Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32352e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32352e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          8e+TSb1XMgkfTy7RkM/9gJLhEWYRGBbZVEabyQ9aXHQ=
Subject key identifier:   A7:90:BC:A1:EC:3A:6E:88:8E:73:22:2A:7B:FE:CF:F2:BB:52:AE:E0
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       38999A024437B463EA4D607572CB89132CBC843A
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32352e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:32 +0000
ROA not before:           Thu 17 Nov 2022 17:58:32 +0000
ROA not after:            Thu 16 Nov 2023 18:03:32 +0000
asID:                     28360
IP address blocks:        177.8.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:9a:02:44:37:b4:63:ea:4d:60:75:72:cb:89:13:2c:bc:84:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:32 2022 GMT
            Not After : Nov 16 18:03:32 2023 GMT
        Subject: CN=A790BCA1EC3A6E888E73222A7BFECFF2BB52AEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:e6:7c:f5:2d:26:5a:80:eb:a1:a6:92:24:
                    96:14:50:57:05:2c:aa:69:52:7e:d1:e5:3d:4d:5e:
                    2a:49:53:4f:05:99:a4:80:96:db:df:cd:2a:8c:48:
                    4c:09:c7:fe:d8:29:77:d0:fd:74:86:74:af:fb:41:
                    8a:1c:1d:4e:5a:24:74:f3:0d:08:34:50:a2:2b:0c:
                    53:b3:08:b7:2b:da:18:40:b0:27:4b:09:2e:50:32:
                    bf:88:b4:4c:57:3f:82:42:40:a0:dc:04:66:6c:ee:
                    68:7b:eb:d0:4a:ee:41:c9:5d:91:8c:0c:ab:fd:ce:
                    b6:51:54:97:32:cb:11:79:bb:06:d6:b1:c5:9d:13:
                    7c:16:69:d2:7e:0c:79:1b:76:ec:b7:87:2f:39:07:
                    10:68:87:0a:ea:c5:b2:11:c2:92:09:a0:23:ec:44:
                    73:17:8c:ef:0c:a9:f7:ab:09:05:de:d1:5b:bb:0b:
                    b9:02:0f:14:31:30:30:f8:2d:2b:71:c4:d0:0d:c9:
                    df:7e:af:4e:b6:00:a4:f6:e0:b4:f7:d4:9e:d3:61:
                    47:79:1d:54:a1:58:aa:1a:50:02:fa:6d:67:a8:a6:
                    7c:37:4c:64:cd:9d:1c:ba:da:eb:a0:d3:91:cb:a3:
                    56:a1:c7:99:f3:5c:a5:0e:7f:b2:f5:6d:67:48:d4:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:BC:A1:EC:3A:6E:88:8E:73:22:2A:7B:FE:CF:F2:BB:52:AE:E0
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32352e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:08:09:fc:d1:7c:de:a9:c3:e3:24:85:b1:e7:ea:fa:8c:6a:
         ae:e9:59:a4:47:93:db:80:a3:0b:a9:76:ae:aa:94:c0:00:31:
         e8:26:00:7e:c6:a1:05:e5:d8:a0:1f:8f:b0:c4:0a:4e:a5:18:
         e7:3a:e2:6f:89:50:44:d1:80:92:0a:13:bb:68:f2:3a:db:c1:
         f2:f0:e5:c3:58:7a:a4:cd:c8:6f:15:ca:1e:9c:45:5d:c1:47:
         a6:88:bc:04:ca:63:dc:b8:95:fa:56:aa:91:e8:a6:04:c9:23:
         48:ec:cb:2e:e5:2a:a7:29:0a:5a:4c:45:60:12:10:94:2e:18:
         c8:28:23:35:15:a0:9f:45:6e:bf:33:2b:1e:7c:1d:42:e5:67:
         f4:75:83:d3:c8:83:8f:b5:e3:db:74:60:43:6d:85:b7:21:12:
         7c:1a:d6:9d:b0:21:a6:39:0a:25:79:a9:85:8f:25:cc:df:4e:
         0a:fc:98:7c:3a:9f:9c:b4:fb:76:b4:64:55:46:97:c2:12:5c:
         a2:67:a1:01:18:73:48:6e:66:95:25:35:c0:6e:e0:c6:e3:a6:
         b0:8e:74:4f:fb:f5:94:57:d8:44:ce:b5:08:77:0f:1d:9e:b1:
         99:9d:b6:97:a3:be:48:bd:fd:04:79:4e:7f:78:ff:91:17:38:
         07:1b:60:bd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOJmaAkQ3tGPqTWB1csuJEyy8hDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzJaFw0yMzExMTYxODAzMzJaMDMxMTAvBgNV
BAMTKEE3OTBCQ0ExRUMzQTZFODg4RTczMjIyQTdCRkVDRkYyQkI1MkFFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPeZ89S0mWoDroaaSJJYUUFcF
LKppUn7R5T1NXipJU08FmaSAltvfzSqMSEwJx/7YKXfQ/XSGdK/7QYocHU5aJHTz
DQg0UKIrDFOzCLcr2hhAsCdLCS5QMr+ItExXP4JCQKDcBGZs7mh769BK7kHJXZGM
DKv9zrZRVJcyyxF5uwbWscWdE3wWadJ+DHkbduy3hy85BxBohwrqxbIRwpIJoCPs
RHMXjO8MqferCQXe0Vu7C7kCDxQxMDD4LStxxNANyd9+r062AKT24LT31J7TYUd5
HVShWKoaUAL6bWeopnw3TGTNnRy62uug05HLo1ahx5nzXKUOf7L1bWdI1K3TAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUp5C8oew6boiOcyIqe/7P8rtSruAwHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxCBkwDQYJKoZIhvcNAQELBQADggEBAEMICfzRfN6pw+Mk
hbHn6vqMaq7pWaRHk9uAowupdq6qlMAAMegmAH7GoQXl2KAfj7DECk6lGOc64m+J
UETRgJIKE7to8jrbwfLw5cNYeqTNyG8Vyh6cRV3BR6aIvATKY9y4lfpWqpHopgTJ
I0jsyy7lKqcpClpMRWASEJQuGMgoIzUVoJ9Fbr8zKx58HULlZ/R1g9PIg4+149t0
YENthbchEnwa1p2wIaY5CiV5qYWPJczfTgr8mHw6n5y0+3a0ZFVGl8ISXKJnoQEY
c0huZpUlNcBu4MbjprCOdE/79ZRX2ETOtQh3Dx2esZmdtpejvki9/QR5Tn94/5EX
OAcbYL0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org