Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3137302e3233312e302e302f32322d3234203d3e20323633343339.roa
File:                     3137302e3233312e302e302f32322d3234203d3e20323633343339.roa (raw, json)
Hash identifier:          etkK4DVFAjuugt9wnk3ZgBbvHxllkMPpLRnFAUpRu2U=
Subject key identifier:   8A:25:56:EA:BE:8B:C1:72:E0:BA:6F:18:19:B5:57:9B:B9:83:1D:C8
Certificate issuer:       /CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
Certificate serial:       72192772A464596B81FC46E67A756BC23DF35282
Authority key identifier: FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3137302e3233312e302e302f32322d3234203d3e20323633343339.roa
Signing time:             Wed 13 Sep 2023 18:58:29 +0000
ROA not before:           Wed 13 Sep 2023 18:53:29 +0000
ROA not after:            Wed 11 Sep 2024 18:58:29 +0000
asID:                     263439
IP address blocks:        170.231.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:19:27:72:a4:64:59:6b:81:fc:46:e6:7a:75:6b:c2:3d:f3:52:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
        Validity
            Not Before: Sep 13 18:53:29 2023 GMT
            Not After : Sep 11 18:58:29 2024 GMT
        Subject: CN=8A2556EABE8BC172E0BA6F1819B5579BB9831DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:93:65:e4:1a:56:15:ef:00:d7:76:bf:6c:
                    3e:32:b0:71:73:80:23:36:e7:99:65:43:0b:3e:1d:
                    00:aa:fc:e8:e5:e0:6f:b8:ca:12:1e:65:35:f1:26:
                    21:33:c9:8e:c9:87:7a:46:f8:b6:06:f9:b7:74:c5:
                    48:f3:f5:3d:f2:27:bc:27:bc:e7:26:6b:32:c7:5e:
                    e4:a8:b8:68:3d:90:3b:a4:ae:c0:bc:65:9b:67:d2:
                    52:fd:3e:16:86:98:dc:f4:c9:3f:b3:11:c0:9f:95:
                    8e:b3:22:4e:60:d5:06:27:07:04:ab:04:06:24:90:
                    25:cc:14:34:bf:f5:e4:2c:9d:75:4c:16:75:d0:e2:
                    24:66:5a:3c:18:29:5c:e1:bb:08:db:01:fb:cb:5e:
                    71:25:44:65:c9:03:eb:d4:2b:39:bd:0d:1d:6d:bd:
                    3d:c0:29:c9:af:4f:f7:11:72:dc:44:5c:15:a8:a0:
                    e1:5e:39:5b:19:52:a0:88:98:6c:51:e1:03:10:2d:
                    66:73:53:81:da:1f:db:37:11:1f:e1:34:da:f2:24:
                    7b:05:06:c4:29:92:0c:74:50:8b:53:e1:84:ee:e7:
                    19:d2:3a:98:fd:bd:cb:a0:ac:88:a9:c3:f8:9c:a9:
                    12:27:96:b6:46:d1:3b:1c:e0:a7:af:c9:85:ff:10:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:25:56:EA:BE:8B:C1:72:E0:BA:6F:18:19:B5:57:9B:B9:83:1D:C8
            X509v3 Authority Key Identifier:
                keyid:FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3137302e3233312e302e302f32322d3234203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:3d:9e:34:2e:b3:d4:31:ac:e1:32:e9:8c:ee:2f:38:ca:
