Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3230382e302f32302d3230203d3e20323632353331.roa
File:                     3137372e35352e3230382e302f32302d3230203d3e20323632353331.roa (raw, json)
Hash identifier:          EHGUd3okxbVCSZSjhAMY8vMhy9UPMEGc8ved3bxrGCM=
Subject key identifier:   06:EB:AC:16:EB:1F:CF:BE:9F:D3:6D:E9:73:AE:43:41:CF:A6:6A:97
Certificate issuer:       /CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
Certificate serial:       5036C8C227BE483B8498801AFC128ADB38AD698C
Authority key identifier: FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3230382e302f32302d3230203d3e20323632353331.roa
Signing time:             Thu 02 Sep 2021 18:47:20 +0000
ROA not before:           Thu 02 Sep 2021 18:42:20 +0000
ROA not after:            Thu 01 Sep 2022 18:47:20 +0000
asID:                     262531
IP address blocks:        177.55.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:36:c8:c2:27:be:48:3b:84:98:80:1a:fc:12:8a:db:38:ad:69:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
        Validity
            Not Before: Sep  2 18:42:20 2021 GMT
            Not After : Sep  1 18:47:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:be:da:cf:ac:af:0c:19:63:f0:96:88:0b:
                    df:43:e1:9d:0c:5f:e2:56:b6:b9:35:f6:4d:45:67:
                    a2:58:d4:b6:65:4e:76:30:df:ba:33:c7:5d:2a:78:
                    c8:5d:c9:17:dd:96:6a:f3:e6:cc:e8:08:c4:f8:dd:
                    a1:9d:fb:86:0f:fd:a7:b7:6c:7a:af:17:f7:86:df:
                    1f:c1:32:a2:97:c3:a6:d4:c2:ef:e2:1b:15:db:a7:
                    be:ef:67:b0:86:e7:8c:3f:9e:b0:c6:a3:f1:9f:7c:
                    ae:8b:7c:02:d8:f4:a1:18:4a:6e:5d:45:e1:e3:56:
                    10:9d:0c:ab:b5:78:38:3a:f6:2c:56:26:85:71:e7:
                    46:89:d4:9e:a7:83:9c:28:c5:cb:30:19:49:75:b0:
                    49:49:d5:70:99:57:f4:e4:71:2a:1e:bb:81:91:67:
                    fd:9c:d5:52:1b:10:f4:6b:ef:e2:9c:42:eb:da:5d:
                    a3:e3:2f:8d:8f:28:d8:df:2a:54:7e:5c:74:5a:9c:
                    b6:3d:4f:7c:c9:65:df:cf:57:32:2a:75:11:be:97:
                    df:72:0e:bc:ea:95:57:bd:f4:ae:24:6a:fe:5a:26:
                    9b:8e:6e:05:25:1c:a8:65:aa:35:db:a4:e1:f7:ba:
                    30:75:18:d1:67:84:96:4c:ed:e9:11:d5:04:7f:8c:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:AC:16:EB:1F:CF:BE:9F:D3:6D:E9:73:AE:43:41:CF:A6:6A:97
            X509v3 Authority Key Identifier:
                keyid:FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3230382e302f32302d3230203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:a4:85:42:c5:6f:b5:e2:15:1a:8c:56:d1:bf:99:1c:ab:
         7d:19:98:f9:ad:be:d3:df:6a:86:48:cc:bc:81:04:12:ba:02:
         cc:20:09:ac:fe:11:0e:55:e1:88:76:fe:50:5f:74:66:ad:53:
         a1:cb:30:5e:6a:b3:60:85:24:75:90:67:c0:6f:f2:94:6e:b4:
         1f:ae:8f:eb:f6:f7:3d:97:b1:4b:97:e4:7b:1b:3f:3f:3f:e5:
         a6:bd:f6:27:b4:6d:33:3b:3a:11:02:e8:93:64:cf:99:d2:6a:
