Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa
File:                     3137392e34322e342e302f32322d3233203d3e20323731313034.roa (raw, json)
Hash identifier:          BlZRP6gXy8N/LFQrqgnu8W4HUTiIu8IS8+zAKsg7du4=
Subject key identifier:   19:2E:16:8D:8B:D0:C3:DF:D6:DB:13:48:AD:1B:C3:CC:6E:D1:F7:D9
Certificate issuer:       /CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
Certificate serial:       69AD233A81E90EBA8810EF935A5987BCE9F1DC1B
Authority key identifier: F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa
Signing time:             Mon 22 Jan 2024 15:29:26 +0000
ROA not before:           Mon 22 Jan 2024 15:24:26 +0000
ROA not after:            Mon 20 Jan 2025 15:29:26 +0000
asID:                     271104
IP address blocks:        179.42.4.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ad:23:3a:81:e9:0e:ba:88:10:ef:93:5a:59:87:bc:e9:f1:dc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
        Validity
            Not Before: Jan 22 15:24:26 2024 GMT
            Not After : Jan 20 15:29:26 2025 GMT
        Subject: CN=192E168D8BD0C3DFD6DB1348AD1BC3CC6ED1F7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:28:fa:21:24:a6:f6:5e:b9:41:ac:92:5d:
                    f6:28:b1:8b:e7:70:e1:2d:5e:f9:ac:ad:31:37:62:
                    4d:3b:db:e3:89:17:93:e7:4d:86:f6:73:d9:7f:94:
                    03:c1:89:20:a7:10:86:93:8c:a7:52:33:22:b4:0a:
                    a7:b0:71:e1:fd:30:4c:08:35:2c:7b:ad:c1:9c:7e:
                    2b:63:57:7c:e1:44:1a:bf:b5:c8:2c:d4:a6:43:e8:
                    bd:b4:4f:24:1f:c8:3a:07:08:ac:47:9e:98:48:e2:
                    bf:93:11:33:57:70:cc:5d:b9:6f:68:76:5f:0d:15:
                    b1:9f:7e:fb:29:7a:f9:65:64:d7:ae:34:c2:9f:4d:
                    30:52:8f:4e:80:21:50:ee:d3:e3:c3:39:69:b1:6f:
                    fa:1a:11:7d:a4:c4:3b:17:e5:c8:fa:25:b8:ad:33:
                    d0:60:2b:f4:03:cc:e1:2a:ca:be:f6:41:91:fd:d9:
                    4a:f7:de:7f:eb:14:2e:d5:69:45:37:78:d6:22:dc:
                    80:f4:29:f0:c0:4d:cf:43:35:e6:48:59:3b:34:a9:
                    3a:71:2b:13:85:7f:1c:e8:18:1f:1b:59:33:d1:24:
                    aa:56:33:31:a5:f1:81:b5:3a:a3:d9:d9:68:d7:2f:
                    e9:9f:25:61:b2:53:ef:45:86:d2:59:95:33:21:a5:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2E:16:8D:8B:D0:C3:DF:D6:DB:13:48:AD:1B:C3:CC:6E:D1:F7:D9
            X509v3 Authority Key Identifier:
                keyid:F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/3137392e34322e342e302f32322d3233203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:a8:a8:2b:28:ba:bc:3e:2c:c4:77:22:17:3c:d7:8e:93:
         61:ff:19:c8:4d:c8:71:59:6f:03:e1:3b:94:7f:dd:aa:6b:9a:
         fe:6d:38:2e:10:5b:e4:58:fb:0a:57:a9:fe:b4:f6:69:ba:43:
         76:ab:a1:1e:9d:2c:1f:88:ad:c4:ce:8a:26:0d:4a:99:4d:88:
         44:38:76:24:93:ab:89:68:94:30:4d:f5:b4:2a:27:3f:9c:7c:
         45:4b:52:22:d2:10:b3:3f:01:58:9d:0a:b3:f8:e5:55:97:f7:
         42:9c:a3:13:df:54:26:fe:98:9a:41:83:fb:b2:28:72:fb:18:
         fd:06:38:a6:cc:e3:74:80:8a:03:01:f1:83:94:26:23:54:b8:
         d2:2b:ac:41:a9:ff:c4:32:66:66:2b:71:7f:e2:4f:e5:d7:a3:
         d2:5b:ff:ff:07:1c:83:77:8b:5e:e6:45:c5:5e:96:fb:85:8d:
         1d:0c:e6:52:86:a4:61:b0:79:a4:98:08:ae:ae:31:88:6a:ea:
         73:2e:e8:56:75:89:a4:65:41:e2:9d:ce:e2:bf:e1:e7:f3:72:
         03:1e:ba:25:42:62:3d:65:a6:9d:c3:a4:5f:77:6a:b8:54:9e:
         14:fc:13:b5:3b:ba:c2:b7:2d:00:79:c6:94:42:62:e2:c3:78:
         a9:46:c0:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaa0jOoHpDrqIEO+TWlmHvOnx3BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMjc3RDVEMUZBOEEwQkJFRUE0NzM0Q0Q2MDE0OUU2
REE2MEI1MDAeFw0yNDAxMjIxNTI0MjZaFw0yNTAxMjAxNTI5MjZaMDMxMTAvBgNV
BAMTKDE5MkUxNjhEOEJEMEMzREZENkRCMTM0OEFEMUJDM0NDNkVEMUY3RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLyj6ISSm9l65QaySXfYosYvn
cOEtXvmsrTE3Yk072+OJF5PnTYb2c9l/lAPBiSCnEIaTjKdSMyK0CqewceH9MEwI
NSx7rcGcfitjV3zhRBq/tcgs1KZD6L20TyQfyDoHCKxHnphI4r+TETNXcMxduW9o
dl8NFbGffvspevllZNeuNMKfTTBSj06AIVDu0+PDOWmxb/oaEX2kxDsX5cj6Jbit
M9BgK/QDzOEqyr72QZH92Ur33n/rFC7VaUU3eNYi3ID0KfDATc9DNeZIWTs0qTpx
KxOFfxzoGB8bWTPRJKpWMzGl8YG1OqPZ2WjXL+mfJWGyU+9FhtJZlTMhpaOtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGS4WjYvQw9/W2xNIrRvDzG7R99kwHwYDVR0j
BBgwFoAU+OJ31dH6igu+6kc0zWAUnm2mC1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZLRUh5OFIzVHFOSmk3cVBkb0V0d05xcFVnRFU0WFE4cmRBZEpyMWFT
NzIvMS9GOEUyNzdENUQxRkE4QTBCQkVFQTQ3MzRDRDYwMTQ5RTZEQTYwQjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4RTI3N0Q1RDFGQThBMEJC
RUVBNDczNENENjAxNDlFNkRBNjBCNTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2S0VIeThSM1RxTkppN3FQZG9FdHdOcXBVZ0RVNFhROHJkQWRKcjFhUzcyLzEv
MzEzNzM5MmUzNDMyMmUzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzczMTMx
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMqBDANBgkqhkiG9w0BAQsFAAOCAQEAc7ioqCsourw+
LMR3Ihc8146TYf8ZyE3IcVlvA+E7lH/dqmua/m04LhBb5Fj7Clep/rT2abpDdquh
Hp0sH4itxM6KJg1KmU2IRDh2JJOriWiUME31tConP5x8RUtSItIQsz8BWJ0Ks/jl
VZf3QpyjE99UJv6YmkGD+7IocvsY/QY4pszjdICKAwHxg5QmI1S40iusQan/xDJm
Zitxf+JP5dej0lv//wccg3eLXuZFxV6W+4WNHQzmUoakYbB5pJgIrq4xiGrqcy7o
VnWJpGVB4p3O4r/h5/NyAx66JUJiPWWmncOkX3dquFSeFPwTtTu6wrctAHnGlEJi
4sN4qUbA2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org