Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3234203d3e203238313938.roa
File:                     3137372e36372e382e302f32312d3234203d3e203238313938.roa (raw, json)
Hash identifier:          TFoJcd+IohTKYBue8UgCHRl3hmGxXt8KhUgVTRCf4is=
Subject key identifier:   15:0A:4A:3B:EE:85:E4:00:79:CD:BE:F3:55:4A:0F:20:82:E4:77:5A
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       75528C4E3A97F7D382C5824BEBE6CD79B42E3EF3
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:24:04 +0000
ROA not before:           Mon 21 Aug 2023 20:19:04 +0000
ROA not after:            Mon 19 Aug 2024 20:24:04 +0000
asID:                     28198
IP address blocks:        177.67.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:8c:4e:3a:97:f7:d3:82:c5:82:4b:eb:e6:cd:79:b4:2e:3e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:19:04 2023 GMT
            Not After : Aug 19 20:24:04 2024 GMT
        Subject: CN=150A4A3BEE85E40079CDBEF3554A0F2082E4775A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:de:e6:28:12:47:d0:50:49:94:8b:e5:03:1b:
                    c6:3a:dc:b7:f7:71:1f:f3:d3:03:a9:6c:38:58:66:
                    05:87:f1:0a:ba:d9:62:96:a5:2b:4f:e0:de:ab:b9:
                    74:fd:53:b6:60:8e:d0:db:27:b8:fb:6b:63:df:6e:
                    b3:c4:f9:9c:ff:90:76:bb:6d:96:6b:0e:06:03:a6:
                    47:be:5f:d3:aa:ed:35:fa:e3:58:51:cf:8d:a7:a9:
                    7e:7f:ee:e1:eb:a5:fb:d0:b6:b4:28:85:ba:13:21:
                    50:09:8f:89:db:c1:17:96:a8:b1:63:d3:b3:5e:8d:
                    a2:8e:25:d9:67:2c:c2:fd:ad:54:43:22:05:93:e1:
                    e0:60:f2:ff:ba:4e:2d:fe:03:e7:9a:a6:2b:46:78:
                    1b:06:53:32:86:43:7b:47:fc:93:b0:cd:c2:8b:57:
                    43:87:a1:43:cd:c5:76:1c:e2:47:3e:b4:6a:f1:e3:
                    9c:b7:93:a6:ae:76:6d:69:b1:d4:40:e2:ce:b0:e2:
                    48:b2:cc:d7:86:d9:8a:58:3d:a7:97:1f:94:27:a8:
                    09:6c:6d:00:75:46:74:27:57:5b:f7:0a:2e:5e:c6:
                    90:a1:06:c9:f6:48:7b:22:81:3e:49:89:da:52:ec:
                    f8:58:bf:e2:3c:0a:56:52:00:f5:d2:97:73:78:90:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:4A:3B:EE:85:E4:00:79:CD:BE:F3:55:4A:0F:20:82:E4:77:5A
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:8c:63:91:6b:0f:5c:b0:9c:12:be:47:eb:b5:5c:bf:64:
         ef:68:57:f9:6d:31:3f:ca:6f:62:5c:6c:47:15:fb:87:a2:a4:
         11:3b:45:81:19:dd:fb:77:df:44:ba:2e:6c:fe:19:b0:62:0e:
         1d:c9:e2:cd:c6:bf:db:e3:f9:d1:f2:30:87:e4:e7:80:87:83:
         ad:d6:0e:d8:89:9d:e5:bd:d3:92:e5:ae:83:56:4e:e2:25:f6:
         9a:29:6e:22:67:0f:16:2c:3a:1a:85:ed:6b:d2:29:90:9f:ba:
         a2:b9:f5:bc:09:b9:8a:30:27:b1:de:60:fe:e1:dc:ec:92:cc:
         17:be:74:00:81:f3:a0:7a:05:d7:76:66:5a:5e:14:11:93:56:
         50:cc:b9:ca:67:79:78:79:1d:f7:fa:bc:ad:65:94:e0:0d:7e:
         56:a4:c9:0c:c9:41:46:d7:aa:7d:6d:8a:af:33:d0:e8:ae:02:
         20:88:7a:62:40:0e:be:33:5b:12:dd:3e:0f:4a:17:82:53:8c:
         de:85:f5:43:52:b2:a8:52:98:b6:c7:80:a8:79:c1:24:91:97:
         f3:1f:cf:96:81:5f:4a:95:79:10:62:0c:d7:2c:5e:06:5b:84:
         ec:a7:83:43:ed:ab:45:55:bc:55:c1:7f:94:7b:38:62:48:e5:
         18:c4:bd:3c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdVKMTjqX99OCxYJL6+bNebQuPvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNDMTg5M0U1NUY2NDUxNERCRkMzQjZCODAxQzE2RDAz
NjA5MTNGRTAeFw0yMzA4MjEyMDE5MDRaFw0yNDA4MTkyMDI0MDRaMDMxMTAvBgNV
BAMTKDE1MEE0QTNCRUU4NUU0MDA3OUNEQkVGMzU1NEEwRjIwODJFNDc3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy3uYoEkfQUEmUi+UDG8Y63Lf3
cR/z0wOpbDhYZgWH8Qq62WKWpStP4N6ruXT9U7ZgjtDbJ7j7a2PfbrPE+Zz/kHa7
bZZrDgYDpke+X9Oq7TX641hRz42nqX5/7uHrpfvQtrQohboTIVAJj4nbwReWqLFj
07NejaKOJdlnLML9rVRDIgWT4eBg8v+6Ti3+A+eapitGeBsGUzKGQ3tH/JOwzcKL
V0OHoUPNxXYc4kc+tGrx45y3k6audm1psdRA4s6w4kiyzNeG2YpYPaeXH5QnqAls
bQB1RnQnV1v3Ci5expChBsn2SHsigT5JidpS7PhYv+I8ClZSAPXSl3N4kM8HAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUFQpKO+6F5AB5zb7zVUoPIILkd1owHwYDVR0j
BBgwFoAUc8GJPlX2RRTb/DtrgBwW0DYJE/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC83M0MxODkzRTU1RjY0NTE0REJGQzNCNkI4MDFDMTZEMDM2MDkxM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQzE4OTNFNTVGNjQ1MTRE
QkZDM0I2QjgwMUMxNkQwMzYwOTEzRkUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzM3MmUzNjM3MmUzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMTM5
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxQwgwDQYJKoZIhvcNAQELBQADggEBAHF8jGORaw9csJwS
vkfrtVy/ZO9oV/ltMT/Kb2JcbEcV+4eipBE7RYEZ3ft330S6Lmz+GbBiDh3J4s3G
v9vj+dHyMIfk54CHg63WDtiJneW905LlroNWTuIl9popbiJnDxYsOhqF7WvSKZCf
uqK59bwJuYowJ7HeYP7h3OySzBe+dACB86B6Bdd2ZlpeFBGTVlDMucpneXh5Hff6
vK1llOANflakyQzJQUbXqn1tiq8z0OiuAiCIemJADr4zWxLdPg9KF4JTjN6F9UNS
sqhSmLbHgKh5wSSRl/Mfz5aBX0qVeRBiDNcsXgZbhOyng0Ptq0VVvFXBf5R7OGJI
5RjEvTw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org