Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3235203d3e20323632343437.roa
File:                     3137372e35342e31362e302f32302d3235203d3e20323632343437.roa (raw, json)
Hash identifier:          3ZNWW7qGmOvl7VIcaCFarlDRtDBoI+/VPvS1G5h/Srw=
Subject key identifier:   B0:13:B1:27:6F:48:E5:A7:34:20:E2:B8:9E:BB:6E:78:37:84:2F:57
Certificate issuer:       /CN=243D79346DF352A3520A69F25ACDF6D44BEC8930
Certificate serial:       325587FD8F33B72EDC8AD77D6F6AB4634D8D5B2E
Authority key identifier: 24:3D:79:34:6D:F3:52:A3:52:0A:69:F2:5A:CD:F6:D4:4B:EC:89:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3235203d3e20323632343437.roa
Signing time:             Sat 08 Apr 2023 02:44:40 +0000
ROA not before:           Sat 08 Apr 2023 02:39:40 +0000
ROA not after:            Sat 06 Apr 2024 02:44:40 +0000
asID:                     262447
IP address blocks:        177.54.16.0/20 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:55:87:fd:8f:33:b7:2e:dc:8a:d7:7d:6f:6a:b4:63:4d:8d:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243D79346DF352A3520A69F25ACDF6D44BEC8930
        Validity
            Not Before: Apr  8 02:39:40 2023 GMT
            Not After : Apr  6 02:44:40 2024 GMT
        Subject: CN=B013B1276F48E5A73420E2B89EBB6E7837842F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:af:a7:e0:b0:8d:01:c5:be:bd:a7:ad:2e:
                    2d:b6:6a:9f:d3:c9:32:a3:55:8f:19:ac:6c:01:f5:
                    05:9a:a2:2b:b0:45:b0:22:ba:25:d2:61:7c:c0:60:
                    89:88:de:bd:a8:6f:84:56:7e:68:19:7d:9e:ec:c5:
                    a5:f7:45:8d:89:5d:bb:03:62:e2:73:b9:5f:c7:e2:
                    83:4a:4e:b2:00:8c:da:ca:67:ce:01:0c:33:2b:4f:
                    af:aa:51:f5:ac:d1:9c:72:cd:88:3f:6e:86:51:cf:
                    dc:1d:cf:01:6a:60:e4:e4:af:b3:5a:e1:54:52:cf:
                    15:58:2e:7c:4e:b6:5d:96:92:79:0a:b8:17:76:56:
                    9e:9e:a3:12:76:28:c3:85:9a:93:ae:ae:14:45:d6:
                    27:4e:a7:4c:89:b3:27:a9:b9:44:02:0f:d8:fa:4b:
                    3a:bd:1e:8e:72:3b:92:65:22:a4:f6:7b:91:4c:39:
                    01:a7:09:7f:63:3f:9a:39:69:29:57:0e:66:83:c2:
                    0b:84:4a:d4:ce:a8:5e:24:37:c0:44:84:f7:29:7a:
                    24:07:e5:9f:51:bf:ea:89:81:39:3d:61:d0:e9:80:
                    39:9c:94:af:a7:54:20:89:b8:54:91:08:15:38:df:
                    a5:39:14:04:3f:38:12:96:08:b1:6b:bb:a7:88:c8:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:13:B1:27:6F:48:E5:A7:34:20:E2:B8:9E:BB:6E:78:37:84:2F:57
            X509v3 Authority Key Identifier:
                keyid:24:3D:79:34:6D:F3:52:A3:52:0A:69:F2:5A:CD:F6:D4:4B:EC:89:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/3137372e35342e31362e302f32302d3235203d3e20323632343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:68:1d:bb:2e:19:34:aa:10:40:4b:72:fa:9d:f8:29:75:73:
         0c:51:44:2c:7a:28:ed:d1:0e:34:4d:12:a6:a7:6e:1a:44:7b:
         43:8d:37:fa:99:a1:8d:2a:3f:4b:53:9e:e4:30:a9:65:63:1c:
         0d:aa:e8:71:4d:4c:8c:43:67:63:f2:52:f3:f3:43:fa:31:81:
         b2:bb:1b:b0:45:c0:2d:21:ef:a1:66:bd:cd:c0:bf:2c:62:bc:
         8a:54:a7:8a:ab:7e:4a:3e:5b:55:bc:9f:68:46:64:7c:33:b5:
         b0:8a:cc:b5:52:55:87:aa:29:40:1f:57:66:32:4b:7f:d0:60:
         03:66:83:b0:1e:e7:48:03:9d:cf:e7:5f:37:c6:c8:d4:c1:af:
         5f:cf:2d:9c:19:f7:59:d0:6b:b1:fb:ac:a0:26:76:b6:6a:9e:
         36:a6:45:e5:df:22:a8:65:88:e5:ca:ba:9e:71:cf:cf:f3:68:
         fe:d1:74:5d:a5:24:3a:11:ea:3f:7b:a3:8b:6a:85:e4:bd:35:
         22:a1:f8:9d:45:05:2b:a1:88:ca:12:70:c3:19:73:ce:18:46:
         3e:42:ed:b8:87:e2:0c:fe:2c:dc:53:ad:b0:25:62:c5:a6:ab:
         d6:45:74:74:03:fa:c3:80:68:a0:6c:60:a7:58:38:6c:d7:88:
         62:f2:2b:c9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMlWH/Y8zty7citd9b2q0Y02NWy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzRDc5MzQ2REYzNTJBMzUyMEE2OUYyNUFDREY2RDQ0
QkVDODkzMDAeFw0yMzA0MDgwMjM5NDBaFw0yNDA0MDYwMjQ0NDBaMDMxMTAvBgNV
BAMTKEIwMTNCMTI3NkY0OEU1QTczNDIwRTJCODlFQkI2RTc4Mzc4NDJGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQa+n4LCNAcW+vaetLi22ap/T
yTKjVY8ZrGwB9QWaoiuwRbAiuiXSYXzAYImI3r2ob4RWfmgZfZ7sxaX3RY2JXbsD
YuJzuV/H4oNKTrIAjNrKZ84BDDMrT6+qUfWs0ZxyzYg/boZRz9wdzwFqYOTkr7Na
4VRSzxVYLnxOtl2WknkKuBd2Vp6eoxJ2KMOFmpOurhRF1idOp0yJsyepuUQCD9j6
Szq9Ho5yO5JlIqT2e5FMOQGnCX9jP5o5aSlXDmaDwguEStTOqF4kN8BEhPcpeiQH
5Z9Rv+qJgTk9YdDpgDmclK+nVCCJuFSRCBU436U5FAQ/OBKWCLFru6eIyGeHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsBOxJ29I5ac0IOK4nrtueDeEL1cwHwYDVR0j
BBgwFoAUJD15NG3zUqNSCmnyWs321EvsiTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHhkcXZrNlZvRWdxTUo0dHJHWG9ObTI5V0tyQ0J3SlFIQkZLUlJxOFBO
bzgvMC8yNDNENzkzNDZERjM1MkEzNTIwQTY5RjI1QUNERjZENDRCRUM4OTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0M0Q3OTM0NkRGMzUyQTM1
MjBBNjlGMjVBQ0RGNkQ0NEJFQzg5MzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4ZHF2azZWb0VncU1KNHRyR1hvTm0yOVdLckNCd0pRSEJGS1JScThQTm84LzAv
MzEzNzM3MmUzNTM0MmUzMTM2MmUzMDJmMzIzMDJkMzIzNTIwM2QzZTIwMzIzNjMy
MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsTYQMA0GCSqGSIb3DQEBCwUAA4IBAQANaB27Lhk0
qhBAS3L6nfgpdXMMUUQseijt0Q40TRKmp24aRHtDjTf6maGNKj9LU57kMKllYxwN
quhxTUyMQ2dj8lLz80P6MYGyuxuwRcAtIe+hZr3NwL8sYryKVKeKq35KPltVvJ9o
RmR8M7Wwisy1UlWHqilAH1dmMkt/0GADZoOwHudIA53P5183xsjUwa9fzy2cGfdZ
0Gux+6ygJna2ap42pkXl3yKoZYjlyrqecc/P82j+0XRdpSQ6Eeo/e6OLaoXkvTUi
ofidRQUroYjKEnDDGXPOGEY+Qu24h+IM/izcU62wJWLFpqvWRXR0A/rDgGigbGCn
WDhs14hi8ivJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org