Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa
File:                     3137372e37302e3132382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          0jxYry3TzKhzyyMZ6oWmsn10DKTH+/LaH0ej3XFF8vc=
Subject key identifier:   A8:36:0F:BA:93:5D:32:6B:ED:06:AE:03:47:49:56:AC:B0:9D:4C:31
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       3E0D59A4B1E2B6A849A161E9ECCD94512468C482
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 18:06:49 +0000
ROA not before:           Thu 06 Oct 2022 18:01:49 +0000
ROA not after:            Thu 05 Oct 2023 18:06:49 +0000
asID:                     28220
IP address blocks:        177.70.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:59:a4:b1:e2:b6:a8:49:a1:61:e9:ec:cd:94:51:24:68:c4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 18:01:49 2022 GMT
            Not After : Oct  5 18:06:49 2023 GMT
        Subject: CN=A8360FBA935D326BED06AE03474956ACB09D4C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:5e:b9:5a:3f:db:73:68:b9:f4:20:b6:7b:
                    cc:48:87:bb:80:40:24:61:14:c5:cb:30:b5:a1:a5:
                    93:8c:a4:9b:57:fe:05:20:16:40:e9:db:f0:e9:e6:
                    aa:3a:c6:2a:e9:e3:95:ad:ac:0a:57:8d:ca:f9:ad:
                    75:5d:05:f5:ae:38:46:c2:cd:92:a1:68:45:fc:5b:
                    9e:86:4b:2d:40:7b:4c:1a:25:cd:cc:a8:58:f7:d1:
                    16:d5:ed:71:82:01:86:23:48:16:75:0d:dd:0a:0e:
                    48:13:01:f1:e1:d7:71:5e:d0:e5:d5:53:c1:5e:b4:
                    fb:c7:72:ee:76:81:e7:20:52:29:70:13:20:e8:7b:
                    92:0d:9e:83:f9:cb:71:1e:1f:1c:fc:30:4d:c6:b9:
                    d9:0c:14:c5:da:ea:fc:e0:ac:60:f5:a2:21:e1:95:
                    35:57:9a:90:4b:6d:f1:1a:94:81:c7:07:5b:1f:fe:
                    2d:d8:33:fb:b4:d2:ad:71:f4:a9:90:e5:22:d5:52:
                    1e:1c:39:ba:b3:81:3b:32:94:61:c2:b2:ff:58:df:
                    b0:7d:41:5f:06:c0:3a:cd:f4:aa:a4:dc:ff:d2:08:
                    0d:d6:32:27:b9:c2:99:e2:fb:fe:0c:5d:fd:53:7f:
                    41:5f:d3:c1:d6:ee:3a:3a:6d:90:99:1c:29:64:a3:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:0F:BA:93:5D:32:6B:ED:06:AE:03:47:49:56:AC:B0:9D:4C:31
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:4e:b8:7c:36:6c:1b:3c:a4:90:ad:ae:eb:05:90:90:6c:
         98:da:14:18:14:57:9f:39:6e:ba:ca:2e:04:da:9d:50:b7:dc:
         77:99:81:9e:54:da:92:ac:46:ee:fb:2a:83:cf:cf:cb:af:98:
         b4:bb:1f:1b:2b:e7:31:c3:9a:06:fd:9a:48:71:ef:de:bc:9c:
         52:08:94:c7:94:45:70:5b:d5:18:6e:07:d3:dd:0b:e9:ad:5b:
         7d:75:07:ad:8b:69:08:07:5c:3b:e6:57:b0:e6:a8:9d:8d:dc:
         dc:c0:29:12:a6:7e:c4:67:ad:1c:df:9c:f9:34:1c:58:d0:11:
         10:0a:88:e1:10:45:86:a1:7b:1c:aa:70:67:14:87:d4:67:10:
         d1:e5:1e:4c:bf:1b:8c:80:c6:a6:f8:be:80:3b:46:15:dc:9c:
         4e:7e:df:71:1a:1e:9b:a0:46:e1:e6:da:da:81:0b:c0:71:93:
         f6:ab:26:dc:7f:3c:0b:05:e9:81:51:a0:ac:75:53:af:c7:0c:
         53:f3:09:33:30:d6:33:52:6e:ed:c4:bb:63:4c:97:20:3d:ad:
         79:70:a0:c8:e5:49:c6:3b:27:96:46:7b:55:43:d9:05:32:01:
         ee:04:79:65:2e:49:e1:4f:90:e6:4c:69:4f:00:6d:fb:c9:f7:
         28:36:ab:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPg1ZpLHitqhJoWHp7M2UUSRoxIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGOUE1RjFERUY5MTg0MDgzOEE0NUQzQzMxNzRFMDc3
RjE1RjNEQTAeFw0yMjEwMDYxODAxNDlaFw0yMzEwMDUxODA2NDlaMDMxMTAvBgNV
BAMTKEE4MzYwRkJBOTM1RDMyNkJFRDA2QUUwMzQ3NDk1NkFDQjA5RDRDMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9F65Wj/bc2i59CC2e8xIh7uA
QCRhFMXLMLWhpZOMpJtX/gUgFkDp2/Dp5qo6xirp45WtrApXjcr5rXVdBfWuOEbC
zZKhaEX8W56GSy1Ae0waJc3MqFj30RbV7XGCAYYjSBZ1Dd0KDkgTAfHh13Fe0OXV
U8FetPvHcu52gecgUilwEyDoe5INnoP5y3EeHxz8ME3GudkMFMXa6vzgrGD1oiHh
lTVXmpBLbfEalIHHB1sf/i3YM/u00q1x9KmQ5SLVUh4cObqzgTsylGHCsv9Y37B9
QV8GwDrN9Kqk3P/SCA3WMie5wpni+/4MXf1Tf0Ff08HW7jo6bZCZHClko9VxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqDYPupNdMmvtBq4DR0lWrLCdTDEwHwYDVR0j
BBgwFoAU1/ml8d75GECDikXTwxdOB38V89owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVWOWlnTm45YjFVZUZacHJuWWJQanlOaTdXWVp1Wkp4NXB4WHpaVloz
U2UvMC9EN0Y5QTVGMURFRjkxODQwODM4QTQ1RDNDMzE3NEUwNzdGMTVGM0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3RjlBNUYxREVGOTE4NDA4
MzhBNDVEM0MzMTc0RTA3N0YxNUYzREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFVjlpZ05uOWIxVWVGWnByblliUGp5Tmk3V1ladVpKeDVweFh6WlZaM1NlLzAv
MzEzNzM3MmUzNzMwMmUzMTMyMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUaAMA0GCSqGSIb3DQEBCwUAA4IBAQBvGk64fDZs
GzykkK2u6wWQkGyY2hQYFFefOW66yi4E2p1Qt9x3mYGeVNqSrEbu+yqDz8/Lr5i0
ux8bK+cxw5oG/ZpIce/evJxSCJTHlEVwW9UYbgfT3QvprVt9dQeti2kIB1w75lew
5qidjdzcwCkSpn7EZ60c35z5NBxY0BEQCojhEEWGoXscqnBnFIfUZxDR5R5MvxuM
gMam+L6AO0YV3JxOft9xGh6boEbh5tragQvAcZP2qybcfzwLBemBUaCsdVOvxwxT
8wkzMNYzUm7txLtjTJcgPa15cKDI5UnGOyeWRntVQ9kFMgHuBHllLknhT5DmTGlP
AG37yfcoNqta
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org