Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137372e32322e3234302e302f32312d3234203d3e203238323634.roa
File:                     3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (raw, json)
Hash identifier:          UfAdPBT6gPDx9sdggBBHhOpl1Q9GRpANpwwhwAS1HXI=
Subject key identifier:   A9:62:A0:CA:DB:81:88:89:CE:86:73:BD:2D:F7:0E:46:D5:93:F7:36
Certificate issuer:       /CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Certificate serial:       1B8F73B361E9FF7A939E6492FED492C22719D4E5
Authority key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137372e32322e3234302e302f32312d3234203d3e203238323634.roa
Signing time:             Mon 02 Oct 2023 12:21:43 +0000
ROA not before:           Mon 02 Oct 2023 12:16:43 +0000
ROA not after:            Mon 30 Sep 2024 12:21:43 +0000
asID:                     28264
IP address blocks:        177.22.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:73:b3:61:e9:ff:7a:93:9e:64:92:fe:d4:92:c2:27:19:d4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Validity
            Not Before: Oct  2 12:16:43 2023 GMT
            Not After : Sep 30 12:21:43 2024 GMT
        Subject: CN=A962A0CADB818889CE8673BD2DF70E46D593F736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:a9:de:1e:85:f9:8b:53:0d:92:b8:47:ed:
                    2e:a7:e1:cf:0a:43:73:19:b7:09:fc:3c:37:20:1d:
                    d7:42:55:e4:78:6b:38:ba:c0:0f:15:7b:a6:28:14:
                    a4:c9:26:54:f3:97:75:87:93:22:70:65:c7:2f:f8:
                    da:87:66:92:e6:7a:57:68:2f:d8:14:1f:c0:6e:25:
                    13:32:2e:60:a0:45:95:94:9f:e5:2a:e2:e1:e2:81:
                    2b:df:3e:0f:79:91:fc:b8:42:fc:6c:9e:14:d8:62:
                    50:50:51:6f:82:a0:55:ae:3b:2b:47:9a:76:29:fe:
                    a5:13:73:71:af:9b:75:46:d4:23:46:05:f9:25:99:
                    9e:33:66:49:64:b0:53:d8:93:27:d8:77:0a:cf:36:
                    68:c9:95:3f:30:dd:29:63:88:ff:46:df:6d:02:e4:
                    7b:61:71:94:9f:c2:13:83:63:79:61:2b:c0:88:28:
                    4a:c1:6a:41:be:c9:a2:df:31:84:35:2e:ce:87:53:
                    ec:f3:4b:0b:97:34:01:a9:88:df:b1:a3:44:96:8b:
                    83:15:d3:82:2a:4e:bd:ee:db:a2:4f:ef:a3:4d:3a:
                    8e:76:8a:dc:75:c3:e3:b0:d3:9e:ed:f4:4b:f2:73:
                    51:9a:18:b9:79:43:17:46:e0:ef:b3:b5:d2:99:3a:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:A0:CA:DB:81:88:89:CE:86:73:BD:2D:F7:0E:46:D5:93:F7:36
            X509v3 Authority Key Identifier:
                keyid:28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137372e32322e3234302e302f32312d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:1e:7d:48:20:41:6b:04:ac:33:81:59:1c:45:59:88:3f:
         17:a6:8a:f1:ab:19:99:45:72:b9:34:e7:8e:03:1a:26:d7:e3:
         dc:7b:f3:57:9f:f4:e1:e4:d9:25:8f:7f:d6:b2:db:40:6b:84:
         1b:1a:0b:2d:6f:18:31:aa:ec:0c:3c:89:95:19:d6:a1:0b:ee:
         f6:ac:64:97:0c:f3:88:4a:1b:88:1d:6f:01:98:aa:fb:c4:78:
         fc:a4:d7:93:ab:f8:c7:8e:dd:c8:56:a9:2b:02:78:4f:c7:2b:
         41:2c:1c:27:c0:34:c6:19:0b:ee:8b:5d:31:3a:42:ce:44:a5:
         a1:af:19:ea:ac:05:b9:6e:1b:1b:30:13:0d:3f:96:47:e0:37:
         20:b4:a4:b2:77:ae:7a:d7:ef:dd:bd:56:4e:46:f7:cc:d1:68:
         f1:80:16:55:8c:f6:81:32:2d:19:03:97:d5:73:a1:00:60:79:
         72:29:32:5e:3d:4c:0a:92:14:4e:4d:52:0e:5e:8a:a8:ed:6d:
         ef:fa:18:2c:8a:89:86:b2:0c:42:53:10:0f:0a:c8:4a:37:b3:
         89:4e:a5:13:c6:e2:52:46:08:ba:6f:07:52:b8:ce:73:1f:d1:
         a8:47:97:63:73:8d:2c:16:a0:61:7d:c6:df:61:52:70:11:84:
         36:90:9f:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG49zs2Hp/3qTnmSS/tSSwicZ1OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGMjFGMTc0QjI5MUNFMkY3RjkyMEUyNDIyRDFEQzZB
RkZGQ0Q2QzAeFw0yMzEwMDIxMjE2NDNaFw0yNDA5MzAxMjIxNDNaMDMxMTAvBgNV
BAMTKEE5NjJBMENBREI4MTg4ODlDRTg2NzNCRDJERjcwRTQ2RDU5M0Y3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7aneHoX5i1MNkrhH7S6n4c8K
Q3MZtwn8PDcgHddCVeR4azi6wA8Ve6YoFKTJJlTzl3WHkyJwZccv+NqHZpLmeldo
L9gUH8BuJRMyLmCgRZWUn+Uq4uHigSvfPg95kfy4QvxsnhTYYlBQUW+CoFWuOytH
mnYp/qUTc3Gvm3VG1CNGBfklmZ4zZklksFPYkyfYdwrPNmjJlT8w3SljiP9G320C
5HthcZSfwhODY3lhK8CIKErBakG+yaLfMYQ1Ls6HU+zzSwuXNAGpiN+xo0SWi4MV
04IqTr3u26JP76NNOo52itx1w+Ow057t9Evyc1GaGLl5QxdG4O+ztdKZOsfrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqWKgytuBiInOhnO9LfcORtWT9zYwHwYDVR0j
BBgwFoAUKPIfF0spHOL3+SDiQi0dxq//zWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMC8yOEYyMUYxNzRCMjkxQ0UyRjdGOTIwRTI0MjJEMURDNkFGRkZDRDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RjIxRjE3NEIyOTFDRTJG
N0Y5MjBFMjQyMkQxREM2QUZGRkNENkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vkd0dOZ1E0Z1hxOHdCVE5IZmhOckc0UVUyTnpKWmdDUnZ2ejkzUVA4eVhtLzAv
MzEzNzM3MmUzMjMyMmUzMjM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsRbwMA0GCSqGSIb3DQEBCwUAA4IBAQArQB59SCBB
awSsM4FZHEVZiD8XporxqxmZRXK5NOeOAxom1+Pce/NXn/Th5Nklj3/WsttAa4Qb
GgstbxgxquwMPImVGdahC+72rGSXDPOIShuIHW8BmKr7xHj8pNeTq/jHjt3IVqkr
AnhPxytBLBwnwDTGGQvui10xOkLORKWhrxnqrAW5bhsbMBMNP5ZH4DcgtKSyd656
1+/dvVZORvfM0WjxgBZVjPaBMi0ZA5fVc6EAYHlyKTJePUwKkhROTVIOXoqo7W3v
+hgsiomGsgxCUxAPCshKN7OJTqUTxuJSRgi6bwdSuM5zH9GoR5djc40sFqBhfcbf
YVJwEYQ2kJ+G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org