Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa
File:                     3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa (raw, json)
Hash identifier:          XfLADLOhM3WvAfDaPzJ9kzUSx3TFXgms7MhUXEi+y78=
Subject key identifier:   CA:07:12:5A:F0:04:C0:40:02:1A:08:7F:5E:0A:3D:E5:04:83:17:CA
Certificate issuer:       /CN=30A1AF22260A0EC425DA422DB655C96CEDCE77A9
Certificate serial:       1BC523F054D53DE0E231881A089CAB69B90325D3
Authority key identifier: 30:A1:AF:22:26:0A:0E:C4:25:DA:42:2D:B6:55:C9:6C:ED:CE:77:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa
Signing time:             Fri 22 Sep 2023 02:52:39 +0000
ROA not before:           Fri 22 Sep 2023 02:47:39 +0000
ROA not after:            Fri 20 Sep 2024 02:52:39 +0000
asID:                     263628
IP address blocks:        177.200.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c5:23:f0:54:d5:3d:e0:e2:31:88:1a:08:9c:ab:69:b9:03:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30A1AF22260A0EC425DA422DB655C96CEDCE77A9
        Validity
            Not Before: Sep 22 02:47:39 2023 GMT
            Not After : Sep 20 02:52:39 2024 GMT
        Subject: CN=CA07125AF004C040021A087F5E0A3DE5048317CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:e7:03:a9:0c:33:e6:84:29:9c:7f:c0:67:
                    d2:49:0b:6d:32:0a:90:38:cd:d9:01:f4:7e:01:47:
                    85:58:6d:73:84:b3:c7:9c:39:60:f4:df:2c:8b:be:
                    3f:90:7a:3e:3d:d5:c2:fe:f3:18:ae:be:45:30:cc:
                    78:ee:ad:b7:19:d5:b9:7b:85:27:fe:05:7c:73:ef:
                    83:0c:69:b3:1d:fa:1a:01:e1:55:7e:ac:f7:cf:c5:
                    ee:c1:9d:90:36:6f:dd:d2:3a:54:74:8b:7b:06:8d:
                    6a:20:02:7f:05:fe:a2:44:45:0c:c0:b9:3d:52:29:
                    26:5a:81:cf:3d:b7:f7:ee:96:91:15:41:89:bc:24:
                    d0:32:f1:31:1f:c6:fa:43:ae:eb:38:37:ed:be:d2:
                    e8:e4:18:d8:c6:e3:0b:73:19:f6:6f:d9:0b:4b:5f:
                    61:c7:de:be:c2:2c:a4:8f:f7:05:64:5a:6e:5f:f1:
                    3f:6d:43:4f:28:0f:f3:2f:9a:2c:7e:90:27:21:f8:
                    c6:c1:84:48:1c:d2:95:ba:1d:ff:28:ee:f7:af:1c:
                    2c:e7:a7:b2:d4:4d:98:55:1c:5f:25:18:82:40:71:
                    95:cd:20:30:7a:41:5b:05:20:b4:40:89:20:44:dd:
                    91:80:cb:95:14:0f:2d:a9:21:9a:ef:fa:2e:c2:5b:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:12:5A:F0:04:C0:40:02:1A:08:7F:5E:0A:3D:E5:04:83:17:CA
            X509v3 Authority Key Identifier:
                keyid:30:A1:AF:22:26:0A:0E:C4:25:DA:42:2D:B6:55:C9:6C:ED:CE:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:06:fb:7e:37:1f:52:2b:fe:fe:32:fb:b6:11:93:7d:87:10:
         bb:e4:4a:14:d8:95:91:b9:b1:f9:fd:c1:ca:16:ba:7f:44:35:
         21:d9:4b:ef:60:bd:f4:46:23:db:22:1d:e0:3c:ae:dc:df:d5:
         bf:49:62:91:06:c1:a0:fa:22:e5:00:58:5c:86:59:d2:fb:81:
         ef:f0:e1:e9:95:ab:86:94:f7:c1:48:45:3e:10:3a:b0:bc:e3:
         5b:1c:29:46:37:f2:ae:cb:3e:0e:3f:38:65:ac:11:c4:f4:45:
         87:fc:78:a8:3e:95:44:aa:94:cf:e0:af:a3:3f:1a:63:12:d2:
         03:85:19:cd:25:b4:c1:f6:43:59:bb:e3:1f:e0:07:d0:90:3a:
         12:d2:a6:4e:9f:91:1f:6e:8b:d1:5a:45:84:3e:41:a5:4b:86:
         ba:8d:57:ac:7a:f1:cd:d3:65:cd:d1:b9:ab:71:b6:75:ad:53:
         89:dd:b4:b4:38:79:19:6f:22:6a:26:ad:69:53:95:3e:92:10:
         69:dd:e8:4b:ff:6e:cb:b8:39:df:5b:16:3e:c0:36:bd:8f:e2:
         03:3d:be:91:88:ef:b4:5d:d9:a7:9e:b4:e5:43:cc:c1:0a:5f:
         80:0c:93:df:bf:bd:a5:60:f0:75:23:6c:42:5c:6a:c3:44:36:
         43:19:a9:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG8Uj8FTVPeDiMYgaCJyrabkDJdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBBMUFGMjIyNjBBMEVDNDI1REE0MjJEQjY1NUM5NkNF
RENFNzdBOTAeFw0yMzA5MjIwMjQ3MzlaFw0yNDA5MjAwMjUyMzlaMDMxMTAvBgNV
BAMTKENBMDcxMjVBRjAwNEMwNDAwMjFBMDg3RjVFMEEzREU1MDQ4MzE3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDucDqQwz5oQpnH/AZ9JJC20y
CpA4zdkB9H4BR4VYbXOEs8ecOWD03yyLvj+Qej491cL+8xiuvkUwzHjurbcZ1bl7
hSf+BXxz74MMabMd+hoB4VV+rPfPxe7BnZA2b93SOlR0i3sGjWogAn8F/qJERQzA
uT1SKSZagc89t/fulpEVQYm8JNAy8TEfxvpDrus4N+2+0ujkGNjG4wtzGfZv2QtL
X2HH3r7CLKSP9wVkWm5f8T9tQ08oD/Mvmix+kCch+MbBhEgc0pW6Hf8o7vevHCzn
p7LUTZhVHF8lGIJAcZXNIDB6QVsFILRAiSBE3ZGAy5UUDy2pIZrv+i7CW9LnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUygcSWvAEwEACGgh/Xgo95QSDF8owHwYDVR0j
BBgwFoAUMKGvIiYKDsQl2kIttlXJbO3Od6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjZSYWNyODZYRmtQYm9WU3dmQ3NmZUNTb01qVmFoOEd6THpnWkR1S1Fn
dUMvMC8zMEExQUYyMjI2MEEwRUM0MjVEQTQyMkRCNjU1Qzk2Q0VEQ0U3N0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwQTFBRjIyMjYwQTBFQzQy
NURBNDIyREI2NTVDOTZDRURDRTc3QTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2UmFjcjg2WEZrUGJvVlN3ZkNzZmVDU29NalZhaDhHekx6Z1pEdUtRZ3VDLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxyBAwDQYJKoZIhvcNAQELBQADggEBAGMG+343
H1Ir/v4y+7YRk32HELvkShTYlZG5sfn9wcoWun9ENSHZS+9gvfRGI9siHeA8rtzf
1b9JYpEGwaD6IuUAWFyGWdL7ge/w4emVq4aU98FIRT4QOrC841scKUY38q7LPg4/
OGWsEcT0RYf8eKg+lUSqlM/gr6M/GmMS0gOFGc0ltMH2Q1m74x/gB9CQOhLSpk6f
kR9ui9FaRYQ+QaVLhrqNV6x68c3TZc3RuatxtnWtU4ndtLQ4eRlvImomrWlTlT6S
EGnd6Ev/bsu4Od9bFj7ANr2P4gM9vpGI77Rd2aeetOVDzMEKX4AMk9+/vaVg8HUj
bEJcasNENkMZqY8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org