Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32342d3234203d3e203532353736.roa
File:                     3137372e38362e3230302e302f32342d3234203d3e203532353736.roa (raw, json)
Hash identifier:          hYpytYMSk9LtcYFFvkfxX5xwGXxMYJ4PXi/TzxnVFfw=
Subject key identifier:   DE:65:23:4A:26:25:88:CE:43:FD:5E:42:2F:F6:FC:C1:BD:31:24:3E
Certificate issuer:       /CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
Certificate serial:       6717B553E12AFE2D1A3A0CA887C1B9DB15F8D34B
Authority key identifier: FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32342d3234203d3e203532353736.roa
Signing time:             Tue 16 May 2023 18:18:17 +0000
ROA not before:           Tue 16 May 2023 18:13:17 +0000
ROA not after:            Tue 14 May 2024 18:18:17 +0000
asID:                     52576
IP address blocks:        177.86.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:b5:53:e1:2a:fe:2d:1a:3a:0c:a8:87:c1:b9:db:15:f8:d3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
        Validity
            Not Before: May 16 18:13:17 2023 GMT
            Not After : May 14 18:18:17 2024 GMT
        Subject: CN=DE65234A262588CE43FD5E422FF6FCC1BD31243E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:4a:90:99:8c:fc:95:65:5d:af:37:b8:c5:
                    19:f8:b5:0e:1a:3f:c0:f7:86:77:1a:47:d1:91:c1:
                    6c:99:03:c1:1d:b4:90:a0:8b:fc:86:72:7e:c6:9b:
                    b5:6a:23:42:4e:b5:68:52:cc:60:21:1e:e4:ab:5d:
                    b5:ec:5c:47:ae:7c:9c:32:7d:e4:40:8a:bc:ed:02:
                    51:77:73:e1:d6:37:83:87:2f:62:23:b0:59:5f:43:
                    f7:8e:b7:67:25:d0:5f:c8:62:03:b6:36:b0:0e:fb:
                    79:17:47:db:1e:a2:4e:8b:18:7a:25:02:0e:9a:1f:
                    d6:58:f6:3e:75:16:3b:74:86:d1:12:d6:a7:37:30:
                    81:c6:bd:43:70:74:96:64:d4:a9:19:e3:df:64:e7:
                    da:c5:d3:3d:ab:c6:2a:a2:eb:2c:20:c1:75:65:2c:
                    ff:2e:1b:92:7d:26:7e:3b:0b:d2:e5:51:e9:37:b7:
                    cd:15:a4:d9:79:b3:f3:a9:61:74:db:15:95:5c:ad:
                    14:c9:cd:30:c5:49:d9:c8:4d:4b:4a:1b:42:50:43:
                    ff:de:c9:f8:42:d3:10:17:7c:cb:b2:dd:a7:66:9f:
                    43:62:5f:ac:db:1e:c7:e5:7c:e0:85:1d:bc:2e:dd:
                    e0:de:e7:ad:06:e3:1f:c8:d9:94:ac:62:3c:9d:c6:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:23:4A:26:25:88:CE:43:FD:5E:42:2F:F6:FC:C1:BD:31:24:3E
            X509v3 Authority Key Identifier:
                keyid:FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32342d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:1e:ac:73:01:05:29:cd:5e:d7:48:04:bc:eb:e2:e0:d8:
         8d:d7:a8:a8:cf:91:14:7d:1f:6b:09:34:d6:34:5e:4e:dd:5b:
         ea:6f:12:98:87:27:aa:fc:09:23:2a:da:c7:f7:51:5f:ce:ce:
         9e:a1:6c:62:97:e9:f1:eb:da:c6:3b:a4:86:88:95:0c:7a:66:
         5a:28:c2:7d:80:75:1a:a3:b0:5d:69:b2:18:85:03:ed:23:64:
         67:0b:b0:ae:d3:80:c6:f5:49:c4:5a:93:51:91:2b:f8:8c:06:
         b0:04:7d:51:19:ec:aa:08:81:1e:e5:01:d8:73:94:24:e3:ff:
         45:b0:17:fa:e5:13:9b:31:c2:ec:55:51:84:a1:62:d4:11:3b:
         fd:7a:fd:26:8b:79:6c:87:bc:4d:6f:cc:65:5b:f5:06:29:1e:
         21:92:19:ed:5a:ba:50:8a:88:8b:9f:38:73:0b:03:06:12:14:
         0f:2f:d7:1a:cc:2b:ff:d2:84:23:0d:23:91:fe:c0:42:4b:81:
         98:7f:08:90:8f:c7:e7:2f:45:93:0e:d1:0f:83:e7:7f:45:19:
         a1:0a:99:41:02:aa:38:a9:6b:4b:4c:3a:9e:8b:67:d2:5a:5b:
         cd:07:1b:e7:02:4d:f2:d4:bf:f8:6f:65:68:a2:97:a0:35:7a:
         42:41:93:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZxe1U+Eq/i0aOgyoh8G52xX400swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMxMDBEQzVCNTY4QkE2N0E5NTNCN0Q0MzdFNUZGOEZD
OEM3MjU0QjAeFw0yMzA1MTYxODEzMTdaFw0yNDA1MTQxODE4MTdaMDMxMTAvBgNV
BAMTKERFNjUyMzRBMjYyNTg4Q0U0M0ZENUU0MjJGRjZGQ0MxQkQzMTI0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpp0qQmYz8lWVdrze4xRn4tQ4a
P8D3hncaR9GRwWyZA8EdtJCgi/yGcn7Gm7VqI0JOtWhSzGAhHuSrXbXsXEeufJwy
feRAirztAlF3c+HWN4OHL2IjsFlfQ/eOt2cl0F/IYgO2NrAO+3kXR9seok6LGHol
Ag6aH9ZY9j51Fjt0htES1qc3MIHGvUNwdJZk1KkZ499k59rF0z2rxiqi6ywgwXVl
LP8uG5J9Jn47C9LlUek3t80VpNl5s/OpYXTbFZVcrRTJzTDFSdnITUtKG0JQQ//e
yfhC0xAXfMuy3admn0NiX6zbHsflfOCFHbwu3eDe560G4x/I2ZSsYjydxsIxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3mUjSiYliM5D/V5CL/b8wb0xJD4wHwYDVR0j
BBgwFoAU/BANxbVoumepU7fUN+X/j8jHJUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK
WFIvMC9GQzEwMERDNUI1NjhCQTY3QTk1M0I3RDQzN0U1RkY4RkM4QzcyNTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDMTAwREM1QjU2OEJBNjdB
OTUzQjdENDM3RTVGRjhGQzhDNzI1NEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVjbmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzAv
MzEzNzM3MmUzODM2MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVbIMA0GCSqGSIb3DQEBCwUAA4IBAQBHix6scwEF
Kc1e10gEvOvi4NiN16ioz5EUfR9rCTTWNF5O3VvqbxKYhyeq/AkjKtrH91Ffzs6e
oWxil+nx69rGO6SGiJUMemZaKMJ9gHUao7BdabIYhQPtI2RnC7Cu04DG9UnEWpNR
kSv4jAawBH1RGeyqCIEe5QHYc5Qk4/9FsBf65RObMcLsVVGEoWLUETv9ev0mi3ls
h7xNb8xlW/UGKR4hkhntWrpQioiLnzhzCwMGEhQPL9cazCv/0oQjDSOR/sBCS4GY
fwiQj8fnL0WTDtEPg+d/RRmhCplBAqo4qWtLTDqei2fSWlvNBxvnAk3y1L/4b2Vo
opegNXpCQZNS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org