Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39322e302f32322d3232203d3e203532393430.roa
File:                     3137372e31312e39322e302f32322d3232203d3e203532393430.roa (raw, json)
Hash identifier:          irMeVUeMIhT6x0gH+7ZFKepmQuA1AqMuN3c5UgnC34A=
Subject key identifier:   AA:04:AD:DE:37:8B:D7:DC:F3:0F:0E:29:10:4D:FA:F7:62:EF:CA:57
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       77306222F3F4BBB5B5894EF8770697F94DF35BD8
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39322e302f32322d3232203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:46 +0000
ROA not before:           Tue 22 Aug 2023 18:21:46 +0000
ROA not after:            Tue 20 Aug 2024 18:26:46 +0000
asID:                     52940
IP address blocks:        177.11.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:30:62:22:f3:f4:bb:b5:b5:89:4e:f8:77:06:97:f9:4d:f3:5b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:46 2023 GMT
            Not After : Aug 20 18:26:46 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:fc:bd:c3:67:15:5d:35:d1:ad:5b:26:f2:
                    45:8f:e9:ca:15:6b:16:62:68:e9:ac:0c:7e:78:37:
                    7f:a4:0b:1b:c3:a4:39:3c:f9:c3:3a:3e:44:1a:65:
                    f6:0b:50:d8:37:8d:27:a9:95:39:5c:44:11:a1:7a:
                    23:f2:0d:fc:8a:5f:0c:ac:76:17:d3:4c:fa:d9:a0:
                    d0:ff:5b:25:c5:47:68:53:52:93:76:30:34:c8:55:
                    28:38:e8:34:20:1e:7c:5d:7f:db:de:e7:7b:b9:21:
                    80:95:05:d6:30:22:94:27:8a:d5:68:93:9c:e0:e2:
                    05:ab:96:18:0c:66:9c:8f:24:ac:47:7f:78:1c:0d:
                    42:2b:67:8a:fa:ab:0c:93:7d:a7:55:a0:cd:f6:14:
                    1b:09:6d:fa:e3:f6:ea:cc:da:ad:fc:63:02:8a:6a:
                    0c:04:76:dc:cd:15:3e:16:eb:3c:92:89:96:37:f5:
                    33:02:17:a8:2a:f9:a1:7c:c4:c1:c9:52:f8:2e:a0:
                    48:bc:29:2f:14:ce:fa:72:c3:e0:1f:b1:bc:e8:60:
                    60:b9:18:d5:47:b0:cb:cb:3e:98:f7:68:43:ac:b4:
                    26:a6:3c:fb:a3:87:6a:bd:f6:60:9c:32:0e:82:de:
                    31:10:c2:1f:1a:16:ca:16:23:6e:03:c2:62:f1:fb:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:AD:DE:37:8B:D7:DC:F3:0F:0E:29:10:4D:FA:F7:62:EF:CA:57
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39322e302f32322d3232203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:31:e3:05:94:67:a2:be:77:c2:24:92:45:68:1e:69:40:
         ef:6c:aa:34:0e:23:ab:39:1c:fb:d2:0d:3e:63:c5:4f:6e:4c:
         02:17:5e:20:45:36:5d:fa:11:4b:80:e1:70:8e:85:8d:b1:10:
         84:9c:20:2f:82:47:ea:d1:25:d8:14:d6:8c:0e:de:87:9e:71:
         9c:52:6e:b6:ca:8c:01:0b:ee:3b:91:0f:11:fd:e2:27:97:e6:
         b0:a2:1d:bf:30:18:c6:f8:25:06:2b:ae:a0:3f:96:b2:07:bf:
         5b:7a:07:b0:72:88:86:39:5b:b7:b4:80:6a:8f:17:12:96:85:
         75:d0:e5:df:24:0a:70:26:43:3e:b4:fa:9c:ed:1e:6b:78:3a:
         d1:1c:e1:a5:29:aa:ae:9a:c9:ec:f3:8f:49:56:0a:e3:55:c7:
         82:35:92:d8:f4:c5:53:75:b1:d8:f0:21:d6:3a:6e:09:93:d1:
         66:5f:c5:d4:36:d5:1e:ba:11:de:a0:42:c0:fd:ad:f1:67:17:
         f3:8a:d0:e8:39:a0:d1:8b:d6:92:7a:48:60:75:39:57:5e:48:
         b7:9d:17:b0:53:72:26:cd:cd:0d:8c:4b:ca:55:4c:ee:c8:fd:
         b6:23:9a:8b:a6:3d:cb:e9:9a:48:a4:6b:a5:03:79:78:a1:10:
         ca:82:60:69
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUdzBiIvP0u7W1iU74dwaX+U3zW9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNEODgzMDNDRTJFODk3RDM0RkMyMDc3MzM3NTkwODA1
MEZCMjk5RTAeFw0yMzA4MjIxODIxNDZaFw0yNDA4MjAxODI2NDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk5MkZDQkRDMzY3MTU1RDM1
RDFBRDVCMjZGMjQ1OEZFOUNBMTU2QjE2NjI2OEU5QUMwQzdFNzgzNzdGQTQwQjFC
QzNBNDM5M0NGOUMzM0EzRTQ0MUE2NUY2MEI1MEQ4Mzc4RDI3QTk5NTM5NUM0NDEx
QTE3QTIzRjIwREZDOEE1RjBDQUM3NjE3RDM0Q0ZBRDlBMEQwRkY1QjI1QzU0NzY4
NTM1MjkzNzYzMDM0Qzg1NTI4MzhFODM0MjAxRTdDNUQ3RkRCREVFNzdCQjkyMTgw
OTUwNUQ2MzAyMjk0Mjc4QUQ1Njg5MzlDRTBFMjA1QUI5NjE4MEM2NjlDOEYyNEFD
NDc3Rjc4MUMwRDQyMkI2NzhBRkFBQjBDOTM3REE3NTVBMENERjYxNDFCMDk2REZB
RTNGNkVBQ0NEQUFERkM2MzAyOEE2QTBDMDQ3NkRDQ0QxNTNFMTZFQjNDOTI4OTk2
MzdGNTMzMDIxN0E4MkFGOUExN0NDNEMxQzk1MkY4MkVBMDQ4QkMyOTJGMTRDRUZB
NzJDM0UwMUZCMUJDRTg2MDYwQjkxOEQ1NDdCMENCQ0IzRTk4Rjc2ODQzQUNCNDI2
QTYzQ0ZCQTM4NzZBQkRGNjYwOUMzMjBFODJERTMxMTBDMjFGMUExNkNBMTYyMzZF
MDNDMjYyRjFGQkRFMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuZL8vcNnFV010a1bJvJFj+nKFWsWYmjprAx+eDd/pAsbw6Q5PPnD
Oj5EGmX2C1DYN40nqZU5XEQRoXoj8g38il8MrHYX00z62aDQ/1slxUdoU1KTdjA0
yFUoOOg0IB58XX/b3ud7uSGAlQXWMCKUJ4rVaJOc4OIFq5YYDGacjySsR394HA1C
K2eK+qsMk32nVaDN9hQbCW364/bqzNqt/GMCimoMBHbczRU+Fus8komWN/UzAheo
KvmhfMTByVL4LqBIvCkvFM76csPgH7G86GBguRjVR7DLyz6Y92hDrLQmpjz7o4dq
vfZgnDIOgt4xEMIfGhbKFiNuA8Ji8fveBwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FKoErd43i9fc8w8OKRBN+vdi78pXMB8GA1UdIwQYMBaAFLzYgwPOLol9NPwgdzN1
kIBQ+ymeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y0YWZDTHhrcUh3NHNq
TmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAvQkNEODgzMDNDRTJFODk3
RDM0RkMyMDc3MzM3NTkwODA1MEZCMjk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQ0Q4ODMwM0NFMkU4OTdEMzRGQzIwNzczMzc1OTA4MDUwRkIy
OTlFLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GNGFmQ0x4a3FIdzRzak5pc21U
TUw1TTV1N1Q5dUxHQlluRG1TTDVhN3FYZi8wLzMxMzczNzJlMzEzMTJlMzkzMjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzIzOTM0MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKxC1ww
DQYJKoZIhvcNAQELBQADggEBAGRvMeMFlGeivnfCJJJFaB5pQO9sqjQOI6s5HPvS
DT5jxU9uTAIXXiBFNl36EUuA4XCOhY2xEIScIC+CR+rRJdgU1owO3oeecZxSbrbK
jAEL7juRDxH94ieX5rCiHb8wGMb4JQYrrqA/lrIHv1t6B7ByiIY5W7e0gGqPFxKW
hXXQ5d8kCnAmQz60+pztHmt4OtEc4aUpqq6ayezzj0lWCuNVx4I1ktj0xVN1sdjw
IdY6bgmT0WZfxdQ21R66Ed6gQsD9rfFnF/OK0Og5oNGL1pJ6SGB1OVdeSLedF7BT
cibNzQ2MS8pVTO7I/bYjmoumPcvpmkika6UDeXihEMqCYGk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org