Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
File:                     3137372e33362e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          E5/ZEEWxxp80pgtdHEf6DdcY64IRHgot19rkCYMQYs4=
Subject key identifier:   98:3A:7C:29:B3:EB:D9:FA:2B:BA:E1:7F:FB:4A:92:C1:59:C2:2D:28
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       13DFF0C8D09E8D5E92F7EE1BAE6A0FF5D97FD166
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:41 +0000
ROA not before:           Fri 03 May 2024 19:39:41 +0000
ROA not after:            Fri 02 May 2025 19:44:41 +0000
asID:                     28669
IP address blocks:        177.36.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:f0:c8:d0:9e:8d:5e:92:f7:ee:1b:ae:6a:0f:f5:d9:7f:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:41 2024 GMT
            Not After : May  2 19:44:41 2025 GMT
        Subject: CN=983A7C29B3EBD9FA2BBAE17FFB4A92C159C22D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:d5:8a:07:a6:af:a1:7f:0e:d5:4e:87:f2:
                    e7:2a:4b:1a:25:87:d9:14:51:1a:20:dd:84:c6:6c:
                    b9:69:70:6d:c3:23:91:39:69:1d:fc:55:64:50:35:
                    75:39:a6:1c:c7:0e:4a:ba:2f:5d:9e:d9:d5:46:16:
                    c9:e1:b2:61:13:0a:c7:8e:0f:e7:e9:a2:1e:a9:4c:
                    71:4a:d8:79:5f:9b:be:62:b4:a8:1e:5a:50:87:b1:
                    5b:74:a0:c3:46:de:e3:79:a9:42:6d:9d:a4:9b:4f:
                    da:53:4b:f2:d3:63:9b:6e:81:2d:f0:3b:bb:07:b0:
                    8a:05:e8:20:50:b2:0b:6a:d1:4a:95:db:33:e3:9c:
                    e6:a3:fa:fd:6a:a8:aa:83:9c:52:33:b0:9d:09:a5:
                    5e:d7:57:df:f2:22:76:a3:56:26:96:40:06:fe:a6:
                    f2:74:be:50:b8:e0:e1:e3:ac:4f:bf:1b:a3:ab:eb:
                    e1:13:e8:e7:c0:d2:fa:c5:31:24:9a:34:cc:2e:77:
                    79:b0:a8:36:cb:7f:7f:a3:b5:92:29:3d:4a:32:02:
                    e3:f7:99:cd:8a:db:5a:14:58:08:6a:97:1c:5f:4a:
                    45:8d:29:77:d7:06:9b:08:01:fc:86:a7:70:bd:66:
                    fd:00:68:f6:a2:cd:12:12:48:1a:1a:f2:1e:12:ba:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:7C:29:B3:EB:D9:FA:2B:BA:E1:7F:FB:4A:92:C1:59:C2:2D:28
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:d9:a7:16:d7:ff:16:a1:9c:f2:48:2d:68:e5:ba:83:92:
         a7:23:6f:bc:d8:ff:22:67:22:7c:49:3f:fc:eb:a0:f4:e5:13:
         29:86:a4:d8:9b:de:2a:1c:91:eb:53:82:ad:07:f4:6b:0f:71:
         e4:ea:5b:f2:ae:4f:e5:f5:d5:e5:eb:07:b2:0e:4a:38:94:a7:
         06:14:3a:07:23:ed:6e:63:61:59:1e:a7:fe:c3:03:69:f8:23:
         27:70:8d:75:68:e2:fb:32:27:82:60:75:c3:10:47:c5:69:47:
         11:e7:07:9c:1f:7b:bc:98:74:cd:42:54:b9:75:b6:53:55:a6:
         4b:9e:69:2f:cd:1b:0b:ba:d9:57:30:e6:8f:ef:3b:e0:d3:b1:
         10:e4:70:04:c0:da:9f:5a:9f:94:71:94:e5:94:05:cf:38:7a:
         88:15:0c:37:12:b3:2a:46:2b:ed:a1:6e:17:40:dd:c3:e7:02:
         2e:73:97:fb:6a:ce:43:ba:92:36:8e:3b:00:e0:af:94:7f:ee:
         2a:72:db:6d:66:18:29:4e:67:93:a5:c6:e6:c2:bf:27:ea:32:
         8f:0f:6b:05:4a:f3:27:cf:04:ad:1b:f9:d0:7b:4f:16:00:4e:
         3f:b0:a0:53:d7:2f:b6:b7:06:9f:b1:cc:ff:7d:5c:9e:6b:e0:
         7d:08:92:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE9/wyNCejV6S9+4brmoP9dl/0WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNCQzMzMkM3OUREQjhFODM2NzM2NkJDNzcwOUVCODdE
QTk3NjE5RTAeFw0yNDA1MDMxOTM5NDFaFw0yNTA1MDIxOTQ0NDFaMDMxMTAvBgNV
BAMTKDk4M0E3QzI5QjNFQkQ5RkEyQkJBRTE3RkZCNEE5MkMxNTlDMjJEMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWdWKB6avoX8O1U6H8ucqSxol
h9kUURog3YTGbLlpcG3DI5E5aR38VWRQNXU5phzHDkq6L12e2dVGFsnhsmETCseO
D+fpoh6pTHFK2Hlfm75itKgeWlCHsVt0oMNG3uN5qUJtnaSbT9pTS/LTY5tugS3w
O7sHsIoF6CBQsgtq0UqV2zPjnOaj+v1qqKqDnFIzsJ0JpV7XV9/yInajViaWQAb+
pvJ0vlC44OHjrE+/G6Or6+ET6OfA0vrFMSSaNMwud3mwqDbLf3+jtZIpPUoyAuP3
mc2K21oUWAhqlxxfSkWNKXfXBpsIAfyGp3C9Zv0AaPaizRISSBoa8h4SuuA/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmDp8KbPr2foruuF/+0qSwVnCLSgwHwYDVR0j
BBgwFoAUs7wzLHnduOg2c2a8dwnrh9qXYZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMS9CM0JDMzMyQzc5RERCOEU4MzY3MzY2QkM3NzA5RUI4N0RBOTc2MTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQkMzMzJDNzlEREI4RTgz
NjczNjZCQzc3MDlFQjg3REE5NzYxOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzEv
MzEzNzM3MmUzMzM2MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsSSgMA0GCSqGSIb3DQEBCwUAA4IBAQABrdmnFtf/
FqGc8kgtaOW6g5KnI2+82P8iZyJ8ST/866D05RMphqTYm94qHJHrU4KtB/RrD3Hk
6lvyrk/l9dXl6weyDko4lKcGFDoHI+1uY2FZHqf+wwNp+CMncI11aOL7MieCYHXD
EEfFaUcR5wecH3u8mHTNQlS5dbZTVaZLnmkvzRsLutlXMOaP7zvg07EQ5HAEwNqf
Wp+UcZTllAXPOHqIFQw3ErMqRivtoW4XQN3D5wIuc5f7as5DupI2jjsA4K+Uf+4q
ctttZhgpTmeTpcbmwr8n6jKPD2sFSvMnzwStG/nQe08WAE4/sKBT1y+2twafscz/
fVyea+B9CJKJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org