Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa
File:                     3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa (raw, json)
Hash identifier:          lmgPUfPUk8WNGC9T4w5w1PRNgXUfBl2CqCJ6cN6auqo=
Subject key identifier:   02:9A:20:B9:5E:8F:80:1E:33:DF:44:86:8F:16:E8:18:00:82:70:04
Certificate issuer:       /CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
Certificate serial:       6ED3445CF908B8F86D741C15CDE798DB758BB439
Authority key identifier: C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa
Signing time:             Wed 12 Jul 2023 01:23:33 +0000
ROA not before:           Wed 12 Jul 2023 01:18:33 +0000
ROA not after:            Wed 10 Jul 2024 01:23:33 +0000
asID:                     271336
IP address blocks:        177.71.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d3:44:5c:f9:08:b8:f8:6d:74:1c:15:cd:e7:98:db:75:8b:b4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
        Validity
            Not Before: Jul 12 01:18:33 2023 GMT
            Not After : Jul 10 01:23:33 2024 GMT
        Subject: CN=029A20B95E8F801E33DF44868F16E81800827004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:90:61:f0:68:8b:1d:a9:87:1d:d9:82:14:
                    94:32:0e:94:fe:bf:9f:bf:d8:8b:fa:c8:43:af:c4:
                    44:fd:e3:12:a6:30:49:5c:99:fb:4a:3c:8b:0b:8f:
                    d9:00:27:11:34:fd:3d:6d:72:20:50:d4:6b:30:59:
                    d0:19:e7:2d:c5:94:1f:bb:1f:a0:87:07:db:2c:23:
                    65:cd:be:db:c4:d2:ea:9e:79:3d:2c:17:a9:66:33:
                    69:d2:a9:ab:75:43:b9:e4:1e:3c:03:43:eb:2b:bf:
                    fa:dc:0b:fc:aa:61:8a:23:df:f4:2d:2a:25:84:98:
                    61:a6:52:db:fa:72:82:a5:9d:53:ba:d2:27:4c:a1:
                    2f:40:41:57:2f:7d:a8:e1:bb:c0:75:e4:65:d1:b4:
                    dd:c9:aa:a4:b6:01:e7:92:dc:bc:06:db:a3:85:13:
                    bf:0f:dd:d5:6f:24:a0:ba:3d:12:44:25:0e:20:06:
                    a1:f7:c2:42:98:38:0f:92:ab:93:65:ef:f4:7b:70:
                    3e:78:f9:2d:f7:da:d7:4b:fd:7a:d1:a2:ed:6b:bb:
                    e2:e1:e2:4e:c9:3d:45:6e:17:f7:27:7b:23:e3:dd:
                    f7:fd:4a:70:c2:09:79:e5:ad:b2:0e:59:e3:4d:a7:
                    c4:48:c1:59:37:63:d3:a8:1e:66:c7:08:76:b8:e9:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:20:B9:5E:8F:80:1E:33:DF:44:86:8F:16:E8:18:00:82:70:04
            X509v3 Authority Key Identifier:
                keyid:C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32322d3232203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:19:2d:32:c7:07:6c:b7:f2:b6:ee:1e:cc:65:30:17:3e:
