Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa
File:                     3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          9ROQ0x8oP/hH1uf/n+U6rDK/GNsL+ovkL89LAqdIF7I=
Subject key identifier:   FB:3B:F9:3F:C0:1A:96:78:1E:69:9E:5D:76:E4:21:5D:C3:EE:9D:69
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       4E1A7BDC976000E68F4EE52E3462E556E473BC63
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa
Signing time:             Mon 22 May 2023 16:57:45 +0000
ROA not before:           Mon 22 May 2023 16:52:45 +0000
ROA not after:            Mon 20 May 2024 16:57:45 +0000
asID:                     267301
IP address blocks:        177.155.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1a:7b:dc:97:60:00:e6:8f:4e:e5:2e:34:62:e5:56:e4:73:bc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 22 16:52:45 2023 GMT
            Not After : May 20 16:57:45 2024 GMT
        Subject: CN=FB3BF93FC01A96781E699E5D76E4215DC3EE9D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:7f:f6:00:f7:90:ab:9e:cd:9e:a2:06:e5:
                    ec:16:44:64:d0:79:0f:81:7f:20:63:38:37:70:c1:
                    7e:90:ff:59:cd:b3:f1:c4:36:5e:cf:9a:1a:26:43:
                    e5:fb:fe:3f:12:f8:d5:fa:9c:df:4c:4e:4e:04:62:
                    46:7e:4a:77:79:a9:1d:60:76:88:f7:63:a2:1c:ae:
                    bb:88:5b:b5:5c:e0:4b:7c:a5:cb:5e:25:e3:fc:7d:
                    01:79:2c:46:fd:bb:a8:dd:22:af:45:38:33:ca:db:
                    5b:11:9c:98:55:5a:93:20:00:b2:e9:a4:49:ae:31:
                    0d:c6:ed:cd:26:d4:ca:b5:5b:8b:5f:70:64:6f:ee:
                    53:0d:30:57:8e:9a:fb:8e:d9:e7:cc:52:92:82:b0:
                    82:0b:94:c3:7c:48:14:e6:8b:32:ef:76:da:5b:4a:
                    8b:54:16:da:a7:2c:87:ae:b7:95:f9:a2:f4:c4:1c:
                    13:1d:3d:99:64:c7:47:16:da:25:88:38:df:e5:62:
                    47:ad:ba:ea:5e:2b:55:c9:21:e8:fd:51:9f:76:db:
                    71:67:37:9e:ef:62:90:a0:21:ee:71:60:ec:f5:89:
                    63:dd:f2:c7:9b:e4:71:01:10:6c:ff:75:97:a1:fd:
                    70:98:94:9f:25:a5:4a:5d:0e:0b:57:f6:d3:71:af:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:F9:3F:C0:1A:96:78:1E:69:9E:5D:76:E4:21:5D:C3:EE:9D:69
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:95:9e:b9:0a:29:5d:32:5d:4f:82:09:ee:1a:fe:b2:35:
         2e:57:a8:9b:0f:69:a6:ac:15:25:9f:2c:eb:02:11:56:00:8c:
         f5:ee:e8:30:41:de:af:42:5b:3a:15:db:1d:1b:17:40:41:62:
         95:d7:3e:81:65:0e:59:77:cc:15:d5:33:4b:2e:e4:dc:cf:80:
         d7:cc:cf:8f:44:9e:6c:48:d4:d4:cc:d0:c7:11:5a:d8:25:04:
         87:16:b8:8c:0b:4d:31:e3:8c:be:23:4a:87:47:b3:62:9e:11:
         64:92:f9:0d:13:98:b5:24:96:7a:7c:05:26:52:1c:f1:23:c8:
         db:40:b1:05:64:28:5a:ca:20:ad:9c:53:d2:1c:bb:0b:15:98:
         72:d3:b5:30:78:a7:4b:09:e3:92:a1:a9:2c:ab:2d:a7:45:20:
         fa:0e:1f:8f:a4:71:07:42:74:81:0d:82:97:d9:0a:59:c3:0f:
         11:ba:ca:df:4e:23:b9:d9:ab:b8:0d:d7:d5:9b:e3:45:b0:75:
         a5:4a:8f:84:ab:6e:76:b3:e9:58:fa:bd:02:c2:fe:af:a5:ca:
         27:e6:00:b9:08:46:a7:6e:b7:f7:84:1a:f1:cb:48:8c:d3:a2:
         86:c4:ef:7f:cd:78:c4:4d:6c:4a:59:3d:8d:f5:7a:8b:46:13:
         dc:53:1c:23
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUThp73JdgAOaPTuUuNGLlVuRzvGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0MTAxQTMzRDk2MEUyRTQ2OEVGRThEMkUyRTcwMUU4
QTA3MzI2MTAeFw0yMzA1MjIxNjUyNDVaFw0yNDA1MjAxNjU3NDVaMDMxMTAvBgNV
BAMTKEZCM0JGOTNGQzAxQTk2NzgxRTY5OUU1RDc2RTQyMTVEQzNFRTlENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx3H/2APeQq57NnqIG5ewWRGTQ
eQ+BfyBjODdwwX6Q/1nNs/HENl7PmhomQ+X7/j8S+NX6nN9MTk4EYkZ+Snd5qR1g
doj3Y6IcrruIW7Vc4Et8pcteJeP8fQF5LEb9u6jdIq9FODPK21sRnJhVWpMgALLp
pEmuMQ3G7c0m1Mq1W4tfcGRv7lMNMFeOmvuO2efMUpKCsIILlMN8SBTmizLvdtpb
SotUFtqnLIeut5X5ovTEHBMdPZlkx0cW2iWION/lYketuupeK1XJIej9UZ9223Fn
N57vYpCgIe5xYOz1iWPd8seb5HEBEGz/dZeh/XCYlJ8lpUpdDgtX9tNxr6RvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+zv5P8AalngeaZ5dduQhXcPunWkwHwYDVR0j
BBgwFoAUGUEBoz2WDi5Gjv6NLi5wHooHMmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMC8xOTQxMDFBMzNEOTYwRTJFNDY4RUZFOEQyRTJFNzAxRThBMDczMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NDEwMUEzM0Q5NjBFMkU0
NjhFRkU4RDJFMkU3MDFFOEEwNzMyNjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzAv
MzEzNzM3MmUzMTM1MzUyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxm0gwDQYJKoZIhvcNAQELBQADggEBAIehlZ65
CildMl1PggnuGv6yNS5XqJsPaaasFSWfLOsCEVYAjPXu6DBB3q9CWzoV2x0bF0BB
YpXXPoFlDll3zBXVM0su5NzPgNfMz49EnmxI1NTM0McRWtglBIcWuIwLTTHjjL4j
SodHs2KeEWSS+Q0TmLUklnp8BSZSHPEjyNtAsQVkKFrKIK2cU9IcuwsVmHLTtTB4
p0sJ45KhqSyrLadFIPoOH4+kcQdCdIENgpfZClnDDxG6yt9OI7nZq7gN19Wb40Ww
daVKj4Srbnaz6Vj6vQLC/q+lyifmALkIRqdut/eEGvHLSIzToobE73/NeMRNbEpZ
PY31eotGE9xTHCM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org