Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33362e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          jsw1Bg2OPUJYWWvMlEDeL98pL2TdpPhiQjxhVSpw6hU=
Subject key identifier:   7B:48:2F:CD:9C:0D:9E:57:72:9F:30:93:A7:04:15:BB:B5:E4:BB:91
Certificate issuer:       /CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
Certificate serial:       64C09F50379C796ED602BDB3C10541526DC75678
Authority key identifier: 7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 12 Apr 2024 18:38:53 +0000
ROA not before:           Fri 12 Apr 2024 18:33:53 +0000
ROA not after:            Fri 11 Apr 2025 18:38:53 +0000
asID:                     263948
IP address blocks:        177.67.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c0:9f:50:37:9c:79:6e:d6:02:bd:b3:c1:05:41:52:6d:c7:56:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
        Validity
            Not Before: Apr 12 18:33:53 2024 GMT
            Not After : Apr 11 18:38:53 2025 GMT
        Subject: CN=7B482FCD9C0D9E57729F3093A70415BBB5E4BB91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:71:50:e9:b5:6a:83:c7:4a:a3:96:76:eb:
                    03:eb:ee:87:c0:4a:85:15:b8:17:aa:9f:c9:53:6f:
                    c9:c8:a0:d4:0d:ce:90:39:b5:b8:a7:31:12:0f:b9:
                    a4:aa:a5:f2:43:59:f7:01:ba:dc:33:7a:10:b1:62:
                    34:ce:f8:69:72:1b:f1:28:96:d5:32:4b:0d:f7:c0:
                    d5:ea:5c:11:fb:43:06:c2:ad:f4:6a:93:30:d0:e6:
                    e2:eb:92:58:89:8f:05:01:0d:ba:c3:ab:31:fa:02:
                    40:ee:d2:1c:fa:01:2b:8a:8a:a6:9d:43:46:28:23:
                    9d:2f:06:9d:36:ee:e9:9f:71:4e:43:da:69:63:ac:
                    0c:ce:fc:a7:c5:c5:1f:84:7a:11:2a:a3:3c:72:c2:
                    f3:7e:96:e7:ee:49:04:86:9b:88:fa:7a:ce:d6:02:
                    ca:66:54:a3:5f:22:a1:31:28:ad:61:18:d4:86:ff:
                    8c:67:8d:f4:3f:c1:94:c9:f8:26:4b:76:67:f1:be:
                    25:2e:da:24:86:5b:63:84:b0:79:2e:ff:3f:28:75:
                    25:1c:4e:7f:0a:7b:c4:c5:3e:52:63:75:39:39:8d:
                    f1:54:73:12:99:02:d1:88:b9:75:39:ef:6b:5e:a6:
                    b1:dc:4d:67:4e:4f:48:dc:58:33:e0:78:c1:7d:76:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:2F:CD:9C:0D:9E:57:72:9F:30:93:A7:04:15:BB:B5:E4:BB:91
            X509v3 Authority Key Identifier:
                keyid:7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:70:7d:18:6e:c8:e1:93:e2:10:0a:0d:d2:47:65:e8:52:
         03:9a:77:fe:2a:29:37:93:e6:19:56:52:4a:54:8e:45:7f:63:
         36:4a:06:98:1c:86:44:b5:7d:cd:30:3c:00:4e:73:68:b7:09:
         10:20:aa:6f:df:21:c9:16:4d:77:a1:4b:b7:6c:7a:b5:da:e9:
         be:8c:17:2d:32:da:64:9d:94:c0:64:3b:6c:69:f8:cb:00:13:
         cf:41:25:ac:92:43:2c:52:9e:15:1b:09:35:0f:37:5b:65:9d:
         cb:5c:08:cc:37:7c:dc:af:9c:52:76:cd:43:62:a7:e1:82:28:
         ba:8e:ac:e9:b8:8b:ef:48:b1:c2:6b:66:82:be:3c:1d:8d:85:
         c9:86:ae:9e:02:cf:2d:e3:1a:eb:20:6f:83:bf:49:00:8a:41:
         c8:7a:cc:0a:87:55:41:a8:eb:e2:ef:29:3b:fd:9b:cf:1b:57:
         44:60:17:03:46:30:e5:0a:57:1b:b3:bd:8b:12:f3:b5:0a:15:
         43:6d:20:ef:71:96:a9:51:c0:e9:bd:00:10:ae:92:1d:49:18:
         0a:58:d4:bf:4b:17:57:1e:1b:60:66:fd:54:1a:a0:1b:4e:12:
         ee:dc:d3:87:37:71:2f:aa:a8:1a:85:d2:11:a5:23:fd:25:86:
         10:85:0a:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZMCfUDeceW7WAr2zwQVBUm3HVngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I3M0Q4NkNDQTIzNkFDNTREMENGQzYwRERCN0IzNjEw
QkM5OERDODAeFw0yNDA0MTIxODMzNTNaFw0yNTA0MTExODM4NTNaMDMxMTAvBgNV
BAMTKDdCNDgyRkNEOUMwRDlFNTc3MjlGMzA5M0E3MDQxNUJCQjVFNEJCOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINHFQ6bVqg8dKo5Z26wPr7ofA
SoUVuBeqn8lTb8nIoNQNzpA5tbinMRIPuaSqpfJDWfcButwzehCxYjTO+GlyG/Eo
ltUySw33wNXqXBH7QwbCrfRqkzDQ5uLrkliJjwUBDbrDqzH6AkDu0hz6ASuKiqad
Q0YoI50vBp027umfcU5D2mljrAzO/KfFxR+EehEqozxywvN+lufuSQSGm4j6es7W
AspmVKNfIqExKK1hGNSG/4xnjfQ/wZTJ+CZLdmfxviUu2iSGW2OEsHku/z8odSUc
Tn8Ke8TFPlJjdTk5jfFUcxKZAtGIuXU572teprHcTWdOT0jcWDPgeMF9dgRNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUe0gvzZwNnldynzCTpwQVu7Xku5EwHwYDVR0j
BBgwFoAUe3PYbMojasVNDPxg3bezYQvJjcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1SS1REUUJlR1ZFREdHeWpXaTh0VldMWGpVVHRzamVIbUR2Wmg0UkpF
aXEvMS83QjczRDg2Q0NBMjM2QUM1NEQwQ0ZDNjBEREI3QjM2MTBCQzk4REM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNzNEODZDQ0EyMzZBQzU0
RDBDRkM2MEREQjdCMzYxMEJDOThEQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtUktURFFCZUdWRURHR3lqV2k4dFZXTFhqVVR0c2plSG1EdlpoNFJKRWlxLzEv
MzEzNzM3MmUzNjM3MmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUMkMA0GCSqGSIb3DQEBCwUAA4IBAQCpl3B9GG7I
4ZPiEAoN0kdl6FIDmnf+Kik3k+YZVlJKVI5Ff2M2SgaYHIZEtX3NMDwATnNotwkQ
IKpv3yHJFk13oUu3bHq12um+jBctMtpknZTAZDtsafjLABPPQSWskkMsUp4VGwk1
DzdbZZ3LXAjMN3zcr5xSds1DYqfhgii6jqzpuIvvSLHCa2aCvjwdjYXJhq6eAs8t
4xrrIG+Dv0kAikHIeswKh1VBqOvi7yk7/ZvPG1dEYBcDRjDlClcbs72LEvO1ChVD
bSDvcZapUcDpvQAQrpIdSRgKWNS/SxdXHhtgZv1UGqAbThLu3NOHN3EvqqgahdIR
pSP9JYYQhQpC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org