Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32322d3232203d3e20323635313132.roa
File:                     3137302e3235342e38342e302f32322d3232203d3e20323635313132.roa (raw, json)
Hash identifier:          dQbyf9jtaPOj8FM4Ls8NejiqxtfdwV2M7S4xqs/lEQc=
Subject key identifier:   1A:FA:A5:5C:E3:3E:33:6A:B3:B7:B7:8C:4A:A7:76:30:CF:A7:4B:0E
Certificate issuer:       /CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
Certificate serial:       6BDB4AD674ABED817ED632772F555F085F9237E0
Authority key identifier: B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32322d3232203d3e20323635313132.roa
Signing time:             Tue 19 Dec 2023 18:49:25 +0000
ROA not before:           Tue 19 Dec 2023 18:44:25 +0000
ROA not after:            Tue 17 Dec 2024 18:49:25 +0000
asID:                     265112
IP address blocks:        170.254.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:4a:d6:74:ab:ed:81:7e:d6:32:77:2f:55:5f:08:5f:92:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7326415BE734D8A751207ED27CE3E324C6FA9BE
        Validity
            Not Before: Dec 19 18:44:25 2023 GMT
            Not After : Dec 17 18:49:25 2024 GMT
        Subject: CN=1AFAA55CE33E336AB3B7B78C4AA77630CFA74B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:36:78:a3:8d:31:be:f2:3c:ee:20:c8:cc:
                    d0:8f:18:89:92:1a:0f:eb:18:97:b2:91:00:5b:b8:
                    31:4f:71:c8:e2:8f:da:1c:36:6a:5f:dc:2d:88:a1:
                    c9:16:36:ae:b1:a5:e6:e0:96:2b:03:32:b0:0b:d5:
                    d4:bd:fe:3f:cd:4d:05:fe:10:09:a9:ae:84:c8:80:
                    f9:0c:d3:e3:b0:2e:62:d4:80:83:45:4a:a2:f1:d3:
                    a6:93:df:7f:78:fd:25:88:1d:cf:24:5b:e8:93:a4:
                    c3:4d:99:11:f8:5e:31:3e:f2:ac:82:80:98:3c:ac:
                    b8:30:92:02:43:12:76:cf:d6:22:e6:1b:0d:a0:d9:
                    e7:3f:a0:c0:90:2d:5c:07:be:4e:ff:e8:96:09:b1:
                    98:e2:c8:c8:e5:9c:74:24:01:31:39:6b:e8:19:71:
                    9e:3d:e6:5d:da:f7:0e:48:d0:0f:c0:db:63:b5:19:
                    cb:e4:20:21:83:2d:4b:4e:32:a8:fa:c6:74:a0:e7:
                    ac:70:4b:57:d2:a7:9d:b3:89:63:b8:5f:25:57:84:
                    e2:3f:53:32:7a:af:7c:c5:93:1f:46:5d:2b:b4:c3:
                    e6:7b:f9:33:28:e7:f9:9b:2b:80:76:bf:39:31:6c:
                    33:3b:24:c3:a9:d0:ad:d3:33:b5:cc:40:51:9a:55:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FA:A5:5C:E3:3E:33:6A:B3:B7:B7:8C:4A:A7:76:30:CF:A7:4B:0E
            X509v3 Authority Key Identifier:
                keyid:B7:32:64:15:BE:73:4D:8A:75:12:07:ED:27:CE:3E:32:4C:6F:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7326415BE734D8A751207ED27CE3E324C6FA9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hyvr8kdMTNrgG9XbP7xo4k35WAdCcZP6D31eKCbPyq1c/0/3137302e3235342e38342e302f32322d3232203d3e20323635313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:94:60:26:0a:f4:04:a8:ba:b0:0f:bb:34:88:64:80:33:fa:
