Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135372e302f32342d3234203d3e20323634393938.roa
File:                     3137302e38342e3135372e302f32342d3234203d3e20323634393938.roa (raw, json)
Hash identifier:          A3bpuVwTdg7k3U5KnCQZhT0KOUbZun3mvHWlBw0tDrQ=
Subject key identifier:   8C:75:AE:1B:5F:5E:0A:95:28:F5:5F:44:F4:0C:07:23:F8:53:F9:0D
Certificate issuer:       /CN=BF74D0DF34465209B429D590F319EC137C0F9331
Certificate serial:       5B2DF666657996CED6DF07521CCDD6BABED6AF56
Authority key identifier: BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135372e302f32342d3234203d3e20323634393938.roa
Signing time:             Thu 11 Jan 2024 17:44:50 +0000
ROA not before:           Thu 11 Jan 2024 17:39:50 +0000
ROA not after:            Thu 09 Jan 2025 17:44:50 +0000
asID:                     264998
IP address blocks:        170.84.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2d:f6:66:65:79:96:ce:d6:df:07:52:1c:cd:d6:ba:be:d6:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF74D0DF34465209B429D590F319EC137C0F9331
        Validity
            Not Before: Jan 11 17:39:50 2024 GMT
            Not After : Jan  9 17:44:50 2025 GMT
        Subject: CN=8C75AE1B5F5E0A9528F55F44F40C0723F853F90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:74:99:8a:7f:5d:51:7d:f4:c0:08:cc:60:
                    69:23:f0:c9:da:48:30:4e:67:3a:e9:74:6f:9b:23:
                    05:21:f3:5d:e3:20:8e:a1:12:7b:b3:9c:4c:90:25:
                    60:03:59:06:b2:c0:c3:2e:91:f5:36:0b:2d:78:c6:
                    c3:9c:a1:44:3c:74:10:66:ae:cd:01:e0:0b:bf:88:
                    1a:e3:bb:06:fc:b6:98:02:b9:9b:77:1a:7f:a0:6d:
                    87:d1:41:d5:da:12:a1:a7:33:c7:04:43:dd:e5:1c:
                    32:19:31:24:a0:aa:60:a0:88:dc:b4:6b:b2:2d:0c:
                    cf:b0:0d:29:e2:31:92:00:e9:94:01:1f:41:1b:d0:
                    bd:72:e7:e3:20:fb:ad:b2:63:fe:37:94:5c:4b:3c:
                    a9:61:06:eb:1a:c1:1b:06:7f:54:f7:bc:c1:70:9a:
                    4a:19:3e:3d:57:07:3a:cc:3a:41:d9:2a:c7:75:0a:
                    e7:1f:70:ee:f8:af:c6:b3:62:0e:8d:26:da:b8:92:
                    2e:e5:0a:ca:33:d2:2f:89:75:67:97:fd:cb:38:1e:
                    45:9f:a1:b1:13:f0:52:60:93:49:b3:59:37:3a:4d:
                    18:b5:c8:8b:78:d2:26:9f:db:0e:8b:7e:04:2c:d1:
                    1d:16:90:62:32:8c:28:d7:f8:ae:88:5c:b9:9b:85:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:AE:1B:5F:5E:0A:95:28:F5:5F:44:F4:0C:07:23:F8:53:F9:0D
            X509v3 Authority Key Identifier:
