Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234362e302f32342d3234203d3e20323638353733.roa
File:                     3137372e37302e3234362e302f32342d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          IytodzpdjXNUS+Sm8CZvMS9aWi7a3p7r/cPtUiELFyw=
Subject key identifier:   D4:05:96:E0:D0:B7:99:12:5E:AD:44:7F:94:B8:0A:06:E0:A0:92:5F
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       079ABF3DC5C82702E5E9D9922A7C5E3289803289
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234362e302f32342d3234203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:53 +0000
ROA not before:           Thu 04 Apr 2024 23:27:53 +0000
ROA not after:            Thu 03 Apr 2025 23:32:53 +0000
asID:                     268573
IP address blocks:        177.70.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9a:bf:3d:c5:c8:27:02:e5:e9:d9:92:2a:7c:5e:32:89:80:32:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:53 2024 GMT
            Not After : Apr  3 23:32:53 2025 GMT
        Subject: CN=D40596E0D0B799125EAD447F94B80A06E0A0925F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:e2:4c:0a:78:a7:8e:79:7e:40:6d:07:bf:
                    eb:02:2f:37:a6:31:d5:1c:34:10:bb:02:1a:dc:2c:
                    65:a3:0a:0a:01:e3:21:13:9e:17:44:d4:5e:b2:9a:
                    1f:6c:b9:87:c6:c3:3a:e3:4a:07:ec:89:6c:2f:6e:
                    f6:c5:a4:5f:00:82:d2:22:63:c8:39:0a:83:3b:eb:
                    45:80:17:83:69:4a:59:78:62:0a:4d:e2:b0:eb:20:
                    90:c5:1f:a8:87:73:d9:be:1e:fe:46:0e:82:31:b3:
                    cb:a3:68:e3:cf:66:16:a4:51:fb:ed:b9:f7:55:83:
                    4c:22:97:c7:7b:20:73:27:18:dd:b0:3c:d0:09:a1:
                    1f:d0:1e:fb:d5:3d:6c:80:28:14:2d:ef:cf:30:d1:
                    ea:2e:0c:aa:60:b7:75:e4:1d:c0:dc:86:a9:ac:ee:
                    ce:42:09:92:7a:93:93:d7:de:56:9d:01:65:b7:19:
                    f1:46:2b:63:ba:07:a1:0f:59:fe:26:1f:41:e7:c4:
                    1c:12:3b:cb:55:02:8f:ef:2f:38:f2:a4:01:b6:f2:
                    48:48:b3:5b:97:a7:8a:07:02:85:61:71:23:c5:63:
                    df:0d:e7:da:80:3d:a3:9f:7d:e0:0c:b9:62:8a:8b:
                    4f:99:fb:7b:61:7e:82:87:81:96:a1:40:74:49:10:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:96:E0:D0:B7:99:12:5E:AD:44:7F:94:B8:0A:06:E0:A0:92:5F
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234362e302f32342d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:62:ea:b1:22:ac:71:c8:c4:36:d4:2c:77:8c:e0:b2:b4:
         0a:8a:46:e4:61:83:93:6a:dc:b8:1a:33:1b:84:12:fc:16:ff:
         50:a3:ad:15:8d:2e:18:0c:79:01:2e:44:a2:65:ab:42:97:0e:
         6e:47:92:2b:bb:65:41:e4:9d:5d:07:69:2a:11:73:bd:66:a4:
         2d:56:04:b7:c0:be:ba:ff:a7:45:ad:c7:e9:b1:98:0c:61:9d:
         44:da:cf:4f:fe:a7:d1:24:ad:79:9d:70:45:4a:ca:71:1d:e8:
         73:69:2f:a8:8b:8b:0a:fd:9b:f4:92:75:51:c8:5b:92:8c:6d:
         37:7d:ec:45:67:80:25:33:a4:5d:9f:be:82:6a:cd:b2:2c:ec:
         94:26:e8:c3:7f:34:60:b2:88:d5:6e:54:13:78:25:57:1f:49:
         bd:bf:4a:d4:96:f6:af:ac:63:3e:ba:7f:81:be:9b:9b:ec:d8:
         07:39:3c:fa:34:66:ed:4c:49:aa:96:c4:e4:10:c6:dd:9d:4b:
         62:f9:5d:ad:db:be:40:a8:53:98:05:94:5f:b9:22:37:27:86:
         09:91:2c:24:e0:c4:ff:f6:56:1b:76:f4:fd:dc:b4:64:bb:f3:
         81:44:b0:0d:c9:16:d1:6f:92:1d:d6:e8:02:35:c0:3f:ff:d1:
         a0:32:43:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB5q/PcXIJwLl6dmSKnxeMomAMokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFREY4NDNCQjU4RENCRTIwMTRFODgyMEFCNzQ0QzYy
NzY5OEI4MDAeFw0yNDA0MDQyMzI3NTNaFw0yNTA0MDMyMzMyNTNaMDMxMTAvBgNV
BAMTKEQ0MDU5NkUwRDBCNzk5MTI1RUFENDQ3Rjk0QjgwQTA2RTBBMDkyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LuJMCninjnl+QG0Hv+sCLzem
MdUcNBC7AhrcLGWjCgoB4yETnhdE1F6ymh9suYfGwzrjSgfsiWwvbvbFpF8AgtIi
Y8g5CoM760WAF4NpSll4YgpN4rDrIJDFH6iHc9m+Hv5GDoIxs8ujaOPPZhakUfvt
ufdVg0wil8d7IHMnGN2wPNAJoR/QHvvVPWyAKBQt788w0eouDKpgt3XkHcDchqms
7s5CCZJ6k5PX3ladAWW3GfFGK2O6B6EPWf4mH0HnxBwSO8tVAo/vLzjypAG28khI
s1uXp4oHAoVhcSPFY98N59qAPaOffeAMuWKKi0+Z+3thfoKHgZahQHRJEKBlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1AWW4NC3mRJerUR/lLgKBuCgkl8wHwYDVR0j
BBgwFoAUZO34Q7tY3L4gFOiCCrdExidpi4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMS82NEVERjg0M0JCNThEQ0JFMjAxNEU4ODIwQUI3NDRDNjI3Njk4QjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RURGODQzQkI1OERDQkUy
MDE0RTg4MjBBQjc0NEM2Mjc2OThCODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzEv
MzEzNzM3MmUzNzMwMmUzMjM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxRvYwDQYJKoZIhvcNAQELBQADggEBAAWsYuqx
IqxxyMQ21Cx3jOCytAqKRuRhg5Nq3LgaMxuEEvwW/1CjrRWNLhgMeQEuRKJlq0KX
Dm5Hkiu7ZUHknV0HaSoRc71mpC1WBLfAvrr/p0Wtx+mxmAxhnUTaz0/+p9EkrXmd
cEVKynEd6HNpL6iLiwr9m/SSdVHIW5KMbTd97EVngCUzpF2fvoJqzbIs7JQm6MN/
NGCyiNVuVBN4JVcfSb2/StSW9q+sYz66f4G+m5vs2Ac5PPo0Zu1MSaqWxOQQxt2d
S2L5Xa3bvkCoU5gFlF+5IjcnhgmRLCTgxP/2Vht29P3ctGS784FEsA3JFtFvkh3W
6AI1wD//0aAyQ0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org