Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32332d3233203d3e203631353834.roa
File:                     3137302e3235342e3137302e302f32332d3233203d3e203631353834.roa (raw, json)
Hash identifier:          DFQfOv2vbdQsXL6jdeAEgmMBYrX/ol6Rr36QStUiGMU=
Subject key identifier:   D4:84:52:78:03:A7:38:29:0C:F4:1C:B8:CE:36:64:89:E5:CB:FC:AC
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       45DCF0CA7B66E1A1C0A14CD154E9DB0CF58E8CF1
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32332d3233203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:31 +0000
ROA not before:           Mon 10 Jul 2023 19:01:31 +0000
ROA not after:            Mon 08 Jul 2024 19:06:31 +0000
asID:                     61584
IP address blocks:        170.254.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dc:f0:ca:7b:66:e1:a1:c0:a1:4c:d1:54:e9:db:0c:f5:8e:8c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:31 2023 GMT
            Not After : Jul  8 19:06:31 2024 GMT
        Subject: CN=D484527803A738290CF41CB8CE366489E5CBFCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:18:21:fd:3e:b7:61:29:74:e7:9e:dc:ff:
                    ed:f6:e7:e9:23:79:dc:28:47:83:bf:2c:ed:05:80:
                    59:5a:1e:c9:b7:de:48:4b:3e:41:62:16:8e:f6:30:
                    55:f6:ab:7d:1c:28:59:51:8d:66:1a:c3:8b:1b:3d:
                    0f:df:b9:f5:84:05:b7:73:ca:4d:e3:c8:07:b0:5c:
                    36:35:22:a3:33:92:5a:16:df:a8:e6:71:46:cc:51:
                    d5:b2:67:05:f2:6d:69:57:7c:7d:56:04:55:60:1b:
                    0f:7d:e6:cd:7e:0e:b6:67:82:b0:8f:cb:08:c1:03:
                    b9:60:26:3e:6c:f6:8e:9f:60:96:e0:69:08:f2:09:
                    e7:93:76:c2:2a:21:e8:2f:8e:6f:b6:c3:5f:22:a8:
                    7a:2f:3c:e3:30:74:d3:32:db:96:b1:d6:c7:2c:0e:
                    04:41:39:86:d9:67:90:31:b6:26:58:11:66:ab:62:
                    96:66:fc:f9:a3:49:17:fd:b7:bb:78:c6:75:b6:cb:
                    96:5b:3b:02:1a:be:6f:c0:af:81:79:b6:f9:1f:ee:
                    95:25:c2:b4:00:a4:56:f7:86:18:ab:51:a1:82:87:
                    d3:a2:eb:04:e1:9e:c4:c9:08:59:93:69:05:59:d1:
                    ad:44:4f:5a:67:3f:c7:6b:26:fb:83:99:33:8d:f1:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:52:78:03:A7:38:29:0C:F4:1C:B8:CE:36:64:89:E5:CB:FC:AC
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32332d3233203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:15:fd:f8:9d:f6:03:3b:e8:a1:9e:2e:f8:83:88:59:8b:
         6d:13:26:c0:be:00:cd:a2:ad:8e:f2:59:fb:90:d6:6f:9b:b1:
         ca:cd:6b:f4:88:fc:8d:89:5e:1e:ac:5d:2a:37:66:5e:99:08:
         61:82:11:81:96:72:b6:c0:67:d9:d2:f7:ed:9d:95:c4:b3:e7:
         d4:a2:c9:25:b0:be:5f:a8:21:d6:eb:33:fb:81:ac:4e:bd:43:
         1a:40:c2:63:b0:67:44:5a:4c:7f:2f:86:d6:bb:31:1e:bb:4a:
         5a:fc:bb:89:47:1f:ff:6a:04:89:e0:fc:a7:f1:68:af:cf:96:
         b2:39:5d:00:3f:be:be:d3:11:d0:3b:c4:f6:9e:e2:2b:ad:19:
         8f:af:fe:e6:6f:9d:29:a5:ab:a1:7c:42:af:e6:39:d3:7f:7f:
         25:8e:f5:2f:4d:76:f2:37:03:35:bb:1f:3f:d9:31:98:de:7f:
         7d:f1:bc:3f:c5:64:21:9a:80:2e:ce:ec:9f:35:3d:f2:a1:35:
         b3:d2:15:33:38:7e:26:cc:90:15:7e:32:13:0d:c5:8d:c6:fc:
         3b:6c:99:02:25:67:f2:f8:05:d1:05:33:40:76:4f:3f:fe:eb:
         d6:6b:0f:8d:58:27:45:02:27:63:30:dc:f4:2f:c2:b7:59:fc:
         f8:e6:a3:1d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURdzwyntm4aHAoUzRVOnbDPWOjPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc0RjRBMDdERTI1NTBEQTBBMzlGRUY1NUJEMkE4QjJE
MjU0OTRFMTAeFw0yMzA3MTAxOTAxMzFaFw0yNDA3MDgxOTA2MzFaMDMxMTAvBgNV
BAMTKEQ0ODQ1Mjc4MDNBNzM4MjkwQ0Y0MUNCOENFMzY2NDg5RTVDQkZDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5Rgh/T63YSl0557c/+325+kj
edwoR4O/LO0FgFlaHsm33khLPkFiFo72MFX2q30cKFlRjWYaw4sbPQ/fufWEBbdz
yk3jyAewXDY1IqMzkloW36jmcUbMUdWyZwXybWlXfH1WBFVgGw995s1+DrZngrCP
ywjBA7lgJj5s9o6fYJbgaQjyCeeTdsIqIegvjm+2w18iqHovPOMwdNMy25ax1scs
DgRBOYbZZ5AxtiZYEWarYpZm/PmjSRf9t7t4xnW2y5ZbOwIavm/Ar4F5tvkf7pUl
wrQApFb3hhirUaGCh9Oi6wThnsTJCFmTaQVZ0a1ET1pnP8drJvuDmTON8fUJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU1IRSeAOnOCkM9By4zjZkieXL/KwwHwYDVR0j
BBgwFoAUZ09KB94lUNoKOf71W9KostJUlOEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9kak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1
LzAvNjc0RjRBMDdERTI1NTBEQTBBMzlGRUY1NUJEMkE4QjJEMjU0OTRFMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NzRGNEEwN0RFMjU1MERBMEEz
OUZFRjU1QkQyQThCMkQyNTQ5NEUxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
ak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1LzAvMzEz
NzMwMmUzMjM1MzQyZTMxMzczMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2MzEz
NTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGq/qowDQYJKoZIhvcNAQELBQADggEBAKCEFf34nfYD
O+ihni74g4hZi20TJsC+AM2irY7yWfuQ1m+bscrNa/SI/I2JXh6sXSo3Zl6ZCGGC
EYGWcrbAZ9nS9+2dlcSz59SiySWwvl+oIdbrM/uBrE69QxpAwmOwZ0RaTH8vhta7
MR67Slr8u4lHH/9qBIng/KfxaK/PlrI5XQA/vr7TEdA7xPae4iutGY+v/uZvnSml
q6F8Qq/mOdN/fyWO9S9NdvI3AzW7Hz/ZMZjef33xvD/FZCGagC7O7J81PfKhNbPS
FTM4fibMkBV+MhMNxY3G/DtsmQIlZ/L4BdEFM0B2Tz/+69ZrD41YJ0UCJ2Mw3PQv
wrdZ/Pjmox0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org