Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          P8aIiBdhoPk9iPkO5Z5FC+lf1Fwojo4hTJBnMe8+YbU=
Subject key identifier:   85:2C:B4:CA:28:1A:00:B4:FE:A3:28:EA:E1:A8:1F:92:1F:8B:F8:28
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       7D18203B3B35CEF7539881363ECD8FAD668169C3
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:11 +0000
ROA not before:           Thu 23 Nov 2023 20:06:11 +0000
ROA not after:            Thu 21 Nov 2024 20:11:11 +0000
asID:                     263384
IP address blocks:        177.87.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:20:3b:3b:35:ce:f7:53:98:81:36:3e:cd:8f:ad:66:81:69:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:11 2023 GMT
            Not After : Nov 21 20:11:11 2024 GMT
        Subject: CN=852CB4CA281A00B4FEA328EAE1A81F921F8BF828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:8b:d6:aa:ed:07:8e:b1:b6:88:d6:65:df:
                    c8:e0:dc:27:4a:cf:80:8e:73:ab:0c:0b:77:44:ad:
                    d3:35:ae:22:39:20:51:b2:66:53:96:fd:92:60:70:
                    b5:0c:b7:f4:fc:bb:4b:70:ac:8f:48:34:57:07:4a:
                    e7:43:c6:bc:4e:e3:b6:3a:af:06:f3:db:8f:46:b2:
                    9e:f1:bb:18:85:91:9e:83:11:73:0e:a2:03:d6:8c:
                    b7:ed:59:6d:32:6a:41:a9:61:54:a0:ad:d2:d9:cf:
                    12:8c:72:7c:63:5b:47:a8:85:9a:ef:e8:ed:01:aa:
                    f5:93:c1:e9:59:a4:c7:27:f4:5a:57:cb:94:35:28:
                    e3:2d:04:6e:da:10:25:6f:37:7e:56:bf:03:e6:16:
                    5c:9d:5e:dc:9e:64:f7:8e:0f:b9:46:fa:02:18:46:
                    e3:33:db:f2:9c:b8:cd:30:91:9a:9a:5d:89:c0:69:
                    13:9c:cf:f7:24:da:bc:7e:d1:32:97:e6:86:41:04:
                    13:18:c2:27:3e:b9:5a:4f:1d:bd:68:28:4c:57:ee:
                    6c:c6:a9:b4:15:b4:40:47:05:57:c5:f1:21:ed:81:
                    e1:f9:ba:d8:4c:73:8f:b5:05:e8:3b:84:3c:ad:3e:
                    4d:a7:1b:e3:ce:d2:4e:c6:b8:83:05:73:1f:93:a6:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2C:B4:CA:28:1A:00:B4:FE:A3:28:EA:E1:A8:1F:92:1F:8B:F8:28
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:f3:2f:1a:c8:e5:a7:3d:9f:c3:3f:4d:63:43:29:dc:9e:b2:
         7b:85:0c:d1:80:ec:88:e6:f3:71:2b:3f:9c:5d:61:46:8d:75:
         0b:de:0c:79:b1:62:cd:1c:2e:c6:38:e7:cc:62:64:fb:09:9d:
         7d:e1:ff:49:9a:d7:a0:e3:ab:7a:60:70:93:79:a5:d2:27:b6:
         0e:93:73:98:4a:a6:8f:87:21:0c:6e:4a:44:ef:bd:f4:40:10:
         18:d5:ec:b2:d1:de:6a:b3:63:e1:15:af:ac:66:61:42:51:d5:
         bd:9a:ad:96:64:de:18:ba:96:79:b8:bc:38:f2:0f:f1:d7:e6:
         41:00:f2:d2:49:83:7e:00:65:6d:34:15:a5:d3:9a:fa:51:c3:
         13:5c:06:bf:3d:37:a7:fa:c7:64:23:1c:f0:7f:78:03:a3:dc:
         59:62:f6:46:22:2a:e0:e1:26:03:37:47:0e:00:0e:d4:d0:26:
         95:59:2f:e0:37:86:d5:12:d7:14:de:b2:8e:43:ca:18:10:a1:
         84:39:ed:ab:5d:ca:a6:3e:1e:5f:86:4c:d5:b4:20:86:03:2c:
         c5:bc:6f:f2:d8:0e:df:60:73:e8:f2:e1:60:87:cb:89:2d:2a:
         03:35:65:3e:23:c8:74:26:02:41:d2:76:f1:63:f4:cc:aa:4b:
         76:ef:27:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfRggOzs1zvdTmIE2Ps2PrWaBacMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwNjlFOEU2ODc1OUQ3RTkyQ0E3MDcxMTYxOUVBNERD
NEUyNzcyMTAeFw0yMzExMjMyMDA2MTFaFw0yNDExMjEyMDExMTFaMDMxMTAvBgNV
BAMTKDg1MkNCNENBMjgxQTAwQjRGRUEzMjhFQUUxQTgxRjkyMUY4QkY4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYf4vWqu0HjrG2iNZl38jg3CdK
z4COc6sMC3dErdM1riI5IFGyZlOW/ZJgcLUMt/T8u0twrI9INFcHSudDxrxO47Y6
rwbz249Gsp7xuxiFkZ6DEXMOogPWjLftWW0yakGpYVSgrdLZzxKMcnxjW0eohZrv
6O0BqvWTwelZpMcn9FpXy5Q1KOMtBG7aECVvN35WvwPmFlydXtyeZPeOD7lG+gIY
RuMz2/KcuM0wkZqaXYnAaROcz/ck2rx+0TKX5oZBBBMYwic+uVpPHb1oKExX7mzG
qbQVtEBHBVfF8SHtgeH5uthMc4+1Beg7hDytPk2nG+PO0k7GuIMFcx+TpnlHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhSy0yigaALT+oyjq4agfkh+L+CgwHwYDVR0j
BBgwFoAUQgaejmh1nX6SynBxFhnqTcTidyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC80MjA2OUU4RTY4NzU5RDdFOTJDQTcwNzExNjE5RUE0REM0RTI3NzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMDY5RThFNjg3NTlEN0U5
MkNBNzA3MTE2MTlFQTREQzRFMjc3MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAv
MzEzNzM3MmUzODM3MmUzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVccMA0GCSqGSIb3DQEBCwUAA4IBAQCm8y8ayOWn
PZ/DP01jQyncnrJ7hQzRgOyI5vNxKz+cXWFGjXUL3gx5sWLNHC7GOOfMYmT7CZ19
4f9Jmteg46t6YHCTeaXSJ7YOk3OYSqaPhyEMbkpE7730QBAY1eyy0d5qs2PhFa+s
ZmFCUdW9mq2WZN4YupZ5uLw48g/x1+ZBAPLSSYN+AGVtNBWl05r6UcMTXAa/PTen
+sdkIxzwf3gDo9xZYvZGIirg4SYDN0cOAA7U0CaVWS/gN4bVEtcU3rKOQ8oYEKGE
Oe2rXcqmPh5fhkzVtCCGAyzFvG/y2A7fYHPo8uFgh8uJLSoDNWU+I8h0JgJB0nbx
Y/TMqkt27yfp
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org