Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          dM+IWmcb5RlFn0xHeVxKdE7yE4paUym6lJbzy0pXUGA=
Subject key identifier:   93:3D:03:44:DD:3C:E2:67:F8:1D:56:10:B8:6E:FA:95:DA:27:1B:77
Certificate issuer:       /CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
Certificate serial:       719149B7B1D50AB1245417302B43D3BD25CBCA57
Authority key identifier: 8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 24 May 2024 12:55:36 +0000
ROA not before:           Fri 24 May 2024 12:50:36 +0000
ROA not after:            Fri 23 May 2025 12:55:36 +0000
asID:                     264022
IP address blocks:        170.245.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:91:49:b7:b1:d5:0a:b1:24:54:17:30:2b:43:d3:bd:25:cb:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C116A6EBF1801092052F063332CB171BCDEBFA2
        Validity
            Not Before: May 24 12:50:36 2024 GMT
            Not After : May 23 12:55:36 2025 GMT
        Subject: CN=933D0344DD3CE267F81D5610B86EFA95DA271B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:77:38:52:97:9f:74:37:b1:30:f1:27:cb:
                    8d:7c:26:db:e2:91:4c:ae:f6:29:aa:d7:62:4b:11:
                    f9:10:f9:58:20:96:01:eb:3a:9e:71:ca:88:48:bb:
                    92:9b:69:7b:f1:c5:e1:1b:55:b7:3f:7c:1b:96:7d:
                    67:5a:cd:9d:2b:cf:e1:13:bb:a4:71:1e:db:64:8e:
                    df:f2:41:1f:67:b5:a6:72:49:e5:9c:2b:d1:5b:2e:
                    ac:14:bf:fd:21:f3:7b:78:e6:4d:19:fd:fb:a9:72:
                    c9:03:ee:5a:fd:b8:6d:c9:af:2f:40:a2:45:01:a7:
                    0b:87:27:2b:06:17:ab:61:0e:53:12:db:29:57:b2:
                    69:97:43:97:9e:25:b4:bc:56:b0:0b:e0:a7:75:33:
                    7d:35:ea:4e:f6:88:4f:fa:71:98:d7:e0:e2:39:8a:
                    3d:7b:9a:07:58:ab:b2:e9:5e:0f:9b:08:bf:6c:1d:
                    cb:e4:3a:0a:30:f2:31:1b:1b:eb:04:7d:c7:81:89:
                    39:d2:b1:ed:e6:1f:74:5b:47:0b:9a:d6:70:c4:4b:
                    18:b3:41:91:95:38:5a:be:cc:ad:87:ae:05:4b:6d:
                    74:2a:4a:3f:ed:66:29:c7:3a:31:af:b2:c3:8d:87:
                    2d:74:74:ae:69:f9:2c:b1:9f:27:39:37:9a:a7:1d:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:03:44:DD:3C:E2:67:F8:1D:56:10:B8:6E:FA:95:DA:27:1B:77
            X509v3 Authority Key Identifier:
                keyid:8C:11:6A:6E:BF:18:01:09:20:52:F0:63:33:2C:B1:71:BC:DE:BF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/8C116A6EBF1801092052F063332CB171BCDEBFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C116A6EBF1801092052F063332CB171BCDEBFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:67:69:d9:d1:79:1b:54:dc:a1:26:e8:ed:f1:6d:23:8f:
