Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3332203d3e203532363031.roa (raw, json)
Hash identifier:          Q1R1KMEIH2zqi93v9XSFbgGciaztAFKRXbVlcuiMhSI=
Subject key identifier:   E3:CD:55:E4:13:0D:C9:4D:8F:03:5B:0D:45:0D:C9:F8:BF:00:32:90
Certificate issuer:       /CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
Certificate serial:       372D61E6DCE794AFF56E7DA32EA93B077B3FE186
Authority key identifier: FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa
Signing time:             Wed 05 Apr 2023 18:59:38 +0000
ROA not before:           Wed 05 Apr 2023 18:54:38 +0000
ROA not after:            Wed 03 Apr 2024 18:59:38 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2d:61:e6:dc:e7:94:af:f5:6e:7d:a3:2e:a9:3b:07:7b:3f:e1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4740D751D7330E7FE81FB75023D113A8850CD3
        Validity
            Not Before: Apr  5 18:54:38 2023 GMT
            Not After : Apr  3 18:59:38 2024 GMT
        Subject: CN=E3CD55E4130DC94D8F035B0D450DC9F8BF003290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:17:49:dd:8c:78:f9:3d:66:48:74:8e:ec:
                    a0:dc:98:0a:fc:3e:a1:fc:44:46:e6:fe:8c:26:0f:
                    0d:40:ea:0e:52:2d:d8:02:85:0a:c7:e7:53:7b:17:
                    6b:59:bc:04:77:e3:eb:af:96:23:04:ab:bf:3d:0d:
                    df:fd:31:c2:75:6c:3a:9b:d6:fa:ee:7c:62:40:53:
                    19:12:0d:0d:ec:c8:e0:ff:e3:36:36:0b:77:b4:7e:
                    96:63:97:6f:c0:aa:fc:bd:78:f2:ac:a5:5c:1e:40:
                    21:36:6a:c5:c5:fe:0b:af:1f:5a:c4:f0:ed:ff:19:
                    91:46:a8:ae:9d:26:e1:e1:ef:d4:55:a0:7f:7b:88:
                    80:36:45:9c:d1:ec:48:10:07:28:90:43:a4:b1:e8:
                    32:91:47:2d:40:0b:a3:00:6b:c1:e0:a9:27:de:d5:
                    4d:f9:68:f6:da:c6:bb:6a:2b:f3:f1:98:67:8b:31:
                    c3:f3:f4:e2:99:4b:f9:da:23:d5:bf:43:b8:3a:e5:
                    b7:a2:45:e0:a9:93:74:e5:48:7c:70:88:08:20:75:
                    58:48:e2:15:2f:5d:db:bd:bb:d4:c7:f3:ef:5e:b4:
                    0a:e7:e4:c5:72:a2:1b:f7:fe:47:c6:2f:ca:70:4a:
                    1a:5b:27:d8:1c:21:cf:e6:b7:f3:91:b4:1d:1b:5b:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:55:E4:13:0D:C9:4D:8F:03:5B:0D:45:0D:C9:F8:BF:00:32:90
            X509v3 Authority Key Identifier:
                keyid:FA:47:40:D7:51:D7:33:0E:7F:E8:1F:B7:50:23:D1:13:A8:85:0C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/FA4740D751D7330E7FE81FB75023D113A8850CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4740D751D7330E7FE81FB75023D113A8850CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/1/3137302e38332e3130302e302f32322d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:45:2a:2d:0d:6e:65:7f:f0:c0:82:11:24:b5:05:15:c8:
