Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39312e302f32342d3234203d3e20323633303134.roa
File:                     3137372e31302e39312e302f32342d3234203d3e20323633303134.roa (raw, json)
Hash identifier:          S33P7JEvOFUIUDsOY00FqqLTd2ZBZ+r8w3Scus+NyYg=
Subject key identifier:   65:6E:A3:66:B4:E5:3E:3C:28:35:D3:F5:27:6C:B7:C7:6A:87:87:46
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       7B45B84E9E3245586139CC0BA5CCB24635115C70
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39312e302f32342d3234203d3e20323633303134.roa
Signing time:             Thu 29 Jun 2023 20:00:00 +0000
ROA not before:           Thu 29 Jun 2023 19:55:00 +0000
ROA not after:            Thu 27 Jun 2024 20:00:00 +0000
asID:                     263014
IP address blocks:        177.10.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:b8:4e:9e:32:45:58:61:39:cc:0b:a5:cc:b2:46:35:11:5c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Jun 29 19:55:00 2023 GMT
            Not After : Jun 27 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:26:45:4a:7f:e8:9c:04:a1:d2:b6:aa:c9:
                    5f:13:4d:57:33:02:b0:46:a4:84:a6:6e:65:42:91:
                    e6:2c:da:0e:c4:63:7d:18:f8:8a:b4:0c:49:23:18:
                    3c:dd:49:b3:57:c2:2f:4c:bc:81:cf:ff:94:e9:1e:
                    13:f5:ce:ab:59:28:71:e5:20:b0:d2:1f:ce:ec:db:
                    b8:0f:11:fe:ee:9a:aa:73:08:4c:29:46:07:6c:be:
                    4b:c5:30:1c:cd:6a:b4:f1:24:58:67:7e:7b:88:07:
                    98:7b:05:ef:e8:05:6e:76:9d:a3:d6:dd:bd:b5:15:
                    11:19:70:72:6d:3f:b0:54:40:7a:54:e4:ea:2d:e7:
                    c1:b3:dc:dd:5e:49:9e:f7:7b:51:e9:7d:9f:eb:45:
                    a6:e1:6f:04:e4:89:70:a6:89:48:27:42:ee:7e:bf:
                    1b:28:a7:05:a7:34:9f:8d:6f:9f:02:03:e6:52:8e:
                    ab:d9:65:c6:14:fc:e8:9d:4b:67:ef:d0:be:12:b2:
                    e4:dd:56:98:07:27:bc:1b:8f:88:33:d0:70:d5:69:
                    cf:25:9c:a3:b9:25:0f:f4:a8:3e:00:5f:21:ee:8f:
                    fd:ae:b2:c0:4b:0d:b0:93:09:90:f1:b4:bb:da:ff:
                    34:48:00:2e:41:35:05:12:42:0b:50:92:37:eb:11:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:A3:66:B4:E5:3E:3C:28:35:D3:F5:27:6C:B7:C7:6A:87:87:46
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39312e302f32342d3234203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:ba:0f:5f:54:24:7b:da:a5:2b:a9:3e:a3:c1:f1:ed:b9:
         41:0b:a5:83:77:fd:1b:21:ef:09:4b:d2:a8:45:d6:29:55:c1:
         fb:1f:53:94:26:d7:2b:0b:7a:06:7e:12:e6:7c:f5:cd:9f:9a:
         08:b0:18:99:ff:bc:d6:8d:69:86:f2:d8:69:e6:28:fa:01:1a:
         67:96:61:b5:d1:9f:8f:00:ef:07:d1:d7:51:83:1b:33:7a:c9:
         55:bc:e6:f3:52:65:a3:1b:a6:b5:e7:2d:86:ab:a1:c6:e0:76:
         28:b0:89:e3:14:3c:5e:03:ff:90:aa:5a:8f:39:79:52:b7:2f:
         2d:68:6e:15:0a:7e:8a:8d:1c:a9:9b:bf:e1:8f:37:80:b6:77:
