Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa
File:                     3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          9ZYTDsSAYrURKznaUwiCtZUsRruki2cfGsePGbrTLBo=
Subject key identifier:   6D:91:7C:61:74:E7:18:1C:A7:80:CB:C8:1B:AE:B5:02:A2:B8:C5:54
Certificate issuer:       /CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Certificate serial:       317294F8EFD3F7ED0A97B507668267C2AA8D99D8
Authority key identifier: 67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa
Signing time:             Mon 11 Mar 2024 19:21:21 +0000
ROA not before:           Mon 11 Mar 2024 19:16:21 +0000
ROA not after:            Mon 10 Mar 2025 19:21:21 +0000
asID:                     262441
IP address blocks:        177.44.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:72:94:f8:ef:d3:f7:ed:0a:97:b5:07:66:82:67:c2:aa:8d:99:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
        Validity
            Not Before: Mar 11 19:16:21 2024 GMT
            Not After : Mar 10 19:21:21 2025 GMT
        Subject: CN=6D917C6174E7181CA780CBC81BAEB502A2B8C554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:a3:81:d0:68:4c:b2:54:bd:09:04:dd:c4:
                    e9:23:6c:6d:9c:f3:1c:48:a9:19:97:9b:45:8e:53:
                    b2:76:47:ca:d0:6b:87:3f:84:77:b4:4c:3e:a3:29:
                    69:d9:d9:ce:a0:bb:9d:6a:fd:ea:aa:a1:2e:15:38:
                    a5:d5:48:38:26:20:7b:52:58:19:0d:12:75:d3:70:
                    75:49:e6:fe:26:09:f5:87:c7:25:0f:72:44:97:6d:
                    01:52:3d:70:65:a0:7e:c1:9e:fb:2b:f3:28:c7:ae:
                    66:8e:47:84:b1:b2:4c:f3:d4:54:48:b3:cc:5c:8e:
                    09:56:b5:dc:c1:d1:33:3c:3f:8f:f8:34:5e:01:99:
                    27:f8:da:ba:14:7d:37:4a:d8:3a:9e:50:bb:fa:9c:
                    b8:ad:4d:12:ef:e0:28:54:f5:34:c9:9e:da:b4:0b:
                    e5:9a:0b:19:3c:55:02:c7:c0:ca:b0:b4:27:ab:d1:
                    82:67:54:a7:4e:f9:7b:e9:8b:55:db:6d:23:cb:b7:
                    0b:d9:7d:de:80:cb:f2:aa:d7:0e:89:9d:70:9b:fc:
                    96:27:d4:fd:7e:dd:f2:ba:09:db:a5:91:31:ac:90:
                    12:a7:6f:d4:2f:37:7e:3d:16:e0:4e:d6:e1:2e:7e:
                    74:c4:2d:20:2e:21:43:5d:97:84:60:56:60:b0:d2:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:7C:61:74:E7:18:1C:A7:80:CB:C8:1B:AE:B5:02:A2:B8:C5:54
            X509v3 Authority Key Identifier:
                keyid:67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:d4:25:e4:7d:0b:ba:e3:90:5a:5f:e4:8c:fe:5c:74:02:
         b5:10:88:6d:ca:4d:65:3b:06:8f:21:a7:5e:9f:80:aa:65:86:
         38:0e:61:45:e6:9b:bf:7f:95:c7:9b:98:42:c3:05:6f:18:df:
         e7:a6:a8:b5:2b:46:30:59:4b:78:0d:aa:7d:71:1a:c7:0b:bb:
         48:c8:c4:ee:9d:ce:f7:f0:fe:8e:36:59:c6:df:96:b3:9c:25:
         8e:72:d8:cb:96:1b:ed:ec:df:c7:f4:9c:e0:ec:b5:c8:4d:7e:
         f9:70:39:fc:a1:9f:9c:3e:35:c3:99:2d:df:19:42:ce:4d:36:
         58:90:b3:61:06:11:53:7f:53:13:4b:1b:40:90:57:20:fa:c7:
         f0:60:90:09:8e:18:cb:56:ef:b9:01:20:bd:be:5a:ff:0a:00:
         03:0b:8f:b4:4e:f2:48:f6:87:1d:25:1d:eb:14:86:90:90:e4:
         d1:0b:69:80:f2:ec:b0:28:e0:12:55:2f:ef:8d:8d:fc:3c:b9:
         18:a2:4a:0b:2f:70:81:9e:71:1a:9a:85:10:18:62:f1:ee:f6:
         61:fc:fc:e1:92:89:ce:b7:43:dd:c6:5d:58:c8:eb:19:31:3b:
         39:29:d6:98:29:f0:aa:86:f9:34:48:bc:a8:de:0e:08:58:d2:
         be:54:61:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMXKU+O/T9+0Kl7UHZoJnwqqNmdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4RjQ2NzcyRkNCQkNCNzRGMzJFMUYzMDgzODlEMjY4
RjU1QTQ1RjAeFw0yNDAzMTExOTE2MjFaFw0yNTAzMTAxOTIxMjFaMDMxMTAvBgNV
BAMTKDZEOTE3QzYxNzRFNzE4MUNBNzgwQ0JDODFCQUVCNTAyQTJCOEM1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHqOB0GhMslS9CQTdxOkjbG2c
8xxIqRmXm0WOU7J2R8rQa4c/hHe0TD6jKWnZ2c6gu51q/eqqoS4VOKXVSDgmIHtS
WBkNEnXTcHVJ5v4mCfWHxyUPckSXbQFSPXBloH7Bnvsr8yjHrmaOR4Sxskzz1FRI
s8xcjglWtdzB0TM8P4/4NF4BmSf42roUfTdK2DqeULv6nLitTRLv4ChU9TTJntq0
C+WaCxk8VQLHwMqwtCer0YJnVKdO+Xvpi1XbbSPLtwvZfd6Ay/Kq1w6JnXCb/JYn
1P1+3fK6CdulkTGskBKnb9QvN349FuBO1uEufnTELSAuIUNdl4RgVmCw0pBLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbZF8YXTnGByngMvIG661AqK4xVQwHwYDVR0j
BBgwFoAUZ49Gdy/LvLdPMuHzCDidJo9VpF8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMC82NzhGNDY3NzJGQ0JCQ0I3NEYzMkUxRjMwODM4OUQyNjhGNTVBNDVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3OEY0Njc3MkZDQkJDQjc0
RjMyRTFGMzA4Mzg5RDI2OEY1NUE0NUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzAv
MzEzNzM3MmUzNDM0MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxLPAwDQYJKoZIhvcNAQELBQADggEBAEbN1CXk
fQu645BaX+SM/lx0ArUQiG3KTWU7Bo8hp16fgKplhjgOYUXmm79/lcebmELDBW8Y
3+emqLUrRjBZS3gNqn1xGscLu0jIxO6dzvfw/o42WcbflrOcJY5y2MuWG+3s38f0
nODstchNfvlwOfyhn5w+NcOZLd8ZQs5NNliQs2EGEVN/UxNLG0CQVyD6x/BgkAmO
GMtW77kBIL2+Wv8KAAMLj7RO8kj2hx0lHesUhpCQ5NELaYDy7LAo4BJVL++Njfw8
uRiiSgsvcIGecRqahRAYYvHu9mH8/OGSic63Q93GXVjI6xkxOzkp1pgp8KqG+TRI
vKjeDghY0r5UYWE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org