Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa
File:                     3137372e3132362e382e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          4b2eKqdkCcybncsKVR5OiiuZ7efgJC42NDkKARHsyI4=
Subject key identifier:   4D:4A:54:9C:63:D1:5C:CF:84:A5:E8:4A:1A:00:71:8F:FE:6D:16:68
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       1370C2AD7E35F2DA3965A27F3D604B1A7C2DB6FD
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:35:57 +0000
ROA not before:           Wed 10 Jan 2024 17:30:57 +0000
ROA not after:            Wed 08 Jan 2025 17:35:57 +0000
asID:                     265303
IP address blocks:        177.126.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:70:c2:ad:7e:35:f2:da:39:65:a2:7f:3d:60:4b:1a:7c:2d:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:30:57 2024 GMT
            Not After : Jan  8 17:35:57 2025 GMT
        Subject: CN=4D4A549C63D15CCF84A5E84A1A00718FFE6D1668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:84:57:6b:fe:d4:ce:a4:22:45:31:73:26:
                    ea:0e:a0:12:46:cc:19:93:a1:19:40:01:c1:5d:ec:
                    34:74:58:76:33:39:48:6d:cc:86:38:a8:b4:3b:5e:
                    73:c3:63:a0:a8:eb:d3:9e:e1:32:c7:c1:0f:3a:cc:
                    78:32:61:17:8b:3a:b4:16:80:5d:e7:a8:f0:0f:cb:
                    c7:97:8a:33:04:6e:d0:af:ba:71:f9:ed:06:58:85:
                    6a:5c:67:6a:0e:44:e2:c7:0f:8f:1d:65:7e:1a:f4:
                    a0:1f:bc:08:21:0d:ee:49:80:86:f9:16:dc:1d:99:
                    85:68:4c:c7:15:ca:a6:c8:59:43:b4:83:96:49:3c:
                    d6:ef:f8:36:fb:04:26:19:35:73:c7:d5:fb:a7:bc:
                    a4:00:d8:62:7f:e2:50:35:25:39:61:2c:5a:ba:be:
                    d0:e4:2b:6c:e0:54:c1:aa:87:d9:d1:05:75:f4:34:
                    83:a9:3d:ac:00:0d:f1:81:72:28:23:a8:d8:da:10:
                    af:77:59:92:4d:e9:66:97:ab:87:44:e7:2a:14:b4:
                    18:9b:84:cb:16:c9:82:db:c5:c6:f3:78:a1:7a:cb:
                    90:14:b9:f0:e6:a2:1c:c6:fa:29:a3:cb:38:85:75:
                    a7:95:e5:d3:98:29:c7:9e:49:18:2c:64:f3:88:4f:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4A:54:9C:63:D1:5C:CF:84:A5:E8:4A:1A:00:71:8F:FE:6D:16:68
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e382e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:cf:27:ce:f7:18:60:61:ba:fb:21:3e:c9:17:23:cb:c1:
         81:21:7e:19:19:54:0d:6d:64:d2:f6:23:bd:a6:fe:99:20:60:
         60:d5:e1:e2:1d:03:f9:bb:42:be:bd:8f:7f:b3:0d:54:52:22:
         fb:9a:24:64:32:09:b5:fb:ae:08:1d:b6:ad:b2:c2:d7:44:1b:
         20:0e:6d:0f:86:38:e6:d2:51:ab:60:03:85:ca:ae:e9:b1:c2:
         bd:96:22:05:8e:81:dd:24:41:6e:ce:2a:ab:c3:67:2f:e3:10:
         00:73:1c:d1:16:5d:95:8d:56:25:e3:35:7c:8f:0c:5b:9c:d7:
         06:c1:49:5e:57:ec:7d:ab:d1:87:ba:40:0a:c1:16:c2:e3:e1:
         7a:b8:c0:66:d7:e4:f5:34:3a:34:ad:fc:d2:0c:00:6b:9e:4e:
         4e:89:cb:b1:1c:e0:4a:8f:02:a7:43:f9:06:b3:68:f2:a5:e1:
         8c:f8:60:eb:78:db:51:85:64:b5:da:dc:5e:fc:82:b0:2d:31:
         80:2b:8a:4b:6e:36:d6:20:c2:a2:b9:92:34:3e:c3:73:f5:dc:
         4b:df:7f:44:b3:07:75:6c:b8:40:af:7d:8a:57:ef:31:0d:f4:
         de:a2:2b:33:b8:18:6e:1b:67:2f:ae:a9:f1:e2:6f:09:77:15:
         25:40:43:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE3DCrX418to5ZaJ/PWBLGnwttv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzNjQzNDE1RDREQ0Q0Q0QwREQ0RTQxMUQxQTI2MUZG
NDdBNUJERTAeFw0yNDAxMTAxNzMwNTdaFw0yNTAxMDgxNzM1NTdaMDMxMTAvBgNV
BAMTKDRENEE1NDlDNjNEMTVDQ0Y4NEE1RTg0QTFBMDA3MThGRkU2RDE2NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb8IRXa/7UzqQiRTFzJuoOoBJG
zBmToRlAAcFd7DR0WHYzOUhtzIY4qLQ7XnPDY6Co69Oe4TLHwQ86zHgyYReLOrQW
gF3nqPAPy8eXijMEbtCvunH57QZYhWpcZ2oOROLHD48dZX4a9KAfvAghDe5JgIb5
FtwdmYVoTMcVyqbIWUO0g5ZJPNbv+Db7BCYZNXPH1funvKQA2GJ/4lA1JTlhLFq6
vtDkK2zgVMGqh9nRBXX0NIOpPawADfGBcigjqNjaEK93WZJN6WaXq4dE5yoUtBib
hMsWyYLbxcbzeKF6y5AUufDmohzG+imjyziFdaeV5dOYKceeSRgsZPOITzPhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTUpUnGPRXM+EpehKGgBxj/5tFmgwHwYDVR0j
BBgwFoAURDZDQV1NzUzQ3U5BHRomH/R6W94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW43RnZEM1F4UExFWHM4SHBnV1V1cEhxQmhQVnNKR0tIOEdFa1JwVnB0
N1gvMC80NDM2NDM0MTVENERDRDRDRDBERDRFNDExRDFBMjYxRkY0N0E1QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0MzY0MzQxNUQ0RENENENE
MERENEU0MTFEMUEyNjFGRjQ3QTVCREUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluN0Z2RDNReFBMRVhzOEhwZ1dVdXBIcUJoUFZzSkdLSDhHRWtScFZwdDdYLzAv
MzEzNzM3MmUzMTMyMzYyZTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzMzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4IMA0GCSqGSIb3DQEBCwUAA4IBAQCk888nzvcY
YGG6+yE+yRcjy8GBIX4ZGVQNbWTS9iO9pv6ZIGBg1eHiHQP5u0K+vY9/sw1UUiL7
miRkMgm1+64IHbatssLXRBsgDm0Phjjm0lGrYAOFyq7pscK9liIFjoHdJEFuziqr
w2cv4xAAcxzRFl2VjVYl4zV8jwxbnNcGwUleV+x9q9GHukAKwRbC4+F6uMBm1+T1
NDo0rfzSDABrnk5OicuxHOBKjwKnQ/kGs2jypeGM+GDreNtRhWS12txe/IKwLTGA
K4pLbjbWIMKiuZI0PsNz9dxL339Eswd1bLhAr32KV+8xDfTeoiszuBhuG2cvrqnx
4m8JdxUlQEPD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org