Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa
File:                     3137372e38342e3233362e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          eTe/o6Vtsvq5GQPp2mz7wf8604KHfMHkR9pW/jalaQk=
Subject key identifier:   C9:99:75:61:13:9C:02:70:D0:7C:2E:CD:8E:60:6D:DF:D6:F7:DB:F9
Certificate issuer:       /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial:       1BCCDE4CF58017154A793AFFA6D4F7CB16FC0F64
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:36:03 +0000
ROA not before:           Wed 10 Apr 2024 13:31:03 +0000
ROA not after:            Wed 09 Apr 2025 13:36:03 +0000
asID:                     61689
IP address blocks:        177.84.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cc:de:4c:f5:80:17:15:4a:79:3a:ff:a6:d4:f7:cb:16:fc:0f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Validity
            Not Before: Apr 10 13:31:03 2024 GMT
            Not After : Apr  9 13:36:03 2025 GMT
        Subject: CN=C9997561139C0270D07C2ECD8E606DDFD6F7DBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:0b:8d:ae:e2:f8:3d:fb:ad:da:c2:13:af:
                    f4:5b:14:2e:69:63:15:c5:91:ff:eb:b2:9a:2b:2c:
                    2e:6e:dd:70:00:5e:c9:34:74:e3:33:f9:97:61:bb:
                    89:ac:46:a3:f8:5c:03:f3:c3:f0:14:f5:a1:3b:cf:
                    6f:e8:11:70:7f:8d:85:34:77:fc:ce:f2:44:d3:ba:
                    c5:c8:8d:b3:97:50:c9:b5:4c:ee:9e:a2:aa:46:bf:
                    b7:be:87:59:b2:31:60:7b:37:71:5e:4a:6d:43:21:
                    28:73:9b:e3:7c:90:f6:72:fe:34:66:ae:db:b0:54:
                    cf:de:fb:07:4a:2c:f2:dc:e2:a5:4b:8b:63:53:ff:
                    f6:53:bc:22:d2:6a:85:c8:3e:e0:f9:ed:02:01:53:
                    4c:ed:a8:96:8b:9e:a8:3c:24:bd:f1:84:b7:59:6b:
                    72:9b:72:29:48:52:60:1d:04:f6:eb:0e:26:06:8d:
                    21:c8:f3:83:33:fd:e1:5c:6e:dc:61:48:5e:50:f6:
                    47:61:a5:e5:a7:f4:58:37:d6:8f:cb:9d:59:fd:a0:
                    c4:93:05:f3:71:81:e8:5c:c0:86:5f:96:4a:64:eb:
                    78:a2:8b:8b:be:42:b4:e6:77:9e:29:34:f1:3b:4e:
                    9e:98:db:ba:ba:67:50:b0:71:92:cb:b5:a3:79:86:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:75:61:13:9C:02:70:D0:7C:2E:CD:8E:60:6D:DF:D6:F7:DB:F9
            X509v3 Authority Key Identifier:
                keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:ec:8f:c6:8b:8c:17:11:2b:c6:3a:dc:2d:f0:af:b7:dc:
         80:b7:4e:9e:ca:fc:a1:5d:fd:94:5f:b9:40:16:c7:e8:f2:3b:
         61:74:7a:06:fb:3c:73:bf:8d:32:24:77:8e:e0:55:22:68:01:
         21:98:7c:e9:92:a8:9c:c7:cb:36:d2:18:3f:69:bd:45:ee:02:
         68:51:2e:21:42:8b:b4:7e:53:e0:c1:0e:0e:9d:fd:d1:0f:eb:
         7c:d8:e5:02:b3:d5:d3:25:d6:68:27:89:ab:73:7d:3b:ab:88:
         fb:1b:55:3c:56:55:e1:f3:5e:70:4f:01:39:77:47:74:83:20:
         06:9e:06:71:db:b4:c7:c4:9e:d3:d1:74:93:bc:6e:2b:2b:d0:
         0a:b2:43:83:cb:e7:54:c9:30:3c:3a:90:54:06:34:ac:75:d7:
         4b:1d:fd:2a:1f:5e:cc:82:e5:1b:1d:35:8c:3f:3d:c7:c3:19:
         dc:0c:ce:32:be:86:60:60:a6:ce:9e:8a:5a:1d:f7:5b:c6:e3:
         b7:e6:02:1b:05:a4:73:08:87:6b:45:2d:9d:74:05:7f:95:be:
         45:9c:7f:c0:ab:d8:2d:62:e2:91:28:21:cc:00:bb:2a:0f:c8:
         10:78:09:76:e9:c7:23:e4:95:5a:33:ea:33:1b:fd:22:29:d6:
         dc:ac:7b:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG8zeTPWAFxVKeTr/ptT3yxb8D2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1NjI1QTY1NkNDRDJCRTNGM0YwRjg3RDlBNEJGMkUx
OTJCRTQxNDAeFw0yNDA0MTAxMzMxMDNaFw0yNTA0MDkxMzM2MDNaMDMxMTAvBgNV
BAMTKEM5OTk3NTYxMTM5QzAyNzBEMDdDMkVDRDhFNjA2RERGRDZGN0RCRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjguNruL4Pfut2sITr/RbFC5p
YxXFkf/rsporLC5u3XAAXsk0dOMz+Zdhu4msRqP4XAPzw/AU9aE7z2/oEXB/jYU0
d/zO8kTTusXIjbOXUMm1TO6eoqpGv7e+h1myMWB7N3FeSm1DIShzm+N8kPZy/jRm
rtuwVM/e+wdKLPLc4qVLi2NT//ZTvCLSaoXIPuD57QIBU0ztqJaLnqg8JL3xhLdZ
a3KbcilIUmAdBPbrDiYGjSHI84Mz/eFcbtxhSF5Q9kdhpeWn9Fg31o/LnVn9oMST
BfNxgehcwIZflkpk63iii4u+QrTmd54pNPE7Tp6Y27q6Z1CwcZLLtaN5htldAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyZl1YROcAnDQfC7NjmBt39b32/kwHwYDVR0j
BBgwFoAUclYlplbM0r4/Pw+H2aS/Lhkr5BQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMC83MjU2MjVBNjU2Q0NEMkJFM0YzRjBGODdEOUE0QkYyRTE5MkJFNDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyNTYyNUE2NTZDQ0QyQkUz
RjNGMEY4N0Q5QTRCRjJFMTkyQkU0MTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzAv
MzEzNzM3MmUzODM0MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMx
MzYzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVTsMA0GCSqGSIb3DQEBCwUAA4IBAQBUfeyPxouM
FxErxjrcLfCvt9yAt06eyvyhXf2UX7lAFsfo8jthdHoG+zxzv40yJHeO4FUiaAEh
mHzpkqicx8s20hg/ab1F7gJoUS4hQou0flPgwQ4Onf3RD+t82OUCs9XTJdZoJ4mr
c307q4j7G1U8VlXh815wTwE5d0d0gyAGngZx27THxJ7T0XSTvG4rK9AKskODy+dU
yTA8OpBUBjSsdddLHf0qH17MguUbHTWMPz3HwxncDM4yvoZgYKbOnopaHfdbxuO3
5gIbBaRzCIdrRS2ddAV/lb5FnH/Aq9gtYuKRKCHMALsqD8gQeAl26ccj5JVaM+oz
G/0iKdbcrHsC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org