Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32342e302f32312d3231203d3e203238333630.roa
File:                     3137372e382e32342e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          7DtYl0ekUARFaJ6UN8bq64mkOuwegrY4574cZoilu24=
Subject key identifier:   DA:74:0F:A8:42:95:96:00:27:44:8C:8C:95:DC:11:F0:D2:2B:F6:D3
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       23D96894B7571532566CF23EDB8E73DF64D5E377
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32342e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:37 +0000
ROA not before:           Thu 17 Nov 2022 17:58:37 +0000
ROA not after:            Thu 16 Nov 2023 18:03:37 +0000
asID:                     28360
IP address blocks:        177.8.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d9:68:94:b7:57:15:32:56:6c:f2:3e:db:8e:73:df:64:d5:e3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:37 2022 GMT
            Not After : Nov 16 18:03:37 2023 GMT
        Subject: CN=DA740FA84295960027448C8C95DC11F0D22BF6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:09:be:f2:91:06:cc:e0:07:32:b1:5c:fe:
                    c6:64:b3:12:ca:97:1a:6b:99:2b:78:ac:4f:2b:ec:
                    70:b9:1b:34:2d:4d:c3:99:8d:e6:6c:6d:c0:c2:3d:
                    4e:18:00:63:98:04:73:86:15:2a:2d:15:68:49:f5:
                    6c:75:c0:e1:ce:8e:5a:4a:44:c0:65:92:f9:99:af:
                    12:e4:a7:4d:25:d1:4b:80:40:40:b3:ec:f9:41:6c:
                    fa:ed:f4:2f:55:a9:98:68:57:72:f8:b2:44:89:33:
                    9a:65:d6:a7:1b:df:f4:1a:3f:44:c6:c4:67:95:ab:
                    c3:7b:9f:43:a0:31:f6:44:84:51:1f:58:57:f1:04:
                    e8:69:1a:0f:44:bb:75:02:ef:1d:b9:98:f8:37:3f:
                    d9:be:f8:a7:4b:3c:fd:f2:9e:5f:2e:02:92:52:f2:
                    6e:e1:19:af:55:50:92:68:80:02:63:78:18:d5:3a:
                    40:a5:5d:cf:d6:50:65:a9:2a:72:fd:c7:ae:bb:e1:
                    80:6b:8b:8d:2b:d8:79:41:c0:04:1f:40:a8:bc:17:
                    1c:e1:71:1e:7e:33:8b:00:40:ae:02:17:e9:8a:b1:
                    88:79:35:17:38:7c:d9:46:a2:51:91:10:da:3e:b5:
                    6d:50:98:95:ab:1c:a3:f9:0e:70:b0:98:77:d1:f8:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:74:0F:A8:42:95:96:00:27:44:8C:8C:95:DC:11:F0:D2:2B:F6:D3
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32342e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:72:bb:41:a9:1c:ce:12:74:45:78:cb:05:44:ae:b6:11:
         25:e3:b5:6f:ab:d7:b3:59:82:2c:ce:3e:70:ad:cb:e9:7e:4c:
         f2:3d:ef:5e:98:03:7c:00:cd:70:3d:e5:f7:20:bb:82:52:7f:
         25:5e:95:72:88:5a:38:5d:61:a1:1d:d5:25:df:b9:1c:ed:37:
         9b:61:b5:cd:7a:54:ec:ae:9a:4f:df:b1:2e:ca:b5:a3:f7:6d:
         33:61:e8:c0:c0:3c:8f:7a:04:21:8e:39:bb:27:45:65:14:d1:
         15:6a:d4:9b:d8:f9:b6:70:8a:64:d4:f3:8b:58:e4:0f:37:39:
         25:09:d4:51:5b:40:28:5a:d4:0c:1d:e6:fc:a4:3d:cc:33:b1:
         50:c0:ff:8f:ad:d0:27:7b:24:f0:dc:a2:d4:9e:48:95:c0:9f:
         48:ed:4a:fb:d3:09:20:47:c4:34:06:cd:67:bf:ad:a3:e6:bc:
         13:f5:f3:2b:de:d4:eb:43:37:1b:a4:f2:8d:2b:71:16:5e:de:
         c6:1e:b5:99:30:d7:a9:71:7c:fc:ad:b7:4b:12:28:a4:82:11:
         76:94:af:3c:95:cd:fd:73:b7:e1:df:d2:14:9f:a2:df:d5:8c:
         d6:a0:de:e2:b9:13:d5:d2:f5:a1:31:84:aa:9c:a9:4c:00:94:
         ba:bd:96:45
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUI9lolLdXFTJWbPI+245z32TV43cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzdaFw0yMzExMTYxODAzMzdaMDMxMTAvBgNV
BAMTKERBNzQwRkE4NDI5NTk2MDAyNzQ0OEM4Qzk1REMxMUYwRDIyQkY2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrAwm+8pEGzOAHMrFc/sZksxLK
lxprmSt4rE8r7HC5GzQtTcOZjeZsbcDCPU4YAGOYBHOGFSotFWhJ9Wx1wOHOjlpK
RMBlkvmZrxLkp00l0UuAQECz7PlBbPrt9C9VqZhoV3L4skSJM5pl1qcb3/QaP0TG
xGeVq8N7n0OgMfZEhFEfWFfxBOhpGg9Eu3UC7x25mPg3P9m++KdLPP3ynl8uApJS
8m7hGa9VUJJogAJjeBjVOkClXc/WUGWpKnL9x6674YBri40r2HlBwAQfQKi8Fxzh
cR5+M4sAQK4CF+mKsYh5NRc4fNlGolGRENo+tW1QmJWrHKP5DnCwmHfR+Kp/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU2nQPqEKVlgAnRIyMldwR8NIr9tMwHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzIzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxCBgwDQYJKoZIhvcNAQELBQADggEBAB9scrtBqRzOEnRF
eMsFRK62ESXjtW+r17NZgizOPnCty+l+TPI9716YA3wAzXA95fcgu4JSfyVelXKI
WjhdYaEd1SXfuRztN5thtc16VOyumk/fsS7KtaP3bTNh6MDAPI96BCGOObsnRWUU
0RVq1JvY+bZwimTU84tY5A83OSUJ1FFbQCha1Awd5vykPcwzsVDA/4+t0Cd7JPDc
otSeSJXAn0jtSvvTCSBHxDQGzWe/raPmvBP18yve1OtDNxuk8o0rcRZe3sYetZkw
16lxfPytt0sSKKSCEXaUrzyVzf1zt+Hf0hSfot/VjNag3uK5E9XS9aExhKqcqUwA
lLq9lkU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org