Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3234203d3e20323632343434.roa
File:                     3137372e38362e3233322e302f32322d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          RQIFWxBlJM4Dm3dt18IZ+QK6kP2i492q/en1m0J81SQ=
Subject key identifier:   FC:AF:E8:E6:EA:06:3B:75:57:A6:B7:79:20:0F:FC:AA:7C:40:9D:13
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       7CF4E0FAD3803294CA6CB2FD5D6D55ED5653B58D
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3234203d3e20323632343434.roa
Signing time:             Thu 27 Jul 2023 20:10:49 +0000
ROA not before:           Thu 27 Jul 2023 20:05:49 +0000
ROA not after:            Thu 25 Jul 2024 20:10:49 +0000
asID:                     262444
IP address blocks:        177.86.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f4:e0:fa:d3:80:32:94:ca:6c:b2:fd:5d:6d:55:ed:56:53:b5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Jul 27 20:05:49 2023 GMT
            Not After : Jul 25 20:10:49 2024 GMT
        Subject: CN=FCAFE8E6EA063B7557A6B779200FFCAA7C409D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:b7:91:9d:0b:7c:74:d7:9b:9a:a4:de:e9:
                    34:56:5b:96:66:d0:9d:3a:a6:fe:31:2a:92:4b:ce:
                    26:a2:db:4c:24:bb:a2:31:67:df:db:c4:92:19:3c:
                    f8:cb:8f:a5:bf:e5:bf:3d:24:70:69:dc:21:08:4b:
                    1c:5e:b0:c7:5c:96:0a:fb:50:c0:14:0d:98:df:43:
                    f1:78:ca:06:22:91:4e:cd:10:a9:da:cc:4f:33:3c:
                    2d:35:2a:6e:d1:58:b4:1f:6a:fa:72:36:38:98:80:
                    bb:fc:cb:37:2d:f7:d3:42:ee:46:fc:93:fc:aa:bd:
                    f7:32:79:cb:3b:ca:33:1e:9a:e7:dd:69:b6:00:50:
                    23:1d:0c:94:5f:7b:4c:6c:d4:99:e4:4d:4d:f6:bc:
                    e0:c2:3e:cc:c6:83:7c:e2:28:d7:21:45:0d:39:34:
                    9d:8d:b5:20:be:7e:33:e3:59:b2:e2:fa:ad:a4:50:
                    1a:b4:b5:b2:6c:4d:2d:86:51:8e:16:21:b5:4b:e5:
                    b8:be:a1:e8:54:dc:dd:ac:19:24:e7:79:0c:93:05:
                    be:1f:f8:93:03:fa:b0:e2:0e:a7:80:05:51:cc:34:
                    c9:5a:34:d5:67:c4:4c:54:67:0f:05:3c:92:1c:76:
                    70:70:06:f9:f4:48:f9:5b:23:47:db:38:15:e0:c9:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:E8:E6:EA:06:3B:75:57:A6:B7:79:20:0F:FC:AA:7C:40:9D:13
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:63:58:48:e1:93:c9:56:47:3b:08:70:ec:f1:60:97:49:
         25:7d:f4:2b:9f:a7:7a:2f:1f:05:5d:dc:28:68:2c:53:f1:2f:
         85:0b:7f:2f:cd:ad:03:c9:40:52:a5:0d:0e:09:10:28:e1:e7:
         23:6a:d7:1b:b2:cf:34:c6:17:a2:9c:56:62:4f:64:49:f8:15:
         8d:2d:29:e4:e4:a8:5e:e1:ff:94:a1:5c:83:55:06:f0:40:c3:
         00:fd:5e:42:8c:2c:f8:6d:8a:67:03:2f:78:e7:50:e8:c6:92:
         f5:20:47:c9:af:e2:78:da:e1:b2:19:17:02:12:4b:37:42:52:
         19:4d:8d:ed:70:37:6f:13:1c:4c:0c:e8:c6:ff:65:d3:dd:8b:
         80:a0:2b:7b:84:cc:33:af:11:82:fd:63:92:b7:34:f3:b6:b4:
         c4:2c:a2:0a:bc:24:63:66:0a:52:c1:4d:20:5b:e9:ab:23:a9:
         20:76:6a:d6:a5:cc:5e:7c:b9:98:4f:d1:61:52:91:1b:8e:73:
         47:e6:9b:aa:64:8a:d6:0c:14:b9:a5:75:76:90:42:5a:2b:7f:
         9c:cf:b9:71:6e:61:36:3d:08:a3:de:ff:ed:ae:3f:89:f6:06:
         cf:86:27:e6:94:ec:6b:88:3d:2b:48:d3:54:83:6c:58:fe:49:
         dc:35:a0:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfPTg+tOAMpTKbLL9XW1V7VZTtY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBEODVBOUM2NDhBNDA0Njg4MDVBQkJCM0Q2MDU3MEYy
RTU4MjYyRjAeFw0yMzA3MjcyMDA1NDlaFw0yNDA3MjUyMDEwNDlaMDMxMTAvBgNV
BAMTKEZDQUZFOEU2RUEwNjNCNzU1N0E2Qjc3OTIwMEZGQ0FBN0M0MDlEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGULeRnQt8dNebmqTe6TRWW5Zm
0J06pv4xKpJLziai20wku6IxZ9/bxJIZPPjLj6W/5b89JHBp3CEISxxesMdclgr7
UMAUDZjfQ/F4ygYikU7NEKnazE8zPC01Km7RWLQfavpyNjiYgLv8yzct99NC7kb8
k/yqvfcyecs7yjMemufdabYAUCMdDJRfe0xs1JnkTU32vODCPszGg3ziKNchRQ05
NJ2NtSC+fjPjWbLi+q2kUBq0tbJsTS2GUY4WIbVL5bi+oehU3N2sGSTneQyTBb4f
+JMD+rDiDqeABVHMNMlaNNVnxExUZw8FPJIcdnBwBvn0SPlbI0fbOBXgySX3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/K/o5uoGO3VXprd5IA/8qnxAnRMwHwYDVR0j
BBgwFoAU4NhanGSKQEaIBau7PWBXDy5YJi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMC9FMEQ4NUE5QzY0OEE0MDQ2ODgwNUFCQkIzRDYwNTcwRjJFNTgyNjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UwRDg1QTlDNjQ4QTQwNDY4
ODA1QUJCQjNENjA1NzBGMkU1ODI2MkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzAv
MzEzNzM3MmUzODM2MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxVugwDQYJKoZIhvcNAQELBQADggEBAEC5Y1hI
4ZPJVkc7CHDs8WCXSSV99Cufp3ovHwVd3ChoLFPxL4ULfy/NrQPJQFKlDQ4JECjh
5yNq1xuyzzTGF6KcVmJPZEn4FY0tKeTkqF7h/5ShXINVBvBAwwD9XkKMLPhtimcD
L3jnUOjGkvUgR8mv4nja4bIZFwISSzdCUhlNje1wN28THEwM6Mb/ZdPdi4CgK3uE
zDOvEYL9Y5K3NPO2tMQsogq8JGNmClLBTSBb6asjqSB2atalzF58uZhP0WFSkRuO
c0fmm6pkitYMFLmldXaQQlorf5zPuXFuYTY9CKPe/+2uP4n2Bs+GJ+aU7GuIPStI
01SDbFj+Sdw1oDk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org