Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132312e302f32342d3234203d3e20323730373734.roa
File:                     3138372e36332e3132312e302f32342d3234203d3e20323730373734.roa (raw, json)
Hash identifier:          TPj8RPaNP3qzpxdTU0ZLhaq6WsbQlNKVuLnLT/S98mE=
Subject key identifier:   74:FF:D2:70:2D:03:88:E9:8E:2E:0B:4A:24:1F:DB:9B:6B:1F:DE:FE
Certificate issuer:       /CN=279DDB0E84ADB362905969BFA5669405EDDB759D
Certificate serial:       6AFFC5CD06697D1C44A8E4768653D4DE148028ED
Authority key identifier: 27:9D:DB:0E:84:AD:B3:62:90:59:69:BF:A5:66:94:05:ED:DB:75:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/279DDB0E84ADB362905969BFA5669405EDDB759D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132312e302f32342d3234203d3e20323730373734.roa
Signing time:             Thu 31 Aug 2023 17:24:30 +0000
ROA not before:           Thu 31 Aug 2023 17:19:30 +0000
ROA not after:            Thu 29 Aug 2024 17:24:30 +0000
asID:                     270774
IP address blocks:        187.63.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ff:c5:cd:06:69:7d:1c:44:a8:e4:76:86:53:d4:de:14:80:28:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279DDB0E84ADB362905969BFA5669405EDDB759D
        Validity
            Not Before: Aug 31 17:19:30 2023 GMT
            Not After : Aug 29 17:24:30 2024 GMT
        Subject: CN=74FFD2702D0388E98E2E0B4A241FDB9B6B1FDEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:16:95:10:ff:44:7b:24:19:90:4b:28:6f:
                    be:05:93:76:3b:99:c9:0d:a2:04:8b:b2:a3:37:c6:
                    f1:fd:99:4f:43:ea:32:f4:0a:d7:9b:e3:f8:01:ea:
                    47:f0:37:34:46:9b:40:ef:6d:27:24:9b:45:af:c3:
                    57:b3:78:45:80:04:99:d1:1e:b5:06:6b:77:72:35:
                    7d:bd:d3:2e:61:c5:29:fe:99:4f:97:6d:71:14:1f:
                    54:2d:8e:59:68:d6:88:5d:d1:91:9a:3a:22:fa:3a:
                    1d:4e:30:65:9c:89:13:0a:ef:c0:7b:b1:b8:e4:0b:
                    a1:35:a0:fc:de:24:21:67:d3:6e:b6:4d:d5:77:21:
                    f2:f0:97:03:b2:70:be:b5:06:54:1a:1f:00:a0:fc:
                    46:58:c8:47:c8:52:46:0f:5d:41:a3:fc:bf:ce:0c:
                    ec:e3:68:f3:64:21:d6:7f:c1:5f:d1:90:26:3a:01:
                    20:d3:8d:be:1d:72:ee:55:55:51:fe:c9:8f:d9:9c:
                    f3:18:3f:1f:d9:fe:03:cb:62:15:be:b7:52:95:fd:
                    6c:fb:ab:6e:53:5a:bf:28:86:8f:73:2c:53:a8:5c:
                    47:34:b4:31:cc:cd:da:76:58:40:30:6c:2c:22:15:
                    7a:95:d6:ec:61:50:3c:60:97:dc:54:21:82:79:57:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FF:D2:70:2D:03:88:E9:8E:2E:0B:4A:24:1F:DB:9B:6B:1F:DE:FE
            X509v3 Authority Key Identifier:
