Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
File:                     3137302e38332e38332e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          QPLhkB7f9RurvfSJLm0rcDMcA3jct9V7YRsSRmUOnHQ=
Subject key identifier:   F4:D0:27:5D:C7:CE:AA:A1:FB:20:F7:37:01:DF:15:FF:C8:60:E2:B8
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       3895E9A0DFA17D32FA19190387246D335C64C46E
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:14:05 +0000
ROA not before:           Thu 30 Nov 2023 20:09:05 +0000
ROA not after:            Thu 28 Nov 2024 20:14:05 +0000
asID:                     263026
IP address blocks:        170.83.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:e9:a0:df:a1:7d:32:fa:19:19:03:87:24:6d:33:5c:64:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:09:05 2023 GMT
            Not After : Nov 28 20:14:05 2024 GMT
        Subject: CN=F4D0275DC7CEAAA1FB20F73701DF15FFC860E2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:fc:84:3a:ff:e5:7e:c0:d4:b7:6e:83:d6:
                    fb:47:2b:fb:d5:2b:b0:40:8d:e2:2e:cf:0b:35:f4:
                    1e:03:a2:91:ef:64:7f:9b:3d:fc:4f:ce:43:d0:c5:
                    2f:5a:9a:6d:96:a5:50:b4:ef:6f:08:e7:1c:8e:8e:
                    72:c2:df:f0:c4:d9:45:d8:7e:48:ce:05:10:ee:9b:
                    a3:29:ec:86:5c:87:49:52:ea:76:19:5e:f3:14:a2:
                    0a:b6:f3:d3:0e:b2:7e:26:a2:d7:72:fe:50:7e:0b:
                    80:75:7c:81:c2:55:bf:97:ca:93:a7:70:75:fd:d0:
                    1d:ba:33:87:06:8c:23:9b:73:f3:0d:82:02:94:95:
                    59:45:34:c6:b1:37:01:1f:ae:b6:0a:e0:fd:38:99:
                    00:20:1f:7a:2e:bd:63:b5:e8:bc:b5:ab:53:96:2b:
                    2c:8e:c3:c7:8e:b7:c5:33:f1:3b:ba:09:79:09:76:
                    47:e0:42:b1:f7:4a:f5:43:1b:67:1e:bb:a6:d3:a7:
                    cc:1e:cc:35:e9:fe:77:65:24:1b:5a:64:83:8e:c4:
                    74:00:4d:51:82:3c:4b:22:ff:f3:d1:d1:0e:81:24:
                    d5:f4:50:12:57:2a:ee:8a:9f:98:2d:11:56:17:e1:
                    84:00:5c:e7:cf:35:82:0b:26:61:6d:09:40:3f:ee:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:27:5D:C7:CE:AA:A1:FB:20:F7:37:01:DF:15:FF:C8:60:E2:B8
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:00:d0:4a:a0:8d:27:96:98:fe:c7:12:14:77:0b:cd:64:ce:
         36:80:35:ae:5d:63:2d:75:06:b3:74:77:92:41:5c:d1:cc:23:
         2a:35:cb:34:e7:f1:bb:cc:c6:f4:45:d6:f9:a8:4a:eb:f0:f2:
         f6:5f:53:8c:67:b9:00:8f:e3:6d:f2:95:7f:83:4b:79:5c:d1:
         7d:e2:ea:ca:04:70:cf:9d:bf:53:7b:87:9e:6b:eb:eb:6c:5f:
         73:14:c3:06:23:23:6a:2c:c6:f5:a3:b5:f4:10:4c:16:77:8d:
         91:78:6f:13:ae:d6:f5:fb:c9:7a:f0:67:5d:7e:7c:0b:b0:83:
         5e:bf:34:f4:09:74:0f:96:74:f2:37:79:84:a5:38:15:f7:96:
         f5:ce:06:db:bd:f7:09:2a:9d:f2:30:c0:87:7c:cb:b5:8a:dc:
         bb:0a:10:c4:65:3d:71:99:b5:0c:5d:00:8a:87:48:1f:a3:6a:
         b4:c4:6d:a0:ae:7c:e1:7e:ae:30:a4:ee:a0:0a:e7:b9:d9:b9:
         59:22:63:e2:2f:59:da:fc:34:a5:61:fa:50:31:d6:46:9b:97:
         65:f2:c6:66:f7:59:e8:d5:e2:06:dd:7d:46:fc:61:a0:f1:08:
         58:93:7c:5a:11:57:aa:07:a8:fb:e3:3c:70:b4:cc:36:20:d4:
         b3:9e:b0:79
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUOJXpoN+hfTL6GRkDhyRtM1xkxG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBC
M0E5RDAxNzAeFw0yMzExMzAyMDA5MDVaFw0yNDExMjgyMDE0MDVaMDMxMTAvBgNV
BAMTKEY0RDAyNzVEQzdDRUFBQTFGQjIwRjczNzAxREYxNUZGQzg2MEUyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxPyEOv/lfsDUt26D1vtHK/vV
K7BAjeIuzws19B4DopHvZH+bPfxPzkPQxS9amm2WpVC0728I5xyOjnLC3/DE2UXY
fkjOBRDum6Mp7IZch0lS6nYZXvMUogq289MOsn4motdy/lB+C4B1fIHCVb+XypOn
cHX90B26M4cGjCObc/MNggKUlVlFNMaxNwEfrrYK4P04mQAgH3ouvWO16Ly1q1OW
KyyOw8eOt8Uz8Tu6CXkJdkfgQrH3SvVDG2ceu6bTp8wezDXp/ndlJBtaZIOOxHQA
TVGCPEsi//PR0Q6BJNX0UBJXKu6Kn5gtEVYX4YQAXOfPNYILJmFtCUA/7uDVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU9NAnXcfOqqH7IPc3Ad8V/8hg4rgwHwYDVR0j
BBgwFoAUjxLnkOE7oh5pKtRzVp8bkLOp0BcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBCM0E5RDAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RjEyRTc5MEUxM0JBMjFFNjky
QUQ0NzM1NjlGMUI5MEIzQTlEMDE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz
NzMwMmUzODMzMmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzAz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAqlNTMA0GCSqGSIb3DQEBCwUAA4IBAQBzANBKoI0nlpj+
xxIUdwvNZM42gDWuXWMtdQazdHeSQVzRzCMqNcs05/G7zMb0Rdb5qErr8PL2X1OM
Z7kAj+Nt8pV/g0t5XNF94urKBHDPnb9Te4eea+vrbF9zFMMGIyNqLMb1o7X0EEwW
d42ReG8Trtb1+8l68GddfnwLsINevzT0CXQPlnTyN3mEpTgV95b1zgbbvfcJKp3y
MMCHfMu1ity7ChDEZT1xmbUMXQCKh0gfo2q0xG2grnzhfq4wpO6gCue52blZImPi
L1na/DSlYfpQMdZGm5dl8sZm91no1eIG3X1G/GGg8QhYk3xaEVeqB6j74zxwtMw2
INSznrB5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org