Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231342e302f32342d3234203d3e20323632333534.roa
File:                     3137372e3132352e3231342e302f32342d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          COzf8EyY0sb/S8W2VPueGsZkK4dWvmCP5aIuLUZIHyk=
Subject key identifier:   02:94:B7:70:46:78:4D:9A:18:65:B8:66:C6:2C:CA:66:BE:75:0F:81
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       4C61115108CC10902FDFC64FC59913BA949642AD
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231342e302f32342d3234203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:32 +0000
ROA not before:           Wed 06 Mar 2024 14:09:32 +0000
ROA not after:            Wed 05 Mar 2025 14:14:32 +0000
asID:                     262354
IP address blocks:        177.125.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:11:51:08:cc:10:90:2f:df:c6:4f:c5:99:13:ba:94:96:42:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:32 2024 GMT
            Not After : Mar  5 14:14:32 2025 GMT
        Subject: CN=0294B77046784D9A1865B866C62CCA66BE750F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:43:cd:01:9b:8f:dd:ad:f9:3a:c8:11:66:
                    b1:d5:b4:be:5b:aa:6b:6d:cb:31:73:1a:6e:b1:ec:
                    08:5f:6f:1e:91:cd:4e:e4:c1:36:04:8e:fa:4c:6f:
                    9f:2b:a3:1d:c4:dd:82:4c:56:ea:53:ae:2c:48:e9:
                    0e:e5:8b:dd:33:4b:99:0c:49:1a:0a:73:1a:6c:ab:
                    ef:97:c6:ec:a8:e7:3c:8f:02:22:cc:08:e0:a6:6d:
                    21:c3:59:8d:95:af:39:e1:e9:29:7d:0e:33:55:f9:
                    20:3e:a2:de:3f:03:af:12:3a:37:bb:28:2b:42:2a:
                    b4:5f:62:52:fe:30:e5:04:89:d3:4d:b4:b3:7d:02:
                    79:71:b4:55:ab:ef:2d:b1:67:b1:bd:88:5e:1c:11:
                    68:e5:b4:c5:c5:ca:2b:cf:2e:83:bf:36:e8:8b:56:
                    83:02:45:af:f6:d4:bb:0b:18:b1:08:f1:58:81:d9:
                    c4:60:3f:ee:0c:95:6f:45:65:1a:47:07:a4:0f:be:
                    7b:0a:5d:d2:d0:01:54:1e:65:91:5a:00:37:da:69:
                    dd:4f:aa:03:30:a2:1c:67:90:a7:9e:f8:bf:94:b5:
                    94:e8:20:71:0c:6b:cd:21:59:32:96:62:c8:fd:b4:
                    f2:26:34:ab:a2:ea:21:bd:92:e7:9e:23:36:ef:99:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:B7:70:46:78:4D:9A:18:65:B8:66:C6:2C:CA:66:BE:75:0F:81
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231342e302f32342d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:d3:76:5d:6e:63:1f:af:ec:b0:96:af:d4:ee:0c:1e:91:
         55:4c:61:98:7f:50:b0:d2:cd:1c:2f:27:2e:32:2f:e8:3e:fc:
         d3:27:76:d3:bd:59:b1:f3:b7:a1:b8:46:69:5c:70:a8:b8:78:
         37:16:4f:d7:a6:05:fa:2f:fd:e3:14:a1:17:53:46:fa:e2:12:
         cf:61:51:3a:31:33:4c:d0:e5:e6:2c:73:62:42:80:9e:bf:93:
         d6:29:cc:d0:0c:18:f6:ab:1e:f5:47:15:20:cd:9f:c0:df:76:
         1f:dc:c8:d7:8c:78:9a:eb:7e:56:77:e6:72:94:c7:12:a9:a7:
         ff:0a:f8:9f:4d:3b:f9:b0:cb:a8:66:8e:36:b5:81:80:9d:3f:
         39:8a:d7:bd:40:37:0b:d3:f5:00:e0:65:34:7e:1e:ff:bf:d4:
         15:99:0a:86:3e:76:05:41:e7:30:72:61:3b:18:d5:a1:69:68:
         b6:5b:12:8b:70:1c:c8:2f:43:ab:f3:02:19:1d:08:9c:8c:bb:
         3b:0e:f3:09:75:45:a1:04:7a:e1:f8:44:ec:20:6c:e7:cb:1f:
         f4:c5:df:5f:11:ee:0b:54:f1:57:fb:98:73:a1:f2:b1:dd:0f:
         b7:62:c9:fe:07:18:04:0c:2f:40:66:e2:f5:51:00:8a:3f:53:
         55:6b:6c:b3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTGERUQjMEJAv38ZPxZkTupSWQq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDAzMDYxNDA5MzJaFw0yNTAzMDUxNDE0MzJaMDMxMTAvBgNV
BAMTKDAyOTRCNzcwNDY3ODREOUExODY1Qjg2NkM2MkNDQTY2QkU3NTBGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wUPNAZuP3a35OsgRZrHVtL5b
qmttyzFzGm6x7Ahfbx6RzU7kwTYEjvpMb58rox3E3YJMVupTrixI6Q7li90zS5kM
SRoKcxpsq++Xxuyo5zyPAiLMCOCmbSHDWY2Vrznh6Sl9DjNV+SA+ot4/A68SOje7
KCtCKrRfYlL+MOUEidNNtLN9AnlxtFWr7y2xZ7G9iF4cEWjltMXFyivPLoO/NuiL
VoMCRa/21LsLGLEI8ViB2cRgP+4MlW9FZRpHB6QPvnsKXdLQAVQeZZFaADfaad1P
qgMwohxnkKee+L+UtZToIHEMa80hWTKWYsj9tPImNKui6iG9kueeIzbvmWwFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUApS3cEZ4TZoYZbhmxizKZr51D4EwHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzEzNzM3MmUzMTMyMzUyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALF91jANBgkqhkiG9w0BAQsFAAOCAQEAoVzT
dl1uYx+v7LCWr9TuDB6RVUxhmH9QsNLNHC8nLjIv6D780yd2071ZsfO3obhGaVxw
qLh4NxZP16YF+i/94xShF1NG+uISz2FROjEzTNDl5ixzYkKAnr+T1inM0AwY9qse
9UcVIM2fwN92H9zI14x4mut+VnfmcpTHEqmn/wr4n007+bDLqGaONrWBgJ0/OYrX
vUA3C9P1AOBlNH4e/7/UFZkKhj52BUHnMHJhOxjVoWlotlsSi3AcyC9Dq/MCGR0I
nIy7Ow7zCXVFoQR64fhE7CBs58sf9MXfXxHuC1TxV/uYc6Hysd0Pt2LJ/gcYBAwv
QGbi9VEAij9TVWtssw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org