Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa
File:                     3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa (raw, json)
Hash identifier:          aS7Ds4hADTyt8mbdzcoBUC+GQZbrM9OHncZI6COdqIM=
Subject key identifier:   A4:A3:EA:7C:F5:CE:1B:DD:7C:CB:C0:ED:F1:70:FF:43:04:56:46:A1
Certificate issuer:       /CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
Certificate serial:       45C3175023BC7726737AED99ACE095E793AFEE4E
Authority key identifier: 5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa
Signing time:             Mon 19 Feb 2024 17:40:56 +0000
ROA not before:           Mon 19 Feb 2024 17:35:56 +0000
ROA not after:            Mon 17 Feb 2025 17:40:56 +0000
asID:                     264998
IP address blocks:        170.84.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:17:50:23:bc:77:26:73:7a:ed:99:ac:e0:95:e7:93:af:ee:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
        Validity
            Not Before: Feb 19 17:35:56 2024 GMT
            Not After : Feb 17 17:40:56 2025 GMT
        Subject: CN=A4A3EA7CF5CE1BDD7CCBC0EDF170FF43045646A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:39:82:54:50:b0:35:32:2d:92:c2:cf:6e:
                    86:96:db:8c:58:ce:08:fa:4c:3b:67:bb:6f:c4:38:
                    1e:7a:eb:b5:0e:dc:70:d4:73:5b:e8:df:5a:93:01:
                    c3:73:fa:5f:f3:9b:2f:cd:23:c4:07:1c:3a:d7:9f:
                    20:d4:fb:de:7d:e7:33:4f:6c:fd:d8:06:31:56:63:
                    d1:a9:01:c0:0a:f3:9d:6f:d1:51:d6:68:ef:86:bf:
                    95:95:1b:a4:90:04:6a:24:ad:77:d3:b3:3f:b2:d1:
                    e5:2f:8f:6d:6f:b3:e5:56:03:cf:7a:76:41:a5:18:
                    b2:23:7d:0c:f4:e9:21:b5:ce:43:1c:76:d4:8c:23:
                    89:12:d7:9c:52:e6:e1:29:75:fa:f6:6f:a7:0c:c3:
                    3d:76:d5:26:51:19:74:3d:b4:eb:97:be:e6:4a:5b:
                    fd:3a:9f:8e:54:9b:d9:9a:a5:09:ba:c5:11:3c:cc:
                    ef:18:05:b0:1f:4d:f6:00:1a:0f:70:5e:ac:ba:93:
                    e3:78:d3:6f:cd:0d:bc:45:73:c3:3d:77:8d:f9:49:
                    5e:da:d3:b4:1c:58:62:a6:17:47:36:4a:f1:a9:94:
                    24:3d:76:7d:4d:3d:21:42:d3:6c:cf:c7:f1:8c:51:
                    ef:0b:dd:c9:ce:a2:e0:68:43:44:8b:4a:3a:10:09:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:EA:7C:F5:CE:1B:DD:7C:CB:C0:ED:F1:70:FF:43:04:56:46:A1
            X509v3 Authority Key Identifier:
                keyid:5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:db:a6:4e:76:b9:6e:d4:3e:fc:c8:d2:04:48:4c:19:52:
         3b:b5:bc:68:97:c7:26:bb:af:d3:34:fb:d8:3c:98:3b:fb:6b:
         77:77:9a:d2:61:8f:e7:0d:78:67:05:22:82:31:c4:d3:d2:62:
         da:22:5b:45:d9:13:1f:02:00:87:9e:b3:9e:00:27:0e:98:c3:
         d2:7a:cf:5f:eb:1f:13:1f:86:5e:96:2e:7e:22:a7:b0:e1:32:
         ed:5e:ee:83:a6:fe:b2:e7:cd:f8:6a:cc:07:a8:0b:d8:f0:f4:
         fe:ac:4d:fa:55:7c:9a:6e:5e:0f:fe:5e:99:19:6d:88:ae:87:
         a7:e8:14:63:cb:36:33:cb:5d:d9:4a:7b:59:1a:ac:12:f8:a2:
         4b:7f:fd:60:e5:ec:b4:63:4d:d8:28:d6:3d:cf:6c:85:b1:ec:
         5c:92:45:4d:70:32:26:59:26:d9:74:84:9f:ba:68:22:d8:34:
         68:7d:8e:ba:da:a1:43:86:75:02:b2:55:1c:49:54:89:fc:54:
         dd:ea:1b:cc:f5:ea:b2:7c:4e:db:d7:d2:4e:05:2c:95:ca:79:
         59:19:f5:f3:16:8e:be:00:6b:fc:e2:bc:8a:4a:44:1b:7c:a8:
         7b:2e:d7:f2:3f:b7:73:60:c2:ad:0b:83:5a:ce:4b:22:08:38:
         aa:da:79:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURcMXUCO8dyZzeu2ZrOCV55Ov7k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYxNEI5NjRFREMwQUI1QzJEODI2QzVCNzgyMjY4OEFC
QzQ1NzhCRjAeFw0yNDAyMTkxNzM1NTZaFw0yNTAyMTcxNzQwNTZaMDMxMTAvBgNV
BAMTKEE0QTNFQTdDRjVDRTFCREQ3Q0NCQzBFREYxNzBGRjQzMDQ1NjQ2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN0jmCVFCwNTItksLPboaW24xY
zgj6TDtnu2/EOB5667UO3HDUc1vo31qTAcNz+l/zmy/NI8QHHDrXnyDU+9595zNP
bP3YBjFWY9GpAcAK851v0VHWaO+Gv5WVG6SQBGokrXfTsz+y0eUvj21vs+VWA896
dkGlGLIjfQz06SG1zkMcdtSMI4kS15xS5uEpdfr2b6cMwz121SZRGXQ9tOuXvuZK
W/06n45Um9mapQm6xRE8zO8YBbAfTfYAGg9wXqy6k+N402/NDbxFc8M9d435SV7a
07QcWGKmF0c2SvGplCQ9dn1NPSFC02zPx/GMUe8L3cnOouBoQ0SLSjoQCUDfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpKPqfPXOG918y8Dt8XD/QwRWRqEwHwYDVR0j
BBgwFoAUXxS5ZO3Aq1wtgmxbeCJoirxFeL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMC81RjE0Qjk2NEVEQzBBQjVDMkQ4MjZDNUI3ODIyNjg4QUJDNDU3OEJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGMTRCOTY0RURDMEFCNUMy
RDgyNkM1Qjc4MjI2ODhBQkM0NTc4QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzAv
MzEzNzMwMmUzODM0MmUzMTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqVJ4wDQYJKoZIhvcNAQELBQADggEBAAEq26ZO
drlu1D78yNIESEwZUju1vGiXxya7r9M0+9g8mDv7a3d3mtJhj+cNeGcFIoIxxNPS
YtoiW0XZEx8CAIees54AJw6Yw9J6z1/rHxMfhl6WLn4ip7DhMu1e7oOm/rLnzfhq
zAeoC9jw9P6sTfpVfJpuXg/+XpkZbYiuh6foFGPLNjPLXdlKe1karBL4okt//WDl
7LRjTdgo1j3PbIWx7FySRU1wMiZZJtl0hJ+6aCLYNGh9jrraoUOGdQKyVRxJVIn8
VN3qG8z16rJ8TtvX0k4FLJXKeVkZ9fMWjr4Aa/zivIpKRBt8qHsu1/I/t3Ngwq0L
g1rOSyIIOKraeSw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org