Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230362e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          bqFbXoRPlCj8f0YUxX4njp2YM7uwVDK2L4xEcSjYy0I=
Subject key identifier:   C2:A3:48:E8:63:42:A0:57:7D:EF:D0:E6:F0:B9:2C:42:A0:07:F1:60
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       2B3096F23B1C663EC6FD66A05EB1B2D7C1338B12
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:11 +0000
ROA not before:           Wed 06 Mar 2024 17:57:11 +0000
ROA not after:            Wed 05 Mar 2025 18:02:11 +0000
asID:                     52780
IP address blocks:        177.39.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:96:f2:3b:1c:66:3e:c6:fd:66:a0:5e:b1:b2:d7:c1:33:8b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:11 2024 GMT
            Not After : Mar  5 18:02:11 2025 GMT
        Subject: CN=C2A348E86342A0577DEFD0E6F0B92C42A007F160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:54:f6:ca:23:cd:a8:7b:59:37:65:f0:c7:
                    e4:1c:e8:f9:8c:d3:7a:07:f3:7c:a5:2f:6c:a4:6e:
                    1d:20:8d:51:e5:3c:6e:e0:1a:95:8f:a9:03:bd:6d:
                    52:b3:55:cb:6b:ac:0e:d4:da:d3:a9:da:ee:bf:1c:
                    3f:67:15:4c:2d:c8:03:ba:3c:ab:ed:8e:3d:8b:f9:
                    3f:af:45:c2:b6:00:e9:7b:b7:f4:8d:52:0c:2e:74:
                    4e:46:3e:9e:e0:f9:a8:34:48:f4:01:21:2b:30:66:
                    8e:42:69:b0:eb:c3:44:79:46:ca:11:ef:8e:ac:c0:
                    e4:5d:a5:ec:8c:28:22:29:e9:d7:d3:0d:1d:80:73:
                    ae:8e:78:0e:0f:2c:13:b2:fd:1b:b5:76:28:8b:27:
                    2d:60:67:3e:cc:62:8c:2b:3f:7b:28:6a:00:e1:b1:
                    96:90:10:2e:66:3d:3f:ba:b5:4f:30:99:d4:99:70:
                    e5:4b:29:64:86:9d:b1:67:ce:32:34:20:bd:8b:28:
                    04:81:ae:76:05:21:a1:d1:13:68:1b:3f:24:20:f3:
                    a3:5c:f6:dc:cb:ca:bd:2b:89:ce:bb:4b:96:55:6f:
                    37:79:67:dc:cb:83:0a:28:30:cc:17:81:25:07:bb:
                    95:36:5d:fb:a9:25:e0:f6:1a:c3:8c:d8:ad:99:70:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A3:48:E8:63:42:A0:57:7D:EF:D0:E6:F0:B9:2C:42:A0:07:F1:60
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:06:b6:92:54:c2:38:a1:78:c7:0f:8c:b7:85:0d:ac:57:
         7f:7d:ec:17:a1:a8:8c:b2:9f:64:6f:d4:91:51:5d:be:c0:4e:
         ff:2e:d3:dc:50:ec:f1:64:63:78:95:03:08:93:ff:04:01:c4:
         cc:fa:0e:11:7f:20:10:44:30:2a:11:95:10:6e:c8:f5:db:87:
         61:8e:20:25:90:ba:6a:38:60:a5:99:13:26:3a:d9:01:36:9d:
         d5:e5:9a:43:42:2a:7b:d3:b7:ca:4c:a2:03:d0:64:1d:87:53:
         89:6f:c5:4c:ff:a2:44:24:28:2d:44:72:4e:f5:a6:fe:ea:86:
         8a:7e:39:1b:5d:83:4d:8e:c2:4c:de:c4:04:e8:cb:80:37:20:
         36:c6:b6:47:f7:f9:1d:29:dd:a3:47:c6:db:a0:17:6d:6c:57:
         da:79:e5:6d:5e:55:14:f9:6a:db:d0:f2:7d:11:f0:55:0f:b6:
         cc:d2:68:ba:04:ad:70:ad:da:10:31:77:a4:d5:60:50:d1:fb:
         71:f6:f4:64:7e:e1:a5:ce:4a:d1:ed:2d:2e:5a:a5:f4:cf:be:
         c5:5e:a8:3e:fd:b0:89:b8:33:b8:d7:5d:5c:88:d6:fb:6a:2a:
         08:ce:0a:80:b6:d7:55:d8:d8:a0:a9:f6:27:46:b2:fb:d5:93:
         bc:2c:f6:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKzCW8jscZj7G/WagXrGy18EzixIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGRjZEODJGRTA1QjFEN0YyMUVBOTg2ODdGRkM5ODA4
OEI1OUI2NDAeFw0yNDAzMDYxNzU3MTFaFw0yNTAzMDUxODAyMTFaMDMxMTAvBgNV
BAMTKEMyQTM0OEU4NjM0MkEwNTc3REVGRDBFNkYwQjkyQzQyQTAwN0YxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpM1T2yiPNqHtZN2Xwx+Qc6PmM
03oH83ylL2ykbh0gjVHlPG7gGpWPqQO9bVKzVctrrA7U2tOp2u6/HD9nFUwtyAO6
PKvtjj2L+T+vRcK2AOl7t/SNUgwudE5GPp7g+ag0SPQBISswZo5CabDrw0R5RsoR
746swORdpeyMKCIp6dfTDR2Ac66OeA4PLBOy/Ru1diiLJy1gZz7MYowrP3soagDh
sZaQEC5mPT+6tU8wmdSZcOVLKWSGnbFnzjI0IL2LKASBrnYFIaHRE2gbPyQg86Nc
9tzLyr0ric67S5ZVbzd5Z9zLgwooMMwXgSUHu5U2XfupJeD2GsOM2K2ZcDDjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwqNI6GNCoFd979Dm8LksQqAH8WAwHwYDVR0j
BBgwFoAUlP9tgv4FsdfyHqmGh//JgIi1m2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMC85NEZGNkQ4MkZFMDVCMUQ3RjIxRUE5ODY4N0ZGQzk4MDg4QjU5QjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0RkY2RDgyRkUwNUIxRDdG
MjFFQTk4Njg3RkZDOTgwODhCNTlCNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzAv
MzEzNzM3MmUzMzM5MmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSfOMA0GCSqGSIb3DQEBCwUAA4IBAQAO8ga2klTC
OKF4xw+Mt4UNrFd/fewXoaiMsp9kb9SRUV2+wE7/LtPcUOzxZGN4lQMIk/8EAcTM
+g4RfyAQRDAqEZUQbsj124dhjiAlkLpqOGClmRMmOtkBNp3V5ZpDQip707fKTKID
0GQdh1OJb8VM/6JEJCgtRHJO9ab+6oaKfjkbXYNNjsJM3sQE6MuANyA2xrZH9/kd
Kd2jR8bboBdtbFfaeeVtXlUU+Wrb0PJ9EfBVD7bM0mi6BK1wrdoQMXek1WBQ0ftx
9vRkfuGlzkrR7S0uWqX0z77FXqg+/bCJuDO4111ciNb7aioIzgqAttdV2NigqfYn
RrL71ZO8LPZE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org