         d4:fd:a6:7f:1b:43:97:1d:82:94:f4:ab:17:61:91:04:8b:0b:
         27:1b:cd:2e:89:23:f2:05:f4:ad:f7:7c:c8:a9:3a:8b:e2:f5:
         7f:56:be:e2:87:1b:3f:9b:ce:85:55:f7:ef:33:26:88:d8:5a:
         77:32:7d:01:6d:76:8f:cd:e3:68:55:9b:b1:4a:9e:3e:f9:fc:
         a0:0f:d3:63:84:64:fd:40:09:da:02:37:3e:af:95:20:90:31:
         76:53:65:ec:52:3c:9c:9c:35:48:3d:40:3e:8f:40:af:80:80:
         a5:15:9c:b8:a9:57:9b:81:95:07:bf:79:52:f5:ef:c1:06:8f:
         a2:6d:a7:89:39:5d:e1:1e:48:da:ac:9d:d2:62:96:97:a0:c1:
         c0:62:02:06:c0:0e:0d:bf:82:f4:e2:5b:19:a9:37:17:12:14:
         0f:c7:7c:0d:a5:38:26:21:71:6c:df:9e:fa:46:f5:12:f1:5e:
         d3:ba:f2:17:67:16:e6:88:e2:15:fe:f1:1a:ce:17:31:dd:61:
         e4:5a:b0:b2:c5:47:06:94:26:ce:7f:d2:55:9f:25:69:bf:ca:
         02:37:6e:94:f1:d0:0a:e5:54:18:42:fc:a3:67:8e:f3:49:63:
         db:aa:04:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNy1h5tznlK/1bn2jLqk7B3s/4YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NzQwRDc1MUQ3MzMwRTdGRTgxRkI3NTAyM0QxMTNB
ODg1MENEMzAeFw0yMzA0MDUxODU0MzhaFw0yNDA0MDMxODU5MzhaMDMxMTAvBgNV
BAMTKEUzQ0Q1NUU0MTMwREM5NEQ4RjAzNUIwRDQ1MERDOUY4QkYwMDMyOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2xdJ3Yx4+T1mSHSO7KDcmAr8
PqH8REbm/owmDw1A6g5SLdgChQrH51N7F2tZvAR34+uvliMEq789Dd/9McJ1bDqb
1vrufGJAUxkSDQ3syOD/4zY2C3e0fpZjl2/Aqvy9ePKspVweQCE2asXF/guvH1rE
8O3/GZFGqK6dJuHh79RVoH97iIA2RZzR7EgQByiQQ6Sx6DKRRy1AC6MAa8HgqSfe
1U35aPbaxrtqK/PxmGeLMcPz9OKZS/naI9W/Q7g65beiReCpk3TlSHxwiAggdVhI
4hUvXdu9u9TH8+9etArn5MVyohv3/kfGL8pwShpbJ9gcIc/mt/ORtB0bW4XJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU481V5BMNyU2PA1sNRQ3J+L8AMpAwHwYDVR0j
BBgwFoAU+kdA11HXMw5/6B+3UCPRE6iFDNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVyZkg5b1FMUXp6c1pRUDJRcmE1TnhKTmhrTnljZkMxTlFnclpNU1hC
VmgvMS9GQTQ3NDBENzUxRDczMzBFN0ZFODFGQjc1MDIzRDExM0E4ODUwQ0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNDc0MEQ3NTFENzMzMEU3
RkU4MUZCNzUwMjNEMTEzQTg4NTBDRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1cmZIOW9RTFF6enNaUVAyUXJhNU54Sk5oa055Y2ZDMU5RZ3JaTVNYQlZoLzEv
MzEzNzMwMmUzODMzMmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzYzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlNkMA0GCSqGSIb3DQEBCwUAA4IBAQBf0kUqLQ1u
ZX/wwIIRJLUFFcjU/aZ/G0OXHYKU9KsXYZEEiwsnG80uiSPyBfSt93zIqTqL4vV/
Vr7ihxs/m86FVffvMyaI2Fp3Mn0BbXaPzeNoVZuxSp4++fygD9NjhGT9QAnaAjc+
r5UgkDF2U2XsUjycnDVIPUA+j0CvgIClFZy4qVebgZUHv3lS9e/BBo+ibaeJOV3h
HkjarJ3SYpaXoMHAYgIGwA4Nv4L04lsZqTcXEhQPx3wNpTgmIXFs3576RvUS8V7T
uvIXZxbmiOIV/vEazhcx3WHkWrCyxUcGlCbOf9JVnyVpv8oCN26U8dAK5VQYQvyj
Z47zSWPbqgTX
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net