Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e38392e302e302f31362d3136203d3e203238323230.roa
File:                     3137372e38392e302e302f31362d3136203d3e203238323230.roa (raw, json)
Hash identifier:          SUl3JggF9usiJLcU6A9Ium6wIZLUE0l8xtpC3pB6V58=
Subject key identifier:   78:02:F5:1B:F0:BB:63:8E:2C:5C:40:A9:69:A9:07:C2:86:75:E9:C2
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       63E81998724BD3B37F419F0813003CB7063CF7AC
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e38392e302e302f31362d3136203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:12 +0000
ROA not before:           Tue 12 Mar 2024 19:46:12 +0000
ROA not after:            Tue 11 Mar 2025 19:51:12 +0000
asID:                     28220
IP address blocks:        177.89.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e8:19:98:72:4b:d3:b3:7f:41:9f:08:13:00:3c:b7:06:3c:f7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:12 2024 GMT
            Not After : Mar 11 19:51:12 2025 GMT
        Subject: CN=7802F51BF0BB638E2C5C40A969A907C28675E9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:90:9e:aa:f3:3d:c0:22:40:43:02:f3:ff:
                    f8:60:62:5f:6b:90:4a:bc:b5:30:fb:1a:51:45:1f:
                    22:fd:e4:c5:73:9a:40:c7:84:06:74:fa:33:88:e6:
                    2e:31:05:51:df:aa:36:2d:0d:62:49:ce:bd:10:ea:
                    9a:e3:a6:10:f2:0b:93:64:3d:a3:fc:67:f1:a7:06:
                    e1:95:f9:96:40:f6:3f:01:9a:a9:7d:88:c5:c2:ca:
                    fd:a1:b8:f7:3f:a1:e3:c2:cd:c3:23:d7:8b:59:66:
                    0b:ba:52:70:e0:5f:91:42:63:5f:56:68:a1:b7:21:
                    a5:f2:fb:b3:57:46:d7:93:c4:d9:d0:11:0e:63:37:
                    8f:1c:83:fe:2c:14:5b:6f:f5:43:36:bf:f9:45:0f:
                    a1:20:14:96:65:0e:3d:7e:38:86:5c:ff:a8:db:05:
                    59:89:54:0e:05:a7:e9:b8:18:7e:62:26:0a:d6:83:
                    3c:63:c8:f8:90:19:f1:b6:a2:4b:01:72:9a:dd:90:
                    fa:32:9e:32:31:6a:5b:d2:05:e5:2b:76:09:70:b0:
                    f4:b3:6e:9b:da:31:de:d5:3c:5f:6b:bc:11:3f:39:
                    62:3c:6e:d0:8a:a5:4c:dc:1a:32:76:6c:f0:e2:cf:
                    c7:f3:f8:97:cb:f4:78:45:fa:9c:51:79:e7:8d:85:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:F5:1B:F0:BB:63:8E:2C:5C:40:A9:69:A9:07:C2:86:75:E9:C2
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e38392e302e302f31362d3136203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.89.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:36:91:32:3b:e1:f0:de:c1:33:17:83:06:b3:ef:3f:5f:30:
         a3:e9:5d:88:7b:da:7c:f9:ef:3a:05:f4:2e:f5:92:6a:49:55:
         8b:42:30:33:61:aa:e8:2c:eb:fc:56:32:b4:ec:7b:8a:f7:47:
         23:72:f5:90:c1:5c:d8:8e:08:5f:94:4b:e0:0f:bf:e3:cf:4f:
         46:18:2e:75:a5:d3:ea:8c:55:9f:59:ec:bf:fd:1a:8a:ef:3f:
         2a:20:41:82:67:96:37:6b:f7:38:e4:6a:56:25:7a:b2:6a:43:
         97:2a:5c:e2:ef:70:3c:be:b9:eb:9e:0b:7f:67:b5:f8:2f:26:
         cf:61:d2:22:93:3f:63:f7:a3:54:6a:6e:c8:13:5f:02:b4:c9:
         a2:69:3e:58:2a:46:17:ec:6c:91:38:4d:4c:5a:7c:4f:04:e8:
         da:45:4c:65:ff:88:49:4c:00:b2:a7:59:49:91:3b:3a:1d:c2:
         54:3c:f9:ff:70:c1:43:ca:01:88:6f:26:2b:f7:d2:30:00:6d:
         e4:4f:c1:9c:d8:ab:2a:91:5b:2f:72:16:9b:f0:33:81:38:8d:
         cd:02:87:c7:83:fe:11:3f:10:b2:26:fb:a0:5e:96:10:5e:a0:
         7b:ed:c3:61:0b:0e:68:c2:bb:70:a6:37:2c:94:c8:35:d9:c0:
         9d:9c:46:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUY+gZmHJL07N/QZ8IEwA8twY896wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTJaFw0yNTAzMTExOTUxMTJaMDMxMTAvBgNV
BAMTKDc4MDJGNTFCRjBCQjYzOEUyQzVDNDBBOTY5QTkwN0MyODY3NUU5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZD5CeqvM9wCJAQwLz//hgYl9r
kEq8tTD7GlFFHyL95MVzmkDHhAZ0+jOI5i4xBVHfqjYtDWJJzr0Q6prjphDyC5Nk
PaP8Z/GnBuGV+ZZA9j8Bmql9iMXCyv2huPc/oePCzcMj14tZZgu6UnDgX5FCY19W
aKG3IaXy+7NXRteTxNnQEQ5jN48cg/4sFFtv9UM2v/lFD6EgFJZlDj1+OIZc/6jb
BVmJVA4Fp+m4GH5iJgrWgzxjyPiQGfG2oksBcprdkPoynjIxalvSBeUrdglwsPSz
bpvaMd7VPF9rvBE/OWI8btCKpUzcGjJ2bPDiz8fz+JfL9HhF+pxReeeNhWiZAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUeAL1G/C7Y44sXECpaakHwoZ16cIwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzNzM3MmUzODM5MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMyMzgzMjMy
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCxWTANBgkqhkiG9w0BAQsFAAOCAQEASTaRMjvh8N7BMxeD
BrPvP18wo+ldiHvafPnvOgX0LvWSaklVi0IwM2Gq6Czr/FYytOx7ivdHI3L1kMFc
2I4IX5RL4A+/489PRhgudaXT6oxVn1nsv/0aiu8/KiBBgmeWN2v3OORqViV6smpD
lypc4u9wPL65654Lf2e1+C8mz2HSIpM/Y/ejVGpuyBNfArTJomk+WCpGF+xskThN
TFp8TwTo2kVMZf+ISUwAsqdZSZE7Oh3CVDz5/3DBQ8oBiG8mK/fSMABt5E/BnNir
KpFbL3IWm/AzgTiNzQKHx4P+ET8Qsib7oF6WEF6ge+3DYQsOaMK7cKY3LJTINdnA
nZxG5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org