Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa
File:                     3137372e32322e3137362e302f32312d3234203d3e203533313637.roa (raw, json)
Hash identifier:          j0E1mmrXN52x4sPVfPtmePZfpae/KPXh499zPkX9U2k=
Subject key identifier:   67:66:38:1C:42:3B:FD:78:F5:1C:47:B6:38:93:A2:56:C6:80:B1:65
Certificate issuer:       /CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
Certificate serial:       718C404359AB378E9FBF8A426CC418024D8E0B47
Authority key identifier: 9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa
Signing time:             Tue 26 Dec 2023 18:34:31 +0000
ROA not before:           Tue 26 Dec 2023 18:29:31 +0000
ROA not after:            Tue 24 Dec 2024 18:34:31 +0000
asID:                     53167
IP address blocks:        177.22.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:40:43:59:ab:37:8e:9f:bf:8a:42:6c:c4:18:02:4d:8e:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
        Validity
            Not Before: Dec 26 18:29:31 2023 GMT
            Not After : Dec 24 18:34:31 2024 GMT
        Subject: CN=6766381C423BFD78F51C47B63893A256C680B165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:97:f7:3d:b8:ea:86:7a:bc:fa:04:cc:ef:
                    98:d4:c1:63:69:6b:89:4f:bd:2a:7f:05:80:5b:85:
                    95:f9:09:83:6f:3c:26:39:2e:0b:1e:f9:f5:76:89:
                    a7:2a:a8:c6:98:ff:9e:87:bc:e8:6c:30:1f:0b:ac:
                    82:21:34:5f:c6:9a:6e:fd:18:76:5f:56:37:c7:84:
                    66:0b:ad:02:cb:de:c6:4f:03:88:46:2c:33:b1:f5:
                    1d:31:f5:7a:cf:26:48:de:d5:c5:09:9b:fb:6d:ae:
                    02:13:e4:a6:95:e2:c2:b8:db:ec:a4:66:07:67:83:
                    95:21:6d:c5:fd:61:01:17:2d:24:b3:03:19:71:49:
                    37:81:37:76:1f:c1:4d:67:e8:49:64:f9:da:3d:72:
                    28:a6:f1:bc:e8:f0:32:7c:70:88:ed:9c:8f:b8:9e:
                    3c:8a:00:d7:ee:be:21:6f:83:ba:7f:05:ab:ef:a4:
                    a4:bf:b4:3e:01:84:4f:82:03:70:93:f2:44:c7:c3:
                    fe:56:c5:15:10:1e:46:7a:9b:93:29:43:d0:3f:99:
                    5f:16:6d:69:b4:54:c0:9e:c7:3f:f9:78:81:5e:cf:
                    ad:ac:d5:2e:95:88:44:a3:36:4e:ff:57:e7:72:b2:
                    59:5a:42:42:67:a6:17:c7:c7:d4:52:25:5f:2b:f0:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:38:1C:42:3B:FD:78:F5:1C:47:B6:38:93:A2:56:C6:80:B1:65
            X509v3 Authority Key Identifier:
                keyid:9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:90:b2:14:93:45:42:07:6d:ba:eb:ba:a9:95:ab:9b:9d:40:
         3e:ce:cc:df:5e:aa:fb:b1:a0:e1:07:10:7d:e0:e8:77:8a:15:
