Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32382e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32382e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          Ysz5m2EpuTLuNZB6i6wbv2f2KlULBQ1W0cyErEdt97s=
Subject key identifier:   B3:55:98:96:73:3D:62:EF:0F:EC:55:81:47:1A:33:E6:99:01:23:82
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       630FD07B4C681D059CBD9D3C7F609A6D8A67CAD7
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32382e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:37 +0000
ROA not before:           Thu 17 Nov 2022 17:58:37 +0000
ROA not after:            Thu 16 Nov 2023 18:03:37 +0000
asID:                     28360
IP address blocks:        177.8.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:d0:7b:4c:68:1d:05:9c:bd:9d:3c:7f:60:9a:6d:8a:67:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:37 2022 GMT
            Not After : Nov 16 18:03:37 2023 GMT
        Subject: CN=B3559896733D62EF0FEC5581471A33E699012382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:d5:c3:c1:54:d8:29:67:5e:9a:05:a4:56:
                    51:3d:5b:da:75:d5:df:6b:8c:0c:fd:e7:a4:2a:b8:
                    5f:0d:59:17:8a:c4:1d:8f:22:41:6e:e5:f6:18:9c:
                    f1:db:39:ed:f3:93:b7:b5:a0:e0:a6:a5:04:20:d3:
                    f8:0d:be:98:b1:9f:fe:12:5b:ba:9e:55:33:52:d2:
                    f4:48:9e:88:38:6d:6e:ed:6a:85:0b:5a:87:58:48:
                    67:67:f4:7e:97:fa:10:b9:2d:43:77:ab:eb:11:7c:
                    b9:25:ec:e9:65:02:e4:f6:20:17:df:98:f6:48:c2:
                    cc:8d:95:0e:9c:b5:d5:8e:69:ee:e8:30:da:2f:20:
                    6f:e3:29:a0:47:90:57:ec:dd:05:cb:98:9b:35:4f:
                    55:8c:2a:8d:76:f8:f8:2b:c4:a2:c8:be:df:50:86:
                    70:4d:ac:84:81:77:7a:70:70:1d:96:49:8b:89:41:
                    3e:19:88:8f:1a:4e:65:86:13:91:ec:0f:2a:97:2c:
                    4f:c2:77:a5:41:7e:06:02:06:94:21:9c:c1:5b:e9:
                    1f:31:3d:f1:f7:31:72:a8:c9:7d:72:1a:0a:5d:17:
                    51:b6:e5:27:89:dd:70:ab:94:b9:a2:b4:00:98:03:
                    12:58:08:3e:0d:1c:98:40:d4:67:8c:cb:b6:ec:1f:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:98:96:73:3D:62:EF:0F:EC:55:81:47:1A:33:E6:99:01:23:82
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32382e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:e3:9e:11:10:02:e9:21:19:64:d8:2f:98:53:df:95:02:
         62:6b:c5:02:ce:3d:52:39:56:03:f5:d6:48:5b:aa:56:ac:ab:
         8f:8f:4d:f3:67:7f:1a:a2:f0:c3:e1:ef:4e:33:09:77:b7:29:
         5e:63:3c:bc:85:c5:bb:a9:af:3b:a8:ae:f7:27:8b:fb:2d:0b:
         5d:65:41:81:a3:bd:23:3f:52:60:3b:2d:f5:09:f7:77:ef:90:
         73:88:1e:25:28:79:a2:ff:2d:f7:55:a2:4a:92:32:6e:05:f7:
         31:b6:46:dc:b5:c5:2c:e2:94:ed:64:ba:f5:4a:f6:4b:1e:5c:
         9f:05:53:13:cd:31:dc:49:a3:37:6d:a3:80:05:16:8a:3b:cf:
         6a:db:4a:7f:b9:b7:a5:58:dd:9d:b7:52:da:6a:1e:d4:94:3f:
         46:19:4b:c6:da:ac:b8:ad:a3:ec:49:b1:b2:2e:45:e0:ff:17:
         3e:c2:c4:2b:1c:70:6a:0a:2e:92:59:ce:7e:0c:26:1e:55:3b:
         6f:09:a4:4e:e9:a6:a8:6f:9f:d8:d2:f3:26:50:c7:d4:1e:38:
         3a:e5:48:37:17:96:f0:6e:4c:99:bc:27:67:9c:19:3c:7d:43:
         f9:9b:e2:94:78:a0:b0:44:1e:d7:22:9e:f5:8a:d2:af:38:d2:
         60:a4:8c:e5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUYw/Qe0xoHQWcvZ08f2CabYpnytcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzdaFw0yMzExMTYxODAzMzdaMDMxMTAvBgNV
BAMTKEIzNTU5ODk2NzMzRDYyRUYwRkVDNTU4MTQ3MUEzM0U2OTkwMTIzODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBu9XDwVTYKWdemgWkVlE9W9p1
1d9rjAz956QquF8NWReKxB2PIkFu5fYYnPHbOe3zk7e1oOCmpQQg0/gNvpixn/4S
W7qeVTNS0vRInog4bW7taoULWodYSGdn9H6X+hC5LUN3q+sRfLkl7OllAuT2IBff
mPZIwsyNlQ6ctdWOae7oMNovIG/jKaBHkFfs3QXLmJs1T1WMKo12+PgrxKLIvt9Q
hnBNrISBd3pwcB2WSYuJQT4ZiI8aTmWGE5HsDyqXLE/Cd6VBfgYCBpQhnMFb6R8x
PfH3MXKoyX1yGgpdF1G25SeJ3XCrlLmitACYAxJYCD4NHJhA1GeMy7bsHyjtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUs1WYlnM9Yu8P7FWBRxoz5pkBI4IwHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxCBwwDQYJKoZIhvcNAQELBQADggEBAEZM454REALpIRlk
2C+YU9+VAmJrxQLOPVI5VgP11khbqlasq4+PTfNnfxqi8MPh704zCXe3KV5jPLyF
xbuprzuorvcni/stC11lQYGjvSM/UmA7LfUJ93fvkHOIHiUoeaL/LfdVokqSMm4F
9zG2Rty1xSzilO1kuvVK9kseXJ8FUxPNMdxJozdto4AFFoo7z2rbSn+5t6VY3Z23
UtpqHtSUP0YZS8barLito+xJsbIuReD/Fz7CxCsccGoKLpJZzn4MJh5VO28JpE7p
pqhvn9jS8yZQx9QeODrlSDcXlvBuTJm8J2ecGTx9Q/mb4pR4oLBEHtcinvWK0q84
0mCkjOU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org