         2e:2b:79:64:60:e7:4b:ef:57:b5:d2:da:10:fc:a4:ae:6d:fd:
         55:a3:78:f0:37:7b:c7:d5:f6:18:8f:15:1f:4f:66:52:00:f8:
         22:ff:7f:af:90:1f:49:46:5b:7d:87:56:a9:92:6e:7b:e1:dd:
         06:72:ba:6f:09:b7:10:ed:f2:57:5e:7f:bf:b6:af:1f:fd:4d:
         2d:ca:1f:54:94:02:02:bb:00:be:5a:4a:c5:af:b4:20:fa:34:
         5c:47:a9:1d:a0:d7:08:b3:78:88:ba:46:0b:64:1d:75:6c:13:
         ba:3f:4c:06
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUe0W4Tp4yRVhhOcwLpcyyRjURXHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJEOUY2NTA3RDdGNUJDNEU3NjJENjFGRTYzOEU0MTlG
MUFCMzRFNDAeFw0yMzA2MjkxOTU1MDBaFw0yNDA2MjcyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTlFMjI2NDU0QTdGRTg5QzA0
QTFEMkI2QUFDOTVGMTM0RDU3MzMwMkIwNDZBNDg0QTY2RTY1NDI5MUU2MkNEQTBF
QzQ2MzdEMThGODhBQjQwQzQ5MjMxODNDREQ0OUIzNTdDMjJGNENCQzgxQ0ZGRjk0
RTkxRTEzRjVDRUFCNTkyODcxRTUyMEIwRDIxRkNFRUNEQkI4MEYxMUZFRUU5QUFB
NzMwODRDMjk0NjA3NkNCRTRCQzUzMDFDQ0Q2QUI0RjEyNDU4Njc3RTdCODgwNzk4
N0IwNUVGRTgwNTZFNzY5REEzRDZEREJEQjUxNTExMTk3MDcyNkQzRkIwNTQ0MDdB
NTRFNEVBMkRFN0MxQjNEQ0RENUU0OTlFRjc3QjUxRTk3RDlGRUI0NUE2RTE2RjA0
RTQ4OTcwQTY4OTQ4Mjc0MkVFN0VCRjFCMjhBNzA1QTczNDlGOEQ2RjlGMDIwM0U2
NTI4RUFCRDk2NUM2MTRGQ0U4OUQ0QjY3RUZEMEJFMTJCMkU0REQ1Njk4MDcyN0JD
MUI4Rjg4MzNEMDcwRDU2OUNGMjU5Q0EzQjkyNTBGRjRBODNFMDA1RjIxRUU4RkZE
QUVCMkMwNEIwREIwOTMwOTkwRjFCNEJCREFGRjM0NDgwMDJFNDEzNTA1MTI0MjBC
NTA5MjM3RUIxMTk2RTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqeImRUp/6JwEodK2qslfE01XMwKwRqSEpm5lQpHmLNoOxGN9GPiK
tAxJIxg83UmzV8IvTLyBz/+U6R4T9c6rWShx5SCw0h/O7Nu4DxH+7pqqcwhMKUYH
bL5LxTAczWq08SRYZ357iAeYewXv6AVudp2j1t29tRURGXBybT+wVEB6VOTqLefB
s9zdXkme93tR6X2f60Wm4W8E5IlwpolIJ0Lufr8bKKcFpzSfjW+fAgPmUo6r2WXG
FPzonUtn79C+ErLk3VaYBye8G4+IM9Bw1WnPJZyjuSUP9Kg+AF8h7o/9rrLASw2w
kwmQ8bS72v80SAAuQTUFEkILUJI36xGW4QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGVuo2a05T48KDXT9Sdst8dqh4dGMB8GA1UdIwQYMBaAFJvZ9lB9f1vE52LWH+Y4
5BnxqzTkMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3eG5STXhMTWVFTENl
ajNpemRGYVNUREhNTXBiaVVueVdzbU1USHNBQnV2LzAvOUJEOUY2NTA3RDdGNUJD
NEU3NjJENjFGRTYzOEU0MTlGMUFCMzRFNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QkQ5RjY1MDdEN0Y1QkM0RTc2MkQ2MUZFNjM4RTQxOUYxQUIz
NEU0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN3huUk14TE1lRUxDZWozaXpk
RmFTVERITU1wYmlVbnlXc21NVEhzQUJ1di8wLzMxMzczNzJlMzEzMDJlMzkzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMwMzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALEK
WzANBgkqhkiG9w0BAQsFAAOCAQEAZti6D19UJHvapSupPqPB8e25QQulg3f9GyHv
CUvSqEXWKVXB+x9TlCbXKwt6Bn4S5nz1zZ+aCLAYmf+81o1phvLYaeYo+gEaZ5Zh
tdGfjwDvB9HXUYMbM3rJVbzm81JloxumtecthquhxuB2KLCJ4xQ8XgP/kKpajzl5
UrcvLWhuFQp+io0cqZu/4Y83gLZ3Lit5ZGDnS+9XtdLaEPykrm39VaN48Dd7x9X2
GI8VH09mUgD4Iv9/r5AfSUZbfYdWqZJue+HdBnK6bwm3EO3yV15/v7avH/1NLcof
VJQCArsAvlpKxa+0IPo0XEepHaDXCLN4iLpGC2QddWwTuj9MBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org