Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32322d3232203d3e20323632323838.roa
File:                     3137372e3135342e3136382e302f32322d3232203d3e20323632323838.roa (raw, json)
Hash identifier:          DbKkRkvw2DXco0hkffdZYZKWfrbJ7CftkVyAgZDx74E=
Subject key identifier:   4B:7A:2A:D8:F8:27:70:DE:F5:A9:57:53:D2:FC:F1:F7:36:36:B4:51
Certificate issuer:       /CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
Certificate serial:       452DB494EBA09DC19C0B9E1E986180231C345C5D
Authority key identifier: 16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32322d3232203d3e20323632323838.roa
Signing time:             Thu 08 Jul 2021 17:51:44 +0000
ROA not before:           Thu 08 Jul 2021 17:46:44 +0000
ROA not after:            Thu 07 Jul 2022 17:51:44 +0000
asID:                     262288
IP address blocks:        177.154.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:b4:94:eb:a0:9d:c1:9c:0b:9e:1e:98:61:80:23:1c:34:5c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
        Validity
            Not Before: Jul  8 17:46:44 2021 GMT
            Not After : Jul  7 17:51:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:0d:8c:11:35:a7:ef:93:97:1b:33:7e:d2:
                    33:a9:55:1f:cf:07:68:14:97:70:94:67:52:6b:40:
                    b0:7f:88:b0:99:3b:ae:25:2b:30:e8:23:f1:e0:0a:
                    9c:a4:69:79:18:c3:84:80:1d:9d:cb:71:fd:e0:6f:
                    c3:96:26:97:29:32:a6:bd:04:78:b8:38:94:79:bf:
                    fa:c3:8c:4c:13:12:3c:41:2c:bc:07:26:b4:58:aa:
                    66:e6:74:94:5b:1a:64:0a:43:31:8b:21:20:49:60:
                    d3:94:f0:29:3e:00:20:54:bc:db:1e:a3:d0:a9:e8:
                    a9:c8:a0:53:dd:ce:cd:89:70:ce:d7:f5:0e:74:fa:
                    6f:c5:2e:34:67:5b:69:e9:62:46:2e:46:5d:f3:cf:
                    83:3a:ba:f3:69:4d:86:1e:8a:00:f0:12:65:06:4a:
                    8c:ac:8b:b6:d6:01:1a:3f:a4:07:ca:ee:1d:52:be:
                    60:41:84:31:8b:1a:11:7d:54:f0:7d:47:ab:4c:e9:
                    f6:4d:f3:0b:c4:11:f2:6d:5c:d7:b9:18:da:f4:04:
                    14:44:c6:cf:03:7f:f8:c4:e5:c1:6c:de:c7:23:b5:
                    bb:05:e6:c1:f9:c6:b2:ab:02:81:6a:a2:0b:fe:d3:
                    de:ea:ce:02:cf:a1:67:de:9c:c7:78:42:6d:0d:34:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:2A:D8:F8:27:70:DE:F5:A9:57:53:D2:FC:F1:F7:36:36:B4:51
            X509v3 Authority Key Identifier:
                keyid:16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32322d3232203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:9b:2f:4b:1a:69:ec:89:09:32:3f:09:77:01:6c:26:7f:
         ba:40:42:77:ce:0e:dc:7d:a1:29:13:96:46:65:d9:72:98:ea:
         96:de:d6:c4:a6:01:54:1e:d4:fc:cb:8a:fe:9e:f1:f9:9a:9f:
         86:1b:9e:e5:27:bc:f1:c2:1a:9c:89:69:a4:ac:3c:ac:54:4b:
         de:68:97:ef:60:1f:55:f8:65:2d:4e:79:c3:76:e9:de:a0:1a:
         8f:f5:36:13:1a:b7:44:88:96:68:15:be:99:79:0f:5b:32:f0:
         b4:28:17:70:5a:a4:c7:bd:69:e6:2e:ed:5c:0b:14:24:52:2e:
