Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
File:                     3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          lhnmv+3BzUox7F9ihnA8fg93p6VDqF/OWuiI70N9oFs=
Subject key identifier:   65:79:D4:3E:17:98:3F:D6:64:23:3B:50:4F:99:CC:B6:8E:57:48:B0
Certificate issuer:       /CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
Certificate serial:       2ADB3EB51A96AD46B54440E1BE79C87EE155CAA6
Authority key identifier: 9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
Signing time:             Mon 18 Mar 2024 11:30:37 +0000
ROA not before:           Mon 18 Mar 2024 11:25:37 +0000
ROA not after:            Mon 17 Mar 2025 11:30:37 +0000
asID:                     264381
IP address blocks:        177.11.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:3e:b5:1a:96:ad:46:b5:44:40:e1:be:79:c8:7e:e1:55:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B200BCD91DFF47750BD2C67A02D2E1F476C8232
        Validity
            Not Before: Mar 18 11:25:37 2024 GMT
            Not After : Mar 17 11:30:37 2025 GMT
        Subject: CN=6579D43E17983FD664233B504F99CCB68E5748B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:2a:b5:c7:b5:11:1d:e7:d3:8b:3a:54:9c:
                    b1:1e:5b:5e:af:3e:3f:88:5e:24:08:00:90:92:e0:
                    67:a8:55:ad:5a:7d:36:95:1d:dc:08:b7:82:0d:a3:
                    8c:21:6c:9f:33:bb:3d:b3:84:3a:8e:b5:f9:4e:38:
                    ba:bd:bc:7f:7e:03:fd:c3:00:21:1c:35:93:83:96:
                    6f:a0:29:bb:41:e8:fb:29:28:db:0b:ea:58:07:0e:
                    72:0a:8f:6c:97:f8:0a:ff:8a:88:ce:d3:d6:7f:fb:
                    37:16:4c:eb:59:f3:37:d7:5c:e8:d1:c1:35:82:29:
                    00:8e:86:12:8d:7e:05:2a:00:26:77:5b:7c:0d:d6:
                    f4:05:4e:11:4e:89:dc:59:7b:f3:ef:80:39:de:4f:
                    25:35:fc:45:af:42:86:d3:9b:7f:46:af:24:b6:6e:
                    ce:f3:87:ab:67:5d:25:67:22:2b:bb:da:56:88:51:
                    e7:64:12:97:68:e5:4e:92:a4:7f:54:c3:c7:ef:e6:
                    d2:7a:b5:f4:9e:d1:d9:8b:85:56:c3:01:c5:14:73:
                    6d:be:18:03:e8:9a:7b:04:4f:93:27:e8:6d:3a:0f:
                    d0:fc:20:ec:ef:38:f0:2f:2d:f5:c3:0d:c9:80:62:
                    01:e7:35:5b:b5:4b:1b:b8:b6:29:b8:3d:f7:e5:78:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:D4:3E:17:98:3F:D6:64:23:3B:50:4F:99:CC:B6:8E:57:48:B0
            X509v3 Authority Key Identifier:
                keyid:9B:20:0B:CD:91:DF:F4:77:50:BD:2C:67:A0:2D:2E:1F:47:6C:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B200BCD91DFF47750BD2C67A02D2E1F476C8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/0/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:e0:84:99:e6:66:1c:51:a5:17:fc:8d:b9:62:14:53:97:
