Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137372e37332e33322e302f32322d3234203d3e20323633383830.roa
File:                     3137372e37332e33322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          xMJ2I4rSXJV4ZZ0FXHlIsyBNeKgSCTzuUvlo6lSQBjQ=
Subject key identifier:   44:E9:25:DE:60:58:F4:88:71:8A:58:EC:54:8B:31:F4:D4:26:B9:18
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       6FBB1A64D9E8AA11181F5EB35A6DA85E0D1DAD94
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137372e37332e33322e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 21:01:02 +0000
ROA not before:           Wed 12 Jul 2023 20:56:02 +0000
ROA not after:            Wed 10 Jul 2024 21:01:02 +0000
asID:                     263880
IP address blocks:        177.73.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bb:1a:64:d9:e8:aa:11:18:1f:5e:b3:5a:6d:a8:5e:0d:1d:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:56:02 2023 GMT
            Not After : Jul 10 21:01:02 2024 GMT
        Subject: CN=44E925DE6058F488718A58EC548B31F4D426B918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:9a:93:1c:1a:6b:46:2e:22:d0:fe:a2:49:
                    f1:3e:4a:dd:b5:69:5e:cd:e3:24:f1:a5:ef:e9:4e:
                    8b:3c:28:cc:ef:55:21:f1:b6:aa:b4:2e:b6:54:e0:
                    6c:7a:9d:29:74:51:0f:0a:ba:81:8b:75:ee:62:a9:
                    27:09:01:b1:ec:cf:d4:7e:4b:88:b1:f9:4e:46:16:
                    fb:be:68:fe:5a:d2:7c:c4:c5:5a:45:d8:c3:d9:57:
                    c6:ac:0e:c8:3d:0b:dc:02:63:04:fc:62:44:4d:95:
                    1f:77:1e:48:7c:18:61:45:ee:d7:49:f7:cb:75:fd:
                    e5:f2:fd:ba:ce:f3:2a:46:bb:3d:f9:8e:16:a8:cd:
                    1c:34:f2:1d:36:1f:ab:43:2d:3e:f5:12:d9:e1:c9:
                    63:d2:62:e0:bd:b7:ca:3d:71:d4:cf:50:4a:85:84:
                    e6:ec:44:94:c0:b8:38:83:db:dd:81:a0:0a:ad:c8:
                    62:16:0b:56:28:35:23:c2:15:c9:96:e8:60:35:7d:
                    fe:62:46:d9:3d:96:ee:3f:10:f1:01:01:60:bd:be:
                    01:3c:e8:33:6b:53:c8:97:65:91:91:34:5b:b9:90:
                    7f:c2:e4:93:95:f3:ba:a5:d1:88:d6:09:8e:83:87:
                    7f:53:ee:f6:f5:ee:b2:4e:04:ef:8e:b3:c5:16:5f:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E9:25:DE:60:58:F4:88:71:8A:58:EC:54:8B:31:F4:D4:26:B9:18
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137372e37332e33322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:81:4c:8d:f0:51:c3:9d:77:b4:74:a7:b2:99:da:0f:fc:76:
         6f:29:d4:c0:c9:50:89:9c:72:a7:e8:92:58:41:ad:fd:64:66:
         63:56:4c:3e:a5:d2:91:4a:a1:87:42:d6:61:7d:36:75:a8:af:
         d3:46:9f:d7:2b:47:29:a5:5a:4c:7f:46:1c:45:14:6a:5b:3f:
         c9:e4:3e:5c:c9:d9:35:90:f3:43:df:91:62:3e:9d:3d:54:db:
         e9:71:11:47:c8:f3:41:0c:cf:1a:d1:66:b2:20:14:c6:15:f5:
         71:b2:6a:e9:78:3e:73:15:81:c7:22:cf:64:1c:74:92:bf:be:
         c9:c6:89:23:02:8d:95:c5:72:5d:a0:7e:cb:57:6f:54:0e:a4:
         f6:8d:51:cb:9b:fd:96:af:77:b9:b7:f0:22:b4:b9:8c:c0:42:
         2e:ac:27:01:c5:73:b0:45:9c:da:36:b9:2e:37:11:bf:25:97:
         e7:45:63:4a:0f:f0:88:e8:fb:30:e7:db:63:2b:62:c2:03:98:
         91:2a:f8:14:3c:2d:d9:3d:47:b8:95:45:f3:b8:48:ee:48:e7:
         ab:6a:ba:00:e7:6f:67:64:b7:7e:95:98:22:d3:f2:80:60:3f:
         01:43:85:b0:00:7b:72:fb:a3:65:12:43:20:a3:d0:72:c7:6a:
         55:39:e1:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb7saZNnoqhEYH16zWm2oXg0drZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQwMDIyRDY3RkIxRDAxQzdBRjZBRDkxOTMxNkY3NEM2
QkQ2MUVDMzAeFw0yMzA3MTIyMDU2MDJaFw0yNDA3MTAyMTAxMDJaMDMxMTAvBgNV
BAMTKDQ0RTkyNURFNjA1OEY0ODg3MThBNThFQzU0OEIzMUY0RDQyNkI5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCod5qTHBprRi4i0P6iSfE+St21
aV7N4yTxpe/pTos8KMzvVSHxtqq0LrZU4Gx6nSl0UQ8KuoGLde5iqScJAbHsz9R+
S4ix+U5GFvu+aP5a0nzExVpF2MPZV8asDsg9C9wCYwT8YkRNlR93Hkh8GGFF7tdJ
98t1/eXy/brO8ypGuz35jhaozRw08h02H6tDLT71EtnhyWPSYuC9t8o9cdTPUEqF
hObsRJTAuDiD292BoAqtyGIWC1YoNSPCFcmW6GA1ff5iRtk9lu4/EPEBAWC9vgE8
6DNrU8iXZZGRNFu5kH/C5JOV87ql0YjWCY6Dh39T7vb17rJOBO+Os8UWX8CrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUROkl3mBY9IhxiljsVIsx9NQmuRgwHwYDVR0j
BBgwFoAUTQAi1n+x0Bx69q2Rkxb3TGvWHsMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhK
dkovMC80RDAwMjJENjdGQjFEMDFDN0FGNkFEOTE5MzE2Rjc0QzZCRDYxRUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREMDAyMkQ2N0ZCMUQwMUM3
QUY2QUQ5MTkzMTZGNzRDNkJENjFFQzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5TERCaUN2OVVoTmRDb0NnYk5OVGRmTll5cG1YNEIzOUJwY2dYUTloSnZKLzAv
MzEzNzM3MmUzNzMzMmUzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzgzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUkgMA0GCSqGSIb3DQEBCwUAA4IBAQC7gUyN8FHD
nXe0dKeymdoP/HZvKdTAyVCJnHKn6JJYQa39ZGZjVkw+pdKRSqGHQtZhfTZ1qK/T
Rp/XK0cppVpMf0YcRRRqWz/J5D5cydk1kPND35FiPp09VNvpcRFHyPNBDM8a0Way
IBTGFfVxsmrpeD5zFYHHIs9kHHSSv77JxokjAo2VxXJdoH7LV29UDqT2jVHLm/2W
r3e5t/AitLmMwEIurCcBxXOwRZzaNrkuNxG/JZfnRWNKD/CI6Psw59tjK2LCA5iR
KvgUPC3ZPUe4lUXzuEjuSOeraroA529nZLd+lZgi0/KAYD8BQ4WwAHty+6NlEkMg
o9Byx2pVOeGu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org