Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32332d3233203d3e203532353834.roa
File:                     3137302e3235342e3235342e302f32332d3233203d3e203532353834.roa (raw, json)
Hash identifier:          aBJCabU/gOrP8psBdkla88RiBZ+9h5f2XHNzXEjVTuU=
Subject key identifier:   AB:86:24:DC:51:BA:E8:93:07:21:87:5B:D6:6D:42:FC:7C:BA:C6:49
Certificate issuer:       /CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
Certificate serial:       373AC4B134A08E6C2C9C8D6C8863868012E9DE16
Authority key identifier: 47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32332d3233203d3e203532353834.roa
Signing time:             Thu 15 Feb 2024 20:44:45 +0000
ROA not before:           Thu 15 Feb 2024 20:39:45 +0000
ROA not after:            Thu 13 Feb 2025 20:44:45 +0000
asID:                     52584
IP address blocks:        170.254.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:c4:b1:34:a0:8e:6c:2c:9c:8d:6c:88:63:86:80:12:e9:de:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
        Validity
            Not Before: Feb 15 20:39:45 2024 GMT
            Not After : Feb 13 20:44:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:3d:8b:92:fb:02:ff:da:56:c8:bb:3c:b1:
                    5f:10:62:42:8c:0d:20:73:52:47:89:11:5c:c1:27:
                    e2:65:62:a6:32:cc:fe:d6:80:f4:d9:d5:27:96:cf:
                    68:55:10:a8:51:30:ef:43:fc:c1:4c:5c:47:cd:9d:
                    c6:62:35:81:d7:84:a3:39:00:26:1b:31:b2:d0:3d:
                    59:dc:97:6f:46:e1:f7:ea:0c:7c:10:81:30:08:ac:
                    ee:11:33:4e:a3:08:34:b4:d8:60:16:17:cf:c4:e4:
                    6e:8c:1b:f7:7e:4d:bd:c6:ff:e8:64:73:1f:22:ab:
                    35:ee:37:9a:91:11:4b:81:f3:46:9f:68:5a:e0:ee:
                    c3:85:7a:2a:28:8a:f9:24:f6:13:4b:29:bf:eb:4a:
                    f0:42:07:0a:9c:6b:27:5f:59:f1:ee:ae:d4:40:b5:
                    24:67:1c:7d:01:ce:70:a4:46:f9:99:95:31:3b:18:
                    d1:d3:33:7a:ea:2c:b2:c3:17:8e:0e:69:46:ac:a4:
                    a0:9a:f5:72:d2:6b:99:64:be:ad:27:8f:ba:f1:d3:
                    56:71:0d:39:2e:fd:db:c3:28:c3:d0:24:83:f1:e8:
                    a9:4f:6f:2e:ed:ad:24:24:e5:34:a1:32:da:d5:b4:
                    44:59:ad:ed:e0:82:d1:b0:b1:3f:95:7b:fb:6e:fd:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:24:DC:51:BA:E8:93:07:21:87:5B:D6:6D:42:FC:7C:BA:C6:49
            X509v3 Authority Key Identifier:
                keyid:47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235342e302f32332d3233203d3e203532353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:20:a3:d3:ef:da:22:16:96:8c:59:d0:8c:a5:14:f5:40:16:
         af:5d:12:e3:89:38:0f:3c:56:8d:79:37:dc:9f:fd:ce:30:54:
         28:16:4f:46:82:f1:f5:a7:66:9d:b8:7c:8f:ad:f9:a9:4c:01:
         69:e9:9b:e1:9d:8f:1f:7f:95:75:86:54:0d:86:5a:d3:0c:27:
         ed:94:56:8d:ed:72:9a:0b:40:b6:a1:8c:73:1e:4d:39:82:92:
         12:4a:da:e0:b6:38:53:4e:84:e1:da:37:cc:c7:a3:e2:d4:bb:
