Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234372e302f32342d3234203d3e20323638353733.roa
File:                     3137372e37302e3234372e302f32342d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          gtyoNRjBP8F9CEWTNYo+SDgbOKxN7BFcWQ/E0Hsm8Q4=
Subject key identifier:   2B:B9:33:80:8C:6D:88:AA:C8:DA:B6:66:0E:01:91:D3:54:8D:52:0F
Certificate issuer:       /CN=64EDF843BB58DCBE2014E8820AB744C627698B80
Certificate serial:       0CDEED9A3AA8468A93DBFDC67680F7394A68DE8D
Authority key identifier: 64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234372e302f32342d3234203d3e20323638353733.roa
Signing time:             Thu 04 Apr 2024 23:32:54 +0000
ROA not before:           Thu 04 Apr 2024 23:27:54 +0000
ROA not after:            Thu 03 Apr 2025 23:32:54 +0000
asID:                     268573
IP address blocks:        177.70.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:de:ed:9a:3a:a8:46:8a:93:db:fd:c6:76:80:f7:39:4a:68:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EDF843BB58DCBE2014E8820AB744C627698B80
        Validity
            Not Before: Apr  4 23:27:54 2024 GMT
            Not After : Apr  3 23:32:54 2025 GMT
        Subject: CN=2BB933808C6D88AAC8DAB6660E0191D3548D520F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:17:5e:bf:38:ad:05:33:12:0d:e4:a0:d9:d3:
                    bf:f7:a7:02:09:c2:96:f4:f5:98:7f:aa:4a:22:3c:
                    02:99:f2:df:d8:54:c0:31:41:e7:68:2c:32:8b:64:
                    27:0b:17:fa:98:48:ef:d5:a3:59:80:12:67:7e:c5:
                    c8:02:5b:2e:27:af:17:cc:9b:6f:5f:cf:10:77:95:
                    e8:94:58:b9:f9:00:2a:aa:4b:e9:50:0c:08:39:b6:
                    e8:a8:8b:2d:8b:f1:5e:5a:c6:65:86:6b:e4:c7:3c:
                    b6:40:56:f2:df:50:d4:6c:a3:ee:9c:d7:20:b8:16:
                    f8:a3:98:e0:12:c1:d0:4f:27:41:39:bf:c1:c2:db:
                    e7:fd:c5:d4:51:a8:58:03:0c:a4:72:6f:9e:15:29:
                    26:18:45:f4:ae:93:6e:7c:9d:d7:07:0d:a8:58:02:
                    de:a0:4d:0b:49:d2:26:b0:8d:b5:89:ff:ed:c8:45:
                    90:53:cd:15:f6:a0:49:58:47:7e:51:1a:27:5c:07:
                    69:fe:59:8e:fe:99:62:58:8d:bd:42:01:7c:ce:76:
                    65:37:f2:bf:e6:ab:61:78:f7:0a:93:71:42:a4:2c:
                    90:17:50:92:b4:9a:c9:81:a8:7d:6f:43:6e:3e:54:
                    87:bc:5d:05:2a:60:af:13:8c:6e:5f:8e:73:1d:c4:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B9:33:80:8C:6D:88:AA:C8:DA:B6:66:0E:01:91:D3:54:8D:52:0F
            X509v3 Authority Key Identifier:
