Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37352e302f32342d3234203d3e20323632353639.roa
File:                     3137302e38322e37352e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          uFQG9L/Hzbs101zr8RuqftTgQXVQoHNqdY/RJ8IxmVw=
Subject key identifier:   C1:32:AE:CC:52:23:0E:57:58:3F:19:FB:C9:28:8E:DA:43:BC:88:DA
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       1D48FFCE26F9C7B1302744A6B547D258DA1980CA
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37352e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        170.82.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:ff:ce:26:f9:c7:b1:30:27:44:a6:b5:47:d2:58:da:19:80:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=C132AECC52230E57583F19FBC9288EDA43BC88DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:34:9c:a8:64:3d:f5:be:11:b6:d1:62:01:
                    d4:c0:b0:0d:15:fc:26:6b:c9:84:8b:a4:15:77:ed:
                    ad:42:b2:51:8e:d6:4a:74:ba:2b:eb:c7:6a:8f:50:
                    fc:6c:da:b0:f5:4f:4a:64:f3:67:0b:90:aa:34:c0:
                    25:15:82:9d:0b:f2:89:84:f0:92:94:22:19:5f:4d:
                    53:ab:6d:11:e2:f3:78:b3:6f:6c:d6:58:3f:94:8a:
                    76:dd:13:52:30:20:3e:e4:54:76:b7:67:6f:11:cf:
                    dc:20:a3:a3:4e:69:7b:84:65:e8:18:ba:44:23:4d:
                    5c:45:7a:f7:95:46:93:3c:2a:03:9a:f0:c1:85:4c:
                    40:9d:d7:46:fe:e5:c2:0f:fc:5e:18:1e:6c:cb:9b:
                    39:04:b4:2b:cb:bf:2b:91:75:df:df:30:24:0a:e3:
                    1e:cb:04:04:13:8b:61:fd:29:66:e6:2a:92:61:ce:
                    e1:ed:6c:1f:d7:28:1d:54:28:0a:86:27:1c:c2:6c:
                    46:81:37:5e:be:7a:07:dc:11:90:6e:31:c9:b3:9b:
                    4b:49:8d:c9:a0:2c:ed:e5:9f:56:14:f6:ae:c7:72:
                    db:5f:12:6f:ab:bb:19:97:ad:fb:60:fb:03:bb:c2:
                    b9:1d:8d:05:67:89:8e:22:5a:34:c8:20:6f:7e:f4:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:32:AE:CC:52:23:0E:57:58:3F:19:FB:C9:28:8E:DA:43:BC:88:DA
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37352e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:a3:98:80:4e:7a:6b:b5:b4:e6:f3:5c:ad:2c:b3:5f:4a:
         bb:4d:98:fd:47:80:98:e7:ef:06:47:41:e2:b2:34:f9:97:79:
         5b:82:61:74:cb:51:45:bb:85:73:8a:90:9b:6a:c7:c1:cb:85:
         a0:3a:3a:69:03:97:66:30:13:48:b2:80:0d:60:00:2a:ca:4d:
         f3:fa:c4:73:8b:dd:33:98:cc:21:40:1d:b0:35:6f:30:16:cf:
         fc:92:59:b1:34:3c:33:70:35:c9:1f:54:15:f7:18:19:0d:1c:
         53:41:8d:ad:d7:aa:1e:1e:6e:fc:fa:a2:c4:5e:1d:ad:11:3c:
         ee:9a:04:48:6e:19:70:3a:5d:37:a0:3e:ad:ba:c3:d4:eb:70:
         79:23:e2:0a:f9:6b:47:28:87:9d:d0:e8:f2:13:fa:e8:71:9e:
         02:93:13:6f:de:84:dc:8c:77:90:11:f1:5b:17:2d:47:05:49:
         aa:4b:9f:98:f5:a4:cb:ad:43:ff:f3:37:aa:5c:e4:94:25:7c:
         cc:29:b9:ab:96:bd:4a:b4:1f:78:00:3a:64:04:64:5a:3a:50:
         4a:72:31:e8:65:ee:1a:57:73:ab:02:28:a4:1a:e4:73:c2:c4:
         05:87:c3:88:b4:3f:9f:a1:6f:be:b3:79:95:14:80:84:25:87:
         a3:aa:6a:e6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUHUj/zib5x7EwJ0SmtUfSWNoZgMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURD
MkNBQ0ZCRjAeFw0yNDAzMzAwMDU2MTlaFw0yNTAzMjkwMTAxMTlaMDMxMTAvBgNV
BAMTKEMxMzJBRUNDNTIyMzBFNTc1ODNGMTlGQkM5Mjg4RURBNDNCQzg4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96DScqGQ99b4RttFiAdTAsA0V
/CZryYSLpBV37a1CslGO1kp0uivrx2qPUPxs2rD1T0pk82cLkKo0wCUVgp0L8omE
8JKUIhlfTVOrbRHi83izb2zWWD+UinbdE1IwID7kVHa3Z28Rz9wgo6NOaXuEZegY
ukQjTVxFeveVRpM8KgOa8MGFTECd10b+5cIP/F4YHmzLmzkEtCvLvyuRdd/fMCQK
4x7LBAQTi2H9KWbmKpJhzuHtbB/XKB1UKAqGJxzCbEaBN16+egfcEZBuMcmzm0tJ
jcmgLO3ln1YU9q7HcttfEm+ruxmXrftg+wO7wrkdjQVniY4iWjTIIG9+9OddAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUwTKuzFIjDldYPxn7ySiO2kO8iNowHwYDVR0j
BBgwFoAURgy1fR5JKlZqDDGaAuW+XcLKz78wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURDMkNBQ0ZCRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NjBDQjU3RDFFNDkyQTU2NkEw
QzMxOUEwMkU1QkU1REMyQ0FDRkJGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NzMwMmUzODMyMmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAqlJLMA0GCSqGSIb3DQEBCwUAA4IBAQBf0KOYgE56a7W0
5vNcrSyzX0q7TZj9R4CY5+8GR0HisjT5l3lbgmF0y1FFu4VzipCbasfBy4WgOjpp
A5dmMBNIsoANYAAqyk3z+sRzi90zmMwhQB2wNW8wFs/8klmxNDwzcDXJH1QV9xgZ
DRxTQY2t16oeHm78+qLEXh2tETzumgRIbhlwOl03oD6tusPU63B5I+IK+WtHKIed
0OjyE/rocZ4CkxNv3oTcjHeQEfFbFy1HBUmqS5+Y9aTLrUP/8zeqXOSUJXzMKbmr
lr1KtB94ADpkBGRaOlBKcjHoZe4aV3OrAiikGuRzwsQFh8OItD+foW++s3mVFICE
JYejqmrm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org