         39:1c:6b:76:4d:9a:8e:a4:08:dc:35:6b:76:91:ae:fb:1b:7e:
         0e:6a:e6:5c:78:08:c0:f8:a1:aa:ff:92:50:38:3e:1c:7d:db:
         9c:48:88:ab:1a:c2:cf:1e:10:9f:70:56:a6:55:e0:26:ec:b2:
         29:de:67:d9:6a:49:16:de:36:4e:40:38:0c:95:e8:b7:7a:e7:
         d2:f5:0c:53:8f:05:77:21:1b:bf:c7:ea:05:6f:dc:b2:6d:0a:
         a4:cc:e9:04:71:f0:0d:da:a2:1a:1f:b7:aa:a0:f8:a3:0d:25:
         6a:0f:5e:3b:07:af:9d:39:53:ee:53:d8:6f:f2:63:4b:3a:cb:
         ce:d8:e8:8f:c2:09:c7:2a:5e:19:46:81:1d:e6:99:84:78:da:
         14:f9:ae:43:79:89:b7:08:f7:10:5f:67:38:06:81:ba:11:11:
         7f:5d:ea:a8:61:9c:fa:84:9f:47:71:55:8a:b4:91:1c:e8:a6:
         eb:b7:82:40:6b:02:5d:71:9f:df:5f:3f:ae:16:87:43:76:c7:
         15:1d:61:01:17:e9:53:92:29:68:57:e4:89:b1:60:67:c5:15:
         bf:27:1f:9b:c0:54:5e:d2:6b:79:6b:af:e5:68:33:e9:f6:60:
         65:e6:5b:21
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbtNEXPkIuPhtdBwVzeeY23WLtDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgzOTVEOEQxNjUxM0FCQTVCQ0UzODc2QkM4Njk0NkU0
NjRGM0JDNzAeFw0yMzA3MTIwMTE4MzNaFw0yNDA3MTAwMTIzMzNaMDMxMTAvBgNV
BAMTKDAyOUEyMEI5NUU4RjgwMUUzM0RGNDQ4NjhGMTZFODE4MDA4MjcwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTJBh8GiLHamHHdmCFJQyDpT+
v5+/2Iv6yEOvxET94xKmMElcmftKPIsLj9kAJxE0/T1tciBQ1GswWdAZ5y3FlB+7
H6CHB9ssI2XNvtvE0uqeeT0sF6lmM2nSqat1Q7nkHjwDQ+srv/rcC/yqYYoj3/Qt
KiWEmGGmUtv6coKlnVO60idMoS9AQVcvfajhu8B15GXRtN3JqqS2AeeS3LwG26OF
E78P3dVvJKC6PRJEJQ4gBqH3wkKYOA+Sq5Nl7/R7cD54+S332tdL/XrRou1ru+Lh
4k7JPUVuF/cneyPj3ff9SnDCCXnlrbIOWeNNp8RIwVk3Y9OoHmbHCHa46ZP5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUApoguV6PgB4z30SGjxboGACCcAQwHwYDVR0j
BBgwFoAUyDldjRZROrpbzjh2vIaUbkZPO8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG03aXdiY1JSeVA5am5aWFo5a1Fpc2ljTEVwNXhHRGE5VzVGc0hqc0du
S2EvMC9DODM5NUQ4RDE2NTEzQUJBNUJDRTM4NzZCQzg2OTQ2RTQ2NEYzQkM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4Mzk1RDhEMTY1MTNBQkE1
QkNFMzg3NkJDODY5NDZFNDY0RjNCQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RtN2l3YmNSUnlQOWpuWlhaOWtRaXNpY0xFcDV4R0RhOVc1RnNIanNHbkthLzAv
MzEzNzM3MmUzNzMxMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMzMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxR2QwDQYJKoZIhvcNAQELBQADggEBAEM8GS0y
xwdst/K27h7MZTAXPjkca3ZNmo6kCNw1a3aRrvsbfg5q5lx4CMD4oar/klA4Phx9
25xIiKsaws8eEJ9wVqZV4CbssineZ9lqSRbeNk5AOAyV6Ld659L1DFOPBXchG7/H
6gVv3LJtCqTM6QRx8A3aohoft6qg+KMNJWoPXjsHr505U+5T2G/yY0s6y87Y6I/C
CccqXhlGgR3mmYR42hT5rkN5ibcI9xBfZzgGgboREX9d6qhhnPqEn0dxVYq0kRzo
puu3gkBrAl1xn99fP64Wh0N2xxUdYQEX6VOSKWhX5ImxYGfFFb8nH5vAVF7Sa3lr
r+VoM+n2YGXmWyE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org