Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32332d3233203d3e20323633303134.roa
File:                     3137372e31302e38382e302f32332d3233203d3e20323633303134.roa (raw, json)
Hash identifier:          GbUULChcJpWmPUHqvVDEoanKaGWp/S0lF+Kxfuxs5pM=
Subject key identifier:   B1:F7:81:44:EA:8F:D0:50:05:C3:FD:8D:7E:AF:7C:68:A3:51:97:77
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       5CCB8B2A7E812F406C795CD1E06F480AA86E2B6A
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32332d3233203d3e20323633303134.roa
Signing time:             Thu 29 Jun 2023 21:00:00 +0000
ROA not before:           Thu 29 Jun 2023 20:55:00 +0000
ROA not after:            Thu 27 Jun 2024 21:00:00 +0000
asID:                     263014
IP address blocks:        177.10.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cb:8b:2a:7e:81:2f:40:6c:79:5c:d1:e0:6f:48:0a:a8:6e:2b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Jun 29 20:55:00 2023 GMT
            Not After : Jun 27 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:36:d0:34:55:95:3a:8a:49:af:0c:f5:1a:
                    2c:7a:d7:31:c9:c3:af:1b:00:bc:50:97:a4:56:12:
                    ca:ad:bd:0e:25:42:65:d5:0f:cf:a7:e3:ea:b1:b1:
                    3e:9f:e1:07:05:69:11:a8:c3:50:fd:79:ee:1c:aa:
                    e8:6c:d7:d4:3c:48:99:4a:8a:fd:cc:93:ec:a3:b8:
                    65:d5:02:d0:68:42:4e:46:7b:e7:85:af:8a:48:d4:
                    b4:2e:c3:9d:a6:f3:18:b1:67:a3:3f:e3:94:78:f9:
                    da:36:8e:c0:a2:94:cc:78:2b:66:61:a7:5d:e0:f0:
                    bd:76:26:6a:a8:27:ec:d5:c5:a4:ad:22:e4:1f:0a:
                    a8:84:f1:0b:9e:30:79:71:d1:3d:61:34:2c:2f:e2:
                    6b:bf:c6:85:35:5e:e4:6a:e4:4f:a3:5b:8a:2e:f4:
                    42:9b:43:46:d2:a8:db:f5:04:c7:94:55:32:f2:38:
                    c0:ca:3f:59:90:f3:ce:61:10:4b:58:89:60:40:2f:
                    b9:90:8c:e1:ff:f1:ce:8c:10:67:c9:e3:70:bc:ca:
                    da:d7:3b:e1:62:12:d2:0c:ad:25:1c:7b:50:59:f0:
                    a0:dc:2d:d3:7a:57:be:71:16:bf:5f:1c:10:b6:a7:
                    5f:78:32:9a:a5:26:66:da:ef:eb:e4:37:2c:9a:03:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:81:44:EA:8F:D0:50:05:C3:FD:8D:7E:AF:7C:68:A3:51:97:77
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32332d3233203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:1c:c4:ce:fb:28:f1:62:7d:b9:ef:04:93:86:23:b8:d3:
         4f:24:ea:3f:69:37:be:54:27:34:bc:e4:d0:4b:eb:23:1f:2c:
         01:e2:3d:e6:ff:81:12:24:ff:a9:0b:34:f0:09:cb:3d:05:81:
         c2:45:26:7f:6b:5e:3c:4e:87:34:5e:c4:c2:93:6e:04:91:e7:
         4c:1f:f5:de:4e:f9:ab:41:0d:38:ed:1b:f6:0a:4d:e8:8b:fa:
         71:00:98:68:d1:d4:e7:49:e7:12:9b:ea:60:ab:07:05:6f:d5:
         52:46:2f:46:63:ee:89:86:fc:ce:0f:7a:85:02:7b:f0:ea:d9:
         d1:41:65:ea:07:b3:5b:72:52:97:3c:58:49:9e:57:76:f3:e1:
