Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa
File:                     3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          Q3sVDqZF0JZzsp3FgdETuMHdKOkkMV0jKt1Uuj32cB4=
Subject key identifier:   FD:42:47:7A:21:B7:B4:A9:B0:96:38:45:DD:73:2A:EF:E8:8D:62:3B
Certificate issuer:       /CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
Certificate serial:       6B3333DDBE301AEE834F60247C7F4D3243251FEF
Authority key identifier: 83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 22 Jul 2024 17:09:31 +0000
ROA not before:           Mon 22 Jul 2024 17:04:31 +0000
ROA not after:            Mon 21 Jul 2025 17:09:31 +0000
asID:                     262659
IP address blocks:        177.185.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:33:33:dd:be:30:1a:ee:83:4f:60:24:7c:7f:4d:32:43:25:1f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Validity
            Not Before: Jul 22 17:04:31 2024 GMT
            Not After : Jul 21 17:09:31 2025 GMT
        Subject: CN=FD42477A21B7B4A9B0963845DD732AEFE88D623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:3f:eb:c7:0a:3c:84:db:a0:09:93:46:83:
                    9f:2c:ca:1f:54:c0:e7:eb:a5:db:c9:bc:7a:b0:05:
                    49:86:39:96:21:92:38:74:1e:c5:8b:7a:5b:24:d6:
                    36:1d:2a:f9:30:a9:6d:c2:75:9e:e2:7f:fb:6e:ae:
                    9b:dd:17:ad:12:ec:fc:a5:9e:0e:09:6b:3f:30:f0:
                    36:1f:3e:6e:60:28:4f:0e:e0:db:65:b8:2b:41:b2:
                    b1:27:48:52:bf:b5:4d:5d:52:26:fe:4c:6a:5a:f9:
                    56:df:f4:9f:9a:bd:56:1a:06:01:b0:8d:36:cb:be:
                    81:07:e2:ce:75:1d:27:75:1f:34:b2:8b:c4:7e:5e:
                    e4:e3:00:3b:db:d2:73:69:59:8d:da:ae:3b:76:b4:
                    13:dd:25:07:d0:69:e7:02:68:0e:30:21:29:81:f8:
                    33:03:56:87:b9:6a:ba:74:d9:71:49:a6:12:0b:e5:
                    e3:9b:99:e1:f6:b4:26:27:d0:48:38:cd:0f:54:f0:
                    d5:a8:ed:72:15:f8:9b:53:22:d8:95:8b:df:0a:d0:
                    e2:33:08:47:a6:b4:1d:34:2a:4f:ea:fe:26:46:e6:
                    1b:79:e9:6e:41:4f:af:56:67:e3:4b:33:23:1d:55:
                    e1:3e:fe:39:2e:a8:fc:b9:6d:4e:e4:d4:98:d9:c5:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:47:7A:21:B7:B4:A9:B0:96:38:45:DD:73:2A:EF:E8:8D:62:3B
            X509v3 Authority Key Identifier:
                keyid:83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:73:53:11:df:46:47:2f:23:db:91:e5:d0:53:63:35:ee:be:
         08:03:68:af:fe:ab:ec:aa:3a:0a:6f:dd:6e:85:5d:36:2b:e9:
