Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa
File:                     3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (raw, json)
Hash identifier:          sFK4Pq5+hRko4DIIi+H8LF3yKcGCN5jievwt12d8PNs=
Subject key identifier:   54:0C:62:87:0C:CA:DA:E7:C7:B9:70:A4:37:96:25:C0:B2:40:08:FA
Certificate issuer:       /CN=9820C6E503613C874E71459373B23F1FF20274DE
Certificate serial:       3D24399669D618F3E629153E4618045966A6ADAB
Authority key identifier: 98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa
Signing time:             Thu 22 Jun 2023 22:10:49 +0000
ROA not before:           Thu 22 Jun 2023 22:05:49 +0000
ROA not after:            Thu 20 Jun 2024 22:10:49 +0000
asID:                     264993
IP address blocks:        170.84.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:24:39:96:69:d6:18:f3:e6:29:15:3e:46:18:04:59:66:a6:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9820C6E503613C874E71459373B23F1FF20274DE
        Validity
            Not Before: Jun 22 22:05:49 2023 GMT
            Not After : Jun 20 22:10:49 2024 GMT
        Subject: CN=540C62870CCADAE7C7B970A4379625C0B24008FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:88:fa:de:7c:5d:74:72:2d:ab:b5:77:2b:
                    b4:2e:25:65:ed:6f:92:77:78:fa:0b:dd:2d:88:57:
                    99:80:7f:a9:e0:e9:00:ed:e5:7c:bb:04:25:b2:66:
                    61:1c:9d:a5:3b:01:bc:75:8e:61:45:cb:da:af:ca:
                    3f:46:25:3e:ab:83:77:ec:a6:66:9d:76:8f:ed:c3:
                    b7:fa:d1:d4:6b:1f:43:60:53:a1:b5:92:d2:96:60:
                    ab:2f:24:0d:d2:6a:a5:03:91:8b:6b:53:2d:61:d5:
                    ff:ff:03:1c:89:ce:90:01:69:86:f3:9d:cd:33:a5:
                    71:ae:16:01:5c:dd:e5:bd:4d:80:05:fd:41:e1:4c:
                    18:2b:ae:aa:ad:6d:2e:34:84:d6:67:b4:30:29:e3:
                    cd:dd:6a:64:5a:60:02:8e:79:fe:79:b5:02:c1:81:
                    6c:a1:a6:6e:98:55:49:1a:cb:92:0d:a9:59:b7:e4:
                    a1:9e:ff:68:49:1d:a5:0a:9e:70:74:28:2d:d3:7e:
                    04:32:af:90:55:0f:38:d2:8f:52:e5:c0:52:01:f9:
                    ec:34:17:01:58:00:39:c9:2e:c5:1e:aa:01:56:0c:
                    96:9d:cf:51:38:2e:04:ba:80:f9:7c:91:55:36:9d:
                    7d:30:b7:09:f0:ff:41:f4:95:74:70:ae:1e:b8:48:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:62:87:0C:CA:DA:E7:C7:B9:70:A4:37:96:25:C0:B2:40:08:FA
            X509v3 Authority Key Identifier:
                keyid:98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:44:ce:ca:2c:10:6f:aa:6c:e7:ed:6b:11:71:f5:ab:e0:d6:
