Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3233203d3e203532363934.roa
File:                     3137372e37332e33362e302f32322d3233203d3e203532363934.roa (raw, json)
Hash identifier:          OA3RKZ2GTys++jdKOYqjD44WnhyMx5YGij4Oqj90Ijg=
Subject key identifier:   E8:B6:B2:44:02:C4:D3:A7:C8:46:B0:4A:5C:D1:AF:E1:84:8B:52:75
Certificate issuer:       /CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
Certificate serial:       2F0AD77CA5E588095A05F3C203B35C205A4223CB
Authority key identifier: 3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3233203d3e203532363934.roa
Signing time:             Thu 29 Feb 2024 14:25:40 +0000
ROA not before:           Thu 29 Feb 2024 14:20:40 +0000
ROA not after:            Thu 27 Feb 2025 14:25:40 +0000
asID:                     52694
IP address blocks:        177.73.36.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:d7:7c:a5:e5:88:09:5a:05:f3:c2:03:b3:5c:20:5a:42:23:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
        Validity
            Not Before: Feb 29 14:20:40 2024 GMT
            Not After : Feb 27 14:25:40 2025 GMT
        Subject: CN=E8B6B24402C4D3A7C846B04A5CD1AFE1848B5275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:23:f3:aa:80:ae:ad:36:89:cc:1e:fd:26:
                    63:55:a6:d2:68:df:f7:c3:58:c9:84:f7:4d:d9:c9:
                    d5:48:e6:bc:3e:6f:df:2b:23:d8:e1:2f:56:ef:48:
                    af:f3:d3:0b:62:1f:fd:60:d0:c4:b4:74:25:72:ee:
                    9e:09:f4:7a:cb:86:22:1e:5f:d5:d0:36:c7:6c:52:
                    93:ff:26:8f:ba:e8:75:0e:4e:46:2a:e7:80:58:a7:
                    be:9e:0b:d7:44:f2:47:35:79:72:a2:fd:40:b4:a3:
                    e1:5c:3e:ce:6f:a9:98:fd:1b:a2:a0:e9:3d:65:19:
                    0d:f0:83:8b:ba:9f:7d:2d:92:6a:ce:6a:47:ef:d5:
                    af:ee:3a:65:8e:38:df:cd:f9:6c:54:55:ab:ac:2e:
                    cb:49:3e:c5:62:e5:4c:dd:90:6a:54:b6:fc:32:7c:
                    bb:80:c9:57:6e:5f:2b:c4:69:d0:7f:e6:0a:f3:9a:
                    e1:c4:cc:8a:be:bd:74:33:89:3c:30:9d:a3:35:bf:
                    ee:db:20:25:ec:cc:83:f0:fd:8c:8f:a1:7d:0e:5b:
                    87:23:b9:91:ec:60:7a:32:54:ef:ca:f6:3c:f2:77:
                    ff:fa:5c:3d:7b:56:81:e4:9c:f0:4b:1e:fb:ae:46:
                    ce:ce:81:3c:66:22:25:27:f5:0f:d9:63:2b:ec:0c:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:B2:44:02:C4:D3:A7:C8:46:B0:4A:5C:D1:AF:E1:84:8B:52:75
            X509v3 Authority Key Identifier:
                keyid:3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3233203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:3e:8b:b8:ea:63:39:16:f4:8e:4c:aa:31:7e:92:eb:4b:
         b0:ac:0d:4d:85:f0:eb:80:30:69:56:71:b3:4e:e0:da:35:e2:
         ab:28:7b:13:76:90:83:0e:9a:a4:a0:01:fa:a6:f5:a0:5c:3f:
         20:85:b1:20:b2:d7:24:9d:ad:ff:0c:d7:7e:63:57:a8:91:c3:
         3a:6f:c1:a3:37:ca:20:f9:ad:5a:2f:03:b1:7a:26:d8:3a:1c:
         64:5f:30:10:8b:13:3f:5e:27:73:7d:31:5d:5f:a8:69:e8:c9:
         ff:cd:6a:8a:5c:c6:eb:51:b1:7b:7b:8e:4f:2b:fa:04:77:aa:
         51:6c:61:88:9f:59:2b:a0:31:ae:51:f7:22:f5:27:c4:7f:ec:
         49:fc:23:fa:21:18:88:af:05:d4:7b:37:ea:1c:c1:52:b3:3d:
         7c:75:20:c6:17:c5:8a:9e:0d:4f:fe:ba:3f:af:cc:aa:a7:a9:
         dc:8f:fd:dc:19:ea:5d:36:54:0a:07:93:80:fa:00:b6:31:36:
         53:3f:57:4d:e2:d4:2b:b6:e2:24:b2:91:30:ff:a6:ec:34:a7:
         15:bc:5f:50:05:9e:79:f5:20:93:ad:7c:28:bb:e2:04:29:a0:
         01:f7:d7:e6:41:db:7f:37:d6:4c:1d:9d:86:67:69:21:07:18:
         4d:fe:d1:60
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULwrXfKXliAlaBfPCA7NcIFpCI8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQkEwRDhCMDFCNDFFNjY2RkM3MEY0QUM1QjBBQjY5
OUM2NURBMTAeFw0yNDAyMjkxNDIwNDBaFw0yNTAyMjcxNDI1NDBaMDMxMTAvBgNV
BAMTKEU4QjZCMjQ0MDJDNEQzQTdDODQ2QjA0QTVDRDFBRkUxODQ4QjUyNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NSPzqoCurTaJzB79JmNVptJo
3/fDWMmE903ZydVI5rw+b98rI9jhL1bvSK/z0wtiH/1g0MS0dCVy7p4J9HrLhiIe
X9XQNsdsUpP/Jo+66HUOTkYq54BYp76eC9dE8kc1eXKi/UC0o+FcPs5vqZj9G6Kg
6T1lGQ3wg4u6n30tkmrOakfv1a/uOmWOON/N+WxUVausLstJPsVi5UzdkGpUtvwy
fLuAyVduXyvEadB/5grzmuHEzIq+vXQziTwwnaM1v+7bICXszIPw/YyPoX0OW4cj
uZHsYHoyVO/K9jzyd//6XD17VoHknPBLHvuuRs7OgTxmIiUn9Q/ZYyvsDONvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6LayRALE06fIRrBKXNGv4YSLUnUwHwYDVR0j
BBgwFoAUPOug2LAbQeZm/HD0rFsKtpnGXaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3
cGQvMC8zQ0VCQTBEOEIwMUI0MUU2NjZGQzcwRjRBQzVCMEFCNjk5QzY1REExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRUJBMEQ4QjAxQjQxRTY2
NkZDNzBGNEFDNUIwQUI2OTlDNjVEQTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAv
MzEzNzM3MmUzNzMzMmUzMzM2MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzUzMjM2
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFJJDANBgkqhkiG9w0BAQsFAAOCAQEAkas+i7jqYzkW
9I5MqjF+kutLsKwNTYXw64AwaVZxs07g2jXiqyh7E3aQgw6apKAB+qb1oFw/IIWx
ILLXJJ2t/wzXfmNXqJHDOm/BozfKIPmtWi8DsXom2DocZF8wEIsTP14nc30xXV+o
aejJ/81qilzG61Gxe3uOTyv6BHeqUWxhiJ9ZK6AxrlH3IvUnxH/sSfwj+iEYiK8F
1Hs36hzBUrM9fHUgxhfFip4NT/66P6/Mqqep3I/93BnqXTZUCgeTgPoAtjE2Uz9X
TeLUK7biJLKRMP+m7DSnFbxfUAWeefUgk618KLviBCmgAffX5kHbfzfWTB2dhmdp
IQcYTf7RYA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org