         f9:26:4b:f0:df:cb:50:e9:da:7a:56:b7:14:df:61:59:90:fa:
         b0:d4:e4:a5:95:3a:e7:d2:cb:bd:f2:69:c7:02:d3:af:3c:b8:
         2d:93:74:b6:f4:f6:71:52:db:90:bd:dc:fa:8a:5f:af:1d:45:
         db:3f:46:4b:6e:2b:41:9b:58:cc:20:ae:20:77:12:ba:5d:66:
         bc:d5:25:9d:d1:4e:5e:c6:29:99:6e:fa:63:fd:1f:8a:9d:41:
         7f:45:01:57:3a:c4:3d:06:65:c7:71:48:25:7d:86:9a:de:8d:
         d7:fd:2e:f4:34:c4:ac:9a:92:84:63:d5:2f:97:02:81:c5:21:
         ec:fa:06:82:f2:3a:8c:b7:69:92:40:01:07:6a:0e:d6:c5:56:
         d5:56:8d:f0:7c:75:cc:cd:9d:94:9b:41:2a:a3:5b:02:64:f2:
         c2:97:02:7e:62:d8:37:09:a3:cb:4c:45:d5:08:f1:56:fe:1f:
         b5:bd:cc:ee:aa:2f:f0:fd:b5:1a:f7:08:c6:86:07:01:3c:73:
         bf:2a:b8:c3:0c:b6:d4:e6:6f:e0:b1:81:f3:1e:02:aa:7f:4c:
         76:23:d5:a3:fb:92:30:30:46:7d:30:e5:65:77:e3:9a:e8:11:
         c6:2b:2e:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUchkncqRkWWuB/EbmenVrwj3zUoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFOUFCMDJCQkE5QUExMjhFNjYzOTRGREVBQ0RGNjdE
NTAwNkI5MzAeFw0yMzA5MTMxODUzMjlaFw0yNDA5MTExODU4MjlaMDMxMTAvBgNV
BAMTKDhBMjU1NkVBQkU4QkMxNzJFMEJBNkYxODE5QjU1NzlCQjk4MzFEQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS5Nl5BpWFe8A13a/bD4ysHFz
gCM255llQws+HQCq/Ojl4G+4yhIeZTXxJiEzyY7Jh3pG+LYG+bd0xUjz9T3yJ7wn
vOcmazLHXuSouGg9kDukrsC8ZZtn0lL9PhaGmNz0yT+zEcCflY6zIk5g1QYnBwSr
BAYkkCXMFDS/9eQsnXVMFnXQ4iRmWjwYKVzhuwjbAfvLXnElRGXJA+vUKzm9DR1t
vT3AKcmvT/cRctxEXBWooOFeOVsZUqCImGxR4QMQLWZzU4HaH9s3ER/hNNryJHsF
BsQpkgx0UItT4YTu5xnSOpj9vcugrIipw/icqRInlrZG0Tsc4KevyYX/EF57AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiiVW6r6LwXLgum8YGbVXm7mDHcgwHwYDVR0j
BBgwFoAU+umrArupqhKOZjlP3qzfZ9UAa5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkR5TnVYQ0NzODVBZ1p5UHhKdm1uMzczYWcyQkFic1o4bTVzMVhxSjJ2
YzQvMC9GQUU5QUIwMkJCQTlBQTEyOEU2NjM5NEZERUFDREY2N0Q1MDA2QjkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTlBQjAyQkJBOUFBMTI4
RTY2Mzk0RkRFQUNERjY3RDUwMDZCOTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pEeU51WENDczg1QWdaeVB4SnZtbjM3M2FnMkJBYnNaOG01czFYcUoydmM0LzAv
MzEzNzMwMmUzMjMzMzEyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqucAMA0GCSqGSIb3DQEBCwUAA4IBAQCXuj2eNC6z
1DGs4TLpjO4vOMr5Jkvw38tQ6dp6VrcU32FZkPqw1OSllTrn0su98mnHAtOvPLgt
k3S29PZxUtuQvdz6il+vHUXbP0ZLbitBm1jMIK4gdxK6XWa81SWd0U5eximZbvpj
/R+KnUF/RQFXOsQ9BmXHcUglfYaa3o3X/S70NMSsmpKEY9UvlwKBxSHs+gaC8jqM
t2mSQAEHag7WxVbVVo3wfHXMzZ2Um0Eqo1sCZPLClwJ+Ytg3CaPLTEXVCPFW/h+1
vczuqi/w/bUa9wjGhgcBPHO/KrjDDLbU5m/gsYHzHgKqf0x2I9Wj+5IwMEZ9MOVl
d+Oa6BHGKy5e
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org