         89:f6:ba:81:f3:8b:76:34:4a:8b:f3:a3:0c:b2:bf:d4:e0:f9:
         b9:58:f7:64:a1:de:b4:3f:fa:11:12:b4:81:53:05:c2:92:1c:
         0b:c7:d1:b7:9e:9b:5a:71:fb:f3:7b:ff:35:fe:a3:81:35:7a:
         1d:63:0e:44:56:cb:b6:0f:e3:59:61:11:a8:1a:30:b7:92:43:
         3b:b2:8e:44:3b:ac:dd:bb:16:e0:9d:bb:a9:d1:3e:f4:04:b6:
         df:78:2d:6b:3b:fe:a5:55:6c:d9:bf:a0:71:cc:48:9f:6d:6f:
         42:1a:b3:8a:9d:22:3c:95:78:83:54:fc:bc:63:ae:2e:c9:c0:
         c9:f3:0d:48:92:38:c1:fc:fb:73:cf:0d:d9:54:b6:1a:11:8d:
         c1:b8:1a:ab
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUDbIwie+SDuEmIAa/BKK2zitaYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4QTcyOUI2Qzg0NDgzNzIzRjU1OTJGN0FCQzQ5RjhD
REVBNjQwMzAeFw0yMTA5MDIxODQyMjBaFw0yMjA5MDExODQ3MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTgxOUJFREFDRkFDQUYwQzE5
NjNGMDk2ODgwQkRGNDNFMTlEMEM1RkUyNTZCNkI5MzVGNjRENDU2N0EyNThENEI2
NjU0RTc2MzBERkJBMzNDNzVEMkE3OEM4NURDOTE3REQ5NjZBRjNFNkNDRTgwOEM0
RjhEREExOURGQjg2MEZGREE3Qjc2QzdBQUYxN0Y3ODZERjFGQzEzMkEyOTdDM0E2
RDRDMkVGRTIxQjE1REJBN0JFRUY2N0IwODZFNzhDM0Y5RUIwQzZBM0YxOUY3Q0FF
OEI3QzAyRDhGNEExMTg0QTZFNUQ0NUUxRTM1NjEwOUQwQ0FCQjU3ODM4M0FGNjJD
NTYyNjg1NzFFNzQ2ODlENDlFQTc4MzlDMjhDNUNCMzAxOTQ5NzVCMDQ5NDlENTcw
OTk1N0Y0RTQ3MTJBMUVCQjgxOTE2N0ZEOUNENTUyMUIxMEY0NkJFRkUyOUM0MkVC
REE1REEzRTMyRjhEOEYyOEQ4REYyQTU0N0U1Qzc0NUE5Q0I2M0Q0RjdDQzk2NURG
Q0Y1NzMyMkE3NTExQkU5N0RGNzIwRUJDRUE5NTU3QkRGNEFFMjQ2QUZFNUEyNjlC
OEU2RTA1MjUxQ0E4NjVBQTM1REJBNEUxRjdCQTMwNzUxOEQxNjc4NDk2NENFREU5
MTFENTA0N0Y4Q0UxRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6Bm+2s+srwwZY/CWiAvfQ+GdDF/iVra5NfZNRWeiWNS2ZU52MN+6
M8ddKnjIXckX3ZZq8+bM6AjE+N2hnfuGD/2nt2x6rxf3ht8fwTKil8Om1MLv4hsV
26e+72ewhueMP56wxqPxn3yui3wC2PShGEpuXUXh41YQnQyrtXg4OvYsViaFcedG
idSep4OcKMXLMBlJdbBJSdVwmVf05HEqHruBkWf9nNVSGxD0a+/inELr2l2j4y+N
jyjY3ypUflx0Wpy2PU98yWXfz1cyKnURvpffcg686pVXvfSuJGr+Wiabjm4FJRyo
Zao126Th97owdRjRZ4SWTO3pEdUEf4zh6wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAbrrBbrH8++n9Nt6XOuQ0HPpmqXMB8GA1UdIwQYMBaAFP6KcptshEg3I/VZL3q8
SfjN6mQDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR1TUpRcGhmWGRhOEY4
TW00cks2VHNvemdqZDhMZ1huNkFjMzdzWmJMWEttLzAvRkU4QTcyOUI2Qzg0NDgz
NzIzRjU1OTJGN0FCQzQ5RjhDREVBNjQwMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRThBNzI5QjZDODQ0ODM3MjNGNTU5MkY3QUJDNDlGOENERUE2
NDAzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80dU1KUXBoZlhkYThGOE1tNHJL
NlRzb3pnamQ4TGdYbjZBYzM3c1piTFhLbS8wLzMxMzczNzJlMzUzNTJlMzIzMDM4
MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjMyMzUzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
sTfQMA0GCSqGSIb3DQEBCwUAA4IBAQB7m6SFQsVvteIVGoxW0b+ZHKt9GZj5rb7T
32qGSMy8gQQSugLMIAms/hEOVeGIdv5QX3RmrVOhyzBearNghSR1kGfAb/KUbrQf
ro/r9vc9l7FLl+R7Gz8/P+WmvfYntG0zOzoRAuiTZM+Z0mqJ9rqB84t2NEqL86MM
sr/U4Pm5WPdkod60P/oRErSBUwXCkhwLx9G3nptacfvze/81/qOBNXodYw5EVsu2
D+NZYRGoGjC3kkM7so5EO6zduxbgnbup0T70BLbfeC1rO/6lVWzZv6BxzEifbW9C
GrOKnSI8lXiDVPy8Y64uycDJ8w1IkjjB/Ptzzw3ZVLYaEY3BuBqr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org