Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa
File:                     3137372e38352e38342e302f32322d3232203d3e20323636313630.roa (raw, json)
Hash identifier:          gd0cKnLvO725Fw6l1yaPfkx0uXjW9yknZbaD/g2tN5s=
Subject key identifier:   B2:5A:2D:40:FB:FA:61:52:11:10:C3:28:89:E3:9A:C9:BE:EA:C2:76
Certificate issuer:       /CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
Certificate serial:       6C825C1C0BAA8C7171E69A3759274CE379A3673E
Authority key identifier: 45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa
Signing time:             Thu 16 Nov 2023 15:32:39 +0000
ROA not before:           Thu 16 Nov 2023 15:27:39 +0000
ROA not after:            Thu 14 Nov 2024 15:32:39 +0000
asID:                     266160
IP address blocks:        177.85.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:5c:1c:0b:aa:8c:71:71:e6:9a:37:59:27:4c:e3:79:a3:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
        Validity
            Not Before: Nov 16 15:27:39 2023 GMT
            Not After : Nov 14 15:32:39 2024 GMT
        Subject: CN=B25A2D40FBFA61521110C32889E39AC9BEEAC276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:57:5e:22:43:65:bf:d5:f4:ec:80:8e:3f:
                    c9:93:04:af:37:33:5a:a6:cc:35:ca:2a:bf:23:31:
                    d1:bd:67:2c:e1:3b:84:0d:7e:14:b5:58:60:1e:1d:
                    ca:55:d5:d8:25:fa:b0:93:95:73:dd:a3:8e:88:a8:
                    04:24:4a:d0:eb:f3:39:35:cc:de:82:e8:a4:7f:c1:
                    1f:29:37:40:c4:ec:d4:44:e7:49:00:3b:85:8e:0f:
                    44:58:93:7a:e6:27:4b:83:68:ef:2f:53:1a:2e:ad:
                    e2:49:14:12:bf:ba:75:b8:9a:9e:14:5c:55:d1:eb:
                    85:f7:db:09:b0:d0:33:8d:cb:91:4e:e0:4b:60:4a:
                    4d:79:9c:36:ae:b3:6f:2e:ff:d2:40:68:b1:14:43:
                    7a:9d:0b:22:9c:62:95:d2:78:1e:8f:18:ac:78:42:
                    70:ec:15:f6:bf:f9:31:3e:b9:cd:79:f2:1b:ee:6f:
                    29:86:4d:57:3b:80:83:a7:5c:c9:2a:40:38:73:65:
                    32:7d:66:bc:75:1d:09:c3:23:2a:4d:56:29:b7:38:
                    2d:df:c7:93:fb:e5:95:99:62:1f:34:e2:06:21:5c:
                    85:ef:c4:fb:c0:22:d2:9b:fc:d6:81:6d:1d:72:23:
                    ed:0f:15:4c:2c:59:ca:cb:30:37:f6:fc:e7:7f:79:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:2D:40:FB:FA:61:52:11:10:C3:28:89:E3:9A:C9:BE:EA:C2:76
            X509v3 Authority Key Identifier:
                keyid:45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:cd:b9:a8:f5:b0:43:b9:3b:54:7f:ad:2d:f7:86:84:a5:
         cd:92:c0:85:ec:52:40:6d:61:70:62:8b:76:f8:cc:eb:7c:eb:
         7d:88:4b:93:86:b8:fa:27:72:24:3c:df:53:1c:8e:ba:41:57:
         76:85:54:77:93:77:53:b4:cb:f2:e7:e9:56:57:c4:89:79:0e:
         27:cf:a9:a3:d2:14:2e:a6:7e:34:ef:89:23:f7:d3:81:94:3d:
         f6:09:ab:bb:5b:6b:1a:3d:d6:2c:82:e9:3f:51:41:8f:10:bd:
         33:21:b6:ab:7c:71:32:8d:0c:76:ed:9c:52:18:7b:e9:f8:98:
         ac:a5:f9:c4:55:a5:82:8a:10:31:f5:46:9f:30:3b:5e:0f:c0:
         31:25:d8:78:bc:09:28:1b:0e:92:f3:39:14:48:7c:a5:10:48:
         dd:bf:14:63:5a:6d:ce:93:75:9b:a8:f3:2d:3e:29:8b:5e:8c:
         ce:e2:e7:bc:14:b8:05:d4:5d:a6:27:5a:87:0b:de:8f:d9:7a:
         10:08:ea:6e:77:14:b5:f2:bb:a0:3a:01:53:71:00:2b:d1:5d:
         cf:f4:24:07:b7:3f:ff:2b:d5:62:2a:50:0e:45:cc:a2:0a:fa:
         8d:d5:47:1f:9c:18:33:00:cb:d2:cc:fa:c8:31:0a:31:4c:9d:
         43:99:fc:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbIJcHAuqjHFx5po3WSdM43mjZz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVDNzRGOUMwMUU2REQ4M0QyMjEzMkUyOTlFMTI5QURB
NDdCQUFFNjAeFw0yMzExMTYxNTI3MzlaFw0yNDExMTQxNTMyMzlaMDMxMTAvBgNV
BAMTKEIyNUEyRDQwRkJGQTYxNTIxMTEwQzMyODg5RTM5QUM5QkVFQUMyNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yVdeIkNlv9X07ICOP8mTBK83
M1qmzDXKKr8jMdG9ZyzhO4QNfhS1WGAeHcpV1dgl+rCTlXPdo46IqAQkStDr8zk1
zN6C6KR/wR8pN0DE7NRE50kAO4WOD0RYk3rmJ0uDaO8vUxoureJJFBK/unW4mp4U
XFXR64X32wmw0DONy5FO4EtgSk15nDaus28u/9JAaLEUQ3qdCyKcYpXSeB6PGKx4
QnDsFfa/+TE+uc158hvubymGTVc7gIOnXMkqQDhzZTJ9Zrx1HQnDIypNVim3OC3f
x5P75ZWZYh804gYhXIXvxPvAItKb/NaBbR1yI+0PFUwsWcrLMDf2/Od/eYblAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUslotQPv6YVIREMMoieOayb7qwnYwHwYDVR0j
BBgwFoAURcdPnAHm3YPSITLimeEpraR7quYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2dlYjhlUnN5NHQ3d1ZnNW9hSHpkcjNteVdGaVZjV1ZLWkNSM1JlVTE4
RXQvMS80NUM3NEY5QzAxRTZERDgzRDIyMTMyRTI5OUUxMjlBREE0N0JBQUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ1Qzc0RjlDMDFFNkREODNE
MjIxMzJFMjk5RTEyOUFEQTQ3QkFBRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdnZWI4ZVJzeTR0N3dWZzVvYUh6ZHIzbXlXRmlWY1dWS1pDUjNSZVUxOEV0LzEv
MzEzNzM3MmUzODM1MmUzODM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVVUMA0GCSqGSIb3DQEBCwUAA4IBAQBKac25qPWw
Q7k7VH+tLfeGhKXNksCF7FJAbWFwYot2+MzrfOt9iEuThrj6J3IkPN9THI66QVd2
hVR3k3dTtMvy5+lWV8SJeQ4nz6mj0hQupn4074kj99OBlD32Cau7W2saPdYsguk/
UUGPEL0zIbarfHEyjQx27ZxSGHvp+JispfnEVaWCihAx9UafMDteD8AxJdh4vAko
Gw6S8zkUSHylEEjdvxRjWm3Ok3WbqPMtPimLXozO4ue8FLgF1F2mJ1qHC96P2XoQ
COpudxS18rugOgFTcQAr0V3P9CQHtz//K9ViKlAORcyiCvqN1UcfnBgzAMvSzPrI
MQoxTJ1DmfyW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org