Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e38302e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          S6+JD52Uj3fQOWzRs2r/P+BQ+UGXMr/eo+gNMG+PB4Q=
Subject key identifier:   7D:D6:6A:20:5C:C6:1A:17:8B:4C:67:79:F8:F3:94:97:BC:44:A4:95
Certificate issuer:       /CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
Certificate serial:       68AF661F3556C82DC29FA9431D1DA0D223D68D40
Authority key identifier: 82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 28 Feb 2024 21:31:01 +0000
ROA not before:           Wed 28 Feb 2024 21:26:01 +0000
ROA not after:            Wed 26 Feb 2025 21:31:01 +0000
asID:                     262292
IP address blocks:        177.54.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:af:66:1f:35:56:c8:2d:c2:9f:a9:43:1d:1d:a0:d2:23:d6:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
        Validity
            Not Before: Feb 28 21:26:01 2024 GMT
            Not After : Feb 26 21:31:01 2025 GMT
        Subject: CN=7DD66A205CC61A178B4C6779F8F39497BC44A495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:76:99:dd:44:21:40:42:10:89:f7:85:75:
                    b9:e0:6b:10:2a:9b:53:bb:2c:ac:3b:6e:e8:30:65:
                    4f:fd:f3:bf:a9:1c:89:d2:6a:04:0a:a5:46:af:4f:
                    51:96:0c:cb:86:57:39:45:5a:6a:28:cf:b9:28:25:
                    7d:43:d3:03:87:6c:b5:36:39:2c:d4:31:1d:8b:6d:
                    d5:da:e9:5b:6e:90:47:da:a2:a8:01:a0:37:27:7d:
                    c0:8d:ef:93:ae:6a:91:61:91:66:80:60:c4:85:45:
                    b7:2a:3c:25:0b:5f:43:95:e8:fd:64:46:4d:aa:b4:
                    8a:6e:02:f6:de:11:6f:2f:27:5f:c4:d1:3a:bf:08:
                    c9:df:97:e3:42:14:3c:df:de:1e:08:4c:d3:20:de:
                    ff:a1:a9:17:a4:d7:9d:16:44:20:a9:ea:0a:4a:65:
                    3e:e5:22:fd:77:fc:67:c8:6d:ed:85:8f:68:8a:03:
                    ce:37:07:87:10:57:d4:f7:71:74:a5:9e:41:1a:2d:
                    32:f9:62:55:83:0a:d5:4a:40:4c:8d:3e:a2:ba:ed:
                    59:08:e5:1b:d4:89:ae:c2:7a:fd:f9:12:21:70:cd:
                    a0:cc:22:02:99:1e:c4:47:c4:85:19:c3:96:08:61:
                    f7:fb:f4:61:f4:c9:a8:75:d5:ff:d2:d1:e3:4f:28:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:6A:20:5C:C6:1A:17:8B:4C:67:79:F8:F3:94:97:BC:44:A4:95
            X509v3 Authority Key Identifier:
                keyid:82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:0a:e3:bd:d5:2e:1a:de:f9:14:bf:59:a6:2a:06:2e:bd:
         7b:9e:e3:94:63:37:ee:87:42:97:8a:c4:47:81:b0:1a:3b:df:
         68:a7:e5:8c:d4:9d:ae:4c:1e:d9:7a:9b:e7:1c:6e:ed:ce:17:
         26:02:d4:e9:d0:f5:cf:2b:a6:37:b7:ba:24:b6:47:bd:87:75:
         6c:7f:aa:4a:9c:80:02:13:5b:4a:d7:6e:1f:eb:15:a8:af:0e:
         7c:e3:90:3a:f8:b2:05:6f:19:c3:5f:72:41:c8:de:94:30:1f:
         70:e2:92:a9:75:31:8f:06:fc:f7:da:38:1c:1e:b3:d5:14:b4:
         85:8a:74:7d:9f:16:34:ca:41:69:eb:18:86:12:bb:4a:d8:ac:
         39:27:26:b4:ba:9c:7f:e3:31:98:ee:87:70:b6:1e:19:28:e1:
         cd:4f:5b:f0:11:d8:6f:4a:e6:57:54:1e:58:26:d0:5e:a7:39:
         4d:c7:dc:94:1a:8e:97:26:82:84:98:ca:d4:2c:3f:0d:ab:17:
         57:1a:14:1a:ce:2c:59:8e:1b:40:0b:b0:cc:0f:fd:5d:81:eb:
         61:cb:94:33:de:e0:b2:7e:f0:b5:76:dc:17:6d:10:d9:2e:7b:
         85:15:cf:e7:ce:d3:ac:a2:d0:50:7b:e4:0b:7f:96:5b:bf:54:
         5a:cf:36:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaK9mHzVWyC3Cn6lDHR2g0iPWjUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI2QTNBQTlBQTk2MkU0Q0ZGOTU0NTg4RUI1QkU2QTI2
QTM4MTZFQTAeFw0yNDAyMjgyMTI2MDFaFw0yNTAyMjYyMTMxMDFaMDMxMTAvBgNV
BAMTKDdERDY2QTIwNUNDNjFBMTc4QjRDNjc3OUY4RjM5NDk3QkM0NEE0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk7XaZ3UQhQEIQifeFdbngaxAq
m1O7LKw7bugwZU/987+pHInSagQKpUavT1GWDMuGVzlFWmooz7koJX1D0wOHbLU2
OSzUMR2LbdXa6VtukEfaoqgBoDcnfcCN75OuapFhkWaAYMSFRbcqPCULX0OV6P1k
Rk2qtIpuAvbeEW8vJ1/E0Tq/CMnfl+NCFDzf3h4ITNMg3v+hqRek150WRCCp6gpK
ZT7lIv13/GfIbe2Fj2iKA843B4cQV9T3cXSlnkEaLTL5YlWDCtVKQEyNPqK67VkI
5RvUia7Cev35EiFwzaDMIgKZHsRHxIUZw5YIYff79GH0yah11f/S0eNPKCutAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfdZqIFzGGheLTGd5+POUl7xEpJUwHwYDVR0j
BBgwFoAUgmo6qaqWLkz/lUWI61vmomo4FuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1hwNkFZcm05TGJyWU5uQ1dhTDFBTTE1RHVSOUJERFhMNHFiYlU2WFF0
R0svMC84MjZBM0FBOUFBOTYyRTRDRkY5NTQ1ODhFQjVCRTZBMjZBMzgxNkVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyNkEzQUE5QUE5NjJFNENG
Rjk1NDU4OEVCNUJFNkEyNkEzODE2RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NYcDZBWXJtOUxicllObkNXYUwxQU0xNUR1UjlCRERYTDRxYmJVNlhRdEdLLzAv
MzEzNzM3MmUzNTM0MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzIzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTZQMA0GCSqGSIb3DQEBCwUAA4IBAQCN8grjvdUu
Gt75FL9ZpioGLr17nuOUYzfuh0KXisRHgbAaO99op+WM1J2uTB7ZepvnHG7tzhcm
AtTp0PXPK6Y3t7oktke9h3Vsf6pKnIACE1tK124f6xWorw5845A6+LIFbxnDX3JB
yN6UMB9w4pKpdTGPBvz32jgcHrPVFLSFinR9nxY0ykFp6xiGErtK2Kw5Jya0upx/
4zGY7odwth4ZKOHNT1vwEdhvSuZXVB5YJtBepzlNx9yUGo6XJoKEmMrULD8NqxdX
GhQazixZjhtAC7DMD/1dgethy5Qz3uCyfvC1dtwXbRDZLnuFFc/nztOsotBQe+QL
f5Zbv1RazzZH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org