         b1:f2:8d:bd:f0:d1:dc:88:d7:2f:d9:3e:a4:62:3a:f4:c1:c8:
         78:d0:32:c0:d0:b0:c8:5c:88:25:f3:09:d7:13:8d:a5:56:7d:
         5f:e4:60:17:87:65:6d:3e:72:17:9d:3f:f0:a9:1d:09:cc:6f:
         78:06:1f:2c:06:9c:1e:54:7d:9f:8e:e9:e3:22:09:2c:11:e7:
         fb:c3:47:79:cf:33:04:42:06:22:43:30:d7:e2:71:6a:1d:42:
         30:b2:0f:ee:d9:4f:44:71:b9:23:81:1c:ec:b1:fd:4f:79:d1:
         55:e6:3f:e6:c7:71:2a:e0:b9:8e:d1:4e:b8:2a:66:d0:a9:28:
         ea:37:2e:2a:8c:b3:33:db:ba:7b:da:5e:e6:9e:2c:ab:f7:0e:
         0e:6e:b7:99:db:21:76:f9:7c:8a:3b:47:b8:f9:eb:ef:b7:20:
         78:43:fc:de:0f:dc:79:73:32:c3:13:80:53:83:ee:d4:fe:92:
         5d:e0:5e:f3:19:cc:e5:bc:4e:e2:e3:5c:9f:00:a5:50:55:d2:
         1d:02:76:02:55:95:98:e0:aa:3a:df:51:23:61:41:c4:9f:40:
         f6:08:95:92:e0:27:c4:00:47:05:06:bb:25:6e:c0:96:32:f2:
         6c:9d:0b:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcZFJt7HVCrEkVBcwK0PTvSXLylcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMxMTZBNkVCRjE4MDEwOTIwNTJGMDYzMzMyQ0IxNzFC
Q0RFQkZBMjAeFw0yNDA1MjQxMjUwMzZaFw0yNTA1MjMxMjU1MzZaMDMxMTAvBgNV
BAMTKDkzM0QwMzQ0REQzQ0UyNjdGODFENTYxMEI4NkVGQTk1REEyNzFCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTXc4UpefdDexMPEny418Jtvi
kUyu9imq12JLEfkQ+VgglgHrOp5xyohIu5KbaXvxxeEbVbc/fBuWfWdazZ0rz+ET
u6RxHttkjt/yQR9ntaZySeWcK9FbLqwUv/0h83t45k0Z/fupcskD7lr9uG3Jry9A
okUBpwuHJysGF6thDlMS2ylXsmmXQ5eeJbS8VrAL4Kd1M3016k72iE/6cZjX4OI5
ij17mgdYq7LpXg+bCL9sHcvkOgow8jEbG+sEfceBiTnSse3mH3RbRwua1nDESxiz
QZGVOFq+zK2HrgVLbXQqSj/tZinHOjGvssONhy10dK5p+Syxnyc5N5qnHd2TAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkz0DRN084mf4HVYQuG76ldonG3cwHwYDVR0j
BBgwFoAUjBFqbr8YAQkgUvBjMyyxcbzev6IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNFdkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZL
R1AvMC84QzExNkE2RUJGMTgwMTA5MjA1MkYwNjMzMzJDQjE3MUJDREVCRkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDMTE2QTZFQkYxODAxMDky
MDUyRjA2MzMzMkNCMTcxQkNERUJGQTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDRXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1rDANBgkqhkiG9w0BAQsFAAOCAQEALaRn
adnReRtU3KEm6O3xbSOPsfKNvfDR3IjXL9k+pGI69MHIeNAywNCwyFyIJfMJ1xON
pVZ9X+RgF4dlbT5yF50/8KkdCcxveAYfLAacHlR9n47p4yIJLBHn+8NHec8zBEIG
IkMw1+Jxah1CMLIP7tlPRHG5I4Ec7LH9T3nRVeY/5sdxKuC5jtFOuCpm0Kko6jcu
KoyzM9u6e9pe5p4sq/cODm63mdshdvl8ijtHuPnr77cgeEP83g/ceXMywxOAU4Pu
1P6SXeBe8xnM5bxO4uNcnwClUFXSHQJ2AlWVmOCqOt9RI2FBxJ9A9giVkuAnxABH
BQa7JW7AljLybJ0L4g==
-----END CERTIFICATE-----
Generated at Mon May 27 05:32:20 2024 by rpki-client on console.sobornost.net