Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32332d3233203d3e20323731343634.roa
File:                     3137372e31312e3130382e302f32332d3233203d3e20323731343634.roa (raw, json)
Hash identifier:          ouzDTrvTMdINR5Sxqhq8RMUTgji1JlrrMjDeJnYmskQ=
Subject key identifier:   60:B7:CA:58:33:10:A5:B5:E6:66:D8:8D:77:C6:BE:BB:EA:78:AC:D5
Certificate issuer:       /CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
Certificate serial:       73235E8059C994B816FF3C2944BEF01579E8C18F
Authority key identifier: DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32332d3233203d3e20323731343634.roa
Signing time:             Fri 18 Mar 2022 18:56:29 +0000
ROA not before:           Fri 18 Mar 2022 18:51:29 +0000
ROA not after:            Fri 17 Mar 2023 18:56:29 +0000
asID:                     271464
IP address blocks:        177.11.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:23:5e:80:59:c9:94:b8:16:ff:3c:29:44:be:f0:15:79:e8:c1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
        Validity
            Not Before: Mar 18 18:51:29 2022 GMT
            Not After : Mar 17 18:56:29 2023 GMT
        Subject: CN=60B7CA583310A5B5E666D88D77C6BEBBEA78ACD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:b9:e0:3b:a2:b5:ed:10:21:f8:87:b1:ca:
                    d5:30:2f:a6:cf:67:b7:f2:11:e7:21:23:7c:cf:ee:
                    e7:3c:ac:9b:80:8e:0f:b7:af:47:81:19:e7:c5:cb:
                    3b:ed:e9:40:6a:d8:18:c1:18:4c:4a:84:dd:a8:21:
                    90:9c:2c:d6:9b:86:9f:2b:d6:44:17:4e:7d:9a:97:
                    3a:9a:fe:4f:35:d3:7b:a3:25:ce:1e:bf:14:c3:37:
                    e3:22:db:8e:b9:23:ba:31:b7:fa:89:4d:b4:93:d3:
                    99:49:52:c4:7b:f6:60:24:10:01:5f:b2:5c:c9:ce:
                    09:91:cc:d7:0d:3c:4a:b1:66:91:b7:52:74:61:53:
                    02:fb:01:56:58:f2:58:07:74:63:5e:99:0e:d9:eb:
                    ba:6d:03:8f:32:ab:5d:84:84:65:76:1f:8f:03:6d:
                    bb:46:a5:e3:26:fb:db:84:44:e8:e0:bc:2d:ca:7d:
                    b1:e1:6d:fd:91:e7:ba:8d:74:90:e3:0c:90:ca:68:
                    e4:09:17:81:3c:36:b8:af:05:67:6c:3e:8d:1a:54:
                    8a:88:61:1d:5d:1b:79:78:d5:c6:b6:77:ec:3b:5d:
                    0f:e6:ee:e7:e4:72:7e:78:80:aa:dc:e7:65:d8:8c:
                    c8:be:a4:72:cf:c2:9d:10:84:87:d2:40:3f:92:6d:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:CA:58:33:10:A5:B5:E6:66:D8:8D:77:C6:BE:BB:EA:78:AC:D5
            X509v3 Authority Key Identifier:
                keyid:DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32332d3233203d3e20323731343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:aa:84:9d:f8:49:3a:d9:bb:2a:a8:53:44:5e:cd:3b:ea:a3:
         f9:7b:9d:f3:87:91:c8:d1:7e:4d:02:b1:47:02:26:f5:b8:97:
         f3:b6:e5:70:4c:fa:3b:46:b7:c8:20:b5:d9:c4:ac:06:15:7b:
         c3:6a:ec:d6:9e:92:50:49:55:20:d5:72:43:24:40:1f:21:46:
         13:69:27:06:84:57:d9:71:dc:81:fb:67:81:c5:e4:08:37:a9:
         fc:97:aa:31:fa:b9:0a:98:26:80:c0:7e:1a:04:d9:ff:4f:ce:
         c9:f6:8f:5e:54:69:9c:8c:c3:83:c3:4a:db:de:f2:61:7f:8d:
         a2:5c:29:00:36:ff:e6:36:c5:07:a2:7f:bd:13:d3:dc:2b:b8:
         e3:c7:98:fe:8a:32:78:4d:87:eb:cb:05:8d:c0:a6:fd:ae:8e:
         7a:03:27:9e:1f:0f:31:b6:fe:11:18:aa:72:8c:06:60:63:12:
         52:5a:7e:d1:ea:bf:5d:a3:54:7b:ac:b1:68:49:f5:26:cb:8c:
         34:5e:a5:05:e8:a0:cb:4e:38:3b:8e:8c:e2:a4:bb:dc:40:41:
         cc:b7:98:91:29:2c:ef:c8:85:b0:17:6e:d0:75:4b:c9:6b:6b:
         79:53:ad:21:5d:d3:d5:4c:98:7a:f8:f6:f0:c4:2d:54:ae:6c:
         37:e2:c6:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcyNegFnJlLgW/zwpRL7wFXnowY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI3QTMwMENCRDI4NThGMzMzM0QxN0M5MUVCMDA3RkZF
QUVBNDlERTAeFw0yMjAzMTgxODUxMjlaFw0yMzAzMTcxODU2MjlaMDMxMTAvBgNV
BAMTKDYwQjdDQTU4MzMxMEE1QjVFNjY2RDg4RDc3QzZCRUJCRUE3OEFDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrObngO6K17RAh+IexytUwL6bP
Z7fyEechI3zP7uc8rJuAjg+3r0eBGefFyzvt6UBq2BjBGExKhN2oIZCcLNabhp8r
1kQXTn2alzqa/k8103ujJc4evxTDN+Mi2465I7oxt/qJTbST05lJUsR79mAkEAFf
slzJzgmRzNcNPEqxZpG3UnRhUwL7AVZY8lgHdGNemQ7Z67ptA48yq12EhGV2H48D
bbtGpeMm+9uEROjgvC3KfbHhbf2R57qNdJDjDJDKaOQJF4E8NrivBWdsPo0aVIqI
YR1dG3l41ca2d+w7XQ/m7ufkcn54gKrc52XYjMi+pHLPwp0QhIfSQD+SbaplAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYLfKWDMQpbXmZtiNd8a+u+p4rNUwHwYDVR0j
BBgwFoAU23owDL0oWPMzPRfJHrAH/+rqSd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU44U0Qzcml0cjlIeUhEZHFlZ05wYm9VQm13QlZvcEp5cGlTSlRWQUR4
RmkvMC9EQjdBMzAwQ0JEMjg1OEYzMzMzRDE3QzkxRUIwMDdGRkVBRUE0OURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCN0EzMDBDQkQyODU4RjMz
MzNEMTdDOTFFQjAwN0ZGRUFFQTQ5REUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOOFNEM3JpdHI5SHlIRGRxZWdOcGJvVUJtd0JWb3BKeXBpU0pUVkFEeEZpLzAv
MzEzNzM3MmUzMTMxMmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxC2wwDQYJKoZIhvcNAQELBQADggEBAKyqhJ34
STrZuyqoU0RezTvqo/l7nfOHkcjRfk0CsUcCJvW4l/O25XBM+jtGt8ggtdnErAYV
e8Nq7NaeklBJVSDVckMkQB8hRhNpJwaEV9lx3IH7Z4HF5Ag3qfyXqjH6uQqYJoDA
fhoE2f9Pzsn2j15UaZyMw4PDStve8mF/jaJcKQA2/+Y2xQeif70T09wruOPHmP6K
MnhNh+vLBY3Apv2ujnoDJ54fDzG2/hEYqnKMBmBjElJaftHqv12jVHussWhJ9SbL
jDRepQXooMtOODuOjOKku9xAQcy3mJEpLO/IhbAXbtB1S8lra3lTrSFd09VMmHr4
9vDELVSubDfixow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org