Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32322d3232203d3e203532363630.roa
File:                     3137372e36362e3235322e302f32322d3232203d3e203532363630.roa (raw, json)
Hash identifier:          B4r/Zcp/QpEMz3W4Oqyq/I2r2K6lFjHB/yxvp9QNjuU=
Subject key identifier:   EE:F9:CA:36:AB:D0:07:B0:45:5C:A6:AC:93:9B:E1:E5:F4:98:AA:9D
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       2C3ACBE610EEDA5FDC5BA7B6C340D0D4C57797E2
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32322d3232203d3e203532363630.roa
Signing time:             Tue 14 Feb 2023 19:58:34 +0000
ROA not before:           Tue 14 Feb 2023 19:53:34 +0000
ROA not after:            Tue 13 Feb 2024 19:58:34 +0000
asID:                     52660
IP address blocks:        177.66.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3a:cb:e6:10:ee:da:5f:dc:5b:a7:b6:c3:40:d0:d4:c5:77:97:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Feb 14 19:53:34 2023 GMT
            Not After : Feb 13 19:58:34 2024 GMT
        Subject: CN=EEF9CA36ABD007B0455CA6AC939BE1E5F498AA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:39:42:82:af:6a:3c:49:5c:de:26:db:b3:
                    74:b1:68:b9:c2:1e:cc:21:e4:74:1b:31:4a:d7:b4:
                    d5:7f:f3:41:ad:57:8d:9c:7f:9f:28:92:64:96:b0:
                    c8:31:b0:31:8d:4b:c3:5f:7b:cb:42:5a:c6:4e:2e:
                    21:d7:59:6a:02:a5:ce:40:96:9b:48:bc:81:2b:c8:
                    55:25:9b:44:56:c9:94:a1:ce:31:5f:a3:5f:60:c6:
                    f1:3f:0f:c0:d2:ac:41:d7:f6:e0:29:50:97:51:e9:
                    67:11:70:58:a7:89:ae:12:0b:ed:89:61:5d:30:a6:
                    13:fe:c9:ef:ff:56:6f:fd:b5:4f:fb:99:e5:10:0f:
                    f2:69:9c:f1:10:61:f5:e0:7a:34:00:59:2c:c3:97:
                    27:e3:af:29:91:cc:e7:3f:22:70:33:9c:5b:41:09:
                    ec:6a:84:e7:8d:be:09:01:d5:b9:90:43:60:cb:17:
                    4b:28:1d:54:b8:81:ed:0d:01:08:10:d8:3a:e9:c3:
                    24:6f:66:fc:cc:22:21:53:2b:fe:b1:3e:ba:0e:9d:
                    9a:7e:00:f6:cb:e0:c6:83:6d:76:53:7d:ae:7b:c0:
                    53:3f:38:0e:7d:53:58:e9:bf:2d:90:93:2b:d7:16:
                    af:5b:63:6b:cc:84:5b:2c:cb:89:59:bd:bf:09:86:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:CA:36:AB:D0:07:B0:45:5C:A6:AC:93:9B:E1:E5:F4:98:AA:9D
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32322d3232203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:f9:7c:d8:8c:d5:b6:f5:bf:52:c3:ac:00:8b:37:87:4e:69:
         cb:76:99:d3:6b:cb:6f:c8:8b:8c:ee:c3:36:d2:b2:e4:14:79:
         39:13:84:ff:5b:8c:fd:51:f1:43:15:63:24:7e:66:fc:42:22:
         ee:9b:98:89:53:c6:f2:8a:14:35:7b:ed:ec:a7:e8:49:5e:7f:
         37:76:0a:91:95:a6:46:ec:47:a2:21:71:12:2b:b8:f9:38:f2:
         9a:44:49:ea:ee:cb:41:0d:d1:54:31:cf:45:43:80:32:30:06:
         9d:04:9f:f2:bd:0e:e2:9f:bb:b1:c1:0d:5d:d7:7c:e3:55:99:
         ed:6f:e0:9b:56:82:a4:74:9f:55:1e:c3:33:4a:1d:a5:e9:4a:
         47:e7:5f:6f:6b:2f:f1:86:06:b1:0f:a0:a9:56:56:13:43:76:
         57:70:db:8e:ed:50:0a:d6:71:7e:0f:a6:d4:9b:b7:3f:bf:90:
         fe:b9:25:53:c2:ca:70:f2:f8:01:1c:14:54:4c:2f:67:b5:23:
         11:41:47:cd:8c:94:73:51:ab:8f:99:04:be:0c:44:18:5f:df:
         87:3c:db:08:ee:2b:74:48:f1:13:6f:6c:39:8a:eb:0b:3c:03:
         56:0a:cb:2c:ef:3e:96:eb:c0:7e:b4:0e:45:0a:40:eb:96:be:
         d6:75:5b:22
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULDrL5hDu2l/cW6e2w0DQ1MV3l+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDOEU5MTczRjQwOTBERkVFOURDMkRDMjJEREUyM0I4
REUyM0FDQzAeFw0yMzAyMTQxOTUzMzRaFw0yNDAyMTMxOTU4MzRaMDMxMTAvBgNV
BAMTKEVFRjlDQTM2QUJEMDA3QjA0NTVDQTZBQzkzOUJFMUU1RjQ5OEFBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UjlCgq9qPElc3ibbs3SxaLnC
Hswh5HQbMUrXtNV/80GtV42cf58okmSWsMgxsDGNS8Nfe8tCWsZOLiHXWWoCpc5A
lptIvIEryFUlm0RWyZShzjFfo19gxvE/D8DSrEHX9uApUJdR6WcRcFinia4SC+2J
YV0wphP+ye//Vm/9tU/7meUQD/JpnPEQYfXgejQAWSzDlyfjrymRzOc/InAznFtB
CexqhOeNvgkB1bmQQ2DLF0soHVS4ge0NAQgQ2DrpwyRvZvzMIiFTK/6xProOnZp+
APbL4MaDbXZTfa57wFM/OA59U1jpvy2QkyvXFq9bY2vMhFssy4lZvb8Jhgn1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7vnKNqvQB7BFXKask5vh5fSYqp0wHwYDVR0j
BBgwFoAU3MjpFz9AkN/uncLcIt3iO43iOswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR
MXEvMC9EQ0M4RTkxNzNGNDA5MERGRUU5REMyREMyMkRERTIzQjhERTIzQUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQzhFOTE3M0Y0MDkwREZF
RTlEQzJEQzIyRERFMjNCOERFMjNBQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5RVd1Y3VicjN0NEVRQ2VVNTJmTEY0ZnFwbjdDb0VtZWo4cEpvQ0FTUTFxLzAv
MzEzNzM3MmUzNjM2MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUL8MA0GCSqGSIb3DQEBCwUAA4IBAQC/+XzYjNW2
9b9Sw6wAizeHTmnLdpnTa8tvyIuM7sM20rLkFHk5E4T/W4z9UfFDFWMkfmb8QiLu
m5iJU8byihQ1e+3sp+hJXn83dgqRlaZG7EeiIXESK7j5OPKaREnq7stBDdFUMc9F
Q4AyMAadBJ/yvQ7in7uxwQ1d13zjVZntb+CbVoKkdJ9VHsMzSh2l6UpH519vay/x
hgaxD6CpVlYTQ3ZXcNuO7VAK1nF+D6bUm7c/v5D+uSVTwspw8vgBHBRUTC9ntSMR
QUfNjJRzUauPmQS+DEQYX9+HPNsI7it0SPETb2w5iusLPANWCsss7z6W68B+tA5F
CkDrlr7WdVsi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org