Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3232203d3e203532363934.roa
File:                     3137372e37332e33362e302f32322d3232203d3e203532363934.roa (raw, json)
Hash identifier:          6DqtY/1PZpjX5Uq6K6DfusG23MWju4iRkkPX6oF+HIE=
Subject key identifier:   A5:67:EB:C5:B1:E1:EB:A5:B8:A4:38:CF:60:7E:11:E5:A0:AE:40:1E
Certificate issuer:       /CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
Certificate serial:       760454DF4C1D8D2280E3120090238EA72F80CAD5
Authority key identifier: 64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3232203d3e203532363934.roa
Signing time:             Sun 21 Aug 2022 01:00:00 +0000
ROA not before:           Sun 21 Aug 2022 00:55:00 +0000
ROA not after:            Sun 20 Aug 2023 01:00:00 +0000
asID:                     52694
IP address blocks:        177.73.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:04:54:df:4c:1d:8d:22:80:e3:12:00:90:23:8e:a7:2f:80:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
        Validity
            Not Before: Aug 21 00:55:00 2022 GMT
            Not After : Aug 20 01:00:00 2023 GMT
        Subject: CN=3082010A0282010100AFB6F21D9D8842B0B7632305260E600997C23EC23E8EDCACEE20BE6C1D117FE7A6B393B1D268C6D17C90EDC8C6A2692A103C2CE5C8EA0F3E51E74CB9C794592189FE42735EFCE83D9F40BC98CB989ECD37E5DEDDA70EFF7F152D10DFE6EF33C0B55FFE92C0683B090DA1AC7AC03EABBC7CA0BF648437292DE2707F1440BAA9F0F6E316D64670F6E65C0CA67E73EBA8704B86F224CE4754B139B928C014136CD1AE97FAA8026C0CC87E003B184142F2BA75FC00D17CD5FCEC0C42BB6681C65C182A489D738B4660C629AEDC07D1FA692937F311AF28DABDCEECB32C3FDF828B07A6B10E90C08C0BFE10D1944A20EDB8B6926628342D1BFF74E9CFD4DD016458FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:f2:1d:9d:88:42:b0:b7:63:23:05:26:0e:
                    60:09:97:c2:3e:c2:3e:8e:dc:ac:ee:20:be:6c:1d:
                    11:7f:e7:a6:b3:93:b1:d2:68:c6:d1:7c:90:ed:c8:
                    c6:a2:69:2a:10:3c:2c:e5:c8:ea:0f:3e:51:e7:4c:
                    b9:c7:94:59:21:89:fe:42:73:5e:fc:e8:3d:9f:40:
                    bc:98:cb:98:9e:cd:37:e5:de:dd:a7:0e:ff:7f:15:
                    2d:10:df:e6:ef:33:c0:b5:5f:fe:92:c0:68:3b:09:
                    0d:a1:ac:7a:c0:3e:ab:bc:7c:a0:bf:64:84:37:29:
                    2d:e2:70:7f:14:40:ba:a9:f0:f6:e3:16:d6:46:70:
                    f6:e6:5c:0c:a6:7e:73:eb:a8:70:4b:86:f2:24:ce:
                    47:54:b1:39:b9:28:c0:14:13:6c:d1:ae:97:fa:a8:
                    02:6c:0c:c8:7e:00:3b:18:41:42:f2:ba:75:fc:00:
                    d1:7c:d5:fc:ec:0c:42:bb:66:81:c6:5c:18:2a:48:
                    9d:73:8b:46:60:c6:29:ae:dc:07:d1:fa:69:29:37:
                    f3:11:af:28:da:bd:ce:ec:b3:2c:3f:df:82:8b:07:
                    a6:b1:0e:90:c0:8c:0b:fe:10:d1:94:4a:20:ed:b8:
                    b6:92:66:28:34:2d:1b:ff:74:e9:cf:d4:dd:01:64:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:EB:C5:B1:E1:EB:A5:B8:A4:38:CF:60:7E:11:E5:A0:AE:40:1E
            X509v3 Authority Key Identifier:
                keyid:64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3232203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:e1:e6:52:71:6a:1f:f9:57:e7:1b:01:d8:56:ae:fa:2c:
         97:7e:20:f0:87:21:cb:55:df:07:61:e0:41:28:48:0d:b1:58:
