Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa
File:                     3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa (raw, json)
Hash identifier:          bNLY0Da3nHgYwYZXb4tOYTtxaBiGHExXQgcNDp5bEXQ=
Subject key identifier:   0E:57:6F:0A:EF:11:1F:32:C1:4E:E1:27:03:F1:58:87:33:5D:39:73
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       7AC814781F709F374C3A8888E6B3E7EEC94EABEB
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:34 +0000
ROA not before:           Tue 21 May 2024 14:27:34 +0000
ROA not after:            Tue 20 May 2025 14:32:34 +0000
asID:                     270602
IP address blocks:        177.85.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c8:14:78:1f:70:9f:37:4c:3a:88:88:e6:b3:e7:ee:c9:4e:ab:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:34 2024 GMT
            Not After : May 20 14:32:34 2025 GMT
        Subject: CN=0E576F0AEF111F32C14EE12703F15887335D3973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:e0:9f:a2:df:81:5b:e9:83:8d:49:5c:eb:
                    e7:81:50:39:50:a8:d0:53:c5:a2:33:87:74:56:03:
                    4a:0d:a4:34:fe:73:36:db:d1:0d:c5:f0:b9:6c:c0:
                    60:85:6e:31:19:e9:68:7f:c2:ba:07:90:dd:87:c5:
                    95:a6:49:ee:b6:1f:ca:4e:ca:e4:d7:bd:48:ce:bf:
                    ff:e2:a9:f1:b4:e2:8b:a9:de:a5:c5:63:f7:fe:b2:
                    3b:01:b6:e0:c7:e1:13:bb:2a:13:ba:dd:dd:ef:65:
                    84:7d:4d:59:18:6c:20:a8:f0:a9:04:40:31:45:ae:
                    08:a7:bc:3d:08:b7:2e:d3:ab:57:c7:eb:95:f6:02:
                    e9:8e:37:c0:af:cf:db:65:ac:b1:bc:20:ef:77:e4:
                    c6:66:53:d2:e8:ef:59:3e:42:6f:20:54:93:06:06:
                    38:e7:8f:f6:b5:6d:16:7e:5c:5a:78:b3:fd:ae:7d:
                    5e:82:14:16:38:c9:c0:14:14:4e:bc:21:f5:e0:c7:
                    d4:c8:97:6b:00:7a:57:56:bf:74:33:c6:cf:71:77:
                    03:31:1e:6b:3e:6c:20:88:0f:e7:11:6e:ce:75:8f:
                    9f:ce:14:0d:43:ac:16:d7:f6:03:7f:45:12:c5:ab:
                    15:f5:a8:ad:c6:72:bf:45:bb:e6:f0:14:74:4c:dd:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:6F:0A:EF:11:1F:32:C1:4E:E1:27:03:F1:58:87:33:5D:39:73
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234332e302f32342d3234203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c8:d0:8c:55:ff:c7:8d:78:84:25:87:22:65:af:76:b1:83:
         13:28:b6:e0:29:3f:64:97:04:bc:5c:3b:dd:d2:f1:ce:b7:13:
         f4:82:fb:d2:59:80:d1:59:d6:d3:7c:9c:23:c0:80:bc:c2:01:
         1d:84:fc:c3:aa:a1:a1:a1:14:44:64:0a:31:b5:1d:69:35:07:
         0e:86:46:a4:77:fa:87:6f:59:35:6a:f2:33:fb:5c:61:57:92:
         e3:e7:cc:a5:40:95:61:aa:bb:9b:8e:fa:6f:ea:73:c8:3b:9a:
         23:5c:28:83:01:d9:c1:8b:0b:6c:7a:cc:ef:70:f1:4b:41:92:
         4d:98:ba:0a:78:e4:7f:8b:2c:50:58:44:80:c5:20:80:08:8f:
         f1:39:9c:97:2e:15:37:52:ca:fd:f7:ad:8b:27:bd:80:fe:df:
         20:c2:64:2a:03:be:4a:56:b8:f5:d9:0a:10:5e:17:e2:ee:2d:
         e1:b0:3e:d9:3d:bf:c1:e5:59:9c:de:56:df:05:05:45:bc:47:
         3d:10:ec:b3:f2:be:e5:80:ca:4b:34:4c:8d:cf:1b:78:58:2f:
         49:4f:2e:f6:f7:68:eb:1c:2d:fc:1d:63:5d:92:11:25:cb:32:
         25:93:04:38:ab:98:42:92:89:23:d5:87:e5:74:42:ba:52:f1:
         3f:b6:c7:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUesgUeB9wnzdMOoiI5rPn7slOq+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJERThCREJGMDM5RkQ4MEQzRjYyQ0JDMDQwMUNBOUJC
MTUyQzdFNTAeFw0yNDA1MjExNDI3MzRaFw0yNTA1MjAxNDMyMzRaMDMxMTAvBgNV
BAMTKDBFNTc2RjBBRUYxMTFGMzJDMTRFRTEyNzAzRjE1ODg3MzM1RDM5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyOCfot+BW+mDjUlc6+eBUDlQ
qNBTxaIzh3RWA0oNpDT+czbb0Q3F8LlswGCFbjEZ6Wh/wroHkN2HxZWmSe62H8pO
yuTXvUjOv//iqfG04oup3qXFY/f+sjsBtuDH4RO7KhO63d3vZYR9TVkYbCCo8KkE
QDFFrginvD0Ity7Tq1fH65X2AumON8Cvz9tlrLG8IO935MZmU9Lo71k+Qm8gVJMG
Bjjnj/a1bRZ+XFp4s/2ufV6CFBY4ycAUFE68IfXgx9TIl2sAeldWv3Qzxs9xdwMx
Hms+bCCID+cRbs51j5/OFA1DrBbX9gN/RRLFqxX1qK3Gcr9Fu+bwFHRM3fm/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDldvCu8RHzLBTuEnA/FYhzNdOXMwHwYDVR0j
BBgwFoAU696L2/A5/YDT9iy8BAHKm7FSx+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29hOGNUa3Riek1jc1ZvcFphMXNLamlDZ0hia1g1bjM4eGpabnFvTWoy
eXIvMC9FQkRFOEJEQkYwMzlGRDgwRDNGNjJDQkMwNDAxQ0E5QkIxNTJDN0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCREU4QkRCRjAzOUZEODBE
M0Y2MkNCQzA0MDFDQTlCQjE1MkM3RTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvYThjVGt0YnpNY3NWb3BaYTFzS2ppQ2dIYmtYNW4zOHhqWm5xb01qMnlyLzAv
MzEzNzM3MmUzODM1MmUzMjM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVfMwDQYJKoZIhvcNAQELBQADggEBALDI0IxV
/8eNeIQlhyJlr3axgxMotuApP2SXBLxcO93S8c63E/SC+9JZgNFZ1tN8nCPAgLzC
AR2E/MOqoaGhFERkCjG1HWk1Bw6GRqR3+odvWTVq8jP7XGFXkuPnzKVAlWGqu5uO
+m/qc8g7miNcKIMB2cGLC2x6zO9w8UtBkk2Yugp45H+LLFBYRIDFIIAIj/E5nJcu
FTdSyv33rYsnvYD+3yDCZCoDvkpWuPXZChBeF+LuLeGwPtk9v8HlWZzeVt8FBUW8
Rz0Q7LPyvuWAyks0TI3PG3hYL0lPLvb3aOscLfwdY12SESXLMiWTBDirmEKSiSPV
h+V0QrpS8T+2x7I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org