Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
File:                     3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          vhpOtL+Wbw4NsXrBd1sNAOH6aHu+ymoCjzBNHlngAc8=
Subject key identifier:   FF:02:CC:E7:1B:8D:E4:76:A2:DF:BF:D8:68:99:2E:12:DD:DC:2B:08
Certificate issuer:       /CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
Certificate serial:       11CA96689AA734D79AF2612165F351A2AE1BDAC4
Authority key identifier: 17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
Signing time:             Wed 25 Oct 2023 17:38:32 +0000
ROA not before:           Wed 25 Oct 2023 17:33:32 +0000
ROA not after:            Wed 23 Oct 2024 17:38:32 +0000
asID:                     263049
IP address blocks:        170.84.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:96:68:9a:a7:34:d7:9a:f2:61:21:65:f3:51:a2:ae:1b:da:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
        Validity
            Not Before: Oct 25 17:33:32 2023 GMT
            Not After : Oct 23 17:38:32 2024 GMT
        Subject: CN=FF02CCE71B8DE476A2DFBFD868992E12DDDC2B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:15:fb:51:a3:db:3b:69:2d:43:9a:08:12:
                    53:5d:86:55:fc:70:c6:00:d6:33:8e:90:d3:20:12:
                    f6:d8:d3:3e:cc:0a:ff:0e:26:a6:67:06:a9:f0:8d:
                    f3:31:cf:2b:0a:c2:7a:7c:79:d1:e4:1f:bc:c8:b1:
                    17:6c:23:06:23:a0:85:7b:ea:7d:fc:b9:c7:8c:87:
                    ab:cf:83:b4:a7:78:3a:8e:55:fd:28:03:67:e4:f8:
                    52:bb:99:a4:89:ef:3a:45:39:a3:46:8c:73:a1:95:
                    a0:36:3a:09:68:2c:e0:73:5a:40:0d:12:48:08:96:
                    83:69:6e:83:78:fe:d2:0b:41:60:2e:7c:2e:b5:9d:
                    64:ea:69:19:6d:9f:af:10:78:db:e3:1d:62:70:42:
                    e6:a9:43:de:0a:fe:1a:1f:7c:27:a4:df:e5:78:02:
                    e4:02:eb:a8:c3:60:8a:51:94:a9:44:03:71:aa:0d:
                    9b:e1:ba:99:6a:7c:ce:fe:d7:6b:fb:6d:ec:37:29:
                    73:ce:c8:be:2b:83:c8:b9:f9:f5:f6:e3:1c:1f:c3:
                    d3:5e:ea:ab:cb:df:7d:a1:40:36:62:7d:a3:a7:db:
                    a2:2b:e0:86:fd:2b:9a:f1:04:9b:da:de:45:0e:e1:
                    98:7c:4e:73:38:72:08:03:44:58:6c:d1:35:e7:2f:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:02:CC:E7:1B:8D:E4:76:A2:DF:BF:D8:68:99:2E:12:DD:DC:2B:08
            X509v3 Authority Key Identifier:
                keyid:17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:31:9b:45:ef:94:8b:15:94:55:be:26:87:45:37:fd:81:f7:
         66:7e:64:62:cd:70:52:73:fb:20:66:66:b4:39:79:eb:bd:b4:
         49:7d:26:0c:84:5b:ec:ba:0f:25:28:2d:f3:41:ce:4a:84:80:
         cc:73:d5:6a:4d:74:3c:4c:1f:d1:52:d4:36:61:51:da:4e:40:
         64:42:a0:50:87:7a:02:0d:02:65:81:51:aa:63:d3:da:5e:f3:
         45:42:8f:63:4e:f9:6f:33:94:43:7b:74:d2:61:f2:8e:56:74:
         bd:c8:52:c9:25:86:af:46:be:d3:a6:7f:4e:2d:f6:7a:59:3d:
         18:60:ff:34:19:88:83:f9:22:d3:5d:a0:89:1a:b2:32:62:1e:
         3a:2b:54:fe:fb:dd:17:ed:d9:d6:d3:0c:c7:bc:d7:2f:6f:6b:
         60:bd:4a:7e:7d:1f:a4:e1:aa:60:b8:91:30:98:18:19:2e:a5:
         66:6f:03:85:26:09:87:6f:f0:99:c6:aa:b5:48:6d:84:62:ce:
         f2:c2:11:f7:c3:f7:af:e5:eb:c1:cb:e5:8e:c6:88:10:79:b2:
         9d:95:b1:58:34:42:71:3f:4d:4d:36:4f:57:b1:ff:0e:58:49:
         dc:50:be:37:ef:c2:2e:05:86:b8:86:e8:33:0b:2f:56:8d:ba:
         73:30:18:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEcqWaJqnNNea8mEhZfNRoq4b2sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTczRDgwQjdGODQ0QjVBQ0Y1RkU2NzM5NDUzQ0JFODYw
QzBGRTc1MzAeFw0yMzEwMjUxNzMzMzJaFw0yNDEwMjMxNzM4MzJaMDMxMTAvBgNV
BAMTKEZGMDJDQ0U3MUI4REU0NzZBMkRGQkZEODY4OTkyRTEyREREQzJCMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmRX7UaPbO2ktQ5oIElNdhlX8
cMYA1jOOkNMgEvbY0z7MCv8OJqZnBqnwjfMxzysKwnp8edHkH7zIsRdsIwYjoIV7
6n38uceMh6vPg7SneDqOVf0oA2fk+FK7maSJ7zpFOaNGjHOhlaA2OgloLOBzWkAN
EkgIloNpboN4/tILQWAufC61nWTqaRltn68QeNvjHWJwQuapQ94K/hoffCek3+V4
AuQC66jDYIpRlKlEA3GqDZvhuplqfM7+12v7bew3KXPOyL4rg8i5+fX24xwfw9Ne
6qvL332hQDZifaOn26Ir4Ib9K5rxBJva3kUO4Zh8TnM4cggDRFhs0TXnLzRdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/wLM5xuN5Hai37/YaJkuEt3cKwgwHwYDVR0j
BBgwFoAUFz2At/hEtaz1/mc5RTy+hgwP51MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMC8xNzNEODBCN0Y4NDRCNUFDRjVGRTY3Mzk0NTNDQkU4NjBDMEZFNzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3M0Q4MEI3Rjg0NEI1QUNG
NUZFNjczOTQ1M0NCRTg2MEMwRkU3NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzAv
MzEzNzMwMmUzODM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVHAwDQYJKoZIhvcNAQELBQADggEBABQxm0Xv
lIsVlFW+JodFN/2B92Z+ZGLNcFJz+yBmZrQ5eeu9tEl9JgyEW+y6DyUoLfNBzkqE
gMxz1WpNdDxMH9FS1DZhUdpOQGRCoFCHegINAmWBUapj09pe80VCj2NO+W8zlEN7
dNJh8o5WdL3IUsklhq9GvtOmf04t9npZPRhg/zQZiIP5ItNdoIkasjJiHjorVP77
3Rft2dbTDMe81y9va2C9Sn59H6ThqmC4kTCYGBkupWZvA4UmCYdv8JnGqrVIbYRi
zvLCEffD96/l68HL5Y7GiBB5sp2VsVg0QnE/TU02T1ex/w5YSdxQvjfvwi4FhriG
6DMLL1aNunMwGDQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org