Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32392e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32392e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          oFH0VUIM/pRV3e5/g8SgntrlF2ALJOylqYt6QTaX/yg=
Subject key identifier:   EA:3D:9C:E3:75:72:F1:A8:E1:23:09:45:A3:CB:A1:69:82:7E:74:59
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       35EB90CFE3CB039992DE7F378FF3588C158FC916
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32392e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:32 +0000
ROA not before:           Thu 17 Nov 2022 17:58:32 +0000
ROA not after:            Thu 16 Nov 2023 18:03:32 +0000
asID:                     28360
IP address blocks:        177.8.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:eb:90:cf:e3:cb:03:99:92:de:7f:37:8f:f3:58:8c:15:8f:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:32 2022 GMT
            Not After : Nov 16 18:03:32 2023 GMT
        Subject: CN=EA3D9CE37572F1A8E1230945A3CBA169827E7459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:4e:6d:e8:f5:4e:ab:37:f0:05:80:e1:34:
                    21:06:60:b5:8e:59:6f:d7:17:54:1b:be:3b:d1:52:
                    6d:c7:3b:00:93:35:2f:00:aa:19:ea:f7:43:c7:b3:
                    bc:9f:52:69:ec:00:c5:a6:a5:1f:50:b7:05:0b:91:
                    e4:14:2b:7f:ab:33:d4:3d:2e:3a:bd:41:a9:1a:e2:
                    d2:fe:d9:24:e3:1e:b3:91:51:59:aa:e1:fb:9f:f1:
                    17:29:3e:31:84:00:c4:e9:27:f2:8c:57:e9:a0:87:
                    c0:e2:c9:4f:63:1e:c5:cc:16:6c:49:ff:29:ca:19:
                    25:1d:08:82:64:d0:7d:89:c8:c1:ab:9f:6d:90:51:
                    88:c1:be:34:08:6a:f1:89:4c:ca:a4:d9:45:9f:87:
                    45:c1:6a:67:83:4b:ba:0a:8d:73:e8:9b:f1:8e:fe:
                    93:f1:86:34:e4:65:40:e6:03:15:70:85:9c:45:2d:
                    38:55:fd:ad:47:63:cc:24:b5:48:e2:25:57:0b:9c:
                    b6:a6:35:9a:00:e6:87:e0:35:a0:d8:c3:8a:b1:71:
                    b0:1f:66:6b:b9:c6:6c:ff:54:be:62:cd:28:f8:0e:
                    60:5a:52:5a:74:eb:08:9e:60:a4:1d:4f:63:49:2e:
                    fa:89:ea:ee:17:5c:0f:44:cf:e8:fc:0e:3c:15:d3:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:9C:E3:75:72:F1:A8:E1:23:09:45:A3:CB:A1:69:82:7E:74:59
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32392e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:53:64:66:af:45:66:cd:a5:b5:58:cf:59:ac:7e:1f:20:00:
         23:14:25:fe:d8:d2:2e:9f:65:54:1a:81:51:a9:89:e8:f0:78:
         99:3c:f3:f7:a6:95:2e:5a:fc:d6:42:69:1d:98:0e:b3:74:88:
         4a:75:01:43:dc:f7:3e:b0:e2:ae:1f:8c:10:e3:c0:a0:9c:00:
         93:01:fd:e2:41:bd:ee:61:bf:a3:31:08:f5:f0:91:7d:d7:58:
         23:dc:da:2d:a1:0d:d4:69:e2:46:b7:c6:e6:ff:9e:4b:eb:e9:
         ae:a3:df:84:8a:8a:8a:76:b4:86:1e:70:ea:08:7d:a4:a6:c1:
         a5:2f:9f:09:9a:d2:99:67:54:db:be:00:04:04:4c:79:e4:41:
         97:b6:e1:08:8c:aa:d9:8b:f1:69:88:ab:2d:50:c0:e3:5b:9e:
         af:b0:e8:ab:46:77:cc:98:34:6b:a3:9d:10:b6:4f:3f:a5:fc:
         e1:ad:37:c3:44:b7:17:3b:d4:79:db:73:ed:4f:23:0c:82:14:
         15:f0:ff:1d:c5:41:65:29:44:02:b3:f9:2a:63:5f:40:9e:70:
         55:29:38:ec:7e:1d:43:b2:46:ab:3c:45:c9:5b:e0:8f:b7:d2:
         5c:fb:8b:83:02:4b:46:fc:8c:2b:61:f7:a7:5c:db:68:40:2e:
         94:12:e0:8a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUNeuQz+PLA5mS3n83j/NYjBWPyRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzJaFw0yMzExMTYxODAzMzJaMDMxMTAvBgNV
BAMTKEVBM0Q5Q0UzNzU3MkYxQThFMTIzMDk0NUEzQ0JBMTY5ODI3RTc0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzk5t6PVOqzfwBYDhNCEGYLWO
WW/XF1QbvjvRUm3HOwCTNS8Aqhnq90PHs7yfUmnsAMWmpR9QtwULkeQUK3+rM9Q9
Ljq9Qaka4tL+2STjHrORUVmq4fuf8RcpPjGEAMTpJ/KMV+mgh8DiyU9jHsXMFmxJ
/ynKGSUdCIJk0H2JyMGrn22QUYjBvjQIavGJTMqk2UWfh0XBameDS7oKjXPom/GO
/pPxhjTkZUDmAxVwhZxFLThV/a1HY8wktUjiJVcLnLamNZoA5ofgNaDYw4qxcbAf
Zmu5xmz/VL5izSj4DmBaUlp06wieYKQdT2NJLvqJ6u4XXA9Ez+j8DjwV01AlAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU6j2c43Vy8ajhIwlFo8uhaYJ+dFkwHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM3MmUzODJlMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxCB0wDQYJKoZIhvcNAQELBQADggEBAGJTZGavRWbNpbVY
z1msfh8gACMUJf7Y0i6fZVQagVGpiejweJk88/emlS5a/NZCaR2YDrN0iEp1AUPc
9z6w4q4fjBDjwKCcAJMB/eJBve5hv6MxCPXwkX3XWCPc2i2hDdRp4ka3xub/nkvr
6a6j34SKiop2tIYecOoIfaSmwaUvnwma0plnVNu+AAQETHnkQZe24QiMqtmL8WmI
qy1QwONbnq+w6KtGd8yYNGujnRC2Tz+l/OGtN8NEtxc71Hnbc+1PIwyCFBXw/x3F
QWUpRAKz+SpjX0CecFUpOOx+HUOyRqs8Rclb4I+30lz7i4MCS0b8jCth96dc22hA
LpQS4Io=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org