Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          M3cXuikewq23/wI17a1SmRvTnxoj2PNhFi0r7SFCyAg=
Subject key identifier:   34:68:75:A4:1C:32:4A:B6:B8:3F:35:E0:0B:AE:6A:B1:2C:9D:2A:7E
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       68DDB6A5103240207B6A99A3EFC128C5EF3E1FEB
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:13 +0000
ROA not before:           Thu 03 Aug 2023 13:04:13 +0000
ROA not after:            Thu 01 Aug 2024 13:09:13 +0000
asID:                     262617
IP address blocks:        177.85.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:dd:b6:a5:10:32:40:20:7b:6a:99:a3:ef:c1:28:c5:ef:3e:1f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:13 2023 GMT
            Not After : Aug  1 13:09:13 2024 GMT
        Subject: CN=346875A41C324AB6B83F35E00BAE6AB12C9D2A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:7a:20:89:44:1b:11:51:02:3f:fb:24:d8:
                    75:d6:4e:78:90:ba:c2:8c:d1:e4:c9:4e:50:b8:ab:
                    3c:90:3b:41:aa:49:20:36:ad:93:e9:ff:06:8a:17:
                    e9:5f:17:4a:46:b7:91:87:b0:06:d6:4e:e2:a9:ec:
                    e1:10:45:78:ec:f2:99:f3:e4:44:05:b8:30:b4:7c:
                    04:90:87:5b:d5:33:52:28:da:b5:91:4e:61:eb:f4:
                    08:72:62:33:6c:af:dc:a9:86:c6:cf:73:a6:48:04:
                    8b:58:23:57:a8:ad:a9:f6:9d:f1:bc:0c:14:10:fc:
                    60:b7:e1:98:f5:02:57:c6:e1:a7:68:61:5a:90:00:
                    0b:97:3c:5d:46:cb:c6:7c:56:c7:27:d4:4f:c4:80:
                    0b:ee:21:4f:46:25:74:db:9e:5a:48:00:a8:23:3b:
                    ff:d7:ec:2e:6e:ef:0c:62:bb:c6:47:31:d1:d9:91:
                    3c:da:88:f6:27:44:bc:e2:46:e7:dd:73:56:7c:03:
                    01:7c:0c:4c:ae:4e:0c:9a:be:08:41:51:60:d4:3f:
                    24:a1:f3:a0:42:be:96:0c:de:6b:06:4b:71:e1:93:
                    b5:12:16:72:fa:b3:0b:a7:2b:6a:33:49:80:76:e1:
                    4d:d7:d3:82:34:57:57:8a:71:66:4d:de:70:5d:76:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:75:A4:1C:32:4A:B6:B8:3F:35:E0:0B:AE:6A:B1:2C:9D:2A:7E
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:81:38:a6:76:8c:24:a2:83:a4:98:64:20:ed:5f:8a:52:29:
         d6:78:63:ac:9a:69:68:49:a1:08:d0:b5:0e:02:63:3d:dd:6b:
         68:6b:c6:69:38:83:70:57:33:89:7e:e1:37:30:93:b3:20:66:
         00:70:f1:8e:8a:a3:c0:f0:1f:f3:90:06:7a:67:c7:af:9b:a9:
         92:ea:7b:29:e3:27:61:3b:60:08:3c:22:b2:69:63:fa:e7:7c:
         c7:90:da:5b:42:1c:30:cc:5d:13:69:53:4d:b0:7b:81:9b:79:
         90:1b:52:ff:2d:e0:d1:54:06:e4:bf:72:74:ec:4f:db:25:4a:
         a7:e4:c1:2e:e7:30:86:47:1e:20:63:58:9e:12:e2:c0:25:8a:
         62:b8:a8:3b:51:ee:52:05:4a:85:f4:e6:4e:ac:c8:05:10:b8:
         71:00:76:1b:00:da:41:34:aa:50:ae:54:bf:65:18:40:e0:ca:
         1c:2f:57:53:d9:4b:1a:3f:ee:d2:f1:d1:53:60:ae:04:79:bd:
         84:45:b0:13:63:92:3e:c0:70:c5:9e:79:e4:66:b6:26:84:8e:
         08:d0:ed:5e:76:be:b5:54:d0:9a:2f:6b:5b:e3:b7:9d:00:81:
         0b:55:9c:8c:cf:4a:65:22:b7:21:d8:9f:e7:9f:92:e4:1d:d6:
         b8:5e:30:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaN22pRAyQCB7apmj78Eoxe8+H+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTNaFw0yNDA4MDExMzA5MTNaMDMxMTAvBgNV
BAMTKDM0Njg3NUE0MUMzMjRBQjZCODNGMzVFMDBCQUU2QUIxMkM5RDJBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fXogiUQbEVECP/sk2HXWTniQ
usKM0eTJTlC4qzyQO0GqSSA2rZPp/waKF+lfF0pGt5GHsAbWTuKp7OEQRXjs8pnz
5EQFuDC0fASQh1vVM1Io2rWRTmHr9AhyYjNsr9yphsbPc6ZIBItYI1eoran2nfG8
DBQQ/GC34Zj1AlfG4adoYVqQAAuXPF1Gy8Z8Vscn1E/EgAvuIU9GJXTbnlpIAKgj
O//X7C5u7wxiu8ZHMdHZkTzaiPYnRLziRufdc1Z8AwF8DEyuTgyavghBUWDUPySh
86BCvpYM3msGS3Hhk7USFnL6swunK2ozSYB24U3X04I0V1eKcWZN3nBddox3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNGh1pBwySra4PzXgC65qsSydKn4wHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzEzNzM3MmUzODM1MmUzMjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVekwDQYJKoZIhvcNAQELBQADggEBAAGBOKZ2
jCSig6SYZCDtX4pSKdZ4Y6yaaWhJoQjQtQ4CYz3da2hrxmk4g3BXM4l+4Tcwk7Mg
ZgBw8Y6Ko8DwH/OQBnpnx6+bqZLqeynjJ2E7YAg8IrJpY/rnfMeQ2ltCHDDMXRNp
U02we4GbeZAbUv8t4NFUBuS/cnTsT9slSqfkwS7nMIZHHiBjWJ4S4sAlimK4qDtR
7lIFSoX05k6syAUQuHEAdhsA2kE0qlCuVL9lGEDgyhwvV1PZSxo/7tLx0VNgrgR5
vYRFsBNjkj7AcMWeeeRmtiaEjgjQ7V52vrVU0Jova1vjt50AgQtVnIzPSmUityHY
n+efkuQd1rheMDc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org