Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232382e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3232382e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          RzhhMhuJu/fhPLQFs38ioVMP0JzLaWhaT0PYwg2Eybk=
Subject key identifier:   91:2F:FB:20:55:11:61:B9:99:31:E4:F7:D6:A3:83:B4:0D:50:4E:70
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       6BB59F8DCC4D65560EB36EF903C83D1163828A84
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232382e302f32342d3234203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:29 +0000
ROA not before:           Mon 12 Feb 2024 13:09:29 +0000
ROA not after:            Mon 10 Feb 2025 13:14:29 +0000
asID:                     262505
IP address blocks:        177.66.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:9f:8d:cc:4d:65:56:0e:b3:6e:f9:03:c8:3d:11:63:82:8a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:29 2024 GMT
            Not After : Feb 10 13:14:29 2025 GMT
        Subject: CN=912FFB20551161B99931E4F7D6A383B40D504E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:9f:0e:c4:b5:14:da:f0:c2:07:e7:af:f9:
                    72:4d:62:4c:d8:af:ef:cd:65:dd:1e:eb:66:f3:32:
                    69:3b:e6:d9:1c:bd:4d:6b:09:54:d2:db:5c:e0:41:
                    2d:9f:a4:4f:8f:9f:f3:39:cc:50:f5:e9:5c:18:f3:
                    0a:d5:cc:a3:8f:1a:9f:7a:42:a1:fb:84:4a:6a:c7:
                    98:0c:2b:23:32:a5:8e:7e:e1:5e:09:44:91:d0:0a:
                    d4:e1:3a:db:b8:e6:2a:b3:46:89:14:5b:0c:83:f3:
                    44:e2:09:d6:76:ae:27:5c:4b:a3:19:85:59:64:28:
                    5e:c9:36:4e:66:ba:8c:55:b1:ad:05:b2:a0:4d:58:
                    6d:d9:50:8e:67:11:56:67:8d:01:ab:a2:3a:03:90:
                    43:f2:0c:7e:ab:68:f2:d9:25:ec:7b:e8:25:56:a1:
                    e9:59:36:0d:49:95:b7:72:20:ca:1b:5e:29:23:5b:
                    35:d7:d9:dc:44:36:80:c3:21:95:4d:9b:fe:0d:b0:
                    a7:20:f9:1a:1f:b6:66:51:81:0d:30:5a:49:e0:45:
                    4c:76:3b:15:c7:d4:b3:22:39:51:f2:d7:27:2f:f5:
                    f6:e3:d9:d4:8e:cc:67:7b:09:6b:b5:56:e1:a7:3d:
                    82:f9:de:35:cf:6d:16:56:37:c8:54:f7:0c:fe:97:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:FB:20:55:11:61:B9:99:31:E4:F7:D6:A3:83:B4:0D:50:4E:70
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232382e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:f5:d7:18:83:cc:7e:e4:c7:2a:a4:14:5d:6b:5c:bf:8e:
         a3:77:bf:2b:19:c5:12:da:87:56:13:60:f1:50:c1:3c:d0:d4:
         f1:32:6a:02:39:54:e6:00:17:53:b1:5f:b6:9a:5d:ff:a4:e1:
         3c:72:66:c5:a4:e3:fd:d4:2a:71:6c:da:b0:8d:40:a3:7c:ab:
         47:d6:ce:be:a9:ea:9c:f0:15:48:d1:9a:4a:35:99:06:e7:d5:
         ca:4a:e6:c8:c5:73:8e:5d:12:d6:55:e9:89:58:d3:46:cd:96:
         9f:52:2b:95:b2:5a:68:fa:50:c3:c5:cd:ec:e6:d0:bf:a6:ff:
         6b:c9:fe:05:3c:fb:88:8b:30:51:99:1d:83:14:4b:e6:a2:61:
         5a:58:cf:58:f6:4a:5a:88:d6:6b:02:08:ba:12:78:3b:f3:f9:
         a7:d1:f4:c2:00:f5:22:4c:ba:d8:5f:3e:61:a3:65:80:db:24:
         f9:b2:bd:50:6c:05:dc:8f:a2:fe:10:4e:26:0f:e1:96:ed:02:
         64:0d:95:15:8e:97:99:e5:9a:89:21:0f:13:1b:12:fe:75:47:
         c5:28:bc:29:a5:d3:96:0d:d2:2a:90:47:97:5d:6f:08:3d:84:
         f3:60:41:b2:ee:0d:27:c6:b0:0c:f7:67:fb:c6:39:21:f4:45:
         08:6f:fe:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa7WfjcxNZVYOs275A8g9EWOCioQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJDNzNBOTIwQzEzQzk3N0Y1MDZFQkQzOUI2ODgyNzQw
RkM5QkMzQTAeFw0yNDAyMTIxMzA5MjlaFw0yNTAyMTAxMzE0MjlaMDMxMTAvBgNV
BAMTKDkxMkZGQjIwNTUxMTYxQjk5OTMxRTRGN0Q2QTM4M0I0MEQ1MDRFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdJ8OxLUU2vDCB+ev+XJNYkzY
r+/NZd0e62bzMmk75tkcvU1rCVTS21zgQS2fpE+Pn/M5zFD16VwY8wrVzKOPGp96
QqH7hEpqx5gMKyMypY5+4V4JRJHQCtThOtu45iqzRokUWwyD80TiCdZ2ridcS6MZ
hVlkKF7JNk5muoxVsa0FsqBNWG3ZUI5nEVZnjQGrojoDkEPyDH6raPLZJex76CVW
oelZNg1JlbdyIMobXikjWzXX2dxENoDDIZVNm/4NsKcg+RoftmZRgQ0wWkngRUx2
OxXH1LMiOVHy1ycv9fbj2dSOzGd7CWu1VuGnPYL53jXPbRZWN8hU9wz+l9QfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkS/7IFURYbmZMeT31qODtA1QTnAwHwYDVR0j
BBgwFoAUK8c6kgwTyXf1BuvTm2iCdA/JvDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMC8yQkM3M0E5MjBDMTNDOTc3RjUwNkVCRDM5QjY4ODI3NDBGQzlCQzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCQzczQTkyMEMxM0M5NzdG
NTA2RUJEMzlCNjg4Mjc0MEZDOUJDM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzAv
MzEzNzM3MmUzNjM2MmUzMjMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQuQwDQYJKoZIhvcNAQELBQADggEBAFIq9dcY
g8x+5McqpBRda1y/jqN3vysZxRLah1YTYPFQwTzQ1PEyagI5VOYAF1OxX7aaXf+k
4TxyZsWk4/3UKnFs2rCNQKN8q0fWzr6p6pzwFUjRmko1mQbn1cpK5sjFc45dEtZV
6YlY00bNlp9SK5WyWmj6UMPFzezm0L+m/2vJ/gU8+4iLMFGZHYMUS+aiYVpYz1j2
SlqI1msCCLoSeDvz+afR9MIA9SJMuthfPmGjZYDbJPmyvVBsBdyPov4QTiYP4Zbt
AmQNlRWOl5nlmokhDxMbEv51R8UovCml05YN0iqQR5ddbwg9hPNgQbLuDSfGsAz3
Z/vGOSH0RQhv/hU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org