Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233342e302f32332d3233203d3e203532353933.roa
File:                     3137372e38372e3233342e302f32332d3233203d3e203532353933.roa (raw, json)
Hash identifier:          D5Z1JW5h4/SEo33nWLWp/ksc8rN0xHQV0jqwhmKxBqs=
Subject key identifier:   0F:76:46:A8:DD:19:C5:28:58:EC:10:9A:CD:6A:F1:70:79:F8:88:44
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       3D50D354449B4DFAD936B9ECD87857886C0ECF5D
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233342e302f32332d3233203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:20 +0000
ROA not before:           Tue 19 Sep 2023 12:47:20 +0000
ROA not after:            Tue 17 Sep 2024 12:52:20 +0000
asID:                     52593
IP address blocks:        177.87.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:50:d3:54:44:9b:4d:fa:d9:36:b9:ec:d8:78:57:88:6c:0e:cf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:20 2023 GMT
            Not After : Sep 17 12:52:20 2024 GMT
        Subject: CN=0F7646A8DD19C52858EC109ACD6AF17079F88844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:d9:1b:a2:32:77:15:e1:73:c6:7d:3f:87:
                    27:ce:ad:be:72:b3:15:08:e0:40:8e:00:44:6f:7c:
                    c9:10:40:f0:c7:ca:36:42:70:6e:cf:e1:0f:3c:95:
                    57:1d:20:3e:9c:d1:27:f9:93:6b:56:6b:ae:4b:fd:
                    35:85:93:9b:fe:f4:71:38:4e:67:72:64:e2:94:05:
                    7c:3a:4a:2d:a2:6c:83:f2:5a:c1:e9:ac:cb:ed:3d:
                    fa:e9:52:6a:44:25:15:46:34:2c:38:bc:e2:f2:05:
                    e1:3c:9b:df:ac:e2:bc:f8:9d:5d:f6:7e:ca:ed:14:
                    3e:00:cf:9e:e4:cc:08:5c:92:bd:8f:38:e7:7d:84:
                    b1:84:89:52:65:93:d3:e3:54:af:6b:0d:4b:ec:f0:
                    6b:75:b8:69:fe:92:82:79:b3:8e:bf:70:ce:ad:93:
                    86:43:09:f4:c7:31:66:56:4c:b3:ae:2d:6a:25:af:
                    46:f9:87:4b:1b:fa:a2:b3:76:6f:68:32:00:09:af:
                    76:60:43:82:bc:b6:ba:ce:98:5a:ad:fa:22:5d:55:
                    14:9d:34:c3:24:db:aa:56:2d:a2:9d:43:08:a8:f8:
                    17:a7:8c:37:f7:03:70:9d:f9:11:af:e2:98:d0:59:
                    64:27:c1:25:e9:91:ab:f5:2b:4c:97:22:f3:bf:ea:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:46:A8:DD:19:C5:28:58:EC:10:9A:CD:6A:F1:70:79:F8:88:44
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233342e302f32332d3233203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:c7:67:88:ef:47:2f:0e:2a:bc:be:7c:91:e9:c5:9a:a2:7a:
         b0:49:5a:1f:54:65:4c:7d:39:41:b4:aa:9b:b9:4d:bd:49:95:
         b0:31:ef:58:ca:21:16:0c:b5:ed:75:10:55:31:89:85:4b:9f:
         d1:cb:95:62:57:37:09:ea:71:ff:28:33:55:31:8b:73:a6:26:
         89:33:f2:e2:d0:b1:ed:59:db:fc:c6:93:5d:c9:63:ee:26:06:
         ca:71:5b:e2:56:d7:c4:4d:9d:ac:94:2e:b9:13:2b:09:97:1c:
         82:e4:67:1c:f8:d1:0c:33:15:54:59:68:ee:dd:39:7b:c7:c9:
         0f:09:bc:8f:66:f2:6d:f0:1c:23:29:97:1d:d7:4a:0c:fb:48:
         c4:29:8b:ac:c1:9d:f1:90:0b:82:af:ae:75:4a:61:40:40:df:
         04:7e:21:80:76:da:e2:cd:43:b3:19:e2:4b:97:88:e4:2a:00:
         d1:5e:01:cc:51:28:d0:52:57:85:eb:e9:4a:f5:4f:12:a8:1f:
         33:9b:5e:2e:53:34:9a:5a:29:58:dd:9f:46:bc:b2:20:b4:5e:
         fe:08:e4:7a:d6:48:91:fa:36:f9:14:7a:a2:bf:a4:e0:c5:17:
         bb:b9:b6:54:76:09:e5:39:5d:82:10:3c:4e:a1:8a:1a:ab:cb:
         03:a2:25:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPVDTVESbTfrZNrns2HhXiGwOz10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzN0ZGQ0MxRDYxNUMxNkVGMTI5OEEzNDQzNTg3RkJG
NjM2MUVFNjAeFw0yMzA5MTkxMjQ3MjBaFw0yNDA5MTcxMjUyMjBaMDMxMTAvBgNV
BAMTKDBGNzY0NkE4REQxOUM1Mjg1OEVDMTA5QUNENkFGMTcwNzlGODg4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUtkbojJ3FeFzxn0/hyfOrb5y
sxUI4ECOAERvfMkQQPDHyjZCcG7P4Q88lVcdID6c0Sf5k2tWa65L/TWFk5v+9HE4
TmdyZOKUBXw6Si2ibIPyWsHprMvtPfrpUmpEJRVGNCw4vOLyBeE8m9+s4rz4nV32
fsrtFD4Az57kzAhckr2POOd9hLGEiVJlk9PjVK9rDUvs8Gt1uGn+koJ5s46/cM6t
k4ZDCfTHMWZWTLOuLWolr0b5h0sb+qKzdm9oMgAJr3ZgQ4K8trrOmFqt+iJdVRSd
NMMk26pWLaKdQwio+BenjDf3A3Cd+RGv4pjQWWQnwSXpkav1K0yXIvO/6qJpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUD3ZGqN0ZxShY7BCazWrxcHn4iEQwHwYDVR0j
BBgwFoAUfDf/zB1hXBbvEpijRDWH+/Y2HuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN
SDcvMC83QzM3RkZDQzFENjE1QzE2RUYxMjk4QTM0NDM1ODdGQkY2MzYxRUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDMzdGRkNDMUQ2MTVDMTZF
RjEyOThBMzQ0MzU4N0ZCRjYzNjFFRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNU1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAv
MzEzNzM3MmUzODM3MmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVfqMA0GCSqGSIb3DQEBCwUAA4IBAQC5x2eI70cv
Diq8vnyR6cWaonqwSVofVGVMfTlBtKqbuU29SZWwMe9YyiEWDLXtdRBVMYmFS5/R
y5ViVzcJ6nH/KDNVMYtzpiaJM/Li0LHtWdv8xpNdyWPuJgbKcVviVtfETZ2slC65
EysJlxyC5Gcc+NEMMxVUWWju3Tl7x8kPCbyPZvJt8BwjKZcd10oM+0jEKYuswZ3x
kAuCr651SmFAQN8EfiGAdtrizUOzGeJLl4jkKgDRXgHMUSjQUleF6+lK9U8SqB8z
m14uUzSaWilY3Z9GvLIgtF7+COR61kiR+jb5FHqiv6TgxRe7ubZUdgnlOV2CEDxO
oYoaq8sDoiW1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org