Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa (raw, json)
Hash identifier:          vxjsjw3Cq6QzfMM2+BdEHBpn/O6C2sqExs2GSIPbbeg=
Subject key identifier:   EE:4B:00:62:2F:B5:6B:65:40:2C:1B:BC:7A:45:18:E0:F6:95:FF:AD
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       13A0B4B4E8C72AEAE4DCF6FD9D4D02FCAEDC40E2
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa
Signing time:             Sun 28 Jan 2024 02:01:31 +0000
ROA not before:           Sun 28 Jan 2024 01:56:31 +0000
ROA not after:            Sun 26 Jan 2025 02:01:31 +0000
asID:                     52873
IP address blocks:        177.128.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:b4:b4:e8:c7:2a:ea:e4:dc:f6:fd:9d:4d:02:fc:ae:dc:40:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 28 01:56:31 2024 GMT
            Not After : Jan 26 02:01:31 2025 GMT
        Subject: CN=EE4B00622FB56B65402C1BBC7A4518E0F695FFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:7d:5e:ab:0d:29:d8:89:b4:77:e9:4e:8a:
                    ca:6e:46:2a:9c:36:84:01:b7:0b:58:1a:5c:46:34:
                    7c:e5:4f:4d:fc:1a:94:f6:c2:69:80:b8:c7:c6:e8:
                    bb:29:e8:95:a9:fc:bb:59:f8:c0:89:b0:cd:4f:c8:
                    ff:8b:91:b1:e7:e5:3c:77:04:e1:e0:04:10:e2:0a:
                    94:e4:c4:40:0e:ec:c9:bd:5b:48:38:1c:ef:0c:1a:
                    b2:99:f3:7e:59:77:e5:1b:c6:cf:6d:68:60:d0:3f:
                    70:74:f7:24:c5:17:5f:7c:d3:0a:6b:6f:7e:96:9b:
                    66:97:9c:2c:d4:22:45:63:0a:07:9c:ba:4f:a2:dc:
                    1a:ff:16:96:b3:1b:3d:e2:4a:0c:50:e5:ad:82:3f:
                    60:48:c1:78:fa:42:70:b2:be:aa:0b:9f:ee:2c:03:
                    59:e4:6b:0a:04:59:5a:40:4f:32:e0:d4:9d:fd:47:
                    b3:f7:ef:e6:e0:e5:84:6b:f9:05:91:d0:63:76:6b:
                    40:60:fe:ad:8d:41:38:9d:b7:c6:1b:24:c7:b6:ae:
                    80:60:bd:f9:1b:2c:91:5b:74:dd:fe:11:2a:e3:87:
                    24:d2:54:b7:b4:82:52:7a:a9:fe:49:a8:85:9d:81:
                    50:15:a3:3c:f9:7d:18:c8:08:b5:8e:1e:75:61:fb:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:00:62:2F:B5:6B:65:40:2C:1B:BC:7A:45:18:E0:F6:95:FF:AD
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:63:f0:0b:2f:25:53:fc:85:34:73:83:5d:5f:e3:d5:81:3d:
         6f:f2:08:97:94:de:ba:8b:54:1b:ee:51:a4:14:84:1f:42:cd:
         78:1e:7a:9b:ae:d4:00:3b:84:25:36:9c:2b:3b:c3:4a:00:86:
         14:d1:91:18:48:45:3d:a8:53:06:82:bf:5e:4e:cc:cf:77:55:
         ef:17:4d:fb:6f:4a:ea:dd:fb:ba:c3:bd:14:0f:42:3b:12:c2:
         9f:35:81:62:2d:b7:db:f3:81:88:4f:b7:52:01:90:a3:65:91:
         2f:00:e6:41:ea:85:aa:95:36:84:bc:46:9a:10:e2:0f:e1:e4:
         5a:dc:92:2b:f0:dc:27:b5:75:ec:ab:44:7c:7b:c5:84:3a:7b:
         d6:a6:5c:86:c7:8e:d2:1f:6a:d9:b5:78:70:83:71:23:8a:a8:
         48:2e:00:1a:1c:fe:67:8b:06:01:67:c7:35:20:61:a4:6b:73:
         d5:43:94:a8:2b:fe:7a:90:14:48:fe:3e:79:9c:ee:ff:31:88:
         72:ab:d1:17:6b:b0:0d:d0:18:6b:66:17:93:35:71:ec:49:47:
         4d:3f:8f:f4:84:ed:8c:7a:3f:cf:ea:97:56:86:71:19:08:65:
         b8:19:2c:0d:99:e9:f5:f8:70:94:7d:76:3b:71:87:9e:e9:eb:
         3e:f9:87:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE6C0tOjHKurk3Pb9nU0C/K7cQOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjgwMTU2MzFaFw0yNTAxMjYwMjAxMzFaMDMxMTAvBgNV
BAMTKEVFNEIwMDYyMkZCNTZCNjU0MDJDMUJCQzdBNDUxOEUwRjY5NUZGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L31eqw0p2Im0d+lOispuRiqc
NoQBtwtYGlxGNHzlT038GpT2wmmAuMfG6Lsp6JWp/LtZ+MCJsM1PyP+LkbHn5Tx3
BOHgBBDiCpTkxEAO7Mm9W0g4HO8MGrKZ835Zd+Ubxs9taGDQP3B09yTFF1980wpr
b36Wm2aXnCzUIkVjCgecuk+i3Br/FpazGz3iSgxQ5a2CP2BIwXj6QnCyvqoLn+4s
A1nkawoEWVpATzLg1J39R7P37+bg5YRr+QWR0GN2a0Bg/q2NQTidt8YbJMe2roBg
vfkbLJFbdN3+ESrjhyTSVLe0glJ6qf5JqIWdgVAVozz5fRjICLWOHnVh+/bPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7ksAYi+1a2VALBu8ekUY4PaV/60wHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxgNAwDQYJKoZIhvcNAQELBQADggEBAChj8Asv
JVP8hTRzg11f49WBPW/yCJeU3rqLVBvuUaQUhB9CzXgeepuu1AA7hCU2nCs7w0oA
hhTRkRhIRT2oUwaCv15OzM93Ve8XTftvSurd+7rDvRQPQjsSwp81gWItt9vzgYhP
t1IBkKNlkS8A5kHqhaqVNoS8RpoQ4g/h5Frckivw3Ce1deyrRHx7xYQ6e9amXIbH
jtIfatm1eHCDcSOKqEguABoc/meLBgFnxzUgYaRrc9VDlKgr/nqQFEj+Pnmc7v8x
iHKr0RdrsA3QGGtmF5M1cexJR00/j/SE7Yx6P8/ql1aGcRkIZbgZLA2Z6fX4cJR9
djtxh57p6z75h/E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org