Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3234203d3e203238313938.roa
File:                     3137372e36362e34382e302f32312d3234203d3e203238313938.roa (raw, json)
Hash identifier:          JgaOCdSyNwSztkEqTsrXqohf6o4iwo5mUWbTI/fBI4A=
Subject key identifier:   10:EA:02:E0:83:27:EC:B6:5E:87:8C:C1:C4:3F:00:97:2D:05:73:50
Certificate issuer:       /CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
Certificate serial:       443ECD92DD38CC2796C0A846AF7D696B11BFD6DA
Authority key identifier: 39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3234203d3e203238313938.roa
Signing time:             Fri 14 Oct 2022 17:47:40 +0000
ROA not before:           Fri 14 Oct 2022 17:42:40 +0000
ROA not after:            Fri 13 Oct 2023 17:47:40 +0000
asID:                     28198
IP address blocks:        177.66.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:cd:92:dd:38:cc:27:96:c0:a8:46:af:7d:69:6b:11:bf:d6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
        Validity
            Not Before: Oct 14 17:42:40 2022 GMT
            Not After : Oct 13 17:47:40 2023 GMT
        Subject: CN=10EA02E08327ECB65E878CC1C43F00972D057350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:aa:b9:af:dd:5c:a6:45:fd:fd:17:b9:b1:
                    49:38:44:1a:46:78:b7:7a:95:28:73:17:50:3d:59:
                    61:2d:4d:74:c1:61:2c:2e:40:e2:94:ec:ab:74:3b:
                    3a:42:61:28:f7:b6:21:c3:3c:ce:13:c8:d0:8f:5e:
                    92:65:a1:76:37:1a:2a:22:de:dc:61:16:88:87:da:
                    00:6a:78:d5:0f:23:eb:aa:27:01:ab:d0:a8:8b:d3:
                    6a:6b:d6:da:10:68:2b:e1:9e:f0:dc:43:05:b6:c8:
                    16:dd:ac:7b:42:b8:d7:8e:6e:ad:20:42:ed:4f:62:
                    09:15:09:15:08:7f:d5:76:05:ed:d2:dd:dd:27:b8:
                    19:df:16:cf:86:3f:f8:a4:41:27:55:76:3c:95:82:
                    a1:6a:cc:a9:ef:cf:63:15:59:b6:07:94:77:00:10:
                    6f:b0:15:04:67:70:5d:76:59:5c:ec:f7:0b:d5:70:
                    2c:a7:3b:64:e2:05:ff:04:43:1b:7a:71:21:a4:2f:
                    49:8f:f5:b1:b1:28:da:39:61:c6:1c:0a:56:06:d7:
                    d1:cb:4d:aa:d9:08:ab:82:e7:c4:68:8d:81:68:80:
                    f4:74:84:20:87:a0:1d:04:38:4f:84:50:a6:f3:9e:
                    77:1d:5d:77:a9:08:dc:e3:49:e2:9d:75:d7:b9:f2:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EA:02:E0:83:27:EC:B6:5E:87:8C:C1:C4:3F:00:97:2D:05:73:50
            X509v3 Authority Key Identifier:
                keyid:39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:34:0f:f3:b2:0e:88:22:66:67:e0:26:10:de:16:b1:ea:60:
         f1:46:a5:e2:65:8b:48:62:1c:1c:5d:cb:ad:92:db:ec:44:f3:
         54:92:71:9e:7c:db:ae:91:92:99:f3:2d:0a:78:14:09:a4:0b:
         e2:37:27:1c:ea:b8:c4:b8:c8:c0:e4:a3:ef:8f:22:06:68:49:
         9d:0d:b0:46:cf:c2:7c:fd:ed:68:93:36:c4:44:2a:ab:ec:71:
         f0:4d:32:cf:3c:50:fd:a8:35:50:d9:64:fd:c5:fd:67:f3:00:
         ed:91:4e:91:36:89:3b:de:4a:3c:d0:cb:8b:ea:ec:92:9d:21:
         d0:ce:24:aa:9e:de:4e:45:f9:a3:d5:f6:8c:cd:98:34:51:e2:
         4b:e8:68:b2:4d:b4:3f:e5:b6:77:c2:bb:c1:10:6b:d2:0e:20:
         ac:53:12:ad:aa:ec:ea:b3:20:b0:be:bc:59:07:c1:49:8b:3f:
         33:a7:0e:1e:57:1d:0d:fb:49:aa:00:03:49:2e:b0:b2:bc:54:
         12:65:1e:d3:c8:48:88:76:52:00:67:ac:f8:bc:07:02:87:ea:
         b2:d6:e2:74:e7:2f:03:43:6a:74:35:89:55:76:52:21:65:8f:
         45:e6:df:cb:4c:53:76:a5:e1:e7:05:e7:84:7f:bc:63:4e:4c:
         3a:d9:08:da
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURD7Nkt04zCeWwKhGr31paxG/1towDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5RUY2NUFFMEJGN0IzMEQ3NTRFNEVCMjQ4MzI2QTdB
NDQyOEMzMzAeFw0yMjEwMTQxNzQyNDBaFw0yMzEwMTMxNzQ3NDBaMDMxMTAvBgNV
BAMTKDEwRUEwMkUwODMyN0VDQjY1RTg3OENDMUM0M0YwMDk3MkQwNTczNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9D6q5r91cpkX9/Re5sUk4RBpG
eLd6lShzF1A9WWEtTXTBYSwuQOKU7Kt0OzpCYSj3tiHDPM4TyNCPXpJloXY3Gioi
3txhFoiH2gBqeNUPI+uqJwGr0KiL02pr1toQaCvhnvDcQwW2yBbdrHtCuNeObq0g
Qu1PYgkVCRUIf9V2Be3S3d0nuBnfFs+GP/ikQSdVdjyVgqFqzKnvz2MVWbYHlHcA
EG+wFQRncF12WVzs9wvVcCynO2TiBf8EQxt6cSGkL0mP9bGxKNo5YcYcClYG19HL
TarZCKuC58RojYFogPR0hCCHoB0EOE+EUKbznncdXXepCNzjSeKddde58oODAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEOoC4IMn7LZeh4zBxD8Aly0Fc1AwHwYDVR0j
BBgwFoAUOZ72WuC/ezDXVOTrJIMmp6RCjDMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC8zOTlFRjY1QUUwQkY3QjMwRDc1NEU0RUIyNDgzMjZBN0E0NDI4QzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5OUVGNjVBRTBCRjdCMzBE
NzU0RTRFQjI0ODMyNkE3QTQ0MjhDMzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzM3MmUzNjM2MmUzNDM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMx
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FCMDANBgkqhkiG9w0BAQsFAAOCAQEAgzQP87IOiCJm
Z+AmEN4Wsepg8Ual4mWLSGIcHF3LrZLb7ETzVJJxnnzbrpGSmfMtCngUCaQL4jcn
HOq4xLjIwOSj748iBmhJnQ2wRs/CfP3taJM2xEQqq+xx8E0yzzxQ/ag1UNlk/cX9
Z/MA7ZFOkTaJO95KPNDLi+rskp0h0M4kqp7eTkX5o9X2jM2YNFHiS+hosk20P+W2
d8K7wRBr0g4grFMSrars6rMgsL68WQfBSYs/M6cOHlcdDftJqgADSS6wsrxUEmUe
08hIiHZSAGes+LwHAofqstbidOcvA0NqdDWJVXZSIWWPRebfy0xTdqXh5wXnhH+8
Y05MOtkI2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org