         c0:a7:59:a7:25:a9:17:95:2c:55:13:15:51:3c:4e:34:b4:29:
         78:1b:79:4a:89:d4:8e:9a:7d:cb:3e:a6:db:ca:32:b8:21:7e:
         94:25:ec:fb:9f:66:50:44:ea:9c:ba:60:fb:d0:9f:1f:f5:d8:
         03:78:95:73:47:52:1f:11:86:a4:58:d0:cf:14:1f:1c:0c:19:
         58:a4:af:85:5f:7d:32:bf:ba:6b:4e:02:59:0b:52:3e:3f:ad:
         2d:c3:60:dc:10:be:2e:02:52:3e:f5:aa:3e:24:62:be:74:c1:
         cb:c3:5e:3b:b1:0d:5d:c0:44:53:5a:0c:13:63:6f:f3:8b:2f:
         8f:c8:32:f4:3e:4a:bf:5d:d2:a6:2a:64:07:01:46:04:43:c9:
         b9:45:71:f7:6b:75:19:1c:b3:ea:7d:44:b0:7f:40:e3:12:87:
         ac:27:0e:99:ce:21:23:97:bb:36:24:4f:2c:47:a4:a2:76:0f:
         98:c8:67:60:0c:bc:c6:0c:8c:14:dc:34:26:90:77:ff:45:9a:
         2c:57:3c:4c:0b:cb:3b:69:01:08:d3:0f:1f:bc:94:3d:5a:7f:
         58:d1:cf:44:c5:94:f6:52:42:39:d0:19:37:fd:47:03:8c:53:
         65:dd:a5:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa9tK1nSr7YF+1jJ3L1VfCF+SN+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjczMjY0MTVCRTczNEQ4QTc1MTIwN0VEMjdDRTNFMzI0
QzZGQTlCRTAeFw0yMzEyMTkxODQ0MjVaFw0yNDEyMTcxODQ5MjVaMDMxMTAvBgNV
BAMTKDFBRkFBNTVDRTMzRTMzNkFCM0I3Qjc4QzRBQTc3NjMwQ0ZBNzRCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5TZ4o40xvvI87iDIzNCPGImS
Gg/rGJeykQBbuDFPccjij9ocNmpf3C2IockWNq6xpebglisDMrAL1dS9/j/NTQX+
EAmproTIgPkM0+OwLmLUgINFSqLx06aT3394/SWIHc8kW+iTpMNNmRH4XjE+8qyC
gJg8rLgwkgJDEnbP1iLmGw2g2ec/oMCQLVwHvk7/6JYJsZjiyMjlnHQkATE5a+gZ
cZ495l3a9w5I0A/A22O1GcvkICGDLUtOMqj6xnSg56xwS1fSp52ziWO4XyVXhOI/
UzJ6r3zFkx9GXSu0w+Z7+TMo5/mbK4B2vzkxbDM7JMOp0K3TM7XMQFGaVW8VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGvqlXOM+M2qzt7eMSqd2MM+nSw4wHwYDVR0j
BBgwFoAUtzJkFb5zTYp1EgftJ84+Mkxvqb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHl2cjhrZE1UTnJnRzlYYlA3eG80azM1V0FkQ2NaUDZEMzFlS0NiUHlx
MWMvMC9CNzMyNjQxNUJFNzM0RDhBNzUxMjA3RUQyN0NFM0UzMjRDNkZBOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MzI2NDE1QkU3MzREOEE3
NTEyMDdFRDI3Q0UzRTMyNEM2RkE5QkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5dnI4a2RNVE5yZ0c5WGJQN3hvNGszNVdBZENjWlA2RDMxZUtDYlB5cTFjLzAv
MzEzNzMwMmUzMjM1MzQyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq/lQwDQYJKoZIhvcNAQELBQADggEBAIKUYCYK
9ASourAPuzSIZIAz+sCnWaclqReVLFUTFVE8TjS0KXgbeUqJ1I6afcs+ptvKMrgh
fpQl7PufZlBE6py6YPvQnx/12AN4lXNHUh8RhqRY0M8UHxwMGVikr4VffTK/umtO
AlkLUj4/rS3DYNwQvi4CUj71qj4kYr50wcvDXjuxDV3ARFNaDBNjb/OLL4/IMvQ+
Sr9d0qYqZAcBRgRDyblFcfdrdRkcs+p9RLB/QOMSh6wnDpnOISOXuzYkTyxHpKJ2
D5jIZ2AMvMYMjBTcNCaQd/9FmixXPEwLyztpAQjTDx+8lD1af1jRz0TFlPZSQjnQ
GTf9RwOMU2XdpaI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org