Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
File:                     3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa (raw, json)
Hash identifier:          cNMUDeQWDhv6Ro2yc7ZwBQk9JNFsJWM0TrHFiE+QT2o=
Subject key identifier:   CB:C7:35:DF:29:6E:78:4A:41:E7:81:0F:37:97:06:B3:DC:9A:42:57
Certificate issuer:       /CN=BB3CC1D35CE466F9158D5E711B7A6D990160050C
Certificate serial:       63B27BE33BB7E615DBF11DACEE3F285F2FBEFD94
Authority key identifier: BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa
Signing time:             Mon 30 Oct 2023 15:23:58 +0000
ROA not before:           Mon 30 Oct 2023 15:18:58 +0000
ROA not after:            Mon 28 Oct 2024 15:23:58 +0000
asID:                     262606
IP address blocks:        177.101.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:7b:e3:3b:b7:e6:15:db:f1:1d:ac:ee:3f:28:5f:2f:be:fd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB3CC1D35CE466F9158D5E711B7A6D990160050C
        Validity
            Not Before: Oct 30 15:18:58 2023 GMT
            Not After : Oct 28 15:23:58 2024 GMT
        Subject: CN=CBC735DF296E784A41E7810F379706B3DC9A4257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:97:f1:b0:4c:95:bb:84:19:f0:20:b0:6f:
                    52:f9:7f:10:e2:11:7c:3f:c2:ff:b3:a3:5c:e7:48:
                    2d:69:49:ac:06:37:45:2e:65:75:38:70:7f:22:ca:
                    92:70:d1:6b:e6:c3:c3:36:90:14:d2:51:99:6c:d6:
                    82:dc:e8:e6:7f:7b:0a:c3:70:2b:c0:2f:c1:71:1f:
                    50:20:2a:85:16:7f:28:a4:6c:3c:26:3b:ec:a7:fa:
                    2f:8f:08:2e:2d:67:4e:fe:cf:59:e3:f1:39:2a:91:
                    de:9c:5f:42:c8:4c:e4:42:56:6c:5c:c4:ed:a1:35:
                    01:ba:17:17:55:7e:1e:57:2b:ab:c3:62:17:63:da:
                    2a:4e:be:8f:13:3f:c2:29:c4:ac:aa:5a:dc:bc:bc:
                    f0:17:4d:b1:7e:6e:a5:ae:ee:eb:ff:b4:2d:8d:8e:
                    5d:0e:4f:9f:51:04:34:9b:1b:93:63:70:57:18:6d:
                    69:95:a1:a2:57:36:95:a4:dd:8f:84:78:64:62:f9:
                    83:cf:6f:b1:d0:09:0a:50:74:7e:95:57:90:11:90:
                    54:87:d7:a3:1f:09:c3:81:ed:58:16:50:71:dc:26:
                    83:77:ae:ab:a4:9d:8a:66:55:af:03:1d:35:68:3a:
                    02:e8:ab:61:38:96:cc:7d:ee:ee:cb:3d:9b:09:0f:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:35:DF:29:6E:78:4A:41:E7:81:0F:37:97:06:B3:DC:9A:42:57
            X509v3 Authority Key Identifier:
                keyid:BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/BB3CC1D35CE466F9158D5E711B7A6D990160050C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:8c:25:1b:1a:81:9c:52:30:3a:98:0b:9b:b4:12:c7:04:
