Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3234203d3e20323632353039.roa
File:                     3137372e36372e302e302f32312d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          iXL1yLlc7i8nnXEi524cH9aiXr/70MDuQkIX0AADME4=
Subject key identifier:   D3:18:6B:C6:46:3E:CA:2A:E4:46:51:A9:37:54:11:8A:00:02:CE:12
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       6D379F79F39A5160BAF5E61096295DD54CBB3BD4
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3234203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:55 +0000
ROA not before:           Thu 06 Oct 2022 17:34:55 +0000
ROA not after:            Thu 05 Oct 2023 17:39:55 +0000
asID:                     262509
IP address blocks:        177.67.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:37:9f:79:f3:9a:51:60:ba:f5:e6:10:96:29:5d:d5:4c:bb:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:55 2022 GMT
            Not After : Oct  5 17:39:55 2023 GMT
        Subject: CN=D3186BC6463ECA2AE44651A93754118A0002CE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:61:6c:11:17:77:51:eb:71:58:4c:be:f1:
                    dc:d7:35:68:bb:24:cd:3b:d3:40:e3:69:a5:25:16:
                    c6:06:41:36:66:66:f5:0e:76:6b:0f:6c:1e:fd:6d:
                    7c:44:1f:16:97:f8:f5:e1:f8:7e:c0:ec:d6:de:3f:
                    0f:02:5a:6a:14:dc:2a:3c:d1:33:48:19:c9:7f:06:
                    c4:ba:9d:2e:ce:13:79:51:ab:9c:30:d0:8c:68:2b:
                    7f:2b:07:77:30:9d:ba:4d:16:24:ce:fc:8c:ea:fc:
                    d3:81:a3:1d:76:9d:73:dc:6e:8e:63:39:e6:c9:82:
                    58:00:a8:ba:8a:28:67:6d:45:4c:a6:33:68:b6:eb:
                    98:61:a0:6b:f7:bf:bf:15:77:a7:bf:99:0d:ff:77:
                    11:88:f8:13:8a:4a:3b:10:7d:78:35:fe:dc:8d:e3:
                    ec:c4:0f:19:12:f8:3c:04:fc:67:ef:75:91:c3:c6:
                    b6:0a:8e:50:8b:ed:5e:26:97:31:79:8e:17:22:bd:
                    ed:5a:15:b7:52:b5:66:a6:22:42:2f:59:b6:32:5e:
                    48:a8:d0:4f:fc:4c:f6:28:6c:1a:f5:ce:aa:2f:40:
                    33:2f:ad:59:a3:c4:bf:8d:9a:32:f4:85:a5:76:7a:
                    1d:dc:ab:9b:f3:0e:7c:c7:f6:46:83:fc:32:73:4a:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:18:6B:C6:46:3E:CA:2A:E4:46:51:A9:37:54:11:8A:00:02:CE:12
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137372e36372e302e302f32312d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:6f:21:95:37:a0:3d:8a:8a:4d:a8:e5:10:ef:03:0a:b8:
         1b:82:68:8a:01:33:87:9d:27:de:0b:6a:6f:69:d0:33:79:4f:
         52:0f:f5:04:f2:be:e1:79:f0:dc:9a:dd:20:75:1e:18:ca:db:
         67:35:bb:f3:eb:b5:5a:3a:2f:ff:0b:86:0e:55:4c:58:16:d8:
         89:3d:0e:79:a3:bb:fb:ff:7a:46:7e:41:2e:02:c7:69:3e:85:
         b3:85:e5:c1:30:17:51:21:df:f9:f4:3b:dc:bf:21:2d:c3:45:
         25:83:98:92:05:ca:79:d9:f6:1c:fb:f4:66:51:c1:75:32:41:
         9b:ef:85:6d:77:1f:2b:83:43:8e:11:6e:87:94:c0:d3:b7:41:
         c4:03:1f:3c:31:40:24:0d:a6:3c:11:fa:a1:e8:f0:54:50:2c:
         87:2e:2c:c9:10:e4:88:e4:4f:be:9f:1a:04:62:48:4f:1e:5c:
         52:19:a4:eb:c7:d0:d6:c2:a9:7c:bd:eb:50:0b:e1:46:18:89:
         1f:de:bc:8c:e0:75:34:02:f2:37:ce:12:ed:e6:ca:98:1a:fc:
         c7:7c:e5:5f:a3:b2:21:84:c8:6e:36:28:f6:47:eb:95:e1:10:
         c5:9d:ef:03:17:7d:18:34:de:09:5a:9f:50:87:f1:4e:0c:74:
         d7:44:93:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbTefefOaUWC69eYQlild1Uy7O9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI1RkI3QTM2NDFGQjY5OTI2MDlDM0U4NzY3Nzc0N0ZE
NTE3NjEyMDAeFw0yMjEwMDYxNzM0NTVaFw0yMzEwMDUxNzM5NTVaMDMxMTAvBgNV
BAMTKEQzMTg2QkM2NDYzRUNBMkFFNDQ2NTFBOTM3NTQxMThBMDAwMkNFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dGFsERd3UetxWEy+8dzXNWi7
JM0700DjaaUlFsYGQTZmZvUOdmsPbB79bXxEHxaX+PXh+H7A7NbePw8CWmoU3Co8
0TNIGcl/BsS6nS7OE3lRq5ww0IxoK38rB3cwnbpNFiTO/Izq/NOBox12nXPcbo5j
OebJglgAqLqKKGdtRUymM2i265hhoGv3v78Vd6e/mQ3/dxGI+BOKSjsQfXg1/tyN
4+zEDxkS+DwE/GfvdZHDxrYKjlCL7V4mlzF5jhcive1aFbdStWamIkIvWbYyXkio
0E/8TPYobBr1zqovQDMvrVmjxL+NmjL0haV2eh3cq5vzDnzH9kaD/DJzSl4tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0xhrxkY+yirkRlGpN1QRigACzhIwHwYDVR0j
BBgwFoAU0l+3o2QftpkmCcPodnd0f9UXYSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFCWkthajNLVVdORTFwOGZob3lDTHNwbjJYOXB3TVU3UGtTMmNpQW9u
UHYvMC9EMjVGQjdBMzY0MUZCNjk5MjYwOUMzRTg3Njc3NzQ3RkQ1MTc2MTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyNUZCN0EzNjQxRkI2OTky
NjA5QzNFODc2Nzc3NDdGRDUxNzYxMjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhQlpLYWozS1VXTkUxcDhmaG95Q0xzcG4yWDlwd01VN1BrUzJjaUFvblB2LzAv
MzEzNzM3MmUzNjM3MmUzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FDADANBgkqhkiG9w0BAQsFAAOCAQEAIexvIZU3oD2K
ik2o5RDvAwq4G4JoigEzh50n3gtqb2nQM3lPUg/1BPK+4Xnw3JrdIHUeGMrbZzW7
8+u1Wjov/wuGDlVMWBbYiT0OeaO7+/96Rn5BLgLHaT6Fs4XlwTAXUSHf+fQ73L8h
LcNFJYOYkgXKedn2HPv0ZlHBdTJBm++FbXcfK4NDjhFuh5TA07dBxAMfPDFAJA2m
PBH6oejwVFAshy4syRDkiORPvp8aBGJITx5cUhmk68fQ1sKpfL3rUAvhRhiJH968
jOB1NALyN84S7ebKmBr8x3zlX6OyIYTIbjYo9kfrleEQxZ3vAxd9GDTeCVqfUIfx
Tgx010ST2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org