Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3233203d3e203532353634.roa
File:                     3137372e38352e3135362e302f32322d3233203d3e203532353634.roa (raw, json)
Hash identifier:          bDS8ddGVTUWq4RWOFrW5KOEGAuQOpGHeXAWX26ldrO8=
Subject key identifier:   75:E8:68:00:05:43:1D:3F:D4:D9:67:C7:1C:8C:45:92:01:AD:43:F0
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       10802F7D288F7EF4EBCA886D19784F7ECD165FA3
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3233203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:42:33 +0000
ROA not before:           Tue 31 Oct 2023 20:37:33 +0000
ROA not after:            Tue 29 Oct 2024 20:42:33 +0000
asID:                     52564
IP address blocks:        177.85.156.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:80:2f:7d:28:8f:7e:f4:eb:ca:88:6d:19:78:4f:7e:cd:16:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:37:33 2023 GMT
            Not After : Oct 29 20:42:33 2024 GMT
        Subject: CN=75E8680005431D3FD4D967C71C8C459201AD43F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:63:51:ad:b7:23:c5:4c:46:d3:01:ea:1f:
                    74:62:c5:d8:1e:0a:af:3a:3e:36:d7:83:a9:c1:a8:
                    9f:67:f4:f3:4e:67:7b:81:0e:39:80:88:65:5d:72:
                    e8:46:52:8c:cd:1b:d1:19:97:d6:44:d2:4a:63:eb:
                    92:20:f0:f1:ab:a3:e8:87:f6:1c:5e:31:fe:db:0e:
                    d8:97:db:d3:59:60:37:e6:a1:db:31:00:f6:48:20:
                    ff:5f:40:2d:35:47:44:d9:38:59:6f:f6:e6:78:67:
                    5b:be:7c:9f:f8:55:af:05:ed:39:86:e5:e3:81:1d:
                    00:81:dd:c9:5e:8b:97:74:26:89:47:44:f5:c8:d9:
                    fe:bb:70:30:ac:0f:c4:82:8f:e1:f8:45:51:d0:a6:
                    4f:02:5d:24:ae:7e:b6:40:fb:22:7c:ce:13:de:e7:
                    28:22:17:08:47:53:b8:72:8f:da:38:eb:ba:4c:46:
                    c5:bd:77:f9:de:07:c7:b0:2e:b6:b3:6e:c5:41:df:
                    c1:3a:69:b0:05:89:34:2b:db:57:3e:25:4c:a9:07:
                    21:19:6b:67:fe:59:b8:46:ec:89:5f:6c:fb:8f:d1:
                    4e:2c:75:a0:50:e3:45:58:36:af:7f:7e:59:24:41:
                    fd:89:de:c7:36:d3:2e:43:81:14:2e:f1:54:29:39:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:68:00:05:43:1D:3F:D4:D9:67:C7:1C:8C:45:92:01:AD:43:F0
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3137372e38352e3135362e302f32322d3233203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:55:15:b9:01:d7:db:97:ae:bd:bd:68:c2:42:0d:b6:c5:
         bf:d7:42:0d:b4:95:32:ca:c6:11:a8:31:bd:ee:05:a7:cf:0f:
         92:66:dc:02:5c:85:91:08:8d:4d:28:1e:02:0c:29:f2:51:fd:
         a3:c9:47:a9:39:e9:42:a5:dc:4b:f0:87:f1:f3:15:a1:a3:34:
         13:3e:83:fa:64:05:2d:53:dc:10:ef:c0:92:ee:4a:84:0c:57:
         17:50:18:35:5b:e6:48:b5:60:7d:74:7c:54:b3:f2:fb:62:94:
         45:28:79:72:b9:bb:68:ed:0e:75:94:ca:69:78:1c:a7:17:c0:
         91:30:c4:1e:b3:a6:70:5c:5d:e2:82:26:4e:dd:98:b0:24:15:
         a7:62:94:95:f9:6b:ca:64:82:79:23:75:45:cf:2e:84:50:90:
         54:20:aa:df:f4:59:06:57:4a:39:d1:42:5d:c2:96:70:5c:01:
         a1:5d:68:92:01:c3:d7:75:bb:54:7b:1f:93:a6:37:a4:4c:10:
         84:3d:2a:54:40:a7:50:b8:f4:f0:21:49:09:87:a2:1d:56:57:
         a8:b2:c5:98:c6:91:57:1d:01:3c:df:42:2d:a0:ba:cf:8e:1c:
         c7:81:a4:fb:59:7e:b4:b8:55:08:23:7a:8d:77:b8:f8:c3:d5:
         95:df:6d:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEIAvfSiPfvTryohtGXhPfs0WX6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzMDJCNEVCQzA4RDYyRDE0QzZFRDc2RjYxRDE3NjNC
QzlFRDc0ODAeFw0yMzEwMzEyMDM3MzNaFw0yNDEwMjkyMDQyMzNaMDMxMTAvBgNV
BAMTKDc1RTg2ODAwMDU0MzFEM0ZENEQ5NjdDNzFDOEM0NTkyMDFBRDQzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z2NRrbcjxUxG0wHqH3Rixdge
Cq86PjbXg6nBqJ9n9PNOZ3uBDjmAiGVdcuhGUozNG9EZl9ZE0kpj65Ig8PGro+iH
9hxeMf7bDtiX29NZYDfmodsxAPZIIP9fQC01R0TZOFlv9uZ4Z1u+fJ/4Va8F7TmG
5eOBHQCB3clei5d0JolHRPXI2f67cDCsD8SCj+H4RVHQpk8CXSSufrZA+yJ8zhPe
5ygiFwhHU7hyj9o467pMRsW9d/neB8ewLrazbsVB38E6abAFiTQr21c+JUypByEZ
a2f+WbhG7IlfbPuP0U4sdaBQ40VYNq9/flkkQf2J3sc20y5DgRQu8VQpOXrjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdehoAAVDHT/U2WfHHIxFkgGtQ/AwHwYDVR0j
BBgwFoAUbzArTrwI1i0Uxu129h0XY7ye10gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXly
QkwvMC82RjMwMkI0RUJDMDhENjJEMTRDNkVENzZGNjFEMTc2M0JDOUVENzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGMzAyQjRFQkMwOEQ2MkQx
NEM2RUQ3NkY2MUQxNzYzQkM5RUQ3NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLZFhiZ2RwRnh6MUJTdUJBMnRnbVMzTWdGU0FOWU5XV3h5ZlFFNkF5ckJMLzAv
MzEzNzM3MmUzODM1MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzNTMy
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVWcMA0GCSqGSIb3DQEBCwUAA4IBAQCfnVUVuQHX
25euvb1owkINtsW/10INtJUyysYRqDG97gWnzw+SZtwCXIWRCI1NKB4CDCnyUf2j
yUepOelCpdxL8Ifx8xWhozQTPoP6ZAUtU9wQ78CS7kqEDFcXUBg1W+ZItWB9dHxU
s/L7YpRFKHlyubto7Q51lMppeBynF8CRMMQes6ZwXF3igiZO3ZiwJBWnYpSV+WvK
ZIJ5I3VFzy6EUJBUIKrf9FkGV0o50UJdwpZwXAGhXWiSAcPXdbtUex+TpjekTBCE
PSpUQKdQuPTwIUkJh6IdVleossWYxpFXHQE830ItoLrPjhzHgaT7WX60uFUII3qN
d7j4w9WV322Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org