Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          IsF0kALu8uq0ngaWjixEFQ2p/3FOZMGeoME7Zmar/8s=
Subject key identifier:   B0:B5:1D:E8:AD:E0:4E:F6:99:C3:D6:9B:12:FF:A0:46:11:94:6C:93
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       6C18E1367BD2BB44A869F6CCAAB46E0A6F1078B1
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 12 Apr 2024 18:39:00 +0000
ROA not before:           Fri 12 Apr 2024 18:34:00 +0000
ROA not after:            Fri 11 Apr 2025 18:39:00 +0000
asID:                     263948
IP address blocks:        177.67.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:18:e1:36:7b:d2:bb:44:a8:69:f6:cc:aa:b4:6e:0a:6f:10:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Apr 12 18:34:00 2024 GMT
            Not After : Apr 11 18:39:00 2025 GMT
        Subject: CN=B0B51DE8ADE04EF699C3D69B12FFA04611946C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:3b:2f:b8:61:66:5a:a9:ef:2d:14:22:98:
                    5f:c0:e9:d2:a8:63:02:15:e7:07:3c:2e:b0:22:63:
                    8f:4f:5a:ba:34:f1:8d:bc:e3:41:1d:f8:d4:a7:65:
                    55:0c:98:9d:3a:f7:bf:3e:b7:ea:8f:cd:43:4e:dd:
                    d1:67:fd:30:e7:8e:1e:0c:0b:e4:d5:de:4d:e0:5c:
                    d6:f5:19:24:03:52:d9:ff:ac:e7:45:d9:89:c5:c2:
                    4a:06:5b:e0:2d:db:b7:30:f0:a7:dc:7d:3b:bb:a7:
                    a4:aa:90:7a:5f:2c:21:d9:c5:f1:5a:0a:9a:d1:d4:
                    69:4e:0e:5a:33:69:17:db:99:63:57:bb:33:51:c5:
                    ce:e1:28:bf:2e:70:9b:c8:d8:2e:c1:23:d9:59:a9:
                    48:99:3d:0d:1b:e8:02:5d:b9:0c:19:ad:4c:5f:cf:
                    4c:10:45:c6:ef:92:0d:ce:16:33:f3:a5:38:02:a8:
                    38:ac:80:0c:38:1e:ac:54:9d:cb:9d:22:4a:26:80:
                    8f:f6:66:dd:13:1d:c5:c5:4a:07:fa:09:6d:3a:18:
                    19:dc:44:a1:b9:87:bc:7f:52:79:1f:ae:29:c5:0e:
                    f0:19:80:03:41:74:13:67:94:03:17:52:44:ab:fd:
                    85:6b:91:d7:4e:a5:25:35:7a:19:90:b0:aa:5e:5d:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:1D:E8:AD:E0:4E:F6:99:C3:D6:9B:12:FF:A0:46:11:94:6C:93
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33382e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:62:de:40:11:6a:f5:d3:d2:69:41:83:a6:a3:45:ba:b8:a9:
         60:cd:c7:7e:17:d6:1d:7d:24:e1:e3:50:f8:16:ef:e8:f2:da:
         3b:6e:e9:2c:74:f3:6c:47:87:c9:62:2a:65:e5:49:73:1d:55:
         2e:44:0d:4c:6c:85:29:8e:ce:99:82:05:76:54:41:43:45:68:
         2a:3f:1c:9a:fd:26:44:17:e7:ff:b6:10:4d:9f:af:c4:e2:91:
         6a:bc:66:37:43:84:31:c8:07:ed:94:a6:6d:bd:ce:35:91:e6:
         0e:41:2b:8d:15:a5:67:d7:93:a3:6a:af:12:d0:e1:44:26:25:
         86:ad:c8:b3:81:f6:0f:26:ac:36:bb:cf:71:66:90:93:31:fb:
         d0:5e:82:03:c1:7e:22:4a:0b:aa:45:47:19:37:10:47:b7:fb:
         2c:92:37:5d:81:36:af:e5:19:58:c1:c5:da:f2:9c:7c:82:99:
         0b:fb:a9:96:4f:d6:8d:ab:9a:f2:8e:20:c0:90:0f:10:02:f6:
         36:2f:5d:5c:85:ff:ee:36:b0:e7:d0:f8:2e:30:fc:dc:94:ff:
         be:52:6b:00:c3:17:98:e4:4d:21:1f:04:42:b5:39:39:35:34:
         12:15:f7:db:a9:da:63:3f:43:be:1c:ab:90:3e:0b:d7:37:2a:
         6e:de:b4:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbBjhNnvSu0SoafbMqrRuCm8QeLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGQkM4NzFFQjEwNEREQjVFMkJCNEJDNDNBNjNBMzUx
NDhEQjgyMDAeFw0yNDA0MTIxODM0MDBaFw0yNTA0MTExODM5MDBaMDMxMTAvBgNV
BAMTKEIwQjUxREU4QURFMDRFRjY5OUMzRDY5QjEyRkZBMDQ2MTE5NDZDOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwjsvuGFmWqnvLRQimF/A6dKo
YwIV5wc8LrAiY49PWro08Y2840Ed+NSnZVUMmJ06978+t+qPzUNO3dFn/TDnjh4M
C+TV3k3gXNb1GSQDUtn/rOdF2YnFwkoGW+At27cw8KfcfTu7p6SqkHpfLCHZxfFa
CprR1GlODlozaRfbmWNXuzNRxc7hKL8ucJvI2C7BI9lZqUiZPQ0b6AJduQwZrUxf
z0wQRcbvkg3OFjPzpTgCqDisgAw4HqxUncudIkomgI/2Zt0THcXFSgf6CW06GBnc
RKG5h7x/UnkfrinFDvAZgANBdBNnlAMXUkSr/YVrkddOpSU1ehmQsKpeXSgLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsLUd6K3gTvaZw9abEv+gRhGUbJMwHwYDVR0j
BBgwFoAUofvIcesQTdteK7S8Q6Y6NRSNuCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1SS1REUUJlR1ZFREdHeWpXaTh0VldMWGpVVHRzamVIbUR2Wmg0UkpF
aXEvMC9BMUZCQzg3MUVCMTA0RERCNUUyQkI0QkM0M0E2M0EzNTE0OERCODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExRkJDODcxRUIxMDREREI1
RTJCQjRCQzQzQTYzQTM1MTQ4REI4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtUktURFFCZUdWRURHR3lqV2k4dFZXTFhqVVR0c2plSG1EdlpoNFJKRWlxLzAv
MzEzNzM3MmUzNjM3MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUMmMA0GCSqGSIb3DQEBCwUAA4IBAQBjYt5AEWr1
09JpQYOmo0W6uKlgzcd+F9YdfSTh41D4Fu/o8to7buksdPNsR4fJYipl5UlzHVUu
RA1MbIUpjs6ZggV2VEFDRWgqPxya/SZEF+f/thBNn6/E4pFqvGY3Q4QxyAftlKZt
vc41keYOQSuNFaVn15Ojaq8S0OFEJiWGrcizgfYPJqw2u89xZpCTMfvQXoIDwX4i
SguqRUcZNxBHt/sskjddgTav5RlYwcXa8px8gpkL+6mWT9aNq5ryjiDAkA8QAvY2
L11chf/uNrDn0PguMPzclP++UmsAwxeY5E0hHwRCtTk5NTQSFffbqdpjP0O+HKuQ
PgvXNypu3rRV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org