Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32332d3233203d3e20323633343333.roa
File:                     3137372e39312e38302e302f32332d3233203d3e20323633343333.roa (raw, json)
Hash identifier:          QbrRG2BIdQEy55ajFwnthD1L07MQqmpDheMAv4JqBrc=
Subject key identifier:   C5:62:34:19:1C:81:57:D9:34:B0:1F:19:D1:63:C6:37:ED:08:5B:1A
Certificate issuer:       /CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Certificate serial:       4CE0FD6C6F33D0C148ADA555BCEBAC04F781F1EE
Authority key identifier: 67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32332d3233203d3e20323633343333.roa
Signing time:             Tue 25 Jun 2024 00:33:50 +0000
ROA not before:           Tue 25 Jun 2024 00:28:50 +0000
ROA not after:            Tue 24 Jun 2025 00:33:50 +0000
asID:                     263433
IP address blocks:        177.91.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:fd:6c:6f:33:d0:c1:48:ad:a5:55:bc:eb:ac:04:f7:81:f1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
        Validity
            Not Before: Jun 25 00:28:50 2024 GMT
            Not After : Jun 24 00:33:50 2025 GMT
        Subject: CN=C56234191C8157D934B01F19D163C637ED085B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:68:58:7b:62:0b:e4:c4:f4:f7:bb:3e:73:
                    f5:2a:c6:2d:13:e3:92:9f:5f:23:d5:29:9a:92:bf:
                    ee:1a:b2:19:28:6c:72:62:90:4d:63:96:92:32:88:
                    11:f1:82:28:f0:46:ae:0a:fa:1b:e3:c6:44:a3:86:
                    a1:2a:1e:c5:05:46:cb:8d:ce:dc:f7:3b:c8:d6:52:
                    ab:dc:81:b9:86:33:47:47:a1:ac:ef:a5:2d:b6:09:
                    9f:a2:37:c8:33:71:5a:88:4b:2e:41:56:5c:91:fb:
                    4d:bf:e0:8f:f1:46:6f:9c:57:94:08:10:68:79:eb:
                    49:a9:3e:e6:1f:e8:56:6b:21:06:bc:bc:15:34:06:
                    ef:0b:e1:ef:c7:6b:27:b1:32:52:ce:60:50:a0:7a:
                    98:48:fc:1b:21:cd:51:e8:e8:d9:71:5d:9c:08:9c:
                    d7:cc:36:ff:6b:54:e8:fb:39:2e:11:26:be:c8:9d:
                    26:05:79:8b:a6:10:f7:71:24:26:a9:68:a9:7d:50:
                    5f:e7:7f:dc:20:8c:f6:9c:87:53:7b:d8:10:22:47:
                    1f:00:6a:e1:da:58:8e:51:8e:3a:02:c8:8f:8d:c3:
                    6d:73:ac:dd:df:ed:68:29:a5:74:c5:c0:6d:ba:1c:
                    06:a8:40:b0:4b:4c:13:a9:fd:ed:4b:c2:0c:a8:c5:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:62:34:19:1C:81:57:D9:34:B0:1F:19:D1:63:C6:37:ED:08:5B:1A
            X509v3 Authority Key Identifier:
                keyid:67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/67D877A4E50B3ECFE3C59259F9F24C748712CA67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32332d3233203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:00:fc:04:67:46:08:b2:8c:ae:a4:03:32:e9:f4:20:b5:55:
