Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138352e3132342e302f32322d3234203d3e20323632393037.roa
File:                     3137372e3138352e3132342e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          c9r3rn8eKBhW0jH688fX8ADjiSV80u/qM6NA0E95mKg=
Subject key identifier:   EC:55:FB:C2:33:9B:02:C4:C2:2F:80:6F:6A:45:13:80:5C:C7:79:E0
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4B2EFDFE8B29F7C025F3723E0B48B877214232B6
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138352e3132342e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:23 +0000
ROA not before:           Sat 03 Feb 2024 12:48:23 +0000
ROA not after:            Sat 01 Feb 2025 12:53:23 +0000
asID:                     262907
IP address blocks:        177.185.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2e:fd:fe:8b:29:f7:c0:25:f3:72:3e:0b:48:b8:77:21:42:32:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:23 2024 GMT
            Not After : Feb  1 12:53:23 2025 GMT
        Subject: CN=EC55FBC2339B02C4C22F806F6A4513805CC779E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:c0:1a:d8:8a:ef:20:7b:40:69:b5:4b:2a:
                    88:93:13:be:1c:b7:01:40:65:34:d7:08:51:0d:6f:
                    28:93:38:c3:93:cb:04:c4:ee:a3:72:a8:f7:ab:e4:
                    6b:4f:6e:40:e0:3c:03:da:d8:d3:12:44:b5:32:19:
                    05:19:36:65:3f:65:9c:92:47:f1:68:f9:e1:b7:ea:
                    42:ad:ce:30:c5:87:6b:7e:24:39:b3:f3:31:63:4a:
                    60:d2:bb:77:29:f9:df:d8:7a:f9:92:da:b9:cd:c5:
                    5d:d3:2c:fc:10:90:19:de:8a:f8:d9:05:10:27:15:
                    92:90:ce:58:ab:fe:0d:b6:5c:c6:61:17:dc:5e:f5:
                    c8:b9:aa:a6:d9:9e:bb:75:d8:0e:d1:0f:23:d2:8c:
                    5a:9a:fb:b7:f8:64:f3:a1:f9:c7:d2:72:9b:ff:86:
                    c3:69:b6:fa:ec:c6:c0:d1:a8:ae:3b:63:3d:1f:2f:
                    04:8b:4e:96:22:1e:8f:d7:b9:22:d0:7a:0f:09:8b:
                    34:65:5f:8a:93:ba:f2:74:3b:0f:ae:2b:fb:21:fd:
                    08:60:ff:32:cd:09:ef:27:a8:f5:32:55:bb:f8:7e:
                    64:b6:ee:26:99:b3:be:9e:27:3e:ac:19:06:01:76:
                    3f:7b:de:98:0d:bf:f2:ef:94:b6:0b:e4:63:e0:94:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:FB:C2:33:9B:02:C4:C2:2F:80:6F:6A:45:13:80:5C:C7:79:E0
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138352e3132342e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:20:34:1d:50:a9:3c:59:ee:cf:0d:13:ae:83:42:fc:15:
         fa:49:80:80:aa:97:b6:36:23:33:ac:3c:40:2c:86:51:71:35:
         1f:4e:11:20:35:57:c3:f7:7b:f2:f5:7e:6d:09:15:84:e9:2f:
         f1:01:f9:40:f9:95:da:f4:70:bb:f0:17:58:ce:0e:4d:b8:4c:
         5e:2d:68:65:84:6f:2d:96:04:2d:42:a6:4b:2b:19:17:22:e3:
         63:6e:10:73:7a:2d:ed:c4:35:2d:83:32:ca:a3:51:d2:90:31:
         ab:f5:7c:26:26:f4:a0:99:d0:44:9c:8f:01:cd:ac:71:2d:d9:
         90:5a:7c:99:81:c6:11:08:65:69:17:a2:4e:7f:ce:82:5d:1b:
         6e:cb:2f:75:24:ce:f8:20:8c:50:ea:87:2a:20:66:40:d9:64:
         2e:5d:e6:31:22:47:12:ee:4f:a1:0c:47:8a:a8:3d:c1:34:a0:
         c6:e9:3a:b3:32:5a:4c:f3:c7:dd:31:35:70:d7:dd:1a:96:0c:
         5b:83:8e:8d:4e:3e:3b:68:75:81:d8:6e:e9:a9:0c:13:dc:ef:
         97:47:fd:b5:69:0c:ae:cc:63:97:c7:0f:2f:f8:1a:02:96:22:
         4d:29:8d:75:8d:a3:25:69:a4:03:9a:37:a3:84:d5:e1:95:2c:
         9b:89:36:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSy79/osp98Al83I+C0i4dyFCMrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MjNaFw0yNTAyMDExMjUzMjNaMDMxMTAvBgNV
BAMTKEVDNTVGQkMyMzM5QjAyQzRDMjJGODA2RjZBNDUxMzgwNUNDNzc5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjR8Aa2IrvIHtAabVLKoiTE74c
twFAZTTXCFENbyiTOMOTywTE7qNyqPer5GtPbkDgPAPa2NMSRLUyGQUZNmU/ZZyS
R/Fo+eG36kKtzjDFh2t+JDmz8zFjSmDSu3cp+d/YevmS2rnNxV3TLPwQkBneivjZ
BRAnFZKQzlir/g22XMZhF9xe9ci5qqbZnrt12A7RDyPSjFqa+7f4ZPOh+cfScpv/
hsNptvrsxsDRqK47Yz0fLwSLTpYiHo/XuSLQeg8JizRlX4qTuvJ0Ow+uK/sh/Qhg
/zLNCe8nqPUyVbv4fmS27iaZs76eJz6sGQYBdj973pgNv/LvlLYL5GPglH/fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7FX7wjObAsTCL4BvakUTgFzHeeAwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArG5fDANBgkqhkiG9w0BAQsFAAOCAQEAqAcg
NB1QqTxZ7s8NE66DQvwV+kmAgKqXtjYjM6w8QCyGUXE1H04RIDVXw/d78vV+bQkV
hOkv8QH5QPmV2vRwu/AXWM4OTbhMXi1oZYRvLZYELUKmSysZFyLjY24Qc3ot7cQ1
LYMyyqNR0pAxq/V8Jib0oJnQRJyPAc2scS3ZkFp8mYHGEQhlaReiTn/Ogl0bbssv
dSTO+CCMUOqHKiBmQNlkLl3mMSJHEu5PoQxHiqg9wTSgxuk6szJaTPPH3TE1cNfd
GpYMW4OOjU4+O2h1gdhu6akME9zvl0f9tWkMrsxjl8cPL/gaApYiTSmNdY2jJWmk
A5o3o4TV4ZUsm4k2Fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org