         9a:c6:1d:08:d4:d4:5f:e6:26:ab:14:3c:48:98:b4:c5:38:a7:
         5b:f5:1b:bf:c8:65:47:e9:43:09:6a:e5:4d:e9:43:03:f2:9e:
         ba:62:a8:da:31:f5:11:8c:56:7a:87:9f:94:13:25:01:58:1d:
         9a:37:89:46:d4:49:c7:be:34:35:9e:1b:7b:84:3b:f0:8f:dd:
         8b:e0:e2:e6:a4:d7:df:ae:84:fc:bc:2c:c7:b6:40:82:4d:ee:
         52:5b:7b:c9:d4:95:eb:0b:93:3f:4b:f2:ec:a4:bc:14:bb:ef:
         44:33:96:1c:92:18:6a:42:40:96:07:02:85:75:30:35:e7:7a:
         9d:6b:6e:e4:cd:43:fc:71:ee:88:53:12:21:36:70:29:0a:ec:
         3e:5f:10:59:db:3c:72:b4:ec:c2:b3:e8:54:a1:09:a5:32:d6:
         82:cf:0c:de:a8:77:0d:5a:47:31:64:62:f9:48:dd:df:ce:5c:
         85:ba:ee:e5:3e:d5:01:28:4f:2e:79:63:ad:5a:60:f2:49:eb:
         cd:d0:cc:ab:3f:1a:d4:80:c1:88:c6:dc:fd:53:0d:c1:11:cd:
         ff:81:2f:f8
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUdgRU30wdjSKA4xIAkCOOpy+AytUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ4OTQ5NTY4NjlBOTRGQTNFRjQ1Q0MxMEE3RTVDMTQ0
OUM1QkNEMzAeFw0yMjA4MjEwMDU1MDBaFw0yMzA4MjAwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZCNkYyMUQ5RDg4NDJCMEI3
NjMyMzA1MjYwRTYwMDk5N0MyM0VDMjNFOEVEQ0FDRUUyMEJFNkMxRDExN0ZFN0E2
QjM5M0IxRDI2OEM2RDE3QzkwRURDOEM2QTI2OTJBMTAzQzJDRTVDOEVBMEYzRTUx
RTc0Q0I5Qzc5NDU5MjE4OUZFNDI3MzVFRkNFODNEOUY0MEJDOThDQjk4OUVDRDM3
RTVERUREQTcwRUZGN0YxNTJEMTBERkU2RUYzM0MwQjU1RkZFOTJDMDY4M0IwOTBE
QTFBQzdBQzAzRUFCQkM3Q0EwQkY2NDg0MzcyOTJERTI3MDdGMTQ0MEJBQTlGMEY2
RTMxNkQ2NDY3MEY2RTY1QzBDQTY3RTczRUJBODcwNEI4NkYyMjRDRTQ3NTRCMTM5
QjkyOEMwMTQxMzZDRDFBRTk3RkFBODAyNkMwQ0M4N0UwMDNCMTg0MTQyRjJCQTc1
RkMwMEQxN0NENUZDRUMwQzQyQkI2NjgxQzY1QzE4MkE0ODlENzM4QjQ2NjBDNjI5
QUVEQzA3RDFGQTY5MjkzN0YzMTFBRjI4REFCRENFRUNCMzJDM0ZERjgyOEIwN0E2
QjEwRTkwQzA4QzBCRkUxMEQxOTQ0QTIwRURCOEI2OTI2NjI4MzQyRDFCRkY3NEU5
Q0ZENEREMDE2NDU4RkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr7byHZ2IQrC3YyMFJg5gCZfCPsI+jtys7iC+bB0Rf+ems5Ox0mjG
0XyQ7cjGomkqEDws5cjqDz5R50y5x5RZIYn+QnNe/Og9n0C8mMuYns035d7dpw7/
fxUtEN/m7zPAtV/+ksBoOwkNoax6wD6rvHygv2SENykt4nB/FEC6qfD24xbWRnD2
5lwMpn5z66hwS4byJM5HVLE5uSjAFBNs0a6X+qgCbAzIfgA7GEFC8rp1/ADRfNX8
7AxCu2aBxlwYKkidc4tGYMYprtwH0fppKTfzEa8o2r3O7LMsP9+CiwemsQ6QwIwL
/hDRlEog7bi2kmYoNC0b/3Tpz9TdAWRY/wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FKVn68Wx4euluKQ4z2B+EeWgrkAeMB8GA1UdIwQYMBaAFGSJSVaGmpT6PvRcwQp+
XBRJxbzTMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5Njk1WEVua2hWemV1
ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvNjQ4OTQ5NTY4NjlBOTRG
QTNFRjQ1Q0MxMEE3RTVDMTQ0OUM1QkNEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NDg5NDk1Njg2OUE5NEZBM0VGNDVDQzEwQTdFNUMxNDQ5QzVC
Q0QzLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GOTY5NVhFbmtoVnpldWRYZmtV
NkZWUGJHRlg2V1VLN2VzTkJ6aEhSTDdwZC8wLzMxMzczNzJlMzczMzJlMzMzNjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzIzNjM5MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKxSSQw
DQYJKoZIhvcNAQELBQADggEBAEmt4eZScWof+VfnGwHYVq76LJd+IPCHIctV3wdh
4EEoSA2xWJrGHQjU1F/mJqsUPEiYtMU4p1v1G7/IZUfpQwlq5U3pQwPynrpiqNox
9RGMVnqHn5QTJQFYHZo3iUbUSce+NDWeG3uEO/CP3Yvg4uak19+uhPy8LMe2QIJN
7lJbe8nUlesLkz9L8uykvBS770QzlhySGGpCQJYHAoV1MDXnep1rbuTNQ/xx7ohT
EiE2cCkK7D5fEFnbPHK07MKz6FShCaUy1oLPDN6odw1aRzFkYvlI3d/OXIW67uU+
1QEoTy55Y61aYPJJ683QzKs/GtSAwYjG3P1TDcERzf+BL/g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org