Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa
File:                     3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (raw, json)
Hash identifier:          5++cTVQYOihGM07YqBkN2an2Ga1UtSIliU2lUaux1F0=
Subject key identifier:   42:FC:23:0D:91:CA:B7:3B:1E:F7:14:02:88:A9:46:92:11:A1:FD:D1
Certificate issuer:       /CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
Certificate serial:       2E8C33EA80ADE2D8B8E7A96D07EB5B0A70869215
Authority key identifier: FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa
Signing time:             Wed 21 Feb 2024 20:00:00 +0000
ROA not before:           Wed 21 Feb 2024 19:55:00 +0000
ROA not after:            Wed 19 Feb 2025 20:00:00 +0000
asID:                     262499
IP address blocks:        177.66.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8c:33:ea:80:ad:e2:d8:b8:e7:a9:6d:07:eb:5b:0a:70:86:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Validity
            Not Before: Feb 21 19:55:00 2024 GMT
            Not After : Feb 19 20:00:00 2025 GMT
        Subject: CN=42FC230D91CAB73B1EF7140288A9469211A1FDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:31:3e:d3:53:d2:2b:93:20:41:c7:7b:6d:
                    26:8a:2b:ad:c1:0a:1d:eb:26:8e:48:b8:1e:16:05:
                    14:6d:f7:87:c0:68:38:ff:5f:88:79:ab:a4:d2:8a:
                    fe:e7:12:50:f9:9d:c9:1d:f7:ff:4e:72:a7:2b:b4:
                    53:ed:ca:b1:f1:bc:96:f4:ee:24:ff:39:23:22:68:
                    2e:e1:80:4d:58:dc:4c:88:29:e6:6f:7e:27:af:a3:
                    e7:18:11:51:cd:4a:34:33:bc:62:3f:33:18:50:3b:
                    08:c5:f3:69:70:97:11:bf:77:c9:f4:df:06:a2:ec:
                    1e:c8:73:47:23:9b:2d:50:fe:91:36:2c:97:06:ea:
                    93:a4:04:b4:fd:c1:2c:a6:38:f0:39:c9:f3:80:ea:
                    0b:17:77:92:c9:8e:63:54:91:49:79:bb:39:0c:ae:
                    1e:52:b7:aa:17:0d:b2:8f:f2:b4:37:0f:6d:0d:51:
                    c5:72:e5:a5:aa:e3:1a:a6:f6:d8:61:b9:bf:37:a6:
                    f1:a1:3d:0f:c0:be:2f:8b:91:0a:2f:b3:ae:bb:c8:
                    13:e6:cb:b2:86:60:73:bb:5c:9e:39:55:9e:f3:e0:
                    ba:cd:4d:5f:ad:c5:87:44:72:ae:a3:c0:5e:80:dd:
                    e9:d6:b9:97:a3:2b:78:cf:3b:56:a4:6e:e0:3e:4c:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FC:23:0D:91:CA:B7:3B:1E:F7:14:02:88:A9:46:92:11:A1:FD:D1
            X509v3 Authority Key Identifier:
                keyid:FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:15:11:ea:aa:44:56:4f:8f:83:ec:70:f1:c0:c4:9a:46:c1:
