Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3234203d3e203238323130.roa
File:                     3137372e38352e34382e302f32312d3234203d3e203238323130.roa (raw, json)
Hash identifier:          CYFfO8CK1gyd2Nc0RwEXXv0XQEwPoKnuGsbnG84qTYw=
Subject key identifier:   F1:34:D8:15:02:54:85:2E:79:BE:0D:64:F0:3E:AD:8F:75:07:36:B2
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       2D826C73AFDB45376FAA59D27E74671C7E037A89
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:50 +0000
ROA not before:           Sat 04 Mar 2023 16:03:50 +0000
ROA not after:            Sat 02 Mar 2024 16:08:50 +0000
asID:                     28210
IP address blocks:        177.85.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:82:6c:73:af:db:45:37:6f:aa:59:d2:7e:74:67:1c:7e:03:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:50 2023 GMT
            Not After : Mar  2 16:08:50 2024 GMT
        Subject: CN=F134D8150254852E79BE0D64F03EAD8F750736B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:13:f7:95:45:a3:6f:2a:2f:9e:d5:24:df:
                    f3:3c:b7:5f:3c:65:89:4e:59:07:37:6e:e6:a9:21:
                    29:1d:c3:35:bd:e8:e6:eb:9f:11:9c:f3:29:40:49:
                    19:ea:a1:92:1c:7f:c1:31:a7:03:6f:95:c7:6c:e2:
                    97:e8:99:90:1d:5f:67:f0:19:24:37:d7:83:92:ec:
                    24:e5:f8:08:fc:c0:81:0e:1f:d5:33:9e:d9:ae:cb:
                    ca:15:7a:fa:2d:ce:c3:96:5f:80:b2:c4:27:cf:d9:
                    7a:69:be:b9:b7:b9:c4:b8:85:6c:5a:d9:5b:76:7a:
                    2d:9d:4b:4d:82:52:cd:ad:be:dc:de:65:cb:25:c7:
                    07:02:95:f4:a7:97:80:4f:a1:5e:35:54:43:c8:0a:
                    b8:50:46:7f:19:9c:dc:de:c8:72:c3:fc:d9:d9:75:
                    2b:a0:6e:ea:1d:d3:49:59:34:01:5c:4d:a1:3c:f8:
                    8d:0a:15:92:fe:a3:66:c1:77:92:b5:34:d2:14:84:
                    1d:77:55:15:d7:49:05:f3:3f:f4:e2:88:b9:3a:75:
                    44:f7:8d:99:a6:c3:6d:4a:9f:ae:6e:53:51:cf:1f:
                    cd:a6:ed:28:eb:e2:d2:45:33:e7:15:e4:88:aa:7d:
                    c7:8a:81:4c:33:ff:1d:54:7e:88:26:79:63:cd:63:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:D8:15:02:54:85:2E:79:BE:0D:64:F0:3E:AD:8F:75:07:36:B2
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:2d:3a:cc:6c:c3:e3:26:cb:29:f2:45:b0:c1:73:a3:6e:
         00:ed:3a:71:2c:43:0f:06:59:4d:ea:9c:d8:10:db:69:9b:f1:
         10:d7:90:ad:a6:33:1e:ed:bb:02:bd:44:d0:d1:d2:52:73:10:
         94:b9:d0:11:d8:3f:9d:b3:87:2c:d7:53:35:bc:e1:39:ae:29:
         43:a3:2f:db:81:6c:9e:58:a3:e9:04:da:ad:d1:09:5f:5a:50:
         ef:bf:85:79:ab:c7:43:c0:fa:f3:55:a9:12:1b:20:da:63:fd:
         c9:ab:1d:2f:72:14:0e:ba:51:96:52:1d:34:94:f5:76:ea:10:
         c4:0c:62:09:fa:8d:23:61:94:26:80:48:dd:57:8a:70:ce:1a:
         70:f9:db:a0:b2:f8:e8:42:1a:c1:11:aa:b9:67:5e:49:11:ef:
         17:70:0a:bb:9d:2c:02:e2:d7:80:5f:44:9c:c9:8d:7d:01:bf:
         1c:3c:44:f8:65:c3:8f:0d:f9:a0:0c:49:1f:25:ab:f7:7f:4c:
         7a:d2:1a:bb:8c:3d:e6:b5:eb:88:b4:36:62:4d:5e:d6:39:68:
         42:87:f9:74:07:d2:66:da:2d:02:a7:09:aa:00:af:25:73:44:
         8b:97:87:a8:74:17:06:9e:f8:c1:76:72:5e:9c:38:a6:39:af:
         fc:ac:03:27
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULYJsc6/bRTdvqlnSfnRnHH4DeokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyNkFBOTc4NkUzQ0QwRjhEQTY2MzMwNkY4OUFCMjVB
OEU4MDc2NzAeFw0yMzAzMDQxNjAzNTBaFw0yNDAzMDIxNjA4NTBaMDMxMTAvBgNV
BAMTKEYxMzREODE1MDI1NDg1MkU3OUJFMEQ2NEYwM0VBRDhGNzUwNzM2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuhP3lUWjbyovntUk3/M8t188
ZYlOWQc3buapISkdwzW96ObrnxGc8ylASRnqoZIcf8ExpwNvlcds4pfomZAdX2fw
GSQ314OS7CTl+Aj8wIEOH9Uzntmuy8oVevotzsOWX4CyxCfP2Xppvrm3ucS4hWxa
2Vt2ei2dS02CUs2tvtzeZcslxwcClfSnl4BPoV41VEPICrhQRn8ZnNzeyHLD/NnZ
dSugbuod00lZNAFcTaE8+I0KFZL+o2bBd5K1NNIUhB13VRXXSQXzP/TiiLk6dUT3
jZmmw21Kn65uU1HPH82m7Sjr4tJFM+cV5IiqfceKgUwz/x1UfogmeWPNY47HAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8TTYFQJUhS55vg1k8D6tj3UHNrIwHwYDVR0j
BBgwFoAUFCaql4bjzQ+NpmMwb4mrJajoB2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC8xNDI2QUE5Nzg2RTNDRDBGOERBNjYzMzA2Rjg5QUIyNUE4RTgwNzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0MjZBQTk3ODZFM0NEMEY4
REE2NjMzMDZGODlBQjI1QThFODA3NjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzNzM3MmUzODM1MmUzNDM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMy
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FVMDANBgkqhkiG9w0BAQsFAAOCAQEAcEwtOsxsw+Mm
yynyRbDBc6NuAO06cSxDDwZZTeqc2BDbaZvxENeQraYzHu27Ar1E0NHSUnMQlLnQ
Edg/nbOHLNdTNbzhOa4pQ6Mv24Fsnlij6QTardEJX1pQ77+FeavHQ8D681WpEhsg
2mP9yasdL3IUDrpRllIdNJT1duoQxAxiCfqNI2GUJoBI3VeKcM4acPnboLL46EIa
wRGquWdeSRHvF3AKu50sAuLXgF9EnMmNfQG/HDxE+GXDjw35oAxJHyWr939MetIa
u4w95rXriLQ2Yk1e1jloQof5dAfSZtotAqcJqgCvJXNEi5eHqHQXBp74wXZyXpw4
pjmv/KwDJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org