Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa
File:                     3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa (raw, json)
Hash identifier:          vN5tFumJxKWd5I+uATEUkHpWV4X98fOZTy4LninnIYc=
Subject key identifier:   2D:1C:33:9F:FC:7E:F9:F8:7F:73:6C:CA:DC:7D:86:06:4D:DF:95:BB
Certificate issuer:       /CN=BB7D1E6467E86332D6E54F5DC4F11444142F3342
Certificate serial:       0166EFE5FE522ED68529C2CC3FCDE598134D6B5C
Authority key identifier: BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa
Signing time:             Thu 05 Aug 2021 18:27:15 +0000
ROA not before:           Thu 05 Aug 2021 18:22:15 +0000
ROA not after:            Thu 04 Aug 2022 18:27:15 +0000
asID:                     263405
IP address blocks:        177.222.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:66:ef:e5:fe:52:2e:d6:85:29:c2:cc:3f:cd:e5:98:13:4d:6b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7D1E6467E86332D6E54F5DC4F11444142F3342
        Validity
            Not Before: Aug  5 18:22:15 2021 GMT
            Not After : Aug  4 18:27:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:9d:73:e0:c8:ae:9b:6b:04:b8:a5:a4:31:
                    66:46:7a:e6:24:49:f0:dd:3f:63:8b:21:d8:c9:47:
                    24:58:dc:2b:ca:67:a8:f4:39:a2:02:7f:18:d4:ef:
                    f3:ee:45:b6:23:d5:34:0f:9d:86:37:ae:a1:f0:f1:
                    65:1a:d6:a8:5f:ca:cc:44:0c:03:04:d4:23:5d:f0:
                    01:ce:f4:1d:33:5e:75:f7:30:2e:6d:7f:a8:d5:06:
                    92:a4:47:a2:c3:c4:36:c6:e7:8d:51:ca:f2:3d:88:
                    6f:7c:8d:fc:b5:aa:cc:15:fb:c2:c3:b2:2d:f8:16:
                    72:6c:64:28:c3:af:89:07:01:3d:3d:a6:40:a8:10:
                    20:80:08:b1:ec:e4:a2:43:36:6c:96:f1:5a:d9:89:
                    b3:43:89:c0:b4:5f:e3:38:2a:26:58:e1:cc:78:3d:
                    94:b4:d1:42:00:2e:dd:02:1d:f8:25:3c:46:88:6e:
                    de:e8:2b:0d:33:cb:48:e5:eb:30:e7:8b:38:32:a9:
                    5b:f0:79:ca:6c:63:b5:d7:41:d2:81:af:1e:21:90:
                    7b:14:d9:4b:4d:9c:3c:4f:e7:9f:44:b6:59:9f:ec:
                    31:0f:1b:d4:fc:db:86:5b:a0:be:f9:35:05:d6:3f:
                    b6:af:eb:41:30:21:13:1d:7c:ab:10:f8:bc:15:7a:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1C:33:9F:FC:7E:F9:F8:7F:73:6C:CA:DC:7D:86:06:4D:DF:95:BB
            X509v3 Authority Key Identifier:
                keyid:BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:62:23:cb:c7:c8:3e:ec:9e:2e:91:2a:bb:69:81:64:aa:
         ba:6d:f7:a3:8a:98:ec:d9:cc:64:37:7f:fe:e4:81:05:93:0f:
         0f:82:46:bc:7e:c2:30:96:83:7a:bb:bd:e6:ed:24:6f:26:2b:
         a9:e9:95:05:e1:cf:17:0f:fe:99:b5:3a:9a:0a:16:e3:02:40:
         75:ee:c8:ad:56:ea:a1:01:b9:4d:ed:9f:ec:e2:86:2f:6f:ca:
         5f:c2:27:47:3d:dc:0f:a8:88:b1:7c:26:6f:07:88:c1:37:2e:
         d7:a4:1c:00:9d:09:79:c9:db:e3:8e:b6:07:ff:bc:78:b3:5f:
         13:7f:8c:b9:1e:1a:14:ba:48:cd:ea:c1:27:3b:a7:fe:72:96:
         ec:4e:ba:d8:31:ba:ef:14:05:7f:88:e3:ee:79:85:e4:d0:6e:
         2d:25:bf:99:43:a1:94:43:9d:a3:83:92:76:02:9e:3f:2b:94:
         bb:e2:a6:a5:0a:d5:55:f9:66:c2:b3:1d:a4:ce:b5:f2:fa:38:
         ae:ed:81:bb:11:99:ca:20:8f:cf:bd:70:89:71:68:46:06:4b:
         21:8d:88:6f:97:77:57:06:04:1a:d3:1e:16:ac:8a:f7:b0:57:
         20:64:e6:c5:8a:ba:c2:1b:43:cb:18:a9:37:3c:18:ee:24:e3:
         29:e9:93:8b
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUAWbv5f5SLtaFKcLMP83lmBNNa1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI3RDFFNjQ2N0U4NjMzMkQ2RTU0RjVEQzRGMTE0NDQx
NDJGMzM0MjAeFw0yMTA4MDUxODIyMTVaFw0yMjA4MDQxODI3MTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVBNDlENzNFMEM4QUU5QjZC
MDRCOEE1QTQzMTY2NDY3QUU2MjQ0OUYwREQzRjYzOEIyMUQ4Qzk0NzI0NThEQzJC
Q0E2N0E4RjQzOUEyMDI3RjE4RDRFRkYzRUU0NUI2MjNENTM0MEY5RDg2MzdBRUEx
RjBGMTY1MUFENkE4NUZDQUNDNDQwQzAzMDRENDIzNURGMDAxQ0VGNDFEMzM1RTc1
RjczMDJFNkQ3RkE4RDUwNjkyQTQ0N0EyQzNDNDM2QzZFNzhENTFDQUYyM0Q4ODZG
N0M4REZDQjVBQUNDMTVGQkMyQzNCMjJERjgxNjcyNkM2NDI4QzNBRjg5MDcwMTNE
M0RBNjQwQTgxMDIwODAwOEIxRUNFNEEyNDMzNjZDOTZGMTVBRDk4OUIzNDM4OUMw
QjQ1RkUzMzgyQTI2NThFMUNDNzgzRDk0QjREMTQyMDAyRUREMDIxREY4MjUzQzQ2
ODg2RURFRTgyQjBEMzNDQjQ4RTVFQjMwRTc4QjM4MzJBOTVCRjA3OUNBNkM2M0I1
RDc0MUQyODFBRjFFMjE5MDdCMTREOTRCNEQ5QzNDNEZFNzlGNDRCNjU5OUZFQzMx
MEYxQkQ0RkNEQjg2NUJBMEJFRjkzNTA1RDYzRkI2QUZFQjQxMzAyMTEzMUQ3Q0FC
MTBGOEJDMTU3QTJEOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1aSdc+DIrptrBLilpDFmRnrmJEnw3T9jiyHYyUckWNwrymeo9Dmi
An8Y1O/z7kW2I9U0D52GN66h8PFlGtaoX8rMRAwDBNQjXfABzvQdM1519zAubX+o
1QaSpEeiw8Q2xueNUcryPYhvfI38tarMFfvCw7It+BZybGQow6+JBwE9PaZAqBAg
gAix7OSiQzZslvFa2YmzQ4nAtF/jOComWOHMeD2UtNFCAC7dAh34JTxGiG7e6CsN
M8tI5esw54s4Mqlb8HnKbGO110HSga8eIZB7FNlLTZw8T+efRLZZn+wxDxvU/NuG
W6C++TUF1j+2r+tBMCETHXyrEPi8FXotnwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FC0cM5/8fvn4f3Nsytx9hgZN35W7MB8GA1UdIwQYMBaAFLt9HmRn6GMy1uVPXcTx
FEQULzNCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlFRTloakZEd1RScHpX
bmZ5S2d3a3ZQdTQyRWQ3TVM0ZFhaaERiQmttemlkLzAvQkI3RDFFNjQ2N0U4NjMz
MkQ2RTU0RjVEQzRGMTE0NDQxNDJGMzM0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQjdEMUU2NDY3RTg2MzMyRDZFNTRGNURDNEYxMTQ0NDE0MkYz
MzQyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85RUU5aGpGRHdUUnB6V25meUtn
d2t2UHU0MkVkN01TNGRYWmhEYkJrbXppZC8wLzMxMzczNzJlMzIzMjMyMmUzMjM0
MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzMzNDMwMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAOx3vgwDQYJKoZIhvcNAQELBQADggEBADU/YiPLx8g+7J4ukSq7aYFkqrpt96OK
mOzZzGQ3f/7kgQWTDw+CRrx+wjCWg3q7vebtJG8mK6nplQXhzxcP/pm1OpoKFuMC
QHXuyK1W6qEBuU3tn+zihi9vyl/CJ0c93A+oiLF8Jm8HiME3LtekHACdCXnJ2+OO
tgf/vHizXxN/jLkeGhS6SM3qwSc7p/5yluxOutgxuu8UBX+I4+55heTQbi0lv5lD
oZRDnaODknYCnj8rlLvipqUK1VX5ZsKzHaTOtfL6OK7tgbsRmcogj8+9cIlxaEYG
SyGNiG+Xd1cGBBrTHhasivewVyBk5sWKusIbQ8sYqTc8GO4k4ynpk4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org