         31:0e:d2:6b:02:4f:6d:35:b7:07:ce:db:13:73:e6:d0:34:44:
         ac:64:b1:90:dd:c7:91:27:1e:a2:48:13:e8:30:23:f5:13:ef:
         4f:a8:bf:62:32:49:83:5b:d6:55:a1:71:a6:cc:c4:d2:ec:03:
         85:d5:17:83:f1:4d:04:b1:cb:db:e9:e6:cd:8f:e9:29:3f:19:
         62:33:6a:25:25:8f:54:cf:88:25:24:00:36:b1:c1:92:d7:11:
         d0:d2:1d:d6:33:ba:cc:70:e1:d3:f6:97:68:d0:45:09:ef:d9:
         50:a3:1a:e9:03:23:c0:00:00:ae:15:13:35:12:20:1e:06:95:
         d7:27:32:3c:6f:34:3b:d7:2a:b8:0f:c3:41:4c:24:48:ed:79:
         90:34:ac:23:78:7a:05:01:2f:e7:c2:ab:ff:49:09:0b:02:ca:
         91:30:66:96:1f:5a:2f:eb:40:7a:33:e9:3e:bb:1c:0f:43:06:
         05:f2:4a:6f:b0:5f:be:f8:30:7c:c2:48:6c:de:e4:80:9d:61:
         a7:cd:1f:2e:a4:80:4b:80:60:b6:3c:7a:c0:db:70:8c:e9:8e:
         8e:f0:2f:15:c3:b1:73:51:ce:fa:9c:5f:9d:f3:b9:07:7b:17:
         b0:15:00:b4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTOD9bG8z0MFIraVVvOusBPeB8e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdEODc3QTRFNTBCM0VDRkUzQzU5MjU5RjlGMjRDNzQ4
NzEyQ0E2NzAeFw0yNDA2MjUwMDI4NTBaFw0yNTA2MjQwMDMzNTBaMDMxMTAvBgNV
BAMTKEM1NjIzNDE5MUM4MTU3RDkzNEIwMUYxOUQxNjNDNjM3RUQwODVCMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKmhYe2IL5MT097s+c/Uqxi0T
45KfXyPVKZqSv+4ashkobHJikE1jlpIyiBHxgijwRq4K+hvjxkSjhqEqHsUFRsuN
ztz3O8jWUqvcgbmGM0dHoazvpS22CZ+iN8gzcVqISy5BVlyR+02/4I/xRm+cV5QI
EGh560mpPuYf6FZrIQa8vBU0Bu8L4e/HayexMlLOYFCgephI/BshzVHo6NlxXZwI
nNfMNv9rVOj7OS4RJr7InSYFeYumEPdxJCapaKl9UF/nf9wgjPach1N72BAiRx8A
auHaWI5RjjoCyI+Nw21zrN3f7WgppXTFwG26HAaoQLBLTBOp/e1LwgyoxXPRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxWI0GRyBV9k0sB8Z0WPGN+0IWxowHwYDVR0j
BBgwFoAUZ9h3pOULPs/jxZJZ+fJMdIcSymcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hMdmVSZkFXRnRjbTZib3lTS1pMNWFRM1N6WFhmZHN5NjZIZFJuOVI1
NWIvMC82N0Q4NzdBNEU1MEIzRUNGRTNDNTkyNTlGOUYyNEM3NDg3MTJDQTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RDg3N0E0RTUwQjNFQ0ZF
M0M1OTI1OUY5RjI0Qzc0ODcxMkNBNjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4THZlUmZBV0Z0Y202Ym95U0taTDVhUTNTelhYZmRzeTY2SGRSbjlSNTViLzAv
MzEzNzM3MmUzOTMxMmUzODMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVtQMA0GCSqGSIb3DQEBCwUAA4IBAQCMAPwEZ0YI
soyupAMy6fQgtVUxDtJrAk9tNbcHztsTc+bQNESsZLGQ3ceRJx6iSBPoMCP1E+9P
qL9iMkmDW9ZVoXGmzMTS7AOF1ReD8U0Escvb6ebNj+kpPxliM2olJY9Uz4glJAA2
scGS1xHQ0h3WM7rMcOHT9pdo0EUJ79lQoxrpAyPAAACuFRM1EiAeBpXXJzI8bzQ7
1yq4D8NBTCRI7XmQNKwjeHoFAS/nwqv/SQkLAsqRMGaWH1ov60B6M+k+uxwPQwYF
8kpvsF+++DB8wkhs3uSAnWGnzR8upIBLgGC2PHrA23CM6Y6O8C8Vw7FzUc76nF+d
87kHexewFQC0
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:01 2025 by rpki-client