Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33322e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          V/u3TJ7O1RHXxKVn4jdKk7Aau4JrPNRoSqLPifhwGHk=
Subject key identifier:   6C:82:9D:FA:01:BD:7C:F9:A4:D0:CA:A9:2B:13:FB:07:1D:D3:77:ED
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       52B9A2A856E97B2FF66A184FFCC4E08597F1C397
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:02 +0000
ROA not before:           Wed 22 Mar 2023 21:55:02 +0000
ROA not after:            Wed 20 Mar 2024 22:00:02 +0000
asID:                     262760
IP address blocks:        179.106.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b9:a2:a8:56:e9:7b:2f:f6:6a:18:4f:fc:c4:e0:85:97:f1:c3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:02 2023 GMT
            Not After : Mar 20 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:fc:4c:b7:31:d2:4c:9e:ed:24:b8:e4:82:
                    44:4d:0a:c6:69:7b:64:c8:af:09:f3:4f:9e:c8:30:
                    7c:64:b9:af:39:1c:21:ba:18:af:22:9d:ec:0b:b3:
                    6b:61:76:7c:ae:72:b7:37:76:b8:32:23:20:f1:00:
                    ca:f7:88:18:88:8d:06:8a:e4:f6:a8:72:7a:9e:1b:
                    b9:93:4c:bb:fa:49:03:f9:f6:b9:67:cf:ae:54:00:
                    5c:d6:74:58:ec:6e:70:6c:24:76:55:44:23:dd:12:
                    27:c7:04:32:ed:83:d2:ed:60:fe:d3:ba:d7:ff:a5:
                    09:37:46:82:60:1b:07:07:87:a9:bc:49:63:7d:f2:
                    c0:6a:a5:8b:9b:48:b4:e9:3e:b2:ab:69:25:96:34:
                    6d:70:57:8e:cb:87:a9:30:c0:aa:71:75:ad:81:24:
                    f6:32:76:25:16:ee:fe:47:de:47:71:17:ae:46:ad:
                    a8:b2:0a:67:6a:33:54:ec:6f:bc:64:d3:c1:42:e1:
                    ee:0b:11:9f:60:88:5b:17:32:81:cb:60:cc:b1:11:
                    d7:0d:77:f3:66:c6:ce:28:e8:7f:29:cf:b1:6b:df:
                    ab:7d:ee:a7:81:d9:b9:69:71:69:93:bc:1f:b2:38:
                    58:7e:8a:b1:c3:89:ed:03:aa:82:9f:b8:b1:42:f2:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:9D:FA:01:BD:7C:F9:A4:D0:CA:A9:2B:13:FB:07:1D:D3:77:ED
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33322e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:06:eb:8b:16:ba:1b:12:19:e2:d9:f7:c0:52:ac:27:5a:
         c8:0f:2c:1f:08:5b:50:ba:be:78:3c:e9:5b:6c:d0:1c:ed:9c:
         39:5a:2d:c8:62:ee:22:33:c3:e8:bf:ea:5e:3e:ef:ee:49:ef:
         7e:cb:35:67:30:ad:66:9e:66:fb:e9:1b:64:b4:b0:7c:60:7c:
         a5:00:07:d7:fc:d7:20:d8:89:be:11:25:a3:09:57:69:e3:d7:
         d0:a6:8e:3c:1f:b0:0e:7a:35:f2:d9:93:1b:3c:98:30:cc:97:
         28:e3:6b:bb:e8:98:93:d2:3b:36:22:64:3a:8f:08:54:79:86:
         e3:f6:dc:1b:76:8b:a8:e0:10:a5:55:85:8c:94:29:6b:82:67:
         98:72:92:cd:27:c8:b4:37:67:60:fd:91:dd:64:19:02:ff:89:
         7c:92:9a:12:70:f8:6d:81:30:d2:ab:1e:0f:9d:97:48:46:b4:
         4b:c7:f8:09:25:61:c2:e5:14:28:85:15:8b:f2:4e:13:8f:7d:
         37:89:35:84:c1:2a:3f:09:cf:12:01:41:30:74:91:6c:4f:3e:
         5b:88:f5:f8:e0:ab:7e:a6:5c:30:ac:a0:b9:03:e6:37:70:f6:
         fc:ef:d3:66:65:1b:00:bb:88:c5:7d:9d:12:c3:86:d1:2d:a1:
         0e:7f:93:eb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUrmiqFbpey/2ahhP/MTghZfxw5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhGRUExODE2MjMxRUEyQkRFRTdGRkFGMTlBMEVDOTJC
MzRBNjZDMzAeFw0yMzAzMjIyMTU1MDJaFw0yNDAzMjAyMjAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY5MEZDNENCNzMxRDI0QzlF
RUQyNEI4RTQ4MjQ0NEQwQUM2Njk3QjY0QzhBRjA5RjM0RjlFQzgzMDdDNjRCOUFG
MzkxQzIxQkExOEFGMjI5REVDMEJCMzZCNjE3NjdDQUU3MkI3Mzc3NkI4MzIyMzIw
RjEwMENBRjc4ODE4ODg4RDA2OEFFNEY2QTg3MjdBOUUxQkI5OTM0Q0JCRkE0OTAz
RjlGNkI5NjdDRkFFNTQwMDVDRDY3NDU4RUM2RTcwNkMyNDc2NTU0NDIzREQxMjI3
QzcwNDMyRUQ4M0QyRUQ2MEZFRDNCQUQ3RkZBNTA5Mzc0NjgyNjAxQjA3MDc4N0E5
QkM0OTYzN0RGMkMwNkFBNThCOUI0OEI0RTkzRUIyQUI2OTI1OTYzNDZENzA1NzhF
Q0I4N0E5MzBDMEFBNzE3NUFEODEyNEY2MzI3NjI1MTZFRUZFNDdERTQ3NzExN0FF
NDZBREE4QjIwQTY3NkEzMzU0RUM2RkJDNjREM0MxNDJFMUVFMEIxMTlGNjA4ODVC
MTczMjgxQ0I2MENDQjExMUQ3MEQ3N0YzNjZDNkNFMjhFODdGMjlDRkIxNkJERkFC
N0RFRUE3ODFEOUI5Njk3MTY5OTNCQzFGQjIzODU4N0U4QUIxQzM4OUVEMDNBQTgy
OUZCOEIxNDJGMkIzOEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv5D8TLcx0kye7SS45IJETQrGaXtkyK8J80+eyDB8ZLmvORwhuhiv
Ip3sC7NrYXZ8rnK3N3a4MiMg8QDK94gYiI0GiuT2qHJ6nhu5k0y7+kkD+fa5Z8+u
VABc1nRY7G5wbCR2VUQj3RInxwQy7YPS7WD+07rX/6UJN0aCYBsHB4epvEljffLA
aqWLm0i06T6yq2klljRtcFeOy4epMMCqcXWtgST2MnYlFu7+R95HcReuRq2osgpn
ajNU7G+8ZNPBQuHuCxGfYIhbFzKBy2DMsRHXDXfzZsbOKOh/Kc+xa9+rfe6ngdm5
aXFpk7wfsjhYfoqxw4ntA6qCn7ixQvKzjQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGyCnfoBvXz5pNDKqSsT+wcd03ftMB8GA1UdIwQYMBaAFMj+oYFiMeor3uf/rxmg
7JKzSmbDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvQzhGRUExODE2MjMxRUEy
QkRFRTdGRkFGMTlBMEVDOTJCMzRBNjZDMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DOEZFQTE4MTYyMzFFQTJCREVFN0ZGQUYxOUEwRUM5MkIzNEE2
NkMzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzczOTJlMzEzMDM2MmUzMzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s2ogMA0GCSqGSIb3DQEBCwUAA4IBAQAnrAbrixa6GxIZ4tn3wFKsJ1rIDywfCFtQ
ur54POlbbNAc7Zw5Wi3IYu4iM8Pov+pePu/uSe9+yzVnMK1mnmb76RtktLB8YHyl
AAfX/Ncg2Im+ESWjCVdp49fQpo48H7AOejXy2ZMbPJgwzJco42u76JiT0js2ImQ6
jwhUeYbj9twbdouo4BClVYWMlClrgmeYcpLNJ8i0N2dg/ZHdZBkC/4l8kpoScPht
gTDSqx4PnZdIRrRLx/gJJWHC5RQohRWL8k4Tj303iTWEwSo/Cc8SAUEwdJFsTz5b
iPX44Kt+plwwrKC5A+Y3cPb879NmZRsAu4jFfZ0Sw4bRLaEOf5Pr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org