Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3234203d3e20323633313432.roa
File:                     3137372e39332e38302e302f32312d3234203d3e20323633313432.roa (raw, json)
Hash identifier:          /4g/jzfEixksX4sssIPPD2QiJGNFjEVC88BJOb07Gks=
Subject key identifier:   4A:6B:93:8F:AF:F4:E4:5E:D1:1F:AE:35:D6:1B:BA:C7:19:0A:F9:99
Certificate issuer:       /CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
Certificate serial:       2B5956920F5E908FEFD65E31FDA441391593F627
Authority key identifier: 6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3234203d3e20323633313432.roa
Signing time:             Wed 26 Apr 2023 18:10:48 +0000
ROA not before:           Wed 26 Apr 2023 18:05:48 +0000
ROA not after:            Wed 24 Apr 2024 18:10:48 +0000
asID:                     263142
IP address blocks:        177.93.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:59:56:92:0f:5e:90:8f:ef:d6:5e:31:fd:a4:41:39:15:93:f6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
        Validity
            Not Before: Apr 26 18:05:48 2023 GMT
            Not After : Apr 24 18:10:48 2024 GMT
        Subject: CN=4A6B938FAFF4E45ED11FAE35D61BBAC7190AF999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:83:ad:e9:f3:72:ce:79:5c:96:fb:8e:d2:
                    b9:2a:b7:40:99:57:e0:5d:10:46:4e:b1:99:18:28:
                    9a:a3:ba:52:c2:b6:a9:8d:c8:81:97:ae:8f:89:ad:
                    c1:57:58:78:cd:f7:21:f9:ff:34:53:a1:a2:57:b1:
                    79:df:2b:15:25:0e:17:74:dc:87:3d:f6:bd:1c:8d:
                    d9:a2:05:55:d0:62:b5:1a:6f:71:c1:9e:fa:13:28:
                    af:40:b5:8f:9c:72:6c:d5:80:b1:67:9c:5a:4a:9d:
                    1f:ef:88:17:d8:c3:0e:b0:03:74:41:fd:7c:17:9e:
                    8d:f5:47:9e:f5:94:d8:52:e6:39:68:b4:37:3a:a2:
                    7b:3c:cc:90:2e:f5:3e:bc:f2:af:8c:cd:b3:90:75:
                    e4:13:12:bf:06:78:c3:9e:f9:0b:1c:8f:82:41:56:
                    cd:48:ed:97:5d:4b:b8:d0:b6:d1:91:fa:09:5e:0c:
                    6e:35:e7:e9:61:78:da:9b:84:17:82:97:c9:4e:fe:
                    72:17:a1:79:3f:2b:e9:4f:eb:57:d0:08:b0:c9:43:
                    53:eb:26:87:f9:6b:0a:f6:bb:d5:b3:17:19:b1:e5:
                    e3:1c:cf:56:14:2f:41:37:d2:21:6e:d8:f4:4f:23:
                    3e:85:86:9f:22:67:51:8a:cc:04:39:f7:27:c1:8d:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6B:93:8F:AF:F4:E4:5E:D1:1F:AE:35:D6:1B:BA:C7:19:0A:F9:99
            X509v3 Authority Key Identifier:
                keyid:6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3234203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:89:b8:52:a4:2e:51:c4:42:fb:ac:b7:5d:84:0e:84:30:24:
         d4:e2:12:81:93:80:8b:0c:5a:64:ab:19:ed:75:72:d4:2f:72:
         f8:cb:94:bd:9d:65:2a:e3:e6:a2:c9:b7:9d:29:2c:12:fc:4b:
         04:14:06:1f:29:40:71:3d:15:74:44:a8:de:64:32:bb:6c:79:
         23:f9:3f:62:82:5e:75:27:2c:f3:4b:4c:78:e3:90:a3:17:cf:
         e7:5f:fb:ea:3d:79:a2:37:9a:41:bf:f1:eb:b2:a0:e3:be:0a:
         35:51:91:a7:34:34:76:2e:04:67:b6:ee:97:5a:d3:6c:5b:0c:
         25:47:0d:61:a7:e5:b6:39:69:f0:3b:d8:28:56:b5:0e:c3:d3:
         d4:b0:3f:03:cd:fd:00:c5:f9:07:e8:ab:fa:81:3a:c7:49:c2:
         7e:98:a1:0b:5c:b8:96:d1:5b:4b:94:2f:00:ce:89:4e:9c:6f:
         de:70:8b:b2:2d:38:9f:cf:04:29:a2:3b:8c:9c:b4:89:50:29:
         aa:e4:5e:18:30:95:51:08:62:ec:87:c0:bc:21:8f:1e:a2:18:
         4f:c7:bf:78:e5:c9:5b:79:23:9d:0e:4b:a9:36:56:69:ba:5a:
         2a:34:95:44:bd:4b:b6:11:fd:4c:12:2d:cb:b2:9f:9d:48:aa:
         43:70:61:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK1lWkg9ekI/v1l4x/aRBORWT9icwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGNUNCQjA2NTMwMkE5RDNEQkUxRTk3QjlDMkNCRTIx
QzI2RjI2MTAeFw0yMzA0MjYxODA1NDhaFw0yNDA0MjQxODEwNDhaMDMxMTAvBgNV
BAMTKDRBNkI5MzhGQUZGNEU0NUVEMTFGQUUzNUQ2MUJCQUM3MTkwQUY5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC4Ot6fNyznlclvuO0rkqt0CZ
V+BdEEZOsZkYKJqjulLCtqmNyIGXro+JrcFXWHjN9yH5/zRToaJXsXnfKxUlDhd0
3Ic99r0cjdmiBVXQYrUab3HBnvoTKK9AtY+ccmzVgLFnnFpKnR/viBfYww6wA3RB
/XwXno31R571lNhS5jlotDc6ons8zJAu9T688q+MzbOQdeQTEr8GeMOe+Qscj4JB
Vs1I7ZddS7jQttGR+gleDG415+lheNqbhBeCl8lO/nIXoXk/K+lP61fQCLDJQ1Pr
Jof5awr2u9WzFxmx5eMcz1YUL0E30iFu2PRPIz6Fhp8iZ1GKzAQ59yfBjYIPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSmuTj6/05F7RH6411hu6xxkK+ZkwHwYDVR0j
BBgwFoAUavXLsGUwKp09vh6XucLL4hwm8mEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4
c1kvMC82QUY1Q0JCMDY1MzAyQTlEM0RCRTFFOTdCOUMyQ0JFMjFDMjZGMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBRjVDQkIwNjUzMDJBOUQz
REJFMUU5N0I5QzJDQkUyMUMyNkYyNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZU1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzAv
MzEzNzM3MmUzOTMzMmUzODMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMz
MzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsV1QMA0GCSqGSIb3DQEBCwUAA4IBAQAIibhSpC5R
xEL7rLddhA6EMCTU4hKBk4CLDFpkqxntdXLUL3L4y5S9nWUq4+aiybedKSwS/EsE
FAYfKUBxPRV0RKjeZDK7bHkj+T9igl51JyzzS0x445CjF8/nX/vqPXmiN5pBv/Hr
sqDjvgo1UZGnNDR2LgRntu6XWtNsWwwlRw1hp+W2OWnwO9goVrUOw9PUsD8Dzf0A
xfkH6Kv6gTrHScJ+mKELXLiW0VtLlC8AzolOnG/ecIuyLTifzwQpojuMnLSJUCmq
5F4YMJVRCGLsh8C8IY8eohhPx7945clbeSOdDkupNlZpuloqNJVEvUu2Ef1MEi3L
sp+dSKpDcGEj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org