         46:b0:c2:06:5c:05:09:ff:75:13:80:4a:22:68:ec:46:db:32:
         38:af:d3:71:42:ed:7c:33:24:1f:fd:73:36:08:81:33:bb:11:
         30:c4:25:cc:57:30:1d:ca:e8:73:5d:28:7d:73:0c:34:2d:b1:
         3e:45:00:c0:f5:5f:6c:c7:36:01:b1:7b:85:40:df:37:39:e2:
         59:3a:a7:f0:9c:da:21:90:e3:b4:07:ee:5e:11:6f:67:1a:3c:
         9b:1b:74:03:3d:ee:20:97:35:d3:af:33:74:27:31:6d:14:06:
         8d:2b:9a:44:1a:2c:f2:6c:d2:9e:fa:e2:98:4c:cd:ce:8a:73:
         6b:59:34:f5
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIURS20lOugncGcC54emGGAIxw0XF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NEM2OTExOEQ5QUJFQTBFRURFQkZEOTlCODRDNUVD
NTA4M0ZDNTAeFw0yMTA3MDgxNzQ2NDRaFw0yMjA3MDcxNzUxNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VFQzBEOEMxMTM1QTdFRjkz
OTcxQjMzN0VEMjMzQTk1NTFGQ0YwNzY4MTQ5NzcwOTQ2NzUyNkI0MEIwN0Y4OEIw
OTkzQkFFMjUyQjMwRTgyM0YxRTAwQTlDQTQ2OTc5MThDMzg0ODAxRDlEQ0I3MUZE
RTA2RkMzOTYyNjk3MjkzMkE2QkQwNDc4QjgzODk0NzlCRkZBQzM4QzRDMTMxMjND
NDEyQ0JDMDcyNkI0NThBQTY2RTY3NDk0NUIxQTY0MEE0MzMxOEIyMTIwNDk2MEQz
OTRGMDI5M0UwMDIwNTRCQ0RCMUVBM0QwQTlFOEE5QzhBMDUzRERDRUNEODk3MENF
RDdGNTBFNzRGQTZGQzUyRTM0Njc1QjY5RTk2MjQ2MkU0NjVERjNDRjgzM0FCQUYz
Njk0RDg2MUU4QTAwRjAxMjY1MDY0QThDQUM4QkI2RDYwMTFBM0ZBNDA3Q0FFRTFE
NTJCRTYwNDE4NDMxOEIxQTExN0Q1NEYwN0Q0N0FCNENFOUY2NERGMzBCQzQxMUYy
NkQ1Q0Q3QjkxOERBRjQwNDE0NDRDNkNGMDM3RkY4QzRFNUMxNkNERUM3MjNCNUJC
MDVFNkMxRjlDNkIyQUIwMjgxNkFBMjBCRkVEM0RFRUFDRTAyQ0ZBMTY3REU5Q0M3
Nzg0MjZEMEQzNEI1NjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzuwNjBE1p++TlxszftIzqVUfzwdoFJdwlGdSa0Cwf4iwmTuuJSsw
6CPx4AqcpGl5GMOEgB2dy3H94G/DliaXKTKmvQR4uDiUeb/6w4xMExI8QSy8Bya0
WKpm5nSUWxpkCkMxiyEgSWDTlPApPgAgVLzbHqPQqeipyKBT3c7NiXDO1/UOdPpv
xS40Z1tp6WJGLkZd88+DOrrzaU2GHooA8BJlBkqMrIu21gEaP6QHyu4dUr5gQYQx
ixoRfVTwfUerTOn2TfMLxBHybVzXuRja9AQURMbPA3/4xOXBbN7HI7W7BebB+cay
qwKBaqIL/tPe6s4Cz6Fn3pzHeEJtDTS1ZwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEt6Ktj4J3De9alXU9L88fc2NrRRMB8GA1UdIwQYMBaAFBZUxpEY2avqDu3r/Zm4
TF7FCD/FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZzOXRCYzlkWkZBSmNw
akpCQjR6QkRBSDFzOWU2RWIxNE1FQ0NXYURTZGlQLzAvMTY1NEM2OTExOEQ5QUJF
QTBFRURFQkZEOTlCODRDNUVDNTA4M0ZDNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNjU0QzY5MTE4RDlBQkVBMEVFREVCRkQ5OUI4NEM1RUM1MDgz
RkM1LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82czl0QmM5ZFpGQUpjcGpKQkI0
ekJEQUgxczllNkViMTRNRUNDV2FEU2RpUC8wLzMxMzczNzJlMzEzNTM0MmUzMTM2
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzMjM4Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKxmqgwDQYJKoZIhvcNAQELBQADggEBAA3+my9LGmnsiQkyPwl3AWwmf7pAQnfO
Dtx9oSkTlkZl2XKY6pbe1sSmAVQe1PzLiv6e8fman4YbnuUnvPHCGpyJaaSsPKxU
S95ol+9gH1X4ZS1OecN26d6gGo/1NhMat0SIlmgVvpl5D1sy8LQoF3BapMe9aeYu
7VwLFCRSLkawwgZcBQn/dROASiJo7EbbMjiv03FC7XwzJB/9czYIgTO7ETDEJcxX
MB3K6HNdKH1zDDQtsT5FAMD1X2zHNgGxe4VA3zc54lk6p/Cc2iGQ47QH7l4Rb2ca
PJsbdAM97iCXNdOvM3QnMW0UBo0rmkQaLPJs0p764phMzc6Kc2tZNPU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org