Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
File:                     3137372e3232332e302e302f32302d3234203d3e203532363939.roa (raw, json)
Hash identifier:          gGNsHem65xitPX57fdgI2dZUeAWmWwvVsGyU37jADRg=
Subject key identifier:   91:E7:64:28:CF:63:9F:F5:2E:A5:AE:7A:40:C8:43:52:2D:EE:11:74
Certificate issuer:       /CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
Certificate serial:       05BE9E10285532177DBC7EFBF70D78CCD8E06DDA
Authority key identifier: B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
Signing time:             Tue 01 Aug 2023 18:13:33 +0000
ROA not before:           Tue 01 Aug 2023 18:08:33 +0000
ROA not after:            Tue 30 Jul 2024 18:13:33 +0000
asID:                     52699
IP address blocks:        177.223.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:9e:10:28:55:32:17:7d:bc:7e:fb:f7:0d:78:cc:d8:e0:6d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
        Validity
            Not Before: Aug  1 18:08:33 2023 GMT
            Not After : Jul 30 18:13:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:09:20:15:cd:73:de:00:9a:d7:91:63:f1:
                    3a:22:08:18:c8:6b:b2:1f:0b:fd:44:7d:83:e4:3e:
                    8f:ed:50:55:f1:a4:5e:c4:1c:f5:90:c7:c3:92:f6:
                    9a:a3:4c:ee:23:6b:3e:64:1d:cf:50:6c:e9:5b:2d:
                    15:e8:5c:a5:51:18:c3:86:5f:c6:37:30:e9:42:93:
                    cb:f1:f0:71:15:70:d1:54:d5:73:c9:38:77:1b:18:
                    9f:7a:cd:25:e8:82:59:92:d6:cf:ad:ca:a7:4e:b6:
                    77:07:6a:be:91:e7:51:b1:e0:45:62:20:95:1d:50:
                    56:e8:8e:0f:b9:9d:8d:36:90:0e:19:11:59:fc:28:
                    b9:d1:c4:cc:94:0f:86:98:cc:f2:f7:9e:ba:44:02:
                    36:04:0d:a1:df:ce:b3:ce:eb:a0:0e:15:1b:46:47:
                    ac:fa:56:f6:88:1a:af:d3:13:97:fa:cd:5b:c4:ae:
                    01:b5:c0:a1:3e:2a:11:13:07:05:90:e2:10:f8:64:
                    e1:4d:19:64:13:c2:6f:a5:20:b7:7b:df:b9:51:ca:
                    b2:cf:fe:a1:a9:3f:c7:34:14:38:19:7e:69:c1:3c:
                    5a:62:3f:11:06:c8:58:b7:8b:dc:f1:b1:50:85:1b:
                    9f:08:93:6e:0a:0a:f8:89:27:79:ce:93:64:96:d3:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:64:28:CF:63:9F:F5:2E:A5:AE:7A:40:C8:43:52:2D:EE:11:74
            X509v3 Authority Key Identifier:
                keyid:B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e3232332e302e302f32302d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:49:e3:3b:36:5e:a2:52:62:ef:0c:5e:f7:0f:d0:f9:de:a2:
         ed:28:28:76:1d:15:5b:f8:c3:de:fa:83:27:cc:f9:de:3b:43:
         d3:d6:56:e4:db:80:f3:8a:1d:2c:43:2a:cd:82:6c:cb:cd:18:
         7e:79:99:66:a2:18:0a:f4:a7:4f:0f:89:5a:cb:b3:45:4e:f4:
         91:37:6f:8f:7e:3a:54:a8:6a:1d:c7:48:42:38:b0:80:7b:b0:
         ad:a8:93:86:b8:88:dd:97:cc:5b:a6:07:f0:58:ad:e8:89:3d:
         3e:e9:9d:c1:60:3b:6c:7b:4f:77:ca:38:a2:f8:bb:fd:22:04:
         c2:7c:e6:24:d4:50:26:a0:4c:99:75:c8:bf:a5:04:bf:49:47:
         3e:01:0e:6b:54:c2:91:63:d9:52:15:9a:f8:4b:78:56:36:d9:
         46:2d:7c:55:3f:79:52:a9:ac:a2:e2:fb:64:f1:5d:42:41:9c:
         34:e1:c1:fd:82:d8:0b:33:26:47:0b:7f:77:63:ac:3a:87:7b:
         f4:29:8a:a0:f4:79:25:71:4c:bd:3b:d2:d5:25:df:9e:2b:12:
         a2:f0:f0:7a:2b:df:4e:98:bc:cd:df:af:b6:90:83:8f:d7:3e:
         66:ed:c0:74:ce:60:47:2c:b2:6b:90:22:c3:d7:71:21:eb:bb:
         ae:06:91:20
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUBb6eEChVMhd9vH779w14zNjgbdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc4N0IwQTIzQzk4MzgwOEVEQUZBQTVDNzkzNEJDMDA0
Rjc0MUQ2MjAeFw0yMzA4MDExODA4MzNaFw0yNDA3MzAxODEzMzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RGMzA5MjAxNUNENzNERTAw
OUFENzkxNjNGMTNBMjIwODE4Qzg2QkIyMUYwQkZENDQ3RDgzRTQzRThGRUQ1MDU1
RjFBNDVFQzQxQ0Y1OTBDN0MzOTJGNjlBQTM0Q0VFMjM2QjNFNjQxRENGNTA2Q0U5
NUIyRDE1RTg1Q0E1NTExOEMzODY1RkM2MzczMEU5NDI5M0NCRjFGMDcxMTU3MEQx
NTRENTczQzkzODc3MUIxODlGN0FDRDI1RTg4MjU5OTJENkNGQURDQUE3NEVCNjc3
MDc2QUJFOTFFNzUxQjFFMDQ1NjIyMDk1MUQ1MDU2RTg4RTBGQjk5RDhEMzY5MDBF
MTkxMTU5RkMyOEI5RDFDNENDOTQwRjg2OThDQ0YyRjc5RUJBNDQwMjM2MDQwREEx
REZDRUIzQ0VFQkEwMEUxNTFCNDY0N0FDRkE1NkY2ODgxQUFGRDMxMzk3RkFDRDVC
QzRBRTAxQjVDMEExM0UyQTExMTMwNzA1OTBFMjEwRjg2NEUxNEQxOTY0MTNDMjZG
QTUyMEI3N0JERkI5NTFDQUIyQ0ZGRUExQTkzRkM3MzQxNDM4MTk3RTY5QzEzQzVB
NjIzRjExMDZDODU4Qjc4QkRDRjFCMTUwODUxQjlGMDg5MzZFMEEwQUY4ODkyNzc5
Q0U5MzY0OTZEMzNGQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzfMJIBXNc94AmteRY/E6IggYyGuyHwv9RH2D5D6P7VBV8aRexBz1
kMfDkvaao0zuI2s+ZB3PUGzpWy0V6FylURjDhl/GNzDpQpPL8fBxFXDRVNVzyTh3
Gxifes0l6IJZktbPrcqnTrZ3B2q+kedRseBFYiCVHVBW6I4PuZ2NNpAOGRFZ/Ci5
0cTMlA+GmMzy9566RAI2BA2h386zzuugDhUbRkes+lb2iBqv0xOX+s1bxK4BtcCh
PioREwcFkOIQ+GThTRlkE8JvpSC3e9+5Ucqyz/6hqT/HNBQ4GX5pwTxaYj8RBshY
t4vc8bFQhRufCJNuCgr4iSd5zpNkltM/uQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FJHnZCjPY5/1LqWuekDIQ1It7hF0MB8GA1UdIwQYMBaAFLeHsKI8mDgI7a+qXHk0
vABPdB1iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM4cG1jSEFKWlBDZVNj
aThVY0RYYVNNWnRLak05ano2d3NLdXZ3cFBmZzFRLzMvQjc4N0IwQTIzQzk4Mzgw
OEVEQUZBQTVDNzkzNEJDMDA0Rjc0MUQ2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNzg3QjBBMjNDOTgzODA4RURBRkFBNUM3OTM0QkMwMDRGNzQx
RDYyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zOHBtY0hBSlpQQ2VTY2k4VWNE
WGFTTVp0S2pNOWp6NndzS3V2d3BQZmcxUS8zLzMxMzczNzJlMzIzMjMzMmUzMDJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzIzNjM5Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASx3wAw
DQYJKoZIhvcNAQELBQADggEBAAZJ4zs2XqJSYu8MXvcP0Pneou0oKHYdFVv4w976
gyfM+d47Q9PWVuTbgPOKHSxDKs2CbMvNGH55mWaiGAr0p08PiVrLs0VO9JE3b49+
OlSoah3HSEI4sIB7sK2ok4a4iN2XzFumB/BYreiJPT7pncFgO2x7T3fKOKL4u/0i
BMJ85iTUUCagTJl1yL+lBL9JRz4BDmtUwpFj2VIVmvhLeFY22UYtfFU/eVKprKLi
+2TxXUJBnDThwf2C2AszJkcLf3djrDqHe/QpiqD0eSVxTL070tUl354rEqLw8Hor
306YvM3fr7aQg4/XPmbtwHTOYEcssmuQIsPXcSHru64GkSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org