         2f:de:04:4c:5d:f4:0b:a4:0c:76:87:93:df:79:f0:41:c3:01:
         86:b5:a3:16:39:e3:b0:11:e3:22:ca:4b:0e:1e:e9:45:46:97:
         ef:25:b0:f1:a2:19:77:66:c9:ec:39:f6:c0:6a:2d:ca:f7:32:
         13:9b:fa:4d:76:b1:ed:24:78:e0:e3:fa:54:a6:f9:a8:34:18:
         da:99:78:b3:9d:6d:f0:de:5e:35:24:7d:c3:0d:be:c3:88:bd:
         48:f8:ba:01:7b:ad:8a:b2:cc:b5:0a:88:e3:a7:a2:f4:69:7f:
         10:15:e8:d3:77:0b:9f:66:fa:38:7d:e7:a1:56:41:4e:a6:fa:
         61:6d:86:fd:b2:46:20:70:af:91:4d:3b:4a:a8:e8:59:13:db:
         cd:56:0f:a8:03:ef:88:29:31:e5:04:87:54:90:4d:58:d5:42:
         aa:ea:d2:1e:f3:da:2c:e5:b7:a8:2f:1f:5c:1d:a0:2a:e1:cd:
         2b:27:5c:e8:61:91:69:61:84:d6:ce:37:70:fe:3d:e8:04:80:
         11:85:ad:81:31:15:3e:bb:c5:d2:6c:81:7a:3e:9d:66:58:ac:
         ed:6f:8b:19:a0:d5:d4:2f:ae:ca:6a:4e:da:03:41:77:22:be:
         e5:8b:36:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULowz6oCt4ti456ltB+tbCnCGkhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI2OTI5MTg0MDBGMDNFQTRBNTFDNEUzNkRERDIxQkJC
N0VEOUREQTAeFw0yNDAyMjExOTU1MDBaFw0yNTAyMTkyMDAwMDBaMDMxMTAvBgNV
BAMTKDQyRkMyMzBEOTFDQUI3M0IxRUY3MTQwMjg4QTk0NjkyMTFBMUZERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PDE+01PSK5MgQcd7bSaKK63B
Ch3rJo5IuB4WBRRt94fAaDj/X4h5q6TSiv7nElD5nckd9/9OcqcrtFPtyrHxvJb0
7iT/OSMiaC7hgE1Y3EyIKeZvfievo+cYEVHNSjQzvGI/MxhQOwjF82lwlxG/d8n0
3wai7B7Ic0cjmy1Q/pE2LJcG6pOkBLT9wSymOPA5yfOA6gsXd5LJjmNUkUl5uzkM
rh5St6oXDbKP8rQ3D20NUcVy5aWq4xqm9thhub83pvGhPQ/Avi+LkQovs667yBPm
y7KGYHO7XJ45VZ7z4LrNTV+txYdEcq6jwF6A3enWuZejK3jPO1akbuA+THbXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQvwjDZHKtzse9xQCiKlGkhGh/dEwHwYDVR0j
BBgwFoAU+2kpGEAPA+pKUcTjbd0hu7ftndowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDZ6NUR1TDhBaW8zc1p0RUptc1BpZFdSSGdrSEwzdW5reHhjQ1RNeWRD
QVkvMC9GQjY5MjkxODQwMEYwM0VBNEE1MUM0RTM2REREMjFCQkI3RUQ5RERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNjkyOTE4NDAwRjAzRUE0
QTUxQzRFMzZEREQyMUJCQjdFRDlEREEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ2ejVEdUw4QWlvM3NadEVKbXNQaWRXUkhna0hMM3Vua3h4Y0NUTXlkQ0FZLzAv
MzEzNzM3MmUzNjM2MmUzMTM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxQpgwDQYJKoZIhvcNAQELBQADggEBAAAVEeqq
RFZPj4PscPHAxJpGwS/eBExd9AukDHaHk9958EHDAYa1oxY547AR4yLKSw4e6UVG
l+8lsPGiGXdmyew59sBqLcr3MhOb+k12se0keODj+lSm+ag0GNqZeLOdbfDeXjUk
fcMNvsOIvUj4ugF7rYqyzLUKiOOnovRpfxAV6NN3C59m+jh956FWQU6m+mFthv2y
RiBwr5FNO0qo6FkT281WD6gD74gpMeUEh1SQTVjVQqrq0h7z2izlt6gvH1wdoCrh
zSsnXOhhkWlhhNbON3D+PegEgBGFrYExFT67xdJsgXo+nWZYrO1vixmg1dQvrspq
TtoDQXcivuWLNuQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org