         60:2b:ee:63:cf:d5:1b:82:99:12:98:f3:8d:14:46:23:02:e1:
         d1:d9:a7:85:57:f8:1e:cb:f5:85:1a:e6:af:ba:0f:62:6f:38:
         e8:96:e9:51:09:3a:d9:8e:f3:90:40:2a:38:61:b2:8e:10:b2:
         9c:3d:54:01:eb:6a:9d:1c:4f:75:42:16:05:6f:87:06:d2:ba:
         77:05:dd:b6:66:30:e9:18:e0:b5:13:51:97:7a:93:32:11:3c:
         a3:95:5e:69:76:8f:f5:f3:73:ea:06:e4:dd:6c:44:00:0e:a7:
         f8:a8:81:85:53:3a:ba:86:f3:9b:8e:ac:35:1e:09:cb:6e:e7:
         e9:c9:b2:38:17:68:cc:f4:77:55:98:6e:a6:7f:60:a3:79:f2:
         37:c1:94:a2:db:45:2b:bc:9d:f5:dd:aa:5b:b0:f1:59:fb:69:
         59:bb:d6:7f:18:9d:91:94:43:d9:a2:74:3b:1a:a8:54:c8:6b:
         99:4d:ff:7c:96:3e:3b:ff:e6:ee:6d:8d:50:28:4a:15:26:e9:
         72:41:5e:81:27:46:ac:cb:88:f9:d4:fa:9b:1a:95:5f:45:74:
         d4:4d:b8:e1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUazMz3b4wGu6DT2AkfH9NMkMlH+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM0MkYwMjNFRkY3ODFGN0REQ0E5RDJGQjU5RTRGQUI1
QjUxMEQ5MzAeFw0yNDA3MjIxNzA0MzFaFw0yNTA3MjExNzA5MzFaMDMxMTAvBgNV
BAMTKEZENDI0NzdBMjFCN0I0QTlCMDk2Mzg0NURENzMyQUVGRTg4RDYyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjT/rxwo8hNugCZNGg58syh9U
wOfrpdvJvHqwBUmGOZYhkjh0HsWLelsk1jYdKvkwqW3CdZ7if/turpvdF60S7Pyl
ng4Jaz8w8DYfPm5gKE8O4NtluCtBsrEnSFK/tU1dUib+TGpa+Vbf9J+avVYaBgGw
jTbLvoEH4s51HSd1HzSyi8R+XuTjADvb0nNpWY3arjt2tBPdJQfQaecCaA4wISmB
+DMDVoe5arp02XFJphIL5eObmeH2tCYn0Eg4zQ9U8NWo7XIV+JtTItiVi98K0OIz
CEemtB00Kk/q/iZG5ht56W5BT69WZ+NLMyMdVeE+/jkuqPy5bU7k1JjZxRD9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/UJHeiG3tKmwljhF3XMq7+iNYjswHwYDVR0j
BBgwFoAUg0LwI+/3gffdyp0vtZ5Pq1tRDZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk03ZDNXQkhYa2ZCRDJZMktXR0xTYkRZekZXUVJQRGl3UFFKYlNCWk00
aUovMi84MzQyRjAyM0VGRjc4MUY3RERDQTlEMkZCNTlFNEZBQjVCNTEwRDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNDJGMDIzRUZGNzgxRjdE
RENBOUQyRkI1OUU0RkFCNUI1MTBEOTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNN2QzV0JIWGtmQkQyWTJLV0dMU2JEWXpGV1FSUERpd1BRSmJTQlpNNGlKLzIv
MzEzNzM3MmUzMTM4MzUyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLG54DANBgkqhkiG9w0BAQsFAAOCAQEAmnNT
Ed9GRy8j25Hl0FNjNe6+CANor/6r7Ko6Cm/dboVdNivpYCvuY8/VG4KZEpjzjRRG
IwLh0dmnhVf4Hsv1hRrmr7oPYm846JbpUQk62Y7zkEAqOGGyjhCynD1UAetqnRxP
dUIWBW+HBtK6dwXdtmYw6RjgtRNRl3qTMhE8o5VeaXaP9fNz6gbk3WxEAA6n+KiB
hVM6uobzm46sNR4Jy27n6cmyOBdozPR3VZhupn9go3nyN8GUottFK7yd9d2qW7Dx
WftpWbvWfxidkZRD2aJ0OxqoVMhrmU3/fJY+O//m7m2NUChKFSbpckFegSdGrMuI
+dT6mxqVX0V01E244Q==
-----END CERTIFICATE-----
Generated at Wed Jul 24 19:37:42 2024 by rpki-client on console-ams.rpki-client.org