Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa
File:                     3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa (raw, json)
Hash identifier:          ls3pW8JOuaSqy3XYlkX4nWGgMZMlIT38bNKPvxgv3Qw=
Subject key identifier:   F3:BD:9C:60:13:24:6E:B2:75:83:AD:B5:E2:7A:61:53:A0:47:97:0C
Certificate issuer:       /CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
Certificate serial:       72C2A266FFAA687C554986012E48DAA08A7C661A
Authority key identifier: DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa
Signing time:             Tue 14 Nov 2023 12:57:31 +0000
ROA not before:           Tue 14 Nov 2023 12:52:31 +0000
ROA not after:            Tue 12 Nov 2024 12:57:31 +0000
asID:                     262317
IP address blocks:        177.91.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:a2:66:ff:aa:68:7c:55:49:86:01:2e:48:da:a0:8a:7c:66:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
        Validity
            Not Before: Nov 14 12:52:31 2023 GMT
            Not After : Nov 12 12:57:31 2024 GMT
        Subject: CN=F3BD9C6013246EB27583ADB5E27A6153A047970C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:34:4a:38:72:82:ec:36:88:3b:af:01:2e:
                    94:27:24:a7:0c:00:bf:ac:1c:32:41:92:19:ea:a4:
                    5d:fb:9b:bc:63:03:bb:67:dd:ec:72:f0:36:ee:ee:
                    6b:0b:fc:85:fc:ea:b2:6d:41:65:b1:e5:63:c2:35:
                    c7:5c:74:ed:5b:77:41:ef:b0:4c:7b:98:08:9e:06:
                    8c:8d:41:3f:14:75:b4:64:96:0b:6a:05:75:24:0b:
                    d6:e9:2e:f3:84:b4:ac:3a:e4:54:99:6b:57:46:b3:
                    7b:2e:c1:6d:c4:c5:3d:ea:e3:82:4c:44:80:c1:1f:
                    84:22:56:66:be:55:c9:3a:6b:e2:8d:57:d7:d9:bb:
                    af:35:aa:6e:81:b3:f7:29:34:f9:73:a9:88:68:cd:
                    bd:48:db:73:fb:59:7f:81:b3:1c:86:3b:fa:b9:15:
                    98:c1:3e:6c:8f:d6:ee:73:c2:17:d1:e8:10:be:7d:
                    a4:68:94:c5:e5:f2:ff:fd:f3:06:a8:06:a2:d7:bf:
                    25:5d:97:fe:0b:3c:e5:05:a9:34:dc:86:4d:a6:93:
                    49:24:74:a5:81:fc:d3:f7:de:50:2a:50:db:3a:4f:
                    bb:92:19:35:4c:3f:f6:e0:00:0d:07:65:e3:28:70:
                    dd:bb:82:63:ba:f5:a0:e1:73:30:89:72:16:24:f6:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:9C:60:13:24:6E:B2:75:83:AD:B5:E2:7A:61:53:A0:47:97:0C
            X509v3 Authority Key Identifier:
                keyid:DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:89:16:4d:fb:0f:14:48:86:5b:ea:69:61:50:dd:bb:5f:51:
         c1:b2:65:ea:48:93:72:e1:e6:e8:75:41:b3:ac:69:11:91:c6:
         ff:66:01:3f:7a:06:7c:17:18:5a:a1:32:03:a3:73:bf:aa:be:
         b3:41:b7:c9:71:12:ad:d9:32:4f:06:2b:97:d6:07:b1:36:c6:
         a0:d0:f0:4b:2f:38:73:47:4c:2c:50:00:55:55:ce:92:e9:d5:
         e6:c4:28:78:6b:75:c2:c0:0b:72:22:96:fd:a7:1a:fa:f6:cd:
         8a:02:65:20:c1:4b:e6:5f:66:37:fb:cf:1a:da:7a:c8:46:cd:
         e2:3f:77:22:b8:74:d3:85:3a:bb:85:84:b7:ec:d4:03:0c:e6:
         cb:51:a7:7d:06:7b:d9:1b:ae:52:2a:35:9e:02:57:57:f6:10:
         db:c3:a1:fe:10:58:de:ce:8d:fc:ea:a2:05:17:10:79:60:3f:
         f0:a2:9d:f3:b1:57:4c:6b:16:af:65:96:94:70:9f:12:f6:c5:
         33:3d:10:9b:ad:9b:99:ee:55:ef:7d:b5:c9:87:1a:db:6f:06:
         84:21:3d:dc:3f:d1:fe:5d:ef:8d:56:35:c4:ca:57:c2:48:90:
         eb:70:e0:fe:23:eb:01:9b:33:ab:76:bd:1c:91:11:cc:a4:cf:
         c9:6e:fc:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcsKiZv+qaHxVSYYBLkjaoIp8ZhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4QjFGOThCRDZDRDMzMjYyNjA4RkYzOEMyNDNDRjdF
Qzc4M0I3NjAeFw0yMzExMTQxMjUyMzFaFw0yNDExMTIxMjU3MzFaMDMxMTAvBgNV
BAMTKEYzQkQ5QzYwMTMyNDZFQjI3NTgzQURCNUUyN0E2MTUzQTA0Nzk3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3jRKOHKC7DaIO68BLpQnJKcM
AL+sHDJBkhnqpF37m7xjA7tn3exy8Dbu7msL/IX86rJtQWWx5WPCNcdcdO1bd0Hv
sEx7mAieBoyNQT8UdbRklgtqBXUkC9bpLvOEtKw65FSZa1dGs3suwW3ExT3q44JM
RIDBH4QiVma+Vck6a+KNV9fZu681qm6Bs/cpNPlzqYhozb1I23P7WX+BsxyGO/q5
FZjBPmyP1u5zwhfR6BC+faRolMXl8v/98waoBqLXvyVdl/4LPOUFqTTchk2mk0kk
dKWB/NP33lAqUNs6T7uSGTVMP/bgAA0HZeMocN27gmO69aDhczCJchYk9o5HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU872cYBMkbrJ1g6214nphU6BHlwwwHwYDVR0j
BBgwFoAU3osfmL1s0zJiYI/zjCQ89+x4O3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5zM0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVWTWJyR1ZuUHlM
b0IvMC9ERThCMUY5OEJENkNEMzMyNjI2MDhGRjM4QzI0M0NGN0VDNzgzQjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFOEIxRjk4QkQ2Q0QzMzI2
MjYwOEZGMzhDMjQzQ0Y3RUM3ODNCNzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuczNFWFhZenp4b2c5d0NNTXJhRnNTeDJlQ2VNSnI1Vk1ickdWblB5TG9CLzAv
MzEzNzM3MmUzOTMxMmUzMTMyMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxW3gwDQYJKoZIhvcNAQELBQADggEBADGJFk37
DxRIhlvqaWFQ3btfUcGyZepIk3Lh5uh1QbOsaRGRxv9mAT96BnwXGFqhMgOjc7+q
vrNBt8lxEq3ZMk8GK5fWB7E2xqDQ8EsvOHNHTCxQAFVVzpLp1ebEKHhrdcLAC3Ii
lv2nGvr2zYoCZSDBS+ZfZjf7zxraeshGzeI/dyK4dNOFOruFhLfs1AMM5stRp30G
e9kbrlIqNZ4CV1f2ENvDof4QWN7OjfzqogUXEHlgP/CinfOxV0xrFq9llpRwnxL2
xTM9EJutm5nuVe99tcmHGttvBoQhPdw/0f5d741WNcTKV8JIkOtw4P4j6wGbM6t2
vRyREcykz8lu/EY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org