Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230362e302f32342d3234203d3e20323632373230.roa
File:                     3137372e382e3230362e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          Q/fqUCDxlv+am0XywsiYqgRtaeRN3SqWNXrDYtus8tk=
Subject key identifier:   5A:55:EE:0A:7D:C9:D5:6A:89:33:51:CA:1E:EF:BD:78:4F:47:D4:FA
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       1EBC900F4AD7037D66E1EBFA2E3E60D6915897A1
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230362e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:52 +0000
ROA not before:           Tue 28 Mar 2023 20:20:52 +0000
ROA not after:            Tue 26 Mar 2024 20:25:52 +0000
asID:                     262720
IP address blocks:        177.8.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bc:90:0f:4a:d7:03:7d:66:e1:eb:fa:2e:3e:60:d6:91:58:97:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:52 2023 GMT
            Not After : Mar 26 20:25:52 2024 GMT
        Subject: CN=5A55EE0A7DC9D56A893351CA1EEFBD784F47D4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:e9:fa:c0:1f:1e:6d:9f:1d:35:1c:1e:17:
                    79:87:7e:5b:17:51:12:bc:f4:1a:a9:0b:ca:fc:a0:
                    96:9e:a0:fe:29:fd:8b:4b:a8:93:97:30:ea:fc:8a:
                    4a:28:3a:e2:0d:c6:6e:be:df:8a:e4:e1:9f:96:04:
                    23:a1:ae:ab:ad:4e:46:49:c1:f9:77:14:21:22:c0:
                    25:8a:0b:9d:e0:00:5d:b7:8f:91:a5:50:09:c4:64:
                    bc:8e:c8:b5:c3:46:01:8c:5f:57:e6:e3:5f:7f:ee:
                    d7:87:a7:b5:19:a5:ee:dd:35:27:e6:51:4a:ec:ce:
                    98:50:01:67:c9:a4:32:83:0f:34:66:e0:95:bb:0e:
                    18:cb:a2:de:86:10:f8:d9:5e:e6:50:8a:bf:a8:22:
                    37:fe:72:de:38:b6:8f:af:9c:b6:22:43:7b:b3:33:
                    28:2b:24:50:d4:1c:05:c1:3e:a9:2e:cf:63:e1:1c:
                    04:0c:42:45:15:fa:61:c9:72:ce:8d:31:90:23:d3:
                    f6:34:7c:6c:49:53:aa:ab:7f:28:4e:27:40:c5:f1:
                    aa:ae:a5:4e:51:72:64:03:3c:db:02:8c:33:29:f5:
                    57:e7:96:c5:6d:97:bb:36:16:a3:57:f5:1d:5c:09:
                    78:80:16:c6:85:9c:7f:b5:50:09:e6:6a:fe:12:ba:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:EE:0A:7D:C9:D5:6A:89:33:51:CA:1E:EF:BD:78:4F:47:D4:FA
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230362e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:70:65:2c:22:9c:ef:63:fc:bd:ca:0b:43:5b:27:93:2a:82:
         90:ef:f8:83:6c:df:da:b9:b8:fb:04:0b:fb:48:72:34:f0:0a:
         10:31:ff:2d:5a:90:54:01:d4:de:97:9c:df:24:c4:fd:75:70:
         80:be:26:d9:c7:df:02:d9:6a:c3:77:e7:88:ff:09:0b:67:83:
         e6:54:db:aa:43:d1:21:2e:05:9f:51:ef:91:5a:9c:f7:c9:b4:
         96:ba:15:8c:86:ca:2b:7b:ca:9f:37:70:cb:c7:bd:6d:83:37:
         a5:5c:2e:03:11:d4:6c:0a:9c:b4:16:86:eb:b1:f5:57:6a:47:
         71:a5:79:15:89:d3:cd:47:53:49:66:09:6a:41:a1:d4:89:c1:
         53:81:37:58:4d:51:35:72:f4:e6:f4:9d:3f:cb:a9:8d:27:52:
         b4:2f:b9:78:27:22:51:25:b2:89:85:72:bb:e5:15:96:16:8c:
         6b:66:3e:a1:ec:b3:9b:62:bc:9a:ce:1b:59:57:b8:61:89:d3:
         ea:ad:b9:78:fd:f7:1e:ec:05:fd:3f:96:2d:95:78:84:03:5e:
         b1:bf:e1:e8:04:3c:3d:43:c5:58:cb:b4:41:43:c4:26:ec:50:
         12:df:4a:a4:d9:e5:4e:ce:6d:db:3c:ed:de:8f:50:f1:1e:1e:
         83:91:c6:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHryQD0rXA31m4ev6Lj5g1pFYl6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZEODk0RDAyM0NEMTgyQkIyOTEzQTI4MjBFMzYzRDZC
MzJFRkYwQTAeFw0yMzAzMjgyMDIwNTJaFw0yNDAzMjYyMDI1NTJaMDMxMTAvBgNV
BAMTKDVBNTVFRTBBN0RDOUQ1NkE4OTMzNTFDQTFFRUZCRDc4NEY0N0Q0RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz+n6wB8ebZ8dNRweF3mHflsX
URK89BqpC8r8oJaeoP4p/YtLqJOXMOr8ikooOuINxm6+34rk4Z+WBCOhrqutTkZJ
wfl3FCEiwCWKC53gAF23j5GlUAnEZLyOyLXDRgGMX1fm419/7teHp7UZpe7dNSfm
UUrszphQAWfJpDKDDzRm4JW7DhjLot6GEPjZXuZQir+oIjf+ct44to+vnLYiQ3uz
MygrJFDUHAXBPqkuz2PhHAQMQkUV+mHJcs6NMZAj0/Y0fGxJU6qrfyhOJ0DF8aqu
pU5RcmQDPNsCjDMp9VfnlsVtl7s2FqNX9R1cCXiAFsaFnH+1UAnmav4SukYlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWlXuCn3J1WqJM1HKHu+9eE9H1PowHwYDVR0j
BBgwFoAUH9iU0CPNGCuykTooIONj1rMu/wowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4
S2gvMC8xRkQ4OTREMDIzQ0QxODJCQjI5MTNBMjgyMEUzNjNENkIzMkVGRjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGRDg5NEQwMjNDRDE4MkJC
MjkxM0EyODIwRTM2M0Q2QjMyRUZGMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRMlRvcVAyckdLdDN6SGdURzZXUE50QzZuaTFDMmZTZm5lMUtMakVheEtoLzAv
MzEzNzM3MmUzODJlMzIzMDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQjOMA0GCSqGSIb3DQEBCwUAA4IBAQA3cGUsIpzv
Y/y9ygtDWyeTKoKQ7/iDbN/aubj7BAv7SHI08AoQMf8tWpBUAdTel5zfJMT9dXCA
vibZx98C2WrDd+eI/wkLZ4PmVNuqQ9EhLgWfUe+RWpz3ybSWuhWMhsore8qfN3DL
x71tgzelXC4DEdRsCpy0FobrsfVXakdxpXkVidPNR1NJZglqQaHUicFTgTdYTVE1
cvTm9J0/y6mNJ1K0L7l4JyJRJbKJhXK75RWWFoxrZj6h7LObYryazhtZV7hhidPq
rbl4/fce7AX9P5YtlXiEA16xv+HoBDw9Q8VYy7RBQ8Qm7FAS30qk2eVOzm3bPO3e
j1DxHh6DkcZw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org