Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          cGju0EqPIuKWa3KDiE2Txbl2x9x2gJvP7d0zo1jgOJo=
Subject key identifier:   82:6E:2D:92:0C:E8:B8:1A:58:D4:DD:F5:2D:3C:64:01:A0:FB:3B:CE
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       17EC1B2932C15DCBBE53DE14A498B23135FD55AE
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 11:59:38 +0000
ROA not before:           Sat 17 Feb 2024 11:54:38 +0000
ROA not after:            Sat 15 Feb 2025 11:59:38 +0000
asID:                     52587
IP address blocks:        177.87.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:1b:29:32:c1:5d:cb:be:53:de:14:a4:98:b2:31:35:fd:55:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 11:54:38 2024 GMT
            Not After : Feb 15 11:59:38 2025 GMT
        Subject: CN=826E2D920CE8B81A58D4DDF52D3C6401A0FB3BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:aa:e8:de:7b:16:1b:cc:c9:27:f0:38:fc:
                    23:41:4c:2f:ce:b8:1a:1a:32:1c:96:7a:34:cd:74:
                    27:82:86:d4:f5:4b:58:28:9a:65:57:ec:04:6e:ac:
                    ab:c6:bb:23:e0:cf:a5:6c:06:4e:65:62:85:a6:ef:
                    37:71:2c:35:9f:c4:5a:54:58:ce:b5:42:88:b8:cf:
                    f4:c4:81:60:2f:61:2a:c4:4a:92:71:f2:a0:14:ae:
                    91:46:8a:9e:a7:9f:95:a0:eb:35:b4:bb:b9:98:2b:
                    ee:b5:8c:60:43:ff:33:aa:ad:e4:fc:39:ce:d5:01:
                    cd:93:29:40:19:2a:54:7d:03:3f:2e:c7:57:9d:82:
                    ef:b0:49:33:87:2d:34:d2:6c:57:16:ac:b4:d0:c3:
                    bf:ae:37:0f:55:6e:f4:2f:f0:30:c4:02:10:e5:9a:
                    9f:92:4a:7a:eb:ad:1a:a6:83:11:e4:1e:7c:21:27:
                    54:48:3e:70:23:01:6b:c9:0d:06:ec:2f:a6:07:5f:
                    42:6e:f4:3b:b0:ba:a2:08:87:39:c6:15:6c:49:05:
                    3f:c3:66:bc:c9:9c:ce:81:ee:98:22:1a:df:99:be:
                    91:d4:21:c8:37:4a:34:7f:e3:3c:b4:26:d1:aa:c1:
                    9b:f0:69:b1:4b:b5:a4:7d:68:e7:bd:61:48:27:c1:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:2D:92:0C:E8:B8:1A:58:D4:DD:F5:2D:3C:64:01:A0:FB:3B:CE
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:36:69:20:a7:10:21:68:53:43:bf:4f:56:01:20:43:e8:d2:
         31:a3:57:e3:f0:e4:d1:a8:bc:c7:f0:aa:02:82:09:92:5c:e5:
         6a:3c:5f:1d:63:a2:f6:6a:92:60:cd:fa:90:8b:b7:60:4a:44:
         ad:2f:7a:4e:ac:1a:94:9f:74:3a:3e:ff:04:3b:5a:ab:7c:d8:
         cc:d1:9d:bf:3e:4a:09:a4:73:7e:b7:30:06:89:e4:b6:78:08:
         35:bd:73:6d:9a:9b:7a:69:7b:33:97:5c:e7:7d:36:49:14:d1:
         6d:d8:9e:e1:31:f2:95:d6:c0:52:98:82:93:b0:d0:9b:22:8f:
         de:75:6e:bb:90:d2:52:01:b8:bb:e6:1b:76:9d:1c:e9:68:eb:
         c9:08:67:87:ef:69:49:79:8a:79:d0:8f:19:1e:6d:8d:6f:a3:
         22:a5:ed:38:7b:7c:b6:14:72:39:12:eb:f9:f2:31:a8:5b:8e:
         ff:86:64:70:94:ad:86:d2:98:a7:00:c0:c8:9e:b4:f8:69:20:
         84:55:89:89:f1:ae:4c:77:a7:e7:3f:0d:11:7b:c9:0c:19:fd:
         4f:03:96:c6:09:80:fb:63:ab:46:f2:24:94:db:38:8b:14:68:
         fc:04:7f:3e:60:68:69:0a:a3:19:cb:47:66:64:b5:7c:17:3e:
         56:3d:f0:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF+wbKTLBXcu+U94UpJiyMTX9Va4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg1ODhENTMxQjJGNjM3ODY2Q0E0RTIzMDg2NzcyMkRF
QTJCRTYxNzAeFw0yNDAyMTcxMTU0MzhaFw0yNTAyMTUxMTU5MzhaMDMxMTAvBgNV
BAMTKDgyNkUyRDkyMENFOEI4MUE1OEQ0RERGNTJEM0M2NDAxQTBGQjNCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC336ro3nsWG8zJJ/A4/CNBTC/O
uBoaMhyWejTNdCeChtT1S1gommVX7ARurKvGuyPgz6VsBk5lYoWm7zdxLDWfxFpU
WM61Qoi4z/TEgWAvYSrESpJx8qAUrpFGip6nn5Wg6zW0u7mYK+61jGBD/zOqreT8
Oc7VAc2TKUAZKlR9Az8ux1edgu+wSTOHLTTSbFcWrLTQw7+uNw9VbvQv8DDEAhDl
mp+SSnrrrRqmgxHkHnwhJ1RIPnAjAWvJDQbsL6YHX0Ju9DuwuqIIhznGFWxJBT/D
ZrzJnM6B7pgiGt+ZvpHUIcg3SjR/4zy0JtGqwZvwabFLtaR9aOe9YUgnwXvjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgm4tkgzouBpY1N31LTxkAaD7O84wHwYDVR0j
BBgwFoAUeFiNUxsvY3hmyk4jCGdyLeor5hcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMC83ODU4OEQ1MzFCMkY2Mzc4NjZDQTRFMjMwODY3NzIyREVBMkJFNjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4NTg4RDUzMUIyRjYzNzg2
NkNBNEUyMzA4Njc3MjJERUEyQkU2MTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzAv
MzEzNzM3MmUzODM3MmUzMjMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVfJMA0GCSqGSIb3DQEBCwUAA4IBAQACNmkgpxAh
aFNDv09WASBD6NIxo1fj8OTRqLzH8KoCggmSXOVqPF8dY6L2apJgzfqQi7dgSkSt
L3pOrBqUn3Q6Pv8EO1qrfNjM0Z2/PkoJpHN+tzAGieS2eAg1vXNtmpt6aXszl1zn
fTZJFNFt2J7hMfKV1sBSmIKTsNCbIo/edW67kNJSAbi75ht2nRzpaOvJCGeH72lJ
eYp50I8ZHm2Nb6Mipe04e3y2FHI5Euv58jGoW47/hmRwlK2G0pinAMDInrT4aSCE
VYmJ8a5Md6fnPw0Re8kMGf1PA5bGCYD7Y6tG8iSU2ziLFGj8BH8+YGhpCqMZy0dm
ZLV8Fz5WPfDv
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org