         79:33:ce:35:85:ea:49:03:58:96:9a:c5:dd:03:33:3b:49:ca:
         79:25:e5:b5:a6:4b:58:c1:10:28:fa:d4:88:c5:6a:00:24:b1:
         97:74:c2:6f:d8:43:11:7b:f6:08:3d:f0:36:6d:b3:8c:3c:65:
         6b:40:e1:90:4e:e7:57:6f:8d:da:80:52:e2:a5:1b:49:2a:d3:
         1a:52:5c:87:d3:f3:3f:3f:19:91:d9:37:e9:44:ae:d3:60:24:
         1b:98:f2:4f:fd:77:be:3f:6a:0c:86:6a:f6:e9:4f:58:4a:3a:
         6c:4e:6c:32
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUXMuLKn6BL0BseVzR4G9ICqhuK2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJEOUY2NTA3RDdGNUJDNEU3NjJENjFGRTYzOEU0MTlG
MUFCMzRFNDAeFw0yMzA2MjkyMDU1MDBaFw0yNDA2MjcyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE1NDM2RDAzNDU1OTUzQThB
NDlBRjBDRjUxQTJDN0FENzMxQzlDM0FGMUIwMEJDNTA5N0E0NTYxMkNBQURCRDBF
MjU0MjY1RDUwRkNGQTdFM0VBQjFCMTNFOUZFMTA3MDU2OTExQThDMzUwRkQ3OUVF
MUNBQUU4NkNEN0Q0M0M0ODk5NEE4QUZEQ0M5M0VDQTNCODY1RDUwMkQwNjg0MjRF
NDY3QkU3ODVBRjhBNDhENEI0MkVDMzlEQTZGMzE4QjE2N0EzM0ZFMzk0NzhGOURB
MzY4RUMwQTI5NENDNzgyQjY2NjFBNzVERTBGMEJENzYyNjZBQTgyN0VDRDVDNUE0
QUQyMkU0MUYwQUE4ODRGMTBCOUUzMDc5NzFEMTNENjEzNDJDMkZFMjZCQkZDNjg1
MzU1RUU0NkFFNDRGQTM1QjhBMkVGNDQyOUI0MzQ2RDJBOERCRjUwNEM3OTQ1NTMy
RjIzOEMwQ0EzRjU5OTBGM0NFNjExMDRCNTg4OTYwNDAyRkI5OTA4Q0UxRkZGMUNF
OEMxMDY3QzlFMzcwQkNDQURBRDczQkUxNjIxMkQyMENBRDI1MUM3QjUwNTlGMEEw
REMyREQzN0E1N0JFNzExNkJGNUYxQzEwQjZBNzVGNzgzMjlBQTUyNjY2REFFRkVC
RTQzNzJDOUEwMzMxMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4VQ20DRVlTqKSa8M9RosetcxycOvGwC8UJekVhLKrb0OJUJl1Q/P
p+PqsbE+n+EHBWkRqMNQ/XnuHKrobNfUPEiZSor9zJPso7hl1QLQaEJORnvnha+K
SNS0LsOdpvMYsWejP+OUePnaNo7AopTMeCtmYadd4PC9diZqqCfs1cWkrSLkHwqo
hPELnjB5cdE9YTQsL+Jrv8aFNV7kauRPo1uKLvRCm0NG0qjb9QTHlFUy8jjAyj9Z
kPPOYRBLWIlgQC+5kIzh//HOjBBnyeNwvMra1zvhYhLSDK0lHHtQWfCg3C3Tele+
cRa/XxwQtqdfeDKapSZm2u/r5DcsmgMxHwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLH3gUTqj9BQBcP9jX6vfGijUZd3MB8GA1UdIwQYMBaAFJvZ9lB9f1vE52LWH+Y4
5BnxqzTkMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3eG5STXhMTWVFTENl
ajNpemRGYVNUREhNTXBiaVVueVdzbU1USHNBQnV2LzAvOUJEOUY2NTA3RDdGNUJD
NEU3NjJENjFGRTYzOEU0MTlGMUFCMzRFNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QkQ5RjY1MDdEN0Y1QkM0RTc2MkQ2MUZFNjM4RTQxOUYxQUIz
NEU0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN3huUk14TE1lRUxDZWozaXpk
RmFTVERITU1wYmlVbnlXc21NVEhzQUJ1di8wLzMxMzczNzJlMzEzMDJlMzgzODJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMzMwMzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbEK
WDANBgkqhkiG9w0BAQsFAAOCAQEAbWMcxM77KPFifbnvBJOGI7jTTyTqP2k3vlQn
NLzk0EvrIx8sAeI95v+BEiT/qQs08AnLPQWBwkUmf2tePE6HNF7EwpNuBJHnTB/1
3k75q0ENOO0b9gpN6Iv6cQCYaNHU50nnEpvqYKsHBW/VUkYvRmPuiYb8zg96hQJ7
8OrZ0UFl6gezW3JSlzxYSZ5XdvPheTPONYXqSQNYlprF3QMzO0nKeSXltaZLWMEQ
KPrUiMVqACSxl3TCb9hDEXv2CD3wNm2zjDxla0DhkE7nV2+N2oBS4qUbSSrTGlJc
h9PzPz8Zkdk36USu02AkG5jyT/13vj9qDIZq9ulPWEo6bE5sMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org