Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          azgtghBweiR4LW8QEUMsIvaff5X2lKpHbJ6mPCs3gCY=
Subject key identifier:   59:CB:BF:F6:DE:53:75:76:F7:56:9C:CE:BB:45:6E:64:F0:4A:C9:51
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       09FBCF73D1672C4A1EAB6122208D169BDD5B0245
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:50 +0000
ROA not before:           Thu 04 Apr 2024 00:30:50 +0000
ROA not after:            Thu 03 Apr 2025 00:35:50 +0000
asID:                     262977
IP address blocks:        177.190.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fb:cf:73:d1:67:2c:4a:1e:ab:61:22:20:8d:16:9b:dd:5b:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:50 2024 GMT
            Not After : Apr  3 00:35:50 2025 GMT
        Subject: CN=59CBBFF6DE537576F7569CCEBB456E64F04AC951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:7d:48:96:af:85:5b:9d:44:64:f3:b5:7b:
                    61:a7:cd:33:1c:9e:34:40:70:fd:25:e6:ad:52:a3:
                    ca:83:de:65:b1:f0:bc:e3:d7:30:c9:f4:3b:d0:0a:
                    ff:53:50:ba:06:92:32:63:f5:9a:76:12:dd:07:a7:
                    cc:da:08:c9:8b:7d:bd:02:e5:50:b4:4f:6c:10:3a:
                    79:7b:25:e7:de:01:c2:ba:05:54:00:cf:ac:83:44:
                    63:dc:79:d5:93:0c:b3:97:36:e7:a9:d5:27:17:f7:
                    36:bd:78:63:27:2c:9d:c3:4f:a2:3e:25:5f:e7:c7:
                    a1:4a:bb:e7:b2:fe:0d:13:a7:65:36:f3:90:f9:51:
                    90:73:b0:48:03:85:8b:e9:50:88:6e:b6:13:e4:6a:
                    d9:6f:fe:11:2f:08:e4:e9:44:cc:4b:21:0c:3f:93:
                    20:02:cc:15:a2:54:4e:43:0a:a1:8e:6e:47:4a:12:
                    8c:56:dd:96:c2:7f:26:c1:fa:86:ce:66:f8:59:86:
                    6b:9e:a7:09:e8:a2:f9:47:58:90:c4:2f:0e:11:52:
                    6a:c4:99:35:83:89:82:a0:0f:5c:21:70:ca:d2:6c:
                    f4:c5:94:3a:0d:76:23:8b:a6:82:7a:54:3b:58:0f:
                    d4:1a:fa:a5:bd:dc:3c:f9:a1:97:7a:85:e8:08:9b:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:BF:F6:DE:53:75:76:F7:56:9C:CE:BB:45:6E:64:F0:4A:C9:51
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:36:1e:da:a2:1e:d3:c5:ea:48:19:b6:21:e6:f2:53:8b:6f:
         23:79:b3:3b:51:c7:16:f7:aa:65:ec:7d:2f:85:2c:ec:46:20:
         a2:28:c7:5c:ba:10:39:12:27:28:00:97:16:b5:11:88:e4:37:
         ff:a4:bb:50:dc:e7:55:4a:1e:88:7c:96:3f:2d:e9:1f:a4:5d:
         37:e5:58:94:ff:d4:47:ad:f7:0c:73:be:7c:59:c4:eb:cc:60:
         d0:08:05:da:3b:af:28:ef:ec:47:e6:92:1b:13:4d:3d:72:bf:
         c6:a3:69:4a:26:ce:17:57:81:28:22:c5:3f:4e:c8:da:8a:47:
         9d:32:45:69:a5:52:91:ce:98:b6:ca:d1:62:e6:32:9c:ca:55:
         4b:4a:03:21:75:13:b5:4d:57:21:5e:e1:0e:d2:7d:b6:bc:22:
         80:ad:92:78:ab:b9:ad:a9:be:85:d6:0a:f3:1e:60:38:9a:29:
         22:4d:08:cd:9c:5d:9b:0f:84:ec:c8:33:a4:d0:34:20:04:73:
         26:2a:0d:c2:6a:ff:34:ae:16:a9:f3:23:e5:3c:89:7e:ad:22:
         ae:62:f1:25:ea:e0:d9:fb:72:f9:0a:32:1e:ae:bf:17:ba:08:
         85:30:cb:d0:98:23:4b:fd:ab:78:f7:a7:30:29:58:a3:b5:1a:
         43:4b:7d:ed
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCfvPc9FnLEoeq2EiII0Wm91bAkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCNkI3RUY3OTRDMTc0QzgzMUZENDg4Qzg3MkMyMUYx
MjEwMzJCMTAeFw0yNDA0MDQwMDMwNTBaFw0yNTA0MDMwMDM1NTBaMDMxMTAvBgNV
BAMTKDU5Q0JCRkY2REU1Mzc1NzZGNzU2OUNDRUJCNDU2RTY0RjA0QUM5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIn1Ilq+FW51EZPO1e2GnzTMc
njRAcP0l5q1So8qD3mWx8Lzj1zDJ9DvQCv9TULoGkjJj9Zp2Et0Hp8zaCMmLfb0C
5VC0T2wQOnl7JefeAcK6BVQAz6yDRGPcedWTDLOXNuep1ScX9za9eGMnLJ3DT6I+
JV/nx6FKu+ey/g0Tp2U285D5UZBzsEgDhYvpUIhuthPkatlv/hEvCOTpRMxLIQw/
kyACzBWiVE5DCqGObkdKEoxW3ZbCfybB+obOZvhZhmuepwnoovlHWJDELw4RUmrE
mTWDiYKgD1whcMrSbPTFlDoNdiOLpoJ6VDtYD9Qa+qW93Dz5oZd6hegIm0nzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWcu/9t5TdXb3VpzOu0VuZPBKyVEwHwYDVR0j
BBgwFoAUb7a373lMF0yDH9SIyHLCHxIQMrEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzEvNkZCNkI3RUY3OTRDMTc0QzgzMUZENDg4Qzg3MkMyMUYxMjEwMzJCMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82RkI2QjdFRjc5NEMxNzRDODMx
RkQ0ODhDODcyQzIxRjEyMTAzMkIxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzEvMzEz
NzM3MmUzMTM5MzAyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxvlQwDQYJKoZIhvcNAQELBQADggEBAFU2HtqiHtPF
6kgZtiHm8lOLbyN5sztRxxb3qmXsfS+FLOxGIKIox1y6EDkSJygAlxa1EYjkN/+k
u1Dc51VKHoh8lj8t6R+kXTflWJT/1Eet9wxzvnxZxOvMYNAIBdo7ryjv7EfmkhsT
TT1yv8ajaUomzhdXgSgixT9OyNqKR50yRWmlUpHOmLbK0WLmMpzKVUtKAyF1E7VN
VyFe4Q7Sfba8IoCtknirua2pvoXWCvMeYDiaKSJNCM2cXZsPhOzIM6TQNCAEcyYq
DcJq/zSuFqnzI+U8iX6tIq5i8SXq4Nn7cvkKMh6uvxe6CIUwy9CYI0v9q3j3pzAp
WKO1GkNLfe0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org