         d4:eb:39:24:e6:0c:08:64:f7:e1:70:f2:24:85:2d:ec:e5:3f:
         dc:8e:6e:05:10:7a:d3:86:e8:86:54:1c:f2:c8:85:e8:85:d8:
         25:9a:11:ce:77:1d:e1:b4:a2:c1:19:32:d1:75:2a:ba:57:27:
         00:77:00:a0:89:53:c5:b0:b0:90:10:0d:04:49:54:2d:9f:a2:
         f1:f6:b6:c0:bf:8a:62:70:90:a2:aa:5d:82:2c:61:41:b4:4c:
         f7:cd:e3:a2:eb:58:be:e1:c3:db:8b:04:f8:8b:03:9c:a5:8a:
         e4:7e:ad:d6:fb:1e:58:e7:cf:1c:fd:8c:fc:38:f1:97:18:81:
         b4:3a:88:f4:c0:69:f7:64:fa:92:8d:2f:4c:5f:ca:ef:86:eb:
         81:51:0f:7d:eb:68:d8:dd:5b:5d:81:eb:cf:89:cc:e6:5e:e3:
         6e:81:e2:95:42:2b:19:6f:7f:58:9b:0d:db:5f:7b:c7:c9:e6:
         15:d5:cb:47:de:ba:f0:91:56:37:3b:66:1e:b5:dd:fc:a2:8b:
         b4:ff:88:56:9f:5d:be:10:10:66:9f:a8:26:db:d2:bc:5f:6c:
         15:76:39:33
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcYxAQ1mrN46fv4pCbMQYAk2OC0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI2NjlCQTAzN0YyQzlBOTFCOUY1MUE0NEJEREI2N0Iy
RTIzRTZBQjAeFw0yMzEyMjYxODI5MzFaFw0yNDEyMjQxODM0MzFaMDMxMTAvBgNV
BAMTKDY3NjYzODFDNDIzQkZENzhGNTFDNDdCNjM4OTNBMjU2QzY4MEIxNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmpf3Pbjqhnq8+gTM75jUwWNp
a4lPvSp/BYBbhZX5CYNvPCY5Lgse+fV2iacqqMaY/56HvOhsMB8LrIIhNF/Gmm79
GHZfVjfHhGYLrQLL3sZPA4hGLDOx9R0x9XrPJkje1cUJm/ttrgIT5KaV4sK42+yk
Zgdng5UhbcX9YQEXLSSzAxlxSTeBN3YfwU1n6Elk+do9ciim8bzo8DJ8cIjtnI+4
njyKANfuviFvg7p/BavvpKS/tD4BhE+CA3CT8kTHw/5WxRUQHkZ6m5MpQ9A/mV8W
bWm0VMCexz/5eIFez62s1S6ViESjNk7/V+dysllaQkJnphfHx9RSJV8r8KbvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ2Y4HEI7/Xj1HEe2OJOiVsaAsWUwHwYDVR0j
BBgwFoAUm2aboDfyyakbn1GkS922ey4j5qswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pGUlVWaTJVNFpqUTc4QmdFRjc5TlFmelZ4RjVMeFRUOXZ2ZDlvZHUx
VlAvMC85QjY2OUJBMDM3RjJDOUE5MUI5RjUxQTQ0QkREQjY3QjJFMjNFNkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlCNjY5QkEwMzdGMkM5QTkx
QjlGNTFBNDRCRERCNjdCMkUyM0U2QUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaRlJVVmkyVTRaalE3OEJnRUY3OU5RZnpWeEY1THhUVDl2dmQ5b2R1MVZQLzAv
MzEzNzM3MmUzMjMyMmUzMTM3MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMz
MzEzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsRawMA0GCSqGSIb3DQEBCwUAA4IBAQB3kLIUk0VC
B22667qplaubnUA+zszfXqr7saDhBxB94Oh3ihXU6zkk5gwIZPfhcPIkhS3s5T/c
jm4FEHrThuiGVBzyyIXohdglmhHOdx3htKLBGTLRdSq6VycAdwCgiVPFsLCQEA0E
SVQtn6Lx9rbAv4picJCiql2CLGFBtEz3zeOi61i+4cPbiwT4iwOcpYrkfq3W+x5Y
588c/Yz8OPGXGIG0Ooj0wGn3ZPqSjS9MX8rvhuuBUQ9962jY3VtdgevPiczmXuNu
geKVQisZb39Ymw3bX3vHyeYV1ctH3rrwkVY3O2Yetd38oou0/4hWn12+EBBmn6gm
29K8X2wVdjkz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org