         db:c2:e2:ea:5e:56:ad:4b:94:14:98:47:9c:a6:f4:64:95:fe:
         46:64:d9:33:06:35:fc:37:dd:45:59:05:86:47:12:62:72:3c:
         ca:29:4d:8d:99:4f:16:3c:26:b2:5b:0e:c6:03:b9:a1:94:06:
         74:39:c5:2e:ef:83:5d:72:58:54:36:3d:bc:bb:af:dc:ff:97:
         4f:8d:d8:49:1c:29:5f:2b:36:c8:e3:4e:9a:1e:b1:af:30:77:
         66:22:70:2b:b0:4b:84:f1:cb:0a:92:d7:1f:ca:8d:2f:9b:af:
         2f:c2:55:8e:c6:36:08:50:7d:cc:20:e1:6b:b0:91:d3:72:d0:
         f5:cb:c3:31:be:89:ef:aa:54:51:1e:e0:c0:ce:47:74:32:96:
         dd:6f:ba:2b:4d:a4:df:b7:51:8a:21:4e:3e:61:80:6a:7b:fb:
         a3:e2:9c:ee:f4:3b:61:83:8e:d2:70:77:ad:dc:0c:37:42:1f:
         ac:6d:09:8c:49:ec:e9:ef:0a:18:14:b9:5c:32:c7:e2:ce:c0:
         30:3c:76:bb:18:ab:c3:0c:20:e5:4a:22:80:c2:7b:7e:c5:fd:
         ce:6d:5b:85:58:28:5e:d1:ba:07:a2:71:67:00:07:c9:fc:09:
         2f:c4:79:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKts+tRqWrUa1REDhvnnIfuFVyqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyMDBCQ0Q5MURGRjQ3NzUwQkQyQzY3QTAyRDJFMUY0
NzZDODIzMjAeFw0yNDAzMTgxMTI1MzdaFw0yNTAzMTcxMTMwMzdaMDMxMTAvBgNV
BAMTKDY1NzlENDNFMTc5ODNGRDY2NDIzM0I1MDRGOTlDQ0I2OEU1NzQ4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDiq1x7URHefTizpUnLEeW16v
Pj+IXiQIAJCS4GeoVa1afTaVHdwIt4INo4whbJ8zuz2zhDqOtflOOLq9vH9+A/3D
ACEcNZODlm+gKbtB6PspKNsL6lgHDnIKj2yX+Ar/iojO09Z/+zcWTOtZ8zfXXOjR
wTWCKQCOhhKNfgUqACZ3W3wN1vQFThFOidxZe/PvgDneTyU1/EWvQobTm39GryS2
bs7zh6tnXSVnIiu72laIUedkEpdo5U6SpH9Uw8fv5tJ6tfSe0dmLhVbDAcUUc22+
GAPomnsET5Mn6G06D9D8IOzvOPAvLfXDDcmAYgHnNVu1Sxu4tim4PfflePH3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZXnUPheYP9ZkIztQT5nMto5XSLAwHwYDVR0j
BBgwFoAUmyALzZHf9HdQvSxnoC0uH0dsgjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ5MlJjVmlYcGUyUFhkeDkzWVlMRWhMTEJxNHBQZEJLaDlRWTZiMlk2
bWcvMC85QjIwMEJDRDkxREZGNDc3NTBCRDJDNjdBMDJEMkUxRjQ3NkM4MjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlCMjAwQkNEOTFERkY0Nzc1
MEJEMkM2N0EwMkQyRTFGNDc2QzgyMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2eTJSY1ZpWHBlMlBYZHg5M1lZTEVoTExCcTRwUGRCS2g5UVk2YjJZNm1nLzAv
MzEzNzM3MmUzMTMxMmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQs4MA0GCSqGSIb3DQEBCwUAA4IBAQCyNOCEmeZm
HFGlF/yNuWIUU5fbwuLqXlatS5QUmEecpvRklf5GZNkzBjX8N91FWQWGRxJicjzK
KU2NmU8WPCayWw7GA7mhlAZ0OcUu74NdclhUNj28u6/c/5dPjdhJHClfKzbI406a
HrGvMHdmInArsEuE8csKktcfyo0vm68vwlWOxjYIUH3MIOFrsJHTctD1y8Mxvonv
qlRRHuDAzkd0Mpbdb7orTaTft1GKIU4+YYBqe/uj4pzu9Dthg47ScHet3Aw3Qh+s
bQmMSezp7woYFLlcMsfizsAwPHa7GKvDDCDlSiKAwnt+xf3ObVuFWChe0boHonFn
AAfJ/AkvxHkT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org