Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa
File:                     3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          gLpAN4EP0OkN0V3iwRk1bAhkgCEBvPKXqI/+YfhGdYc=
Subject key identifier:   D2:E5:64:81:FA:27:71:55:6F:4B:32:1A:EB:EC:23:DA:F6:A5:9B:0F
Certificate issuer:       /CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
Certificate serial:       1C36E7B9497076675E4696A8B419AA7E7BF732B6
Authority key identifier: 00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa
Signing time:             Thu 21 Sep 2023 13:38:00 +0000
ROA not before:           Thu 21 Sep 2023 13:33:00 +0000
ROA not after:            Thu 19 Sep 2024 13:38:00 +0000
asID:                     263470
IP address blocks:        170.83.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:36:e7:b9:49:70:76:67:5e:46:96:a8:b4:19:aa:7e:7b:f7:32:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
        Validity
            Not Before: Sep 21 13:33:00 2023 GMT
            Not After : Sep 19 13:38:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:13:b0:b9:e1:f5:f8:64:01:6a:82:03:c4:
                    0d:cb:80:5d:32:9f:cd:55:d4:bb:02:0a:fc:1c:44:
                    6f:aa:13:27:26:34:d8:d0:08:c8:6b:c1:95:b9:79:
                    e1:df:08:60:9a:a7:01:45:e2:fa:f9:ba:6d:ee:e2:
                    30:da:5a:bc:af:72:50:12:7f:33:4e:28:2e:59:9a:
                    c3:8a:e1:f4:a2:99:6b:f2:13:47:af:b4:8e:c5:19:
                    73:c3:8c:ff:4e:55:1d:6b:11:fc:0f:67:ab:2f:7d:
                    69:0c:46:c2:46:19:42:6d:8b:a0:5c:3a:5b:43:58:
                    c0:26:53:f6:b0:d7:c9:a1:d4:41:32:73:62:f7:5d:
                    4d:39:5f:24:09:4f:4d:ce:c3:4d:6f:04:7e:9a:31:
                    f3:a4:7b:2f:1d:bb:89:89:20:40:25:85:c9:53:2d:
                    71:9e:dc:59:0b:92:05:96:3d:02:db:70:82:00:0e:
                    d2:70:cd:3f:1b:9a:0b:10:9b:94:60:a2:2d:76:bd:
                    11:19:b0:98:49:cd:96:c1:64:9e:07:ce:14:8b:55:
                    1a:79:68:b1:82:23:74:a8:60:7b:5f:4c:65:a9:a0:
                    44:b5:26:ad:d3:fd:b7:c3:e4:ba:08:9a:86:0b:4c:
                    e5:33:70:bb:64:c7:94:13:ff:03:fa:15:e0:36:5e:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:64:81:FA:27:71:55:6F:4B:32:1A:EB:EC:23:DA:F6:A5:9B:0F
            X509v3 Authority Key Identifier:
                keyid:00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:44:4e:73:c3:a2:bd:44:12:c5:8b:a3:0d:ac:29:c7:63:e7:
         97:a3:7d:ca:62:5a:58:13:97:9a:e2:01:a5:1d:60:38:ff:9d:
         be:43:77:cf:36:ec:c1:4b:36:86:8e:91:92:e4:8f:6c:b5:74:
         66:9b:dc:d0:d0:43:f2:7b:ce:bf:25:54:60:ed:79:1c:e9:2b:
         51:63:58:55:3c:af:df:5b:7f:a8:50:54:18:67:c6:e2:6c:26:
         2e:98:d0:87:a5:68:f2:bd:77:d6:d0:5d:6d:83:e8:e9:16:78:
         bf:6c:98:57:cf:54:60:d2:d9:bb:95:1a:3d:de:11:40:73:0a:
         de:3f:d7:85:df:c6:90:6a:1a:25:86:cf:8a:27:d9:de:9f:51:
         2a:bb:54:cd:38:44:02:c3:37:cd:36:9f:ad:af:41:a4:b2:c6:
         12:fe:54:3b:1f:33:ea:b1:72:e4:f0:44:81:b7:96:39:e4:d0:
         50:ae:4c:66:c0:27:b5:55:54:5a:9e:22:51:4d:8e:99:e0:9e:
         65:fa:a3:3b:62:a8:f5:6b:3a:b9:97:7e:bb:ce:47:48:b3:f8:
         b8:b5:84:6b:03:19:81:76:11:35:b1:6c:cb:34:ad:aa:8f:c4:
         4c:1f:90:98:2f:14:0c:65:1c:c8:5b:f0:f1:ad:00:49:f9:a5:
         e2:0f:cd:64
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHDbnuUlwdmdeRpaotBmqfnv3MrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzMUVFNUFGQjczM0YzOUFFRDA1ODVEQjAzRjk3RDdD
OEYzNEE0RDAeFw0yMzA5MjExMzMzMDBaFw0yNDA5MTkxMzM4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdBOTEzQjBCOUUxRjVGODY0
MDE2QTgyMDNDNDBEQ0I4MDVEMzI5RkNENTVENEJCMDIwQUZDMUM0NDZGQUExMzI3
MjYzNEQ4RDAwOEM4NkJDMTk1Qjk3OUUxREYwODYwOUFBNzAxNDVFMkZBRjlCQTZE
RUVFMjMwREE1QUJDQUY3MjUwMTI3RjMzNEUyODJFNTk5QUMzOEFFMUY0QTI5OTZC
RjIxMzQ3QUZCNDhFQzUxOTczQzM4Q0ZGNEU1NTFENkIxMUZDMEY2N0FCMkY3RDY5
MEM0NkMyNDYxOTQyNkQ4QkEwNUMzQTVCNDM1OEMwMjY1M0Y2QjBEN0M5QTFENDQx
MzI3MzYyRjc1RDREMzk1RjI0MDk0RjREQ0VDMzRENkYwNDdFOUEzMUYzQTQ3QjJG
MURCQjg5ODkyMDQwMjU4NUM5NTMyRDcxOUVEQzU5MEI5MjA1OTYzRDAyREI3MDgy
MDAwRUQyNzBDRDNGMUI5QTBCMTA5Qjk0NjBBMjJENzZCRDExMTlCMDk4NDlDRDk2
QzE2NDlFMDdDRTE0OEI1NTFBNzk2OEIxODIyMzc0QTg2MDdCNUY0QzY1QTlBMDQ0
QjUyNkFERDNGREI3QzNFNEJBMDg5QTg2MEI0Q0U1MzM3MEJCNjRDNzk0MTNGRjAz
RkExNUUwMzY1RTIzN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt6kTsLnh9fhkAWqCA8QNy4BdMp/NVdS7Agr8HERvqhMnJjTY0AjI
a8GVuXnh3whgmqcBReL6+bpt7uIw2lq8r3JQEn8zTiguWZrDiuH0oplr8hNHr7SO
xRlzw4z/TlUdaxH8D2erL31pDEbCRhlCbYugXDpbQ1jAJlP2sNfJodRBMnNi911N
OV8kCU9NzsNNbwR+mjHzpHsvHbuJiSBAJYXJUy1xntxZC5IFlj0C23CCAA7ScM0/
G5oLEJuUYKItdr0RGbCYSc2WwWSeB84Ui1UaeWixgiN0qGB7X0xlqaBEtSat0/23
w+S6CJqGC0zlM3C7ZMeUE/8D+hXgNl4jewIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNLlZIH6J3FVb0syGuvsI9r2pZsPMB8GA1UdIwQYMBaAFAAx7lr7cz85rtBYXbA/
l9fI80pNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d4UzFIa2JNVUo3NEhx
YWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAvMDAzMUVFNUFGQjczM0Yz
OUFFRDA1ODVEQjAzRjk3RDdDOEYzNEE0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMDMxRUU1QUZCNzMzRjM5QUVEMDU4NURCMDNGOTdEN0M4RjM0
QTRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HeFMxSGtiTVVKNzRIcWFmc2pi
S24zV3JSTHJuVW1NYjJhUGZEUTFHeDZQWS8wLzMxMzczMDJlMzgzMzJlMzIzMDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzQzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qlPIMA0GCSqGSIb3DQEBCwUAA4IBAQAYRE5zw6K9RBLFi6MNrCnHY+eXo33KYlpY
E5ea4gGlHWA4/52+Q3fPNuzBSzaGjpGS5I9stXRmm9zQ0EPye86/JVRg7Xkc6StR
Y1hVPK/fW3+oUFQYZ8bibCYumNCHpWjyvXfW0F1tg+jpFni/bJhXz1Rg0tm7lRo9
3hFAcwreP9eF38aQaholhs+KJ9nen1Equ1TNOEQCwzfNNp+tr0GkssYS/lQ7HzPq
sXLk8ESBt5Y55NBQrkxmwCe1VVRaniJRTY6Z4J5l+qM7Yqj1azq5l367zkdIs/i4
tYRrAxmBdhE1sWzLNK2qj8RMH5CYLxQMZRzIW/DxrQBJ+aXiD81k
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org