Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3332203d3e203533313831.roa
File:                     3137392e34322e342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          0SQNHe9gE/in+B2mHEgc0HlIjgEHiiGlKMjYxmhTgdw=
Subject key identifier:   36:E6:7E:CE:2F:B3:76:04:B3:84:22:FE:62:87:76:16:46:0A:7C:FC
Certificate issuer:       /CN=D00E3F04066D7B94F536480B8040FCA8545940B4
Certificate serial:       3A67374171088C83DC7C2DFC394B66201FDBF725
Authority key identifier: D0:0E:3F:04:06:6D:7B:94:F5:36:48:0B:80:40:FC:A8:54:59:40:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D00E3F04066D7B94F536480B8040FCA8545940B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3332203d3e203533313831.roa
Signing time:             Mon 13 Mar 2023 13:22:37 +0000
ROA not before:           Mon 13 Mar 2023 13:17:37 +0000
ROA not after:            Mon 11 Mar 2024 13:22:37 +0000
asID:                     53181
IP address blocks:        179.42.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:37:41:71:08:8c:83:dc:7c:2d:fc:39:4b:66:20:1f:db:f7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E3F04066D7B94F536480B8040FCA8545940B4
        Validity
            Not Before: Mar 13 13:17:37 2023 GMT
            Not After : Mar 11 13:22:37 2024 GMT
        Subject: CN=36E67ECE2FB37604B38422FE62877616460A7CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:21:55:42:55:4d:24:8c:69:09:80:0c:8b:
                    ca:a7:df:55:49:cd:82:6e:71:d5:88:4b:f1:4f:d7:
                    dc:41:66:6f:c8:3f:a3:e3:52:06:c4:76:40:32:c8:
                    f6:af:1d:67:7e:79:e8:76:ac:c9:1a:76:19:e2:0f:
                    2a:9f:96:93:f5:70:27:f2:4e:65:da:be:92:e8:e9:
                    6b:14:03:bf:8a:9f:9d:bd:4d:ed:85:34:3f:77:84:
                    c9:e8:40:2f:e9:e2:ff:ca:07:5e:36:01:85:a8:da:
                    44:d1:55:59:c1:0a:b0:02:46:e6:cd:6a:47:35:5b:
                    b5:f0:73:2c:a9:a0:f1:5e:ef:ab:6f:cf:6d:bd:22:
                    83:45:74:0f:3d:78:6e:2b:9c:ce:7c:98:d2:36:52:
                    9b:8b:03:92:eb:36:bd:ee:60:1f:1e:62:ab:42:9e:
                    cf:65:6b:39:52:f7:11:f0:83:3f:f9:ee:23:88:69:
                    24:51:9f:2c:86:b3:74:00:4e:a6:26:a1:2e:03:32:
                    8b:88:4f:eb:b1:c6:26:f5:ca:f2:5c:47:e3:27:c4:
                    48:d6:21:70:9c:99:b9:20:db:34:e6:33:5f:ba:ff:
                    16:77:24:4b:a7:2f:01:a6:23:3e:c4:59:2d:eb:2c:
                    ad:5f:76:08:2e:df:a9:f9:0e:c1:2a:a8:05:12:e9:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:7E:CE:2F:B3:76:04:B3:84:22:FE:62:87:76:16:46:0A:7C:FC
            X509v3 Authority Key Identifier:
