Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa
File:                     3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          oVonkuSSojRZCqZBR5x1LkoQ+EYPaeVhs6taxFPHejk=
Subject key identifier:   F9:BE:6D:D8:DD:03:71:93:B4:D5:82:D0:14:11:6C:55:09:25:19:14
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       67AE6EA27D4D2A35B049467C084BBD15841D9DCF
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     28270
IP address blocks:        177.130.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ae:6e:a2:7d:4d:2a:35:b0:49:46:7c:08:4b:bd:15:84:1d:9d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=F9BE6DD8DD037193B4D582D014116C5509251914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:b7:77:ec:f5:57:34:95:e8:94:50:a7:f4:
                    f3:34:f9:03:cb:35:76:36:3b:dd:89:e6:dc:bf:d1:
                    af:ae:37:94:63:3a:73:8c:65:28:a8:87:5f:73:15:
                    27:e3:b2:36:3b:ea:fc:42:db:3e:36:3d:33:cc:47:
                    ca:c2:1f:bc:d9:42:05:6d:7f:c3:7b:4d:5b:ab:df:
                    ff:a5:a7:10:af:a5:c2:bd:58:65:c0:4b:40:df:c6:
                    b8:51:fd:7e:f6:19:cc:fe:fe:7e:b4:cf:14:2d:f1:
                    3e:bc:f5:ea:99:cc:83:b3:45:58:10:0c:6d:f4:7c:
                    44:15:4e:c7:ea:a5:71:35:f9:99:34:87:9c:99:41:
                    9d:1a:47:4e:6f:4a:ce:c2:67:e5:31:cc:b9:f4:91:
                    1b:2b:49:e4:87:86:be:6b:0a:1f:6e:7e:b7:f8:07:
                    89:b0:e8:86:e8:12:ff:16:dc:d6:44:52:10:3f:06:
                    62:ec:57:b7:85:01:ec:f6:95:2d:e7:df:f7:0c:44:
                    7b:ec:28:9b:fd:c7:3b:ed:fa:29:8f:c3:fd:ce:e5:
                    53:70:94:2c:4d:70:0f:41:3e:25:ef:b0:7a:b2:68:
                    db:ac:06:03:08:98:2f:a3:12:64:d5:e2:8e:00:b3:
                    51:49:1d:a2:21:5d:75:21:02:27:8d:f7:00:15:bb:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:6D:D8:DD:03:71:93:B4:D5:82:D0:14:11:6C:55:09:25:19:14
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e3133302e3139322e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:7e:50:cb:bb:db:e1:33:b3:5c:dd:fc:5b:74:fc:0e:78:
         55:82:a1:f0:49:48:42:31:91:7e:6e:b8:f8:75:cf:f0:53:e4:
         f8:65:97:15:26:d8:df:8c:9d:f9:bc:63:82:56:fa:1e:3d:4f:
         33:41:32:62:55:bd:c8:99:cd:38:68:fa:d6:67:54:61:29:bf:
         34:cf:40:f8:70:64:a2:7c:ee:56:8d:f6:0f:d5:65:01:ea:6f:
         d4:be:ba:7d:81:bc:2b:9e:49:b3:50:7f:63:f9:b8:a8:a3:fb:
         59:45:95:39:42:90:69:a4:a2:cc:b2:8f:ed:47:2a:ab:f5:f2:
         30:33:7a:48:1e:c4:8b:10:89:7b:38:a3:79:2a:a0:ea:71:4c:
         51:e4:8c:cf:58:d3:eb:43:86:23:58:e6:57:a0:55:cb:c3:35:
         c3:53:d8:d6:a9:1d:2c:1c:e5:03:c9:4d:34:a4:46:1c:e1:fb:
         46:f9:eb:46:4d:26:32:fc:e3:d7:44:ab:54:0d:2c:7d:99:b4:
         c0:56:1a:9a:c9:cf:ea:f5:be:b5:f8:c1:db:bc:82:d0:f7:87:
         ee:98:37:c5:56:24:14:fa:f8:26:60:68:77:63:2b:5b:32:36:
         81:bc:fe:7a:24:62:cf:ab:86:02:f2:18:ef:1f:ba:38:18:56:
         32:d3:32:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ65uon1NKjWwSUZ8CEu9FYQdnc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTJaFw0yNTExMDYyMDQwMTJaMDMxMTAvBgNV
BAMTKEY5QkU2REQ4REQwMzcxOTNCNEQ1ODJEMDE0MTE2QzU1MDkyNTE5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQLd37PVXNJXolFCn9PM0+QPL
NXY2O92J5ty/0a+uN5RjOnOMZSioh19zFSfjsjY76vxC2z42PTPMR8rCH7zZQgVt
f8N7TVur3/+lpxCvpcK9WGXAS0DfxrhR/X72Gcz+/n60zxQt8T689eqZzIOzRVgQ
DG30fEQVTsfqpXE1+Zk0h5yZQZ0aR05vSs7CZ+UxzLn0kRsrSeSHhr5rCh9ufrf4
B4mw6IboEv8W3NZEUhA/BmLsV7eFAez2lS3n3/cMRHvsKJv9xzvt+imPw/3O5VNw
lCxNcA9BPiXvsHqyaNusBgMImC+jEmTV4o4As1FJHaIhXXUhAieN9wAVuzAzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+b5t2N0DcZO01YLQFBFsVQklGRQwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzMTMzMzAyZTMxMzkzMjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxgsAwDQYJKoZIhvcNAQELBQADggEBAKLyflDL
u9vhM7Nc3fxbdPwOeFWCofBJSEIxkX5uuPh1z/BT5PhllxUm2N+Mnfm8Y4JW+h49
TzNBMmJVvciZzTho+tZnVGEpvzTPQPhwZKJ87laN9g/VZQHqb9S+un2BvCueSbNQ
f2P5uKij+1lFlTlCkGmkosyyj+1HKqv18jAzekgexIsQiXs4o3kqoOpxTFHkjM9Y
0+tDhiNY5legVcvDNcNT2NapHSwc5QPJTTSkRhzh+0b560ZNJjL849dEq1QNLH2Z
tMBWGprJz+r1vrX4wdu8gtD3h+6YN8VWJBT6+CZgaHdjK1syNoG8/nokYs+rhgLy
GO8fujgYVjLTMg0=
-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org