Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa
File:                     3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          cFPj5mPru1mAV0KNRVnwSGuqWHNHXXAsW2SXo/mWoUg=
Subject key identifier:   8E:B8:E9:30:4A:95:95:35:91:A8:99:05:8F:C7:1D:96:F7:23:9C:14
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       33126608613153A3AA1C06D418029D0D786653F2
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:19 +0000
ROA not before:           Wed 03 Apr 2024 22:37:19 +0000
ROA not after:            Wed 02 Apr 2025 22:42:19 +0000
asID:                     262505
IP address blocks:        177.55.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:66:08:61:31:53:a3:aa:1c:06:d4:18:02:9d:0d:78:66:53:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:19 2024 GMT
            Not After : Apr  2 22:42:19 2025 GMT
        Subject: CN=8EB8E9304A95953591A899058FC71D96F7239C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:9b:cf:3d:9f:b2:4b:08:75:39:65:8f:ac:
                    da:be:a6:9d:17:de:62:dc:41:ac:1b:13:7e:3c:47:
                    d3:ad:60:d3:0d:f7:52:3f:0f:fe:aa:df:75:64:51:
                    65:c2:6a:8a:b6:e4:9a:de:a6:9d:32:94:0e:4e:05:
                    49:65:13:ef:27:7c:47:70:79:21:b4:2a:87:ca:d7:
                    d9:83:1d:0f:9a:a4:84:07:08:02:bf:70:57:39:6b:
                    fd:6b:92:88:b0:dc:52:68:b8:b0:d9:b7:fe:93:2e:
                    ec:af:9f:c6:6f:b2:e6:45:74:0b:f8:6b:a2:d0:c9:
                    86:0a:19:ca:df:0d:a5:34:55:74:3e:46:f2:91:71:
                    eb:6f:ee:d2:ad:19:df:c7:03:e8:2c:d6:9d:3e:1c:
                    42:4f:da:e7:8a:7d:3f:1c:48:6b:1e:66:b4:96:b3:
                    8f:99:1e:dc:1b:f3:bc:51:5c:59:7a:a4:64:19:7c:
                    e2:86:ac:8a:2a:c0:3f:c5:79:6a:8a:80:51:36:65:
                    0f:57:ac:a2:44:ba:d5:80:13:98:e1:5a:94:de:5e:
                    85:1d:91:9a:0c:12:52:95:f8:1b:84:ab:b2:0b:5b:
                    68:40:30:08:60:26:73:b7:0f:a7:ff:98:65:1e:3c:
                    8c:63:9d:f1:d8:fc:12:2d:43:fc:58:b1:65:cd:29:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:E9:30:4A:95:95:35:91:A8:99:05:8F:C7:1D:96:F7:23:9C:14
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e35352e3135382e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a8:4c:70:a6:97:08:8d:0e:35:e8:b6:a3:49:ab:9d:c6:4d:
         fa:88:da:9a:f8:37:8b:85:51:37:5a:52:6b:b2:48:f4:15:9c:
         dd:49:d3:fd:1c:b5:f5:ef:61:05:11:47:42:93:0d:03:02:7e:
         b4:5e:25:a9:5d:bb:70:c7:e0:66:a3:10:f2:0b:81:52:d2:44:
         44:a8:be:73:65:60:86:9e:75:dd:af:ce:04:01:9b:e4:63:33:
         d1:1d:f7:b1:88:ca:78:2f:86:b9:40:2f:5b:c1:79:65:4f:0a:
         38:3c:19:e1:64:5d:00:91:80:67:f1:23:dd:b4:8b:d5:1d:f0:
         f4:1b:6e:cb:ec:1c:a4:21:30:78:bc:b3:c0:d5:ca:53:13:7b:
         f3:e7:77:11:b6:ae:28:b9:ed:d8:56:a2:ef:82:09:13:02:ba:
         85:33:fc:33:84:f9:59:dc:a7:90:01:61:6e:33:24:8f:4c:c7:
         00:15:28:0c:05:aa:14:61:1c:38:6c:b2:e1:cd:8a:0c:b1:a0:
         20:53:d1:2c:28:d1:09:3f:e6:bb:2c:75:5f:30:98:84:68:e5:
         b6:2c:88:7d:9a:48:94:3a:f6:af:a3:6d:e3:13:9a:10:ff:8d:
         5a:64:00:29:7e:43:a6:c0:2b:6f:3e:da:f0:91:f6:16:e4:c6:
         98:ca:39:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMxJmCGExU6OqHAbUGAKdDXhmU/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4OUVDRjE5MDY5MzRCODg2ODc0OUZFMTA3MDNFQ0JC
NDM0RDNCOTAeFw0yNDA0MDMyMjM3MTlaFw0yNTA0MDIyMjQyMTlaMDMxMTAvBgNV
BAMTKDhFQjhFOTMwNEE5NTk1MzU5MUE4OTkwNThGQzcxRDk2RjcyMzlDMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBk5vPPZ+ySwh1OWWPrNq+pp0X
3mLcQawbE348R9OtYNMN91I/D/6q33VkUWXCaoq25Jrepp0ylA5OBUllE+8nfEdw
eSG0KofK19mDHQ+apIQHCAK/cFc5a/1rkoiw3FJouLDZt/6TLuyvn8ZvsuZFdAv4
a6LQyYYKGcrfDaU0VXQ+RvKRcetv7tKtGd/HA+gs1p0+HEJP2ueKfT8cSGseZrSW
s4+ZHtwb87xRXFl6pGQZfOKGrIoqwD/FeWqKgFE2ZQ9XrKJEutWAE5jhWpTeXoUd
kZoMElKV+BuEq7ILW2hAMAhgJnO3D6f/mGUePIxjnfHY/BItQ/xYsWXNKd71AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjrjpMEqVlTWRqJkFj8cdlvcjnBQwHwYDVR0j
BBgwFoAUz4ns8ZBpNLiGh0n+EHA+y7Q007kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMS9DRjg5RUNGMTkwNjkzNEI4ODY4NzQ5RkUxMDcwM0VDQkI0MzREM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGODlFQ0YxOTA2OTM0Qjg4
Njg3NDlGRTEwNzAzRUNCQjQzNEQzQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzEv
MzEzNzM3MmUzNTM1MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxN54wDQYJKoZIhvcNAQELBQADggEBAKeoTHCm
lwiNDjXotqNJq53GTfqI2pr4N4uFUTdaUmuySPQVnN1J0/0ctfXvYQURR0KTDQMC
frReJaldu3DH4GajEPILgVLSRESovnNlYIaedd2vzgQBm+RjM9Ed97GIyngvhrlA
L1vBeWVPCjg8GeFkXQCRgGfxI920i9Ud8PQbbsvsHKQhMHi8s8DVylMTe/PndxG2
rii57dhWou+CCRMCuoUz/DOE+Vncp5ABYW4zJI9MxwAVKAwFqhRhHDhssuHNigyx
oCBT0Swo0Qk/5rssdV8wmIRo5bYsiH2aSJQ69q+jbeMTmhD/jVpkACl+Q6bAK28+
2vCR9hbkxpjKOfc=
-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org