                keyid:D0:0E:3F:04:06:6D:7B:94:F5:36:48:0B:80:40:FC:A8:54:59:40:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/D00E3F04066D7B94F536480B8040FCA8545940B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D00E3F04066D7B94F536480B8040FCA8545940B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:9c:63:c7:61:b0:a6:5f:b7:4b:9a:88:60:ee:7c:48:64:
         45:d1:0a:4e:70:c7:a3:30:4b:18:ee:e4:54:6c:10:b8:85:77:
         11:a7:2c:9a:84:6c:d6:19:9b:31:7a:a4:74:8e:2c:6f:6e:2a:
         90:1e:fd:62:cb:60:31:98:fb:1a:99:71:2a:f4:84:29:d4:fe:
         87:77:c2:c3:d6:92:df:9a:ae:26:3e:b5:bc:c1:66:1a:77:67:
         e4:b8:92:96:c2:af:f1:bf:35:8d:52:98:7e:f0:0a:d7:d8:a4:
         ae:d6:09:07:ba:c1:aa:6a:8d:b4:54:7f:7c:2c:14:a6:cd:4e:
         9a:e1:8e:88:90:f4:2c:17:9f:69:2f:1f:79:62:f2:9c:8a:a3:
         cf:08:b0:78:2f:6d:24:32:6c:16:cc:90:06:70:b4:e6:23:a9:
         4b:08:e0:23:7f:2f:fe:43:b8:b8:6e:89:d6:3a:08:67:7a:01:
         4c:85:9c:e3:84:e7:ac:c6:93:f5:4e:42:b1:e9:3c:ae:06:46:
         af:fa:4e:e1:33:4a:6c:d2:cb:ec:f8:b2:f3:7d:32:d3:ad:ca:
         7c:4f:fd:b0:21:22:db:9b:76:c0:6b:e5:e8:86:0e:49:8c:02:
         5e:a2:3c:53:66:d1:30:29:3e:70:b2:84:e9:6c:66:e9:4c:47:
         9a:d7:3f:a5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOmc3QXEIjIPcfC38OUtmIB/b9yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwRTNGMDQwNjZEN0I5NEY1MzY0ODBCODA0MEZDQTg1
NDU5NDBCNDAeFw0yMzAzMTMxMzE3MzdaFw0yNDAzMTExMzIyMzdaMDMxMTAvBgNV
BAMTKDM2RTY3RUNFMkZCMzc2MDRCMzg0MjJGRTYyODc3NjE2NDYwQTdDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8iFVQlVNJIxpCYAMi8qn31VJ
zYJucdWIS/FP19xBZm/IP6PjUgbEdkAyyPavHWd+eeh2rMkadhniDyqflpP1cCfy
TmXavpLo6WsUA7+Kn529Te2FND93hMnoQC/p4v/KB142AYWo2kTRVVnBCrACRubN
akc1W7XwcyypoPFe76tvz229IoNFdA89eG4rnM58mNI2UpuLA5LrNr3uYB8eYqtC
ns9lazlS9xHwgz/57iOIaSRRnyyGs3QATqYmoS4DMouIT+uxxib1yvJcR+MnxEjW
IXCcmbkg2zTmM1+6/xZ3JEunLwGmIz7EWS3rLK1fdggu36n5DsEqqAUS6f2RAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUNuZ+zi+zdgSzhCL+Yod2FkYKfPwwHwYDVR0j
BBgwFoAU0A4/BAZte5T1NkgLgED8qFRZQLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZLRUh5OFIzVHFOSmk3cVBkb0V0d05xcFVnRFU0WFE4cmRBZEpyMWFT
NzIvMC9EMDBFM0YwNDA2NkQ3Qjk0RjUzNjQ4MEI4MDQwRkNBODU0NTk0MEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMEUzRjA0MDY2RDdCOTRG
NTM2NDgwQjgwNDBGQ0E4NTQ1OTQwQjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2S0VIeThSM1RxTkppN3FQZG9FdHdOcXBVZ0RVNFhROHJkQWRKcjFhUzcyLzAv
MzEzNzM5MmUzNDMyMmUzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1MzMzMTM4
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKzKgQwDQYJKoZIhvcNAQELBQADggEBAEs/nGPHYbCmX7dL
mohg7nxIZEXRCk5wx6MwSxju5FRsELiFdxGnLJqEbNYZmzF6pHSOLG9uKpAe/WLL
YDGY+xqZcSr0hCnU/od3wsPWkt+ariY+tbzBZhp3Z+S4kpbCr/G/NY1SmH7wCtfY
pK7WCQe6wapqjbRUf3wsFKbNTprhjoiQ9CwXn2kvH3li8pyKo88IsHgvbSQybBbM
kAZwtOYjqUsI4CN/L/5DuLhuidY6CGd6AUyFnOOE56zGk/VOQrHpPK4GRq/6TuEz
SmzSy+z4svN9MtOtynxP/bAhItubdsBr5eiGDkmMAl6iPFNm0TApPnCyhOlsZulM
R5rXP6U=
-----END CERTIFICATE-----