Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa
File:                     3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          Ww3Bu5nythX9ET1yqNu7tSiEbS8kkms4DeVBu5lmDOE=
Subject key identifier:   69:A8:BA:52:AF:9C:C4:84:CD:B9:44:E8:B5:CE:5B:7A:21:25:88:DE
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       72FA25F35D5C7315D2D3877D6EB6F0543C9E9D82
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:29 +0000
ROA not before:           Mon 12 Feb 2024 13:09:29 +0000
ROA not after:            Mon 10 Feb 2025 13:14:29 +0000
asID:                     262505
IP address blocks:        177.55.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fa:25:f3:5d:5c:73:15:d2:d3:87:7d:6e:b6:f0:54:3c:9e:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:29 2024 GMT
            Not After : Feb 10 13:14:29 2025 GMT
        Subject: CN=69A8BA52AF9CC484CDB944E8B5CE5B7A212588DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:1a:06:3b:3a:01:60:23:42:07:5a:eb:c4:
                    f1:48:da:1a:dc:e2:c3:6d:82:6b:3f:05:9b:34:5d:
                    a7:30:23:7e:65:ae:0d:4b:b3:47:ca:51:a1:de:fd:
                    6d:83:4f:17:0c:f2:bb:35:2a:f6:ee:fd:17:fb:11:
                    c3:7a:24:10:6e:dd:0a:d5:9a:93:8e:43:15:ed:b4:
                    54:7f:6c:4c:5a:fa:ee:03:a2:09:2a:5d:b4:4f:88:
                    f0:76:f1:83:3d:85:49:7b:8e:45:93:d8:83:e7:b1:
                    f4:8e:44:b6:0f:91:0e:04:1e:c6:36:1c:54:d4:e7:
                    bb:47:d6:6a:1e:61:5f:3a:6d:fa:2a:5c:66:3e:8f:
                    57:e0:5f:df:d1:19:60:a7:90:01:47:35:ce:f7:41:
                    85:54:a8:02:8f:7f:63:01:64:b7:7d:06:15:f3:8c:
                    19:c0:75:49:39:97:76:fa:98:a9:52:9d:ac:e2:93:
                    e3:27:d2:f7:e7:7b:7b:54:53:5d:e3:93:47:41:05:
                    5d:10:59:49:47:27:d1:6b:0f:e7:0d:85:7f:dd:24:
                    15:65:82:20:7e:ef:26:8d:ef:03:e4:ab:a4:f9:24:
                    ff:09:1c:56:13:1a:17:a1:a4:c0:3b:6c:12:af:e6:
                    b6:e0:31:9b:5f:27:e7:b2:db:e3:9e:76:7a:2f:69:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:BA:52:AF:9C:C4:84:CD:B9:44:E8:B5:CE:5B:7A:21:25:88:DE
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:af:49:e9:fc:4b:f8:00:a3:1e:4d:df:9b:e0:e7:eb:51:66:
         e0:76:99:62:48:50:d7:9b:a6:83:19:f6:39:1b:af:27:3f:30:
         f7:c3:89:be:67:67:45:6d:0d:11:b0:aa:67:35:45:85:a7:60:
         f3:ad:1b:a0:97:7e:71:9f:43:5c:aa:f4:d6:cb:fa:8c:0e:ba:
         bc:ff:78:4d:61:e3:09:b2:f8:eb:05:85:d8:fa:3c:f2:d2:99:
         13:74:f3:aa:a9:35:64:6d:2a:0c:fc:7a:c8:cd:c4:d9:e8:d5:
         a0:10:0e:e8:0a:61:58:6a:10:8a:35:c0:7b:56:4c:32:af:d2:
         39:f5:d2:7e:bc:ee:5e:cf:9d:a5:1c:14:3a:5d:a8:bb:84:d0:
         45:d2:63:5e:58:40:c6:ae:c7:1b:50:66:8f:98:e6:78:f6:41:
         2d:d2:cb:6d:59:5c:15:7f:30:ab:de:d6:e6:6d:8d:2f:d2:59:
         45:32:53:20:a6:d6:99:7b:8e:2d:c8:21:7e:bb:a1:d4:c2:8b:
         d9:64:d8:77:06:4e:10:ed:7d:8c:34:a7:66:5e:e7:dd:99:c2:
         72:b4:07:13:d8:83:d2:20:d8:7f:c6:0d:c2:b5:12:b7:dd:de:
         28:2b:b3:fa:7c:13:15:a2:10:1c:07:af:9d:4f:1b:cd:a6:5d:
         1a:ce:04:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcvol811ccxXS04d9brbwVDyenYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJDNzNBOTIwQzEzQzk3N0Y1MDZFQkQzOUI2ODgyNzQw
RkM5QkMzQTAeFw0yNDAyMTIxMzA5MjlaFw0yNTAyMTAxMzE0MjlaMDMxMTAvBgNV
BAMTKDY5QThCQTUyQUY5Q0M0ODRDREI5NDRFOEI1Q0U1QjdBMjEyNTg4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXRoGOzoBYCNCB1rrxPFI2hrc
4sNtgms/BZs0XacwI35lrg1Ls0fKUaHe/W2DTxcM8rs1Kvbu/Rf7EcN6JBBu3QrV
mpOOQxXttFR/bExa+u4DogkqXbRPiPB28YM9hUl7jkWT2IPnsfSORLYPkQ4EHsY2
HFTU57tH1moeYV86bfoqXGY+j1fgX9/RGWCnkAFHNc73QYVUqAKPf2MBZLd9BhXz
jBnAdUk5l3b6mKlSnazik+Mn0vfne3tUU13jk0dBBV0QWUlHJ9FrD+cNhX/dJBVl
giB+7yaN7wPkq6T5JP8JHFYTGhehpMA7bBKv5rbgMZtfJ+ey2+OednovacD5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaai6Uq+cxITNuUTotc5beiEliN4wHwYDVR0j
BBgwFoAUK8c6kgwTyXf1BuvTm2iCdA/JvDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMC8yQkM3M0E5MjBDMTNDOTc3RjUwNkVCRDM5QjY4ODI3NDBGQzlCQzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCQzczQTkyMEMxM0M5NzdG
NTA2RUJEMzlCNjg4Mjc0MEZDOUJDM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzAv
MzEzNzM3MmUzNTM1MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxN54wDQYJKoZIhvcNAQELBQADggEBAGivSen8
S/gAox5N35vg5+tRZuB2mWJIUNebpoMZ9jkbryc/MPfDib5nZ0VtDRGwqmc1RYWn
YPOtG6CXfnGfQ1yq9NbL+owOurz/eE1h4wmy+OsFhdj6PPLSmRN086qpNWRtKgz8
esjNxNno1aAQDugKYVhqEIo1wHtWTDKv0jn10n687l7PnaUcFDpdqLuE0EXSY15Y
QMauxxtQZo+Y5nj2QS3Sy21ZXBV/MKve1uZtjS/SWUUyUyCm1pl7ji3IIX67odTC
i9lk2HcGThDtfYw0p2Ze592ZwnK0BxPYg9Ig2H/GDcK1Erfd3igrs/p8ExWiEBwH
r51PG82mXRrOBCQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org