                keyid:27:9D:DB:0E:84:AD:B3:62:90:59:69:BF:A5:66:94:05:ED:DB:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/279DDB0E84ADB362905969BFA5669405EDDB759D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/279DDB0E84ADB362905969BFA5669405EDDB759D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/3138372e36332e3132312e302f32342d3234203d3e20323730373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:38:ca:8e:35:b2:a2:7d:27:0b:01:c1:b7:1f:09:18:01:29:
         69:17:a2:fd:f9:9f:25:6a:cd:1b:87:d0:6b:e5:af:92:8b:ba:
         c6:5a:99:31:a2:cd:19:e2:73:b5:99:f4:d1:06:86:d5:c4:ff:
         ae:5b:d1:73:67:7f:e0:3c:e4:98:75:12:4b:8a:4e:ba:8e:0d:
         27:14:2f:f0:d1:35:65:b9:2d:b5:ff:00:d5:d5:1a:ef:ff:5a:
         57:e8:88:c4:a8:a3:ed:71:d8:09:91:ea:a7:1a:80:2b:03:3e:
         39:0b:bf:2d:44:98:6d:98:5b:0e:07:01:a0:ea:16:19:41:fc:
         50:94:2e:17:5f:26:aa:89:94:7a:60:a9:1b:9c:f5:67:88:76:
         b0:a5:c8:66:6c:1d:e9:31:d1:fd:56:f1:38:8d:da:ef:17:d4:
         45:b8:bb:f3:50:15:87:a7:ba:4a:ad:37:fc:f2:72:e4:7b:d8:
         3e:0b:0d:52:14:4b:b0:cb:a5:f0:09:7b:c2:25:93:76:ce:81:
         a7:c8:0a:9c:b1:7d:1f:cd:45:ef:37:88:91:1e:ca:83:6d:12:
         c4:e3:e2:00:67:49:60:96:bb:a3:63:20:ee:1a:7e:90:c1:d6:
         e5:ed:74:34:48:86:38:95:c7:1c:3e:a1:37:bc:96:c4:10:bb:
         14:b9:e1:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUav/FzQZpfRxEqOR2hlPU3hSAKO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc5RERCMEU4NEFEQjM2MjkwNTk2OUJGQTU2Njk0MDVF
RERCNzU5RDAeFw0yMzA4MzExNzE5MzBaFw0yNDA4MjkxNzI0MzBaMDMxMTAvBgNV
BAMTKDc0RkZEMjcwMkQwMzg4RTk4RTJFMEI0QTI0MUZEQjlCNkIxRkRFRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImxaVEP9EeyQZkEsob74Fk3Y7
mckNogSLsqM3xvH9mU9D6jL0Cteb4/gB6kfwNzRGm0DvbSckm0Wvw1ezeEWABJnR
HrUGa3dyNX290y5hxSn+mU+XbXEUH1Qtjllo1ohd0ZGaOiL6Oh1OMGWciRMK78B7
sbjkC6E1oPzeJCFn0262TdV3IfLwlwOycL61BlQaHwCg/EZYyEfIUkYPXUGj/L/O
DOzjaPNkIdZ/wV/RkCY6ASDTjb4dcu5VVVH+yY/ZnPMYPx/Z/gPLYhW+t1KV/Wz7
q25TWr8oho9zLFOoXEc0tDHMzdp2WEAwbCwiFXqV1uxhUDxgl9xUIYJ5V1Y5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdP/ScC0DiOmOLgtKJB/bm2sf3v4wHwYDVR0j
BBgwFoAUJ53bDoSts2KQWWm/pWaUBe3bdZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZQUDg3Rkp0WWlmcERaeks4bmRaTlhDUmJ1MnU4bUxaVjdlSnJpQWYx
aG0vMC8yNzlEREIwRTg0QURCMzYyOTA1OTY5QkZBNTY2OTQwNUVEREI3NTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3OUREQjBFODRBREIzNjI5
MDU5NjlCRkE1NjY5NDA1RUREQjc1OUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWUFA4N0ZKdFlpZnBEWnpLOG5kWk5YQ1JidTJ1OG1MWlY3ZUpyaUFmMWhtLzAv
MzEzODM3MmUzNjMzMmUzMTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P3kwDQYJKoZIhvcNAQELBQADggEBADc4yo41
sqJ9JwsBwbcfCRgBKWkXov35nyVqzRuH0Gvlr5KLusZamTGizRnic7WZ9NEGhtXE
/65b0XNnf+A85Jh1EkuKTrqODScUL/DRNWW5LbX/ANXVGu//WlfoiMSoo+1x2AmR
6qcagCsDPjkLvy1EmG2YWw4HAaDqFhlB/FCULhdfJqqJlHpgqRuc9WeIdrClyGZs
Hekx0f1W8TiN2u8X1EW4u/NQFYenukqtN/zycuR72D4LDVIUS7DLpfAJe8Ilk3bO
gafICpyxfR/NRe83iJEeyoNtEsTj4gBnSWCWu6NjIO4afpDB1uXtdDRIhjiVxxw+
oTe8lsQQuxS54YA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org