                keyid:64:ED:F8:43:BB:58:DC:BE:20:14:E8:82:0A:B7:44:C6:27:69:8B:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/64EDF843BB58DCBE2014E8820AB744C627698B80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EDF843BB58DCBE2014E8820AB744C627698B80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/1/3137372e37302e3234372e302f32342d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:78:71:83:32:55:bf:c4:e6:ef:32:4c:4f:85:9f:c5:a5:
         6c:d5:b9:d6:21:25:02:3c:4e:78:b9:22:28:ac:80:35:4f:db:
         4f:09:16:bf:86:88:e1:d1:da:83:b9:2b:aa:8f:88:e6:99:97:
         65:9b:3a:a8:1a:a7:d6:21:79:bc:ac:b8:b8:6a:5e:4b:cb:f5:
         5c:ca:b5:30:ed:8a:47:71:93:94:c1:95:97:e5:84:67:ab:6d:
         58:cb:8d:5f:28:4b:be:02:c4:be:d7:46:66:64:f0:e0:1f:02:
         83:49:49:14:ec:70:5c:c0:5e:8f:77:a0:29:a7:2a:d2:c9:a2:
         e1:de:40:3a:12:77:67:b0:c6:a6:14:0c:8c:80:7f:bd:13:dd:
         98:79:bc:4a:14:b8:64:1b:94:53:36:81:d4:9c:3c:d2:0c:69:
         0f:36:7d:03:80:ad:ab:75:03:b0:77:37:a4:76:43:8e:dd:fc:
         26:1a:de:33:d9:4f:d8:a1:9e:6a:c4:f1:60:63:4a:11:a8:15:
         68:5d:f7:56:d8:8b:a3:94:bf:93:66:65:59:c1:7a:0e:5f:2f:
         65:e8:43:41:5d:f0:32:89:a7:0d:8d:65:01:96:e2:d9:f6:a7:
         b1:22:a5:12:77:59:91:2e:c3:5e:0d:74:e3:21:b6:94:1e:fa:
         1c:12:c8:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDN7tmjqoRoqT2/3GdoD3OUpo3o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFREY4NDNCQjU4RENCRTIwMTRFODgyMEFCNzQ0QzYy
NzY5OEI4MDAeFw0yNDA0MDQyMzI3NTRaFw0yNTA0MDMyMzMyNTRaMDMxMTAvBgNV
BAMTKDJCQjkzMzgwOEM2RDg4QUFDOERBQjY2NjBFMDE5MUQzNTQ4RDUyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyF16/OK0FMxIN5KDZ07/3pwIJ
wpb09Zh/qkoiPAKZ8t/YVMAxQedoLDKLZCcLF/qYSO/Vo1mAEmd+xcgCWy4nrxfM
m29fzxB3leiUWLn5ACqqS+lQDAg5tuioiy2L8V5axmWGa+THPLZAVvLfUNRso+6c
1yC4FvijmOASwdBPJ0E5v8HC2+f9xdRRqFgDDKRyb54VKSYYRfSuk258ndcHDahY
At6gTQtJ0iawjbWJ/+3IRZBTzRX2oElYR35RGidcB2n+WY7+mWJYjb1CAXzOdmU3
8r/mq2F49wqTcUKkLJAXUJK0msmBqH1vQ24+VIe8XQUqYK8TjG5fjnMdxHMVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK7kzgIxtiKrI2rZmDgGR01SNUg8wHwYDVR0j
BBgwFoAUZO34Q7tY3L4gFOiCCrdExidpi4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMS82NEVERjg0M0JCNThEQ0JFMjAxNEU4ODIwQUI3NDRDNjI3Njk4QjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RURGODQzQkI1OERDQkUy
MDE0RTg4MjBBQjc0NEM2Mjc2OThCODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzEv
MzEzNzM3MmUzNzMwMmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxRvcwDQYJKoZIhvcNAQELBQADggEBAFpneHGD
MlW/xObvMkxPhZ/FpWzVudYhJQI8Tni5IiisgDVP208JFr+GiOHR2oO5K6qPiOaZ
l2WbOqgap9YhebysuLhqXkvL9VzKtTDtikdxk5TBlZflhGerbVjLjV8oS74CxL7X
RmZk8OAfAoNJSRTscFzAXo93oCmnKtLJouHeQDoSd2ewxqYUDIyAf70T3Zh5vEoU
uGQblFM2gdScPNIMaQ82fQOArat1A7B3N6R2Q47d/CYa3jPZT9ihnmrE8WBjShGo
FWhd91bYi6OUv5NmZVnBeg5fL2XoQ0Fd8DKJpw2NZQGW4tn2p7EipRJ3WZEuw14N
dOMhtpQe+hwSyBk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org