01:f7:2f:50:a1:11:6f:9d:b4:67:db:ab:5d:92:
         6a:ed:d7:59:f6:fd:dc:ba:18:d1:ff:ae:ec:9c:16:7f:06:6c:
         ca:50:f8:55:46:2e:76:df:68:8d:7d:96:c8:4e:e2:f9:ea:c5:
         69:77:7d:d9:87:5f:d8:bc:43:dd:7b:56:14:5f:21:a5:e5:c8:
         23:40:3d:21:7e:c3:76:63:68:18:49:fc:68:29:c2:b6:01:af:
         83:43:4e:a9:20:d9:ec:1a:27:a1:f3:ec:76:5a:2a:b5:3a:50:
         63:83:54:f0:00:d9:1d:1b:09:c2:77:5f:2c:0c:f1:c3:e9:8b:
         60:df:4a:1d:bf:52:f2:09:05:18:84:52:19:32:f3:b3:94:4b:
         9a:79:de:de:3f:99:45:71:e8:51:8d:38:40:a3:29:25:f5:1a:
         e9:1b:bb:83
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZOLy+84TlTqm/+0I/83Jm3VSaXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ3N0YxQkQ4MkM5MTc4QjM4RjM3NTRGQjVDNDE0NjY2
MTMzQjc4QTAeFw0yMjExMDgxNDQxMTNaFw0yMzExMDcxNDQ2MTNaMDMxMTAvBgNV
BAMTKEY2M0MzMDU4NkM5MTM4MTM4MkE4MTRGNkM1MEUzOTc1ODhBQTBGRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsgakcTb4bUaUp45cAwPgQAa4
j9Z9gfF83PwhT8b5GQmBYbxnmxcAaLRjA22MxAF8/NaUXWqqKq23mCYkR0Xgy2eT
9YQ9Z0yd8FquLE4w1iheu0HRm+shk/DZPR95jRKSx8y4hyq0qAiVbDpzvHnrtfDR
1v3cos7VZRlW4skp9LLSN7Ay1lTgt7//VmS498TXBDc7r3snuHQMmHUMzr+32zoO
QDCRNSvhxIorrPxHiGgUqtgkDmig7EBlRxvyDHTzQDzhuoDXm7jbVHqrNHzll+QX
RUquQ7WFK/IRX4/N1sYlp6GLM0imbaX0/1nPwMBjhfUHLFUTNk+PF5bTTSwFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9jwwWGyROBOCqBT2xQ45dYiqD/cwHwYDVR0j
BBgwFoAUFHfxvYLJF4s483VPtcQUZmEzt4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1
dDcvMC8xNDc3RjFCRDgyQzkxNzhCMzhGMzc1NEZCNUM0MTQ2NjYxMzNCNzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0NzdGMUJEODJDOTE3OEIz
OEYzNzU0RkI1QzQxNDY2NjEzM0I3OEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtOW5xVzIxRVZzZnliVUhTb2JXcExMQ0VHMUs0UEtTekp3UUYzcGRydXQ3LzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqW3DANBgkqhkiG9w0BAQsFAAOCAQEAYfVA
7Hdr7GpeGMx6/ODdLVcnP+G1kCC1G0tFi5rZ/uF8COa59ts8yYziLPuGOA1RGYuY
yNMT1l0Oir0A0FWkKys6N1dm8aO03XnU4HmeUrjT7DMxBjMgRBVXwW3PEgH3L1Ch
EW+dtGfbq12Sau3XWfb93LoY0f+u7JwWfwZsylD4VUYudt9ojX2WyE7i+erFaXd9
2Ydf2LxD3XtWFF8hpeXII0A9IX7DdmNoGEn8aCnCtgGvg0NOqSDZ7BonofPsdloq
tTpQY4NU8ADZHRsJwndfLAzxw+mLYN9KHb9S8gkFGIRSGTLzs5RLmnne3j+ZRXHo
UY04QKMpJfUa6Ru7gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org