                keyid:BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135372e302f32342d3234203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:94:07:65:03:a6:8e:9a:0a:97:17:15:ed:3e:4e:26:fb:7d:
         2e:eb:35:4c:14:01:78:7f:a1:a5:ea:9c:ff:57:97:25:b6:6a:
         72:43:3d:27:26:8d:ca:9a:07:08:d6:84:d8:f6:a0:2b:e4:75:
         9f:01:83:68:71:78:aa:f8:67:56:27:32:f8:01:85:07:e2:80:
         9b:3e:e3:55:ba:4b:f8:be:9f:27:8f:5f:95:e4:5e:23:04:ce:
         70:88:62:6a:6a:88:23:22:2c:3a:15:fb:68:56:8d:59:b6:d3:
         c8:af:ad:64:0e:56:52:73:91:11:ae:bd:21:61:eb:ae:98:68:
         76:97:f1:df:48:58:fc:b3:0a:ed:25:d8:69:1b:4b:1d:93:d5:
         e7:bf:da:fd:10:1b:69:39:7e:29:39:b0:57:a2:30:1b:71:87:
         9d:55:e1:ef:5b:04:ae:e3:53:be:24:09:c4:22:80:f5:25:b3:
         e6:62:2d:8c:9c:7d:e9:97:09:37:88:6d:f3:8a:bf:88:b1:40:
         c5:94:17:f7:bb:4d:d2:77:80:ac:83:a6:26:dc:c7:1c:92:91:
         53:f3:4c:c6:4a:f8:0a:19:a2:d3:20:ed:ae:0e:f4:ce:b8:7a:
         09:6e:02:c2:f6:e1:49:9e:07:a4:16:51:fe:3e:e0:65:e9:15:
         3c:c1:0b:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWy32ZmV5ls7W3wdSHM3Wur7Wr1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3NEQwREYzNDQ2NTIwOUI0MjlENTkwRjMxOUVDMTM3
QzBGOTMzMTAeFw0yNDAxMTExNzM5NTBaFw0yNTAxMDkxNzQ0NTBaMDMxMTAvBgNV
BAMTKDhDNzVBRTFCNUY1RTBBOTUyOEY1NUY0NEY0MEMwNzIzRjg1M0Y5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrunSZin9dUX30wAjMYGkj8Mna
SDBOZzrpdG+bIwUh813jII6hEnuznEyQJWADWQaywMMukfU2Cy14xsOcoUQ8dBBm
rs0B4Au/iBrjuwb8tpgCuZt3Gn+gbYfRQdXaEqGnM8cEQ93lHDIZMSSgqmCgiNy0
a7ItDM+wDSniMZIA6ZQBH0Eb0L1y5+Mg+62yY/43lFxLPKlhBusawRsGf1T3vMFw
mkoZPj1XBzrMOkHZKsd1CucfcO74r8azYg6NJtq4ki7lCsoz0i+JdWeX/cs4HkWf
obET8FJgk0mzWTc6TRi1yIt40iaf2w6LfgQs0R0WkGIyjCjX+K6IXLmbhWE1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjHWuG19eCpUo9V9E9AwHI/hT+Q0wHwYDVR0j
BBgwFoAUv3TQ3zRGUgm0KdWQ8xnsE3wPkzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMC9CRjc0RDBERjM0NDY1MjA5QjQyOUQ1OTBGMzE5RUMxMzdDMEY5MzMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNzREMERGMzQ0NjUyMDlC
NDI5RDU5MEYzMTlFQzEzN0MwRjkzMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzAv
MzEzNzMwMmUzODM0MmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVJ0wDQYJKoZIhvcNAQELBQADggEBAHeUB2UD
po6aCpcXFe0+Tib7fS7rNUwUAXh/oaXqnP9XlyW2anJDPScmjcqaBwjWhNj2oCvk
dZ8Bg2hxeKr4Z1YnMvgBhQfigJs+41W6S/i+nyePX5XkXiMEznCIYmpqiCMiLDoV
+2hWjVm208ivrWQOVlJzkRGuvSFh666YaHaX8d9IWPyzCu0l2GkbSx2T1ee/2v0Q
G2k5fik5sFeiMBtxh51V4e9bBK7jU74kCcQigPUls+ZiLYycfemXCTeIbfOKv4ix
QMWUF/e7TdJ3gKyDpibcxxySkVPzTMZK+AoZotMg7a4O9M64egluAsL24UmeB6QW
Uf4+4GXpFTzBC14=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org