         ab:72:b6:fe:78:33:c5:19:bd:d0:ef:26:9b:d6:6d:88:f5:89:
         cf:a9:df:61:57:b4:0c:30:a9:37:b5:b7:d4:16:73:f4:f1:92:
         21:93:7a:19:61:bd:de:d0:e1:39:94:41:b4:fc:67:a6:43:a4:
         80:c0:6d:84:aa:fa:28:14:85:e9:4e:8d:61:53:8f:a2:e2:7b:
         17:6c:8a:c5:a1:b4:1f:7d:73:7d:4c:64:9e:95:13:6d:75:2b:
         85:13:fa:fa:93:8d:75:0e:f9:9a:2f:89:fc:38:d9:c5:99:ff:
         b1:24:28:4e:59:dd:d0:3c:a9:56:bf:d2:90:18:31:52:04:74:
         f4:38:87:77:a4:c3:73:81:43:ba:67:67:46:6e:53:6c:05:61:
         3e:f4:bf:22
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUNzrEsTSgjmwsnI1siGOGgBLp3hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCQTZCQjk1M0RBM0EyQTY2MTQyNjkwREJCN0U4NDBE
NjY5QjVGMzAeFw0yNDAyMTUyMDM5NDVaFw0yNTAyMTMyMDQ0NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc3NTNEOEI5MkZCMDJGRkRB
NTZDOEJCM0NCMTVGMTA2MjQyOEMwRDIwNzM1MjQ3ODkxMTVDQzEyN0UyNjU2MkE2
MzJDQ0ZFRDY4MEY0RDlENTI3OTZDRjY4NTUxMEE4NTEzMEVGNDNGQ0MxNEM1QzQ3
Q0Q5REM2NjIzNTgxRDc4NEEzMzkwMDI2MUIzMUIyRDAzRDU5REM5NzZGNDZFMUY3
RUEwQzdDMTA4MTMwMDhBQ0VFMTEzMzRFQTMwODM0QjREODYwMTYxN0NGQzRFNDZF
OEMxQkY3N0U0REJEQzZGRkU4NjQ3MzFGMjJBQjM1RUUzNzlBOTExMTRCODFGMzQ2
OUY2ODVBRTBFRUMzODU3QTJBMjg4QUY5MjRGNjEzNEIyOUJGRUI0QUYwNDIwNzBB
OUM2QjI3NUY1OUYxRUVBRUQ0NDBCNTI0NjcxQzdEMDFDRTcwQTQ0NkY5OTk5NTMx
M0IxOEQxRDMzMzdBRUEyQ0IyQzMxNzhFMEU2OTQ2QUNBNEEwOUFGNTcyRDI2Qjk5
NjRCRUFEMjc4RkJBRjFEMzU2NzEwRDM5MkVGRERCQzMyOEMzRDAyNDgzRjFFOEE5
NEY2RjJFRURBRDI0MjRFNTM0QTEzMkRBRDVCNDQ0NTlBREVERTA4MkQxQjBCMTNG
OTU3QkZCNkVGRDdBRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA13U9i5L7Av/aVsi7PLFfEGJCjA0gc1JHiRFcwSfiZWKmMsz+1oD0
2dUnls9oVRCoUTDvQ/zBTFxHzZ3GYjWB14SjOQAmGzGy0D1Z3JdvRuH36gx8EIEw
CKzuETNOowg0tNhgFhfPxORujBv3fk29xv/oZHMfIqs17jeakRFLgfNGn2ha4O7D
hXoqKIr5JPYTSym/60rwQgcKnGsnX1nx7q7UQLUkZxx9Ac5wpEb5mZUxOxjR0zN6
6iyywxeODmlGrKSgmvVy0muZZL6tJ4+68dNWcQ05Lv3bwyjD0CSD8eipT28u7a0k
JOU0oTLa1bREWa3t4ILRsLE/lXv7bv16+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKuGJNxRuuiTByGHW9ZtQvx8usZJMB8GA1UdIwQYMBaAFEe6a7lT2joqZhQmkNu3
6EDWabXzMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hvR1VpUlViSHFYNlFn
TmZUNmc0Q0dMYTRzWWs4SFhGdVlncVBpSjZiRGdmLzAvNDdCQTZCQjk1M0RBM0Ey
QTY2MTQyNjkwREJCN0U4NDBENjY5QjVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80N0JBNkJCOTUzREEzQTJBNjYxNDI2OTBEQkI3RTg0MEQ2NjlC
NUYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Ib0dVaVJVYkhxWDZRZ05mVDZn
NENHTGE0c1lrOEhYRnVZZ3FQaUo2YkRnZi8wLzMxMzczMDJlMzIzNTM0MmUzMjM1
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzUzODM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qv7+MA0GCSqGSIb3DQEBCwUAA4IBAQDJIKPT79oiFpaMWdCMpRT1QBavXRLjiTgP
PFaNeTfcn/3OMFQoFk9GgvH1p2aduHyPrfmpTAFp6ZvhnY8ff5V1hlQNhlrTDCft
lFaN7XKaC0C2oYxzHk05gpISStrgtjhTToTh2jfMx6Pi1Lurcrb+eDPFGb3Q7yab
1m2I9YnPqd9hV7QMMKk3tbfUFnP08ZIhk3oZYb3e0OE5lEG0/GemQ6SAwG2Eqvoo
FIXpTo1hU4+i4nsXbIrFobQffXN9TGSelRNtdSuFE/r6k411DvmaL4n8ONnFmf+x
JChOWd3QPKlWv9KQGDFSBHT0OId3pMNzgUO6Z2dGblNsBWE+9L8i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org