         72:06:bc:f0:f6:ea:65:5f:79:5d:b4:71:b9:1c:d4:89:68:d3:
         e1:b0:d2:d7:ff:ab:7b:c6:4d:a9:b0:2e:4a:5b:24:c8:53:cd:
         97:3e:df:97:db:5d:2d:e6:7d:f9:67:41:59:bc:18:61:d2:62:
         9d:73:9d:bc:9e:d2:2b:30:37:12:83:12:fb:bb:d5:8c:1b:91:
         9c:fa:5c:df:66:09:66:a8:12:8b:c7:39:75:f0:22:65:a4:a1:
         c2:48:0e:6f:97:f4:9f:58:6b:86:8a:c3:e4:69:d5:01:10:04:
         b1:00:2b:ea:3d:65:41:f5:47:47:f4:5a:bc:55:99:31:43:4b:
         11:e3:e1:3c:a4:80:fd:f5:40:c6:4c:b7:bd:f1:db:95:db:03:
         a8:b8:cb:e3:9e:ee:f5:7e:a2:bf:f4:10:c3:52:db:ee:46:ad:
         2a:5a:19:b8:cd:13:8c:3b:4b:20:4a:50:71:9e:4e:59:c7:65:
         dc:ca:70:a6:15:fb:d9:a0:24:cd:82:3a:53:95:56:d7:6a:33:
         a1:22:96:f5:8a:9b:1b:bc:52:1d:9c:e9:36:af:be:ae:16:cf:
         16:da:a0:0d:c0:d1:86:db:07:a9:2e:eb:60:c4:61:88:9f:d0:
         4d:b3:f5:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPSQ5lmnWGPPmKRU+RhgEWWamraswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgyMEM2RTUwMzYxM0M4NzRFNzE0NTkzNzNCMjNGMUZG
MjAyNzRERTAeFw0yMzA2MjIyMjA1NDlaFw0yNDA2MjAyMjEwNDlaMDMxMTAvBgNV
BAMTKDU0MEM2Mjg3MENDQURBRTdDN0I5NzBBNDM3OTYyNUMwQjI0MDA4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKIj63nxddHItq7V3K7QuJWXt
b5J3ePoL3S2IV5mAf6ng6QDt5Xy7BCWyZmEcnaU7Abx1jmFFy9qvyj9GJT6rg3fs
pmaddo/tw7f60dRrH0NgU6G1ktKWYKsvJA3SaqUDkYtrUy1h1f//AxyJzpABaYbz
nc0zpXGuFgFc3eW9TYAF/UHhTBgrrqqtbS40hNZntDAp483damRaYAKOef55tQLB
gWyhpm6YVUkay5INqVm35KGe/2hJHaUKnnB0KC3TfgQyr5BVDzjSj1LlwFIB+ew0
FwFYADnJLsUeqgFWDJadz1E4LgS6gPl8kVU2nX0wtwnw/0H0lXRwrh64SM+JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVAxihwzK2ufHuXCkN5YlwLJACPowHwYDVR0j
BBgwFoAUmCDG5QNhPIdOcUWTc7I/H/ICdN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDJBREhMMkJRYnhGUXpINXBxdXFCS0R2b2ZiNFZNWWpaVE5EZWdRclZE
Y3cvMC85ODIwQzZFNTAzNjEzQzg3NEU3MTQ1OTM3M0IyM0YxRkYyMDI3NERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4MjBDNkU1MDM2MTNDODc0
RTcxNDU5MzczQjIzRjFGRjIwMjc0REUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyQURITDJCUWJ4RlF6SDVwcXVxQktEdm9mYjRWTVlqWlRORGVnUXJWRGN3LzAv
MzEzNzMwMmUzODM0MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVHQwDQYJKoZIhvcNAQELBQADggEBAJ1Ezsos
EG+qbOftaxFx9avg1nIGvPD26mVfeV20cbkc1Ilo0+Gw0tf/q3vGTamwLkpbJMhT
zZc+35fbXS3mfflnQVm8GGHSYp1znbye0iswNxKDEvu71YwbkZz6XN9mCWaoEovH
OXXwImWkocJIDm+X9J9Ya4aKw+Rp1QEQBLEAK+o9ZUH1R0f0WrxVmTFDSxHj4Tyk
gP31QMZMt73x25XbA6i4y+Oe7vV+or/0EMNS2+5GrSpaGbjNE4w7SyBKUHGeTlnH
ZdzKcKYV+9mgJM2COlOVVtdqM6EilvWKmxu8Uh2c6Tavvq4WzxbaoA3A0YbbB6ku
62DEYYif0E2z9dY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org