Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          mhZ+ZDK2CPjby46VsN0V5lKX3DgxC917GylasER8r5A=
Subject key identifier:   11:40:D7:CA:15:6A:8A:55:71:57:15:17:88:7E:0C:45:83:D6:7E:A5
Certificate issuer:       /CN=77A1477942E2901D138E8997CD0C04DE6CB093C5
Certificate serial:       439762B87A9F81D1C5949EAB36F4BB70139DCCA7
Authority key identifier: 77:A1:47:79:42:E2:90:1D:13:8E:89:97:CD:0C:04:DE:6C:B0:93:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77A1477942E2901D138E8997CD0C04DE6CB093C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
Signing time:             Thu 08 Dec 2022 19:41:44 +0000
ROA not before:           Thu 08 Dec 2022 19:36:44 +0000
ROA not after:            Thu 07 Dec 2023 19:41:44 +0000
asID:                     266498
IP address blocks:        170.244.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:97:62:b8:7a:9f:81:d1:c5:94:9e:ab:36:f4:bb:70:13:9d:cc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A1477942E2901D138E8997CD0C04DE6CB093C5
        Validity
            Not Before: Dec  8 19:36:44 2022 GMT
            Not After : Dec  7 19:41:44 2023 GMT
        Subject: CN=1140D7CA156A8A5571571517887E0C4583D67EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:a3:6c:dd:fe:e9:5b:94:e5:8f:15:d2:6e:
                    08:a7:5f:cf:b3:4a:4e:e3:db:ee:c9:54:f5:70:8e:
                    ed:29:22:d1:51:5c:fb:fb:20:f7:1a:7c:68:71:fd:
                    69:3f:4b:a3:c2:ae:bf:84:f7:6c:d6:35:b2:3e:6f:
                    e2:45:03:49:5f:08:7d:08:7e:76:ef:9a:99:04:d2:
                    8f:3c:19:4f:cc:3e:ad:1c:80:f2:c9:1f:73:07:11:
                    db:74:fb:95:31:12:d4:18:f9:c3:f8:48:a0:5a:7a:
                    d8:7e:82:de:17:95:16:1a:ec:f1:72:df:ae:62:47:
                    65:58:a6:57:64:6f:0f:de:d4:d4:bd:6a:43:4f:bc:
                    00:89:c4:76:67:0a:17:ae:ec:c7:94:fd:b6:46:03:
                    c9:a7:79:d2:20:7c:dd:92:3f:32:bd:8c:66:11:f0:
                    de:4b:77:b1:49:9a:fc:4a:a7:97:1a:d0:e4:ed:70:
                    bf:9e:96:07:67:e8:23:17:f9:3a:56:e6:55:86:27:
                    b7:0f:61:64:36:5d:29:47:e6:a5:5b:b0:7e:86:54:
                    6b:8b:ee:05:bb:c3:a8:fc:53:e2:6a:99:83:6b:24:
                    3e:3a:92:fb:cc:04:4f:56:cc:94:a4:80:7c:e6:d1:
                    83:27:a8:5b:d6:c2:3c:57:25:96:2c:67:0b:68:14:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:D7:CA:15:6A:8A:55:