Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38372e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38372e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          wmY2nGIah9whu08Kvsr/g57Skg+MZgWSdT9XZp8umcE=
Subject key identifier:   7B:82:89:D3:B0:61:4C:29:5B:AF:2F:52:06:7E:79:28:69:F1:B5:52
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       512A53B8006FD2FAB5ABA035CAA3F72F37B1B49C
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38372e302f32342d3234203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:48 +0000
ROA not before:           Thu 04 Apr 2024 00:30:48 +0000
ROA not after:            Thu 03 Apr 2025 00:35:48 +0000
asID:                     262977
IP address blocks:        177.190.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2a:53:b8:00:6f:d2:fa:b5:ab:a0:35:ca:a3:f7:2f:37:b1:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:48 2024 GMT
            Not After : Apr  3 00:35:48 2025 GMT
        Subject: CN=7B8289D3B0614C295BAF2F52067E792869F1B552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:b5:7d:d1:6c:42:3d:ec:16:a5:2d:3b:2b:
                    87:2b:92:09:fd:65:af:9e:6a:ce:59:a7:61:c2:ab:
                    41:88:1f:ec:7f:8a:05:64:67:b6:73:df:7c:6b:8d:
                    a1:76:d4:38:38:50:bf:ce:8e:46:70:a1:5d:c5:24:
                    3a:25:4d:d8:60:bc:32:f2:4b:2e:81:10:48:c5:33:
                    09:85:ee:b2:b1:c5:b3:ec:c2:ad:14:1c:d9:11:cf:
                    54:7f:18:8a:d1:6d:2a:c7:a2:49:ba:30:ae:a3:6d:
                    49:6b:43:dc:0d:7a:94:e3:8d:6b:8a:1a:e0:79:c2:
                    26:ae:6c:e9:b0:2d:80:e8:75:7a:b4:e7:1a:38:90:
                    db:39:04:3d:5d:fa:3e:5b:f4:9c:09:9e:46:7d:f9:
                    89:96:74:13:0b:48:ea:d2:52:8b:14:25:05:bb:93:
                    eb:f1:df:a3:11:2d:0d:74:ad:9e:7c:c5:ef:7f:dd:
                    ec:cd:6c:b4:e1:4f:94:5e:c6:8a:3b:06:c8:bb:56:
                    f7:83:98:69:9d:c5:e5:43:4c:5c:e1:f3:a3:21:b2:
                    0a:3b:bd:21:81:6e:4c:3e:dc:16:ff:fe:d1:af:67:
                    95:c5:ca:50:3b:dd:9f:a1:e5:9a:40:7d:e8:ea:d4:
                    5d:fa:09:e8:ec:26:96:41:a7:27:b0:09:55:08:40:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:89:D3:B0:61:4C:29:5B:AF:2F:52:06:7E:79:28:69:F1:B5:52
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38372e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:52:ff:bc:27:ec:9e:e1:26:1e:0e:67:01:75:ac:86:8d:
         a9:f8:9b:af:b6:85:0d:01:1a:73:bc:ca:8a:35:2d:a7:b0:9c:
         ea:4b:13:3c:b2:80:01:bd:dd:ab:ae:1d:5a:5b:3f:28:1d:28:
         15:be:26:1e:20:78:ac:32:75:be:75:7e:33:66:76:44:20:85:
         34:98:00:55:4d:dc:27:15:91:16:82:de:de:86:13:39:0a:2b:
         4b:dc:24:70:c8:f0:ed:b0:ea:cd:3b:62:e0:f7:4c:41:64:7e:
         a8:1c:e9:73:59:08:b4:2f:23:29:c7:12:0e:fb:49:4e:f3:0e:
         ff:e7:11:1c:88:db:cd:f1:49:9e:c6:5e:51:fb:29:5e:c4:ea:
         0c:30:3b:2d:b2:8f:b7:99:08:6a:ff:3e:54:08:2f:71:30:08:
         f7:3b:31:bf:34:39:86:dc:0f:37:2d:ff:61:eb:62:40:6a:b9:
         2c:2d:3c:46:7b:2c:06:23:30:34:08:28:43:eb:11:8d:8c:21:
         78:6c:6a:89:8c:89:b9:61:c0:ba:1b:c0:a3:bf:a3:69:ff:e9:
         92:a8:a9:e0:85:ce:c9:99:ea:c5:1a:24:e3:8d:25:bd:5c:5e:
         43:66:8f:6f:6a:48:23:45:b5:c0:15:36:1b:32:5c:3a:6c:1c:
         07:f3:66:bc
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUSpTuABv0vq1q6A1yqP3LzextJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCNkI3RUY3OTRDMTc0QzgzMUZENDg4Qzg3MkMyMUYx
MjEwMzJCMTAeFw0yNDA0MDQwMDMwNDhaFw0yNTA0MDMwMDM1NDhaMDMxMTAvBgNV
BAMTKDdCODI4OUQzQjA2MTRDMjk1QkFGMkY1MjA2N0U3OTI4NjlGMUI1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmG7V90WxCPewWpS07K4crkgn9
Za+eas5Zp2HCq0GIH+x/igVkZ7Zz33xrjaF21Dg4UL/OjkZwoV3FJDolTdhgvDLy
Sy6BEEjFMwmF7rKxxbPswq0UHNkRz1R/GIrRbSrHokm6MK6jbUlrQ9wNepTjjWuK
GuB5wiaubOmwLYDodXq05xo4kNs5BD1d+j5b9JwJnkZ9+YmWdBMLSOrSUosUJQW7
k+vx36MRLQ10rZ58xe9/3ezNbLThT5Rexoo7Bsi7VveDmGmdxeVDTFzh86Mhsgo7
vSGBbkw+3Bb//tGvZ5XFylA73Z+h5ZpAfejq1F36CejsJpZBpyewCVUIQEFnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUe4KJ07BhTClbry9SBn55KGnxtVIwHwYDVR0j
BBgwFoAUb7a373lMF0yDH9SIyHLCHxIQMrEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzEvNkZCNkI3RUY3OTRDMTc0QzgzMUZENDg4Qzg3MkMyMUYxMjEwMzJCMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82RkI2QjdFRjc5NEMxNzRDODMx
RkQ0ODhDODcyQzIxRjEyMTAzMkIxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzEvMzEz
NzM3MmUzMTM5MzAyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxvlcwDQYJKoZIhvcNAQELBQADggEBAH+gUv+8J+ye
4SYeDmcBdayGjan4m6+2hQ0BGnO8yoo1LaewnOpLEzyygAG93auuHVpbPygdKBW+
Jh4geKwydb51fjNmdkQghTSYAFVN3CcVkRaC3t6GEzkKK0vcJHDI8O2w6s07YuD3
TEFkfqgc6XNZCLQvIynHEg77SU7zDv/nERyI283xSZ7GXlH7KV7E6gwwOy2yj7eZ
CGr/PlQIL3EwCPc7Mb80OYbcDzct/2HrYkBquSwtPEZ7LAYjMDQIKEPrEY2MIXhs
aomMiblhwLobwKO/o2n/6ZKoqeCFzsmZ6sUaJOONJb1cXkNmj29qSCNFtcAVNhsy
XDpsHAfzZrw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org