Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa
File:                     3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa (raw, json)
Hash identifier:          SQcoDjw7q2Djfx9q1c4KUF1WeZIag0zsUkUCxXI2nmk=
Subject key identifier:   9E:96:AA:64:61:0E:B0:EA:5C:46:83:40:0C:ED:69:28:D7:7B:69:AD
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       29D984B713CEB8303FCAE0AA0997BB2034D917E8
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa
Signing time:             Fri 23 Feb 2024 16:00:00 +0000
ROA not before:           Fri 23 Feb 2024 15:55:00 +0000
ROA not after:            Fri 21 Feb 2025 16:00:00 +0000
asID:                     262942
IP address blocks:        177.154.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d9:84:b7:13:ce:b8:30:3f:ca:e0:aa:09:97:bb:20:34:d9:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Feb 23 15:55:00 2024 GMT
            Not After : Feb 21 16:00:00 2025 GMT
        Subject: CN=9E96AA64610EB0EA5C4683400CED6928D77B69AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:cc:1c:34:2e:22:a0:88:d7:65:5a:d0:c3:
                    af:b4:48:06:5a:4e:3b:3b:22:09:f0:d7:36:4f:d8:
                    81:a4:be:8d:e1:55:76:11:3e:4f:c0:fd:0d:1a:f8:
                    89:2b:e3:5d:e1:19:4d:ee:5c:46:48:a6:db:fb:d1:
                    13:ba:2f:a7:0f:c2:0a:e1:8e:b8:74:62:a5:f0:78:
                    64:1a:86:77:4a:40:3d:ec:1b:2e:e0:55:48:13:c4:
                    a1:76:1d:dd:72:e3:e8:92:ad:cc:ae:d6:7e:ee:22:
                    11:b6:02:6e:60:56:21:94:48:c4:e1:18:f1:4b:09:
                    0f:18:a7:f1:03:14:22:d1:b5:a8:e1:fb:78:0d:c9:
                    86:98:fe:ff:20:28:11:5b:e7:f0:0e:54:f3:e5:b1:
                    66:88:6c:7d:49:b5:b7:f9:07:e0:04:28:3b:fc:f5:
                    c2:53:78:6c:90:fb:95:50:24:1a:02:a5:8c:2f:46:
                    3e:59:c8:d9:f1:18:9a:06:1b:36:be:fc:b4:f2:c9:
                    46:96:d6:96:f9:7f:c6:b0:7e:3c:3a:91:f0:30:60:
                    6b:c7:4a:8a:75:ad:ea:67:fe:b3:be:03:86:5d:2b:
                    f7:89:b0:59:bc:8f:60:7f:8d:63:09:3e:2c:02:71:
                    8a:64:08:f2:0d:b5:8a:7e:0c:be:b5:fe:35:07:24:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:96:AA:64:61:0E:B0:EA:5C:46:83:40:0C:ED:69:28:D7:7B:69:AD
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:68:e4:ba:56:83:bf:3c:95:fb:f5:3d:25:ad:03:6f:66:
         76:88:2b:9c:23:92:bd:18:42:77:48:30:e6:70:08:ee:4f:a1:
         31:44:77:77:aa:69:f8:2b:4e:0c:14:76:b1:de:66:58:06:f8:
         fd:d2:8e:f5:2c:3c:fa:b4:ab:d7:1c:cf:85:89:7d:c8:7e:77:
         96:cd:a5:de:15:d2:0b:40:4c:42:4e:cd:9a:98:cd:43:57:b6:
         a5:0c:22:63:d5:f6:ab:72:5a:66:98:d6:59:70:bf:19:36:db:
         1d:20:f8:0a:ca:00:3e:2d:3a:d7:f5:48:be:36:60:87:35:5a:
         a6:85:e3:09:9f:a2:fe:fa:f4:be:ca:b5:d9:b4:9d:c6:58:34:
         b6:df:f5:87:f7:b0:7b:f9:d4:f3:bf:1f:61:cf:01:9c:3a:b8:
         93:9f:7a:1c:56:4e:64:92:1c:30:43:18:24:43:c8:0c:7b:5f:
         a3:0b:89:bb:eb:8d:ca:a3:72:82:59:10:d0:18:12:b0:58:09:
         78:5c:1b:f8:54:34:86:97:b6:66:2b:2d:c5:7d:98:28:a1:df:
         43:81:35:55:fd:07:a2:fc:20:28:9f:92:f7:7e:a6:83:c6:3c:
         bf:42:15:41:40:d1:f5:4f:0b:ff:91:6e:42:00:fe:8c:84:72:
         40:3d:5c:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKdmEtxPOuDA/yuCqCZe7IDTZF+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4RDQyN0E5NDJENjNCODRENzc2RTk5MjVGRDhDODdD
RUI0RTM4OTAeFw0yNDAyMjMxNTU1MDBaFw0yNTAyMjExNjAwMDBaMDMxMTAvBgNV
BAMTKDlFOTZBQTY0NjEwRUIwRUE1QzQ2ODM0MDBDRUQ2OTI4RDc3QjY5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnMwcNC4ioIjXZVrQw6+0SAZa
Tjs7Ignw1zZP2IGkvo3hVXYRPk/A/Q0a+Ikr413hGU3uXEZIptv70RO6L6cPwgrh
jrh0YqXweGQahndKQD3sGy7gVUgTxKF2Hd1y4+iSrcyu1n7uIhG2Am5gViGUSMTh
GPFLCQ8Yp/EDFCLRtajh+3gNyYaY/v8gKBFb5/AOVPPlsWaIbH1Jtbf5B+AEKDv8
9cJTeGyQ+5VQJBoCpYwvRj5ZyNnxGJoGGza+/LTyyUaW1pb5f8awfjw6kfAwYGvH
Sop1repn/rO+A4ZdK/eJsFm8j2B/jWMJPiwCcYpkCPINtYp+DL61/jUHJIuNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnpaqZGEOsOpcRoNADO1pKNd7aa0wHwYDVR0j
BBgwFoAU3o1CepQtY7hNd26ZJf2Mh86044kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZaNGFqZG9pYVRUNUpaenpHa3phRmpScno1QWFkajJycEcydkdXVlJN
RU0vMC9ERThENDI3QTk0MkQ2M0I4NEQ3NzZFOTkyNUZEOEM4N0NFQjRFMzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFOEQ0MjdBOTQyRDYzQjg0
RDc3NkU5OTI1RkQ4Qzg3Q0VCNEUzODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWWjRhamRvaWFUVDVKWnp6R2t6YUZqUnJ6NUFhZGoycnBHMnZHV1ZSTUVNLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxmhAwDQYJKoZIhvcNAQELBQADggEBAJ6kaOS6
VoO/PJX79T0lrQNvZnaIK5wjkr0YQndIMOZwCO5PoTFEd3eqafgrTgwUdrHeZlgG
+P3SjvUsPPq0q9ccz4WJfch+d5bNpd4V0gtATEJOzZqYzUNXtqUMImPV9qtyWmaY
1llwvxk22x0g+ArKAD4tOtf1SL42YIc1WqaF4wmfov769L7Ktdm0ncZYNLbf9Yf3
sHv51PO/H2HPAZw6uJOfehxWTmSSHDBDGCRDyAx7X6MLibvrjcqjcoJZENAYErBY
CXhcG/hUNIaXtmYrLcV9mCih30OBNVX9B6L8ICifkvd+poPGPL9CFUFA0fVPC/+R
bkIA/oyEckA9XMY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org