Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134392e302f32342d3234203d3e20323730373432.roa
File:                     3137372e3232312e3134392e302f32342d3234203d3e20323730373432.roa (raw, json)
Hash identifier:          eYdxQDCXKdrkCom3fHwlVc9xz1MNpyrJMKTx6Lvinvc=
Subject key identifier:   1C:49:20:AA:E8:AC:97:4A:41:1B:2F:E5:66:46:13:A7:19:DD:B5:8E
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       5D43EEFA3D53B30A138E9A7D0F4342CD9E01B5C6
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134392e302f32342d3234203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 04:02:16 +0000
ROA not before:           Thu 23 Feb 2023 03:57:16 +0000
ROA not after:            Thu 22 Feb 2024 04:02:16 +0000
asID:                     270742
IP address blocks:        177.221.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:43:ee:fa:3d:53:b3:0a:13:8e:9a:7d:0f:43:42:cd:9e:01:b5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 03:57:16 2023 GMT
            Not After : Feb 22 04:02:16 2024 GMT
        Subject: CN=1C4920AAE8AC974A411B2FE5664613A719DDB58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:63:58:91:4a:8b:cb:77:38:2d:3c:28:e4:
                    b6:c8:10:e2:5e:87:a0:e8:bb:12:74:52:b5:35:92:
                    25:d5:46:a1:38:51:73:5f:bd:81:d7:7f:f4:13:0b:
                    b9:f2:99:c7:00:b5:87:dc:96:4a:43:d3:ca:d2:55:
                    1f:1d:ac:ee:87:f6:29:4d:76:32:62:3d:b6:3d:f1:
                    06:de:a8:fc:71:3d:1d:bb:02:f3:d9:73:79:82:f8:
                    f4:e5:d7:8b:47:01:07:ee:4e:95:1e:82:0b:44:47:
                    16:36:30:a4:4f:a2:ce:ae:d0:9a:bb:3e:82:80:d0:
                    8a:c4:38:3f:fa:62:7f:6e:52:b9:28:07:42:86:24:
                    f9:4a:93:30:62:89:ce:df:3c:da:9d:6a:88:9f:0f:
                    d3:09:4f:d5:73:32:7b:d9:20:36:f1:47:42:db:b2:
                    d3:f9:76:0d:ea:7c:17:4f:a9:e7:de:5a:f6:d8:2c:
                    76:af:b3:49:c2:2b:62:a6:d7:d8:b2:b3:b0:af:83:
                    56:a2:06:50:47:a4:d4:b9:5e:03:2f:f1:ca:05:b3:
                    71:da:8d:bc:94:20:49:b4:d7:2c:cf:c9:26:ea:a7:
                    dc:ac:8b:5b:6c:21:9b:df:2f:ce:68:44:ea:88:eb:
                    49:b4:92:8c:06:ba:0a:5b:e1:29:a9:5f:5e:f0:a1:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:49:20:AA:E8:AC:97:4A:41:1B:2F:E5:66:46:13:A7:19:DD:B5:8E
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134392e302f32342d3234203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:24:c4:b4:52:44:24:d0:ea:b0:4e:8c:90:9a:e3:25:f1:
         f1:fb:19:82:b8:67:0f:64:38:a6:5b:6e:4a:2c:d0:80:94:57:
         82:16:a4:c2:2a:04:84:a3:ff:97:50:aa:ba:31:27:ed:55:2a:
         27:9a:5b:66:5b:50:2f:db:cd:d7:d9:8d:82:be:e1:0e:97:e0:
         4b:48:4b:54:25:e4:be:37:68:d7:b4:89:50:00:74:80:52:c8:
         e1:4c:ed:bf:3e:49:4d:1c:41:25:d5:32:ad:8e:69:0e:43:87:
         92:d7:95:20:c6:ce:a3:11:fa:11:d0:be:f7:c8:09:f8:b4:52:
         80:2e:f7:fa:ce:f4:99:93:55:8c:be:1b:2b:1c:01:88:62:f8:
         c2:50:13:1d:c0:fd:9e:c4:56:46:38:4e:38:ea:c7:95:e3:35:
         a7:d8:c1:a8:48:c7:44:f6:92:b5:71:86:e6:ea:d5:2b:43:74:
         6f:d9:28:50:69:80:99:a4:d7:19:f0:4a:0d:2e:7c:de:36:ed:
         90:6d:1e:30:92:fa:fe:fd:29:8d:08:de:51:d4:85:04:5c:e2:
         cf:6a:40:9f:f9:ef:5a:1d:aa:38:35:4f:26:eb:3d:80:ac:1a:
         92:90:7e:25:a7:16:b3:49:aa:e4:6b:87:71:33:96:bc:1d:bd:
         81:49:37:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXUPu+j1TswoTjpp9D0NCzZ4BtcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJEQzMzOTVBMjA3OTBFMkI1ODcxMkM0NUNDMTcyMzUy
QjA1QkIwMjAeFw0yMzAyMjMwMzU3MTZaFw0yNDAyMjIwNDAyMTZaMDMxMTAvBgNV
BAMTKDFDNDkyMEFBRThBQzk3NEE0MTFCMkZFNTY2NDYxM0E3MTlEREI1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3omNYkUqLy3c4LTwo5LbIEOJe
h6DouxJ0UrU1kiXVRqE4UXNfvYHXf/QTC7nymccAtYfclkpD08rSVR8drO6H9ilN
djJiPbY98QbeqPxxPR27AvPZc3mC+PTl14tHAQfuTpUeggtERxY2MKRPos6u0Jq7
PoKA0IrEOD/6Yn9uUrkoB0KGJPlKkzBiic7fPNqdaoifD9MJT9VzMnvZIDbxR0Lb
stP5dg3qfBdPqefeWvbYLHavs0nCK2Km19iys7Cvg1aiBlBHpNS5XgMv8coFs3Ha
jbyUIEm01yzPySbqp9ysi1tsIZvfL85oROqI60m0kowGugpb4SmpX17woaw9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHEkgquisl0pBGy/lZkYTpxndtY4wHwYDVR0j
BBgwFoAUi9wzlaIHkOK1hxLEXMFyNSsFuwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1prcUdOTjNhUWkydFNqOWkyekpWWHRkNTU2UUtzd0ZXYWNXVG9QZmdr
WmsvMC84QkRDMzM5NUEyMDc5MEUyQjU4NzEyQzQ1Q0MxNzIzNTJCMDVCQjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCREMzMzk1QTIwNzkwRTJC
NTg3MTJDNDVDQzE3MjM1MkIwNUJCMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzdaa3FHTk4zYVFpMnRTajlpMnpKVlh0ZDU1NlFLc3dGV2FjV1RvUGZna1prLzAv
MzEzNzM3MmUzMjMyMzEyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALHdlTANBgkqhkiG9w0BAQsFAAOCAQEAHqck
xLRSRCTQ6rBOjJCa4yXx8fsZgrhnD2Q4pltuSizQgJRXghakwioEhKP/l1CqujEn
7VUqJ5pbZltQL9vN19mNgr7hDpfgS0hLVCXkvjdo17SJUAB0gFLI4Uztvz5JTRxB
JdUyrY5pDkOHkteVIMbOoxH6EdC+98gJ+LRSgC73+s70mZNVjL4bKxwBiGL4wlAT
HcD9nsRWRjhOOOrHleM1p9jBqEjHRPaStXGG5urVK0N0b9koUGmAmaTXGfBKDS58
3jbtkG0eMJL6/v0pjQjeUdSFBFziz2pAn/nvWh2qODVPJus9gKwakpB+JacWs0mq
5GuHcTOWvB29gUk3hA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org