Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38342e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e38342e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          z7IiX7j/88ftbR9BMOTSo0kEfUZY2N7icNUvPk+Pt/Q=
Subject key identifier:   F9:C0:AA:0B:A2:78:4B:4D:D6:DA:75:E9:46:C2:07:15:13:81:92:3F
Certificate issuer:       /CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
Certificate serial:       5583F98A0366DD4F79285FF11A7A93FFBF24F470
Authority key identifier: 82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38342e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 28 Feb 2024 21:31:01 +0000
ROA not before:           Wed 28 Feb 2024 21:26:01 +0000
ROA not after:            Wed 26 Feb 2025 21:31:01 +0000
asID:                     262292
IP address blocks:        177.54.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:83:f9:8a:03:66:dd:4f:79:28:5f:f1:1a:7a:93:ff:bf:24:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
        Validity
            Not Before: Feb 28 21:26:01 2024 GMT
            Not After : Feb 26 21:31:01 2025 GMT
        Subject: CN=F9C0AA0BA2784B4DD6DA75E946C207151381923F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:68:43:98:8b:75:85:a5:8e:b3:0e:3b:31:
                    97:63:ec:67:d3:77:23:bb:3d:f6:0e:ce:99:87:51:
                    bb:83:7b:ad:45:7c:f4:03:74:c1:f6:cb:83:9b:e3:
                    24:dc:ab:2a:d7:e3:72:c5:99:39:b4:d2:2a:86:d6:
                    6f:06:b1:fc:93:ae:6d:43:83:ec:ec:ff:86:b7:29:
                    f6:9e:8e:07:eb:77:19:88:0f:11:cf:a0:80:60:18:
                    f5:90:da:51:a8:07:d8:c1:8d:bc:20:55:82:cc:51:
                    c8:98:05:03:69:5c:99:16:d9:92:38:6a:35:16:cb:
                    79:5d:db:bc:97:b4:07:89:f9:df:a2:11:d4:c4:17:
                    74:e0:c0:19:14:c4:00:3e:d6:1c:86:db:11:fa:2e:
                    de:01:e2:57:61:59:f0:e5:35:84:25:56:32:58:7f:
                    25:58:a3:33:5e:a8:5f:6f:60:e1:df:5a:d8:cf:45:
                    d2:51:77:4d:d6:d2:d4:64:c7:75:8f:4d:c3:a8:4c:
                    90:a0:e3:e5:d2:a1:5f:f8:00:aa:c3:f0:f1:fe:5d:
                    97:e7:8a:05:04:6c:56:7c:f9:f6:39:c9:7f:85:42:
                    02:27:c2:1a:2b:04:1f:a5:5e:0f:ac:d2:50:cb:70:
                    dd:59:91:e9:5f:cc:88:64:00:dd:1b:65:bb:e1:50:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C0:AA:0B:A2:78:4B:4D:D6:DA:75:E9:46:C2:07:15:13:81:92:3F
            X509v3 Authority Key Identifier:
                keyid:82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38342e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:14:5d:08:b7:95:4b:0a:77:db:ca:3f:97:3b:93:83:f3:83:
         17:70:15:31:49:4f:1d:e4:9c:a0:8b:4e:a2:ae:23:9e:53:2d:
         8c:7c:d1:04:6d:95:04:e6:c1:5a:cd:b3:fd:a4:35:37:48:2b:
         90:ea:1b:dd:af:61:7b:f2:e3:99:16:e5:92:dc:f1:78:48:41:
         7b:1a:27:2f:78:7e:4e:a0:c2:ac:6a:82:e5:f5:34:66:0d:48:
         8b:f9:22:71:86:d2:46:69:66:de:12:91:47:a2:78:43:90:20:
         2e:07:c9:ba:02:53:65:59:8a:25:e3:9e:fc:c7:79:aa:4f:b0:
         18:70:ef:8a:a4:a6:dc:0a:f7:34:b3:fb:ed:2e:6d:3c:a1:e6:
         49:2f:8e:7b:e9:b4:e9:a2:a6:25:27:a2:54:e7:48:1e:ee:cf:
         33:00:2e:82:33:5a:e3:4c:69:18:f9:3e:66:24:89:dc:d7:d1:
         cb:e4:22:d4:d8:d4:03:95:d1:d4:63:11:c8:56:bf:0c:38:39:
         e7:a9:1d:2a:c3:b7:ab:dd:38:c1:91:80:20:ca:e0:b4:13:bc:
         ff:b6:37:28:3f:b5:70:5b:a5:52:d9:d5:98:4a:b4:0e:05:70:
         62:8a:fd:4c:ce:b9:bc:5a:ba:18:8f:b8:10:ca:5d:af:43:5f:
         23:b8:8d:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVYP5igNm3U95KF/xGnqT/78k9HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI2QTNBQTlBQTk2MkU0Q0ZGOTU0NTg4RUI1QkU2QTI2
QTM4MTZFQTAeFw0yNDAyMjgyMTI2MDFaFw0yNTAyMjYyMTMxMDFaMDMxMTAvBgNV
BAMTKEY5QzBBQTBCQTI3ODRCNERENkRBNzVFOTQ2QzIwNzE1MTM4MTkyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXm2hDmIt1haWOsw47MZdj7GfT
dyO7PfYOzpmHUbuDe61FfPQDdMH2y4Ob4yTcqyrX43LFmTm00iqG1m8GsfyTrm1D
g+zs/4a3KfaejgfrdxmIDxHPoIBgGPWQ2lGoB9jBjbwgVYLMUciYBQNpXJkW2ZI4
ajUWy3ld27yXtAeJ+d+iEdTEF3TgwBkUxAA+1hyG2xH6Lt4B4ldhWfDlNYQlVjJY
fyVYozNeqF9vYOHfWtjPRdJRd03W0tRkx3WPTcOoTJCg4+XSoV/4AKrD8PH+XZfn
igUEbFZ8+fY5yX+FQgInwhorBB+lXg+s0lDLcN1ZkelfzIhkAN0bZbvhUIFRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+cCqC6J4S03W2nXpRsIHFROBkj8wHwYDVR0j
BBgwFoAUgmo6qaqWLkz/lUWI61vmomo4FuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1hwNkFZcm05TGJyWU5uQ1dhTDFBTTE1RHVSOUJERFhMNHFiYlU2WFF0
R0svMC84MjZBM0FBOUFBOTYyRTRDRkY5NTQ1ODhFQjVCRTZBMjZBMzgxNkVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyNkEzQUE5QUE5NjJFNENG
Rjk1NDU4OEVCNUJFNkEyNkEzODE2RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NYcDZBWXJtOUxicllObkNXYUwxQU0xNUR1UjlCRERYTDRxYmJVNlhRdEdLLzAv
MzEzNzM3MmUzNTM0MmUzODM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzIzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTZUMA0GCSqGSIb3DQEBCwUAA4IBAQDUFF0It5VL
Cnfbyj+XO5OD84MXcBUxSU8d5Jygi06iriOeUy2MfNEEbZUE5sFazbP9pDU3SCuQ
6hvdr2F78uOZFuWS3PF4SEF7GicveH5OoMKsaoLl9TRmDUiL+SJxhtJGaWbeEpFH
onhDkCAuB8m6AlNlWYol4578x3mqT7AYcO+KpKbcCvc0s/vtLm08oeZJL4576bTp
oqYlJ6JU50ge7s8zAC6CM1rjTGkY+T5mJInc19HL5CLU2NQDldHUYxHIVr8MODnn
qR0qw7er3TjBkYAgyuC0E7z/tjcoP7VwW6VS2dWYSrQOBXBiiv1Mzrm8WroYj7gQ
yl2vQ18juI1l
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:58 2024 by rpki-client on console-fra.rpki-client.org