         84:2e:c7:3a:65:ba:1b:7e:40:6e:e9:33:5e:95:ef:45:05:7b:
         ea:2c:44:bc:57:74:6a:b2:20:46:79:80:0d:18:85:61:4f:ed:
         24:a3:63:a7:44:93:7d:b3:55:83:eb:71:a5:7a:ee:c8:de:16:
         fb:04:5b:82:3f:b5:72:ab:5b:5a:ce:fb:22:2e:40:25:d8:a4:
         ff:50:f9:25:9a:ad:87:30:bf:7e:96:3a:d2:cb:9d:a1:58:df:
         e0:17:8e:7e:74:75:fc:94:20:dc:9b:27:63:4a:46:79:34:b9:
         df:89:db:f3:bf:a9:70:bf:c9:89:dc:7a:6c:e8:2c:ad:a2:96:
         c8:fd:9a:52:61:1e:da:81:e6:ae:61:43:a8:fe:a7:fa:8d:0a:
         e0:2b:12:92:83:b1:6d:07:fa:3f:ae:6a:15:9d:f1:6d:75:3a:
         0e:00:aa:8a:e4:3f:68:97:95:39:96:c1:06:46:2c:a8:0f:05:
         42:21:05:0f:32:cc:b4:57:03:2b:4f:72:67:fa:a0:d8:cd:86:
         e4:3f:5b:d2:72:a5:0a:14:6c:02:cc:e1:60:16:5f:8f:75:23:
         d6:68:28:35:a2:6f:ef:bb:51:aa:63:ba:63:5c:a2:30:52:bd:
         a4:1e:20:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY7J74zu35hXb8R2s7j8oXy++/ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIzQ0MxRDM1Q0U0NjZGOTE1OEQ1RTcxMUI3QTZEOTkw
MTYwMDUwQzAeFw0yMzEwMzAxNTE4NThaFw0yNDEwMjgxNTIzNThaMDMxMTAvBgNV
BAMTKENCQzczNURGMjk2RTc4NEE0MUU3ODEwRjM3OTcwNkIzREM5QTQyNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72JfxsEyVu4QZ8CCwb1L5fxDi
EXw/wv+zo1znSC1pSawGN0UuZXU4cH8iypJw0Wvmw8M2kBTSUZls1oLc6OZ/ewrD
cCvAL8FxH1AgKoUWfyikbDwmO+yn+i+PCC4tZ07+z1nj8Tkqkd6cX0LITORCVmxc
xO2hNQG6FxdVfh5XK6vDYhdj2ipOvo8TP8IpxKyqWty8vPAXTbF+bqWu7uv/tC2N
jl0OT59RBDSbG5NjcFcYbWmVoaJXNpWk3Y+EeGRi+YPPb7HQCQpQdH6VV5ARkFSH
16MfCcOB7VgWUHHcJoN3rquknYpmVa8DHTVoOgLoq2E4lsx97u7LPZsJD7vbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy8c13ylueEpB54EPN5cGs9yaQlcwHwYDVR0j
BBgwFoAUuzzB01zkZvkVjV5xG3ptmQFgBQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJKdGUxSGNoY0N2Z0pQcDg4d3FVM0hCZnF5Y0xNNTgzd3VSekhVTHE0
RGQvMS9CQjNDQzFEMzVDRTQ2NkY5MTU4RDVFNzExQjdBNkQ5OTAxNjAwNTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCM0NDMUQzNUNFNDY2Rjkx
NThENUU3MTFCN0E2RDk5MDE2MDA1MEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSSnRlMUhjaGNDdmdKUHA4OHdxVTNIQmZxeWNMTTU4M3d1UnpIVUxxNERkLzEv
MzEzNzM3MmUzMTMwMzEyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxZSAwDQYJKoZIhvcNAQELBQADggEBAFSljCUb
GoGcUjA6mAubtBLHBIQuxzpluht+QG7pM16V70UFe+osRLxXdGqyIEZ5gA0YhWFP
7SSjY6dEk32zVYPrcaV67sjeFvsEW4I/tXKrW1rO+yIuQCXYpP9Q+SWarYcwv36W
OtLLnaFY3+AXjn50dfyUINybJ2NKRnk0ud+J2/O/qXC/yYncemzoLK2ilsj9mlJh
HtqB5q5hQ6j+p/qNCuArEpKDsW0H+j+uahWd8W11Og4AqorkP2iXlTmWwQZGLKgP
BUIhBQ8yzLRXAytPcmf6oNjNhuQ/W9JypQoUbALM4WAWX491I9ZoKDWib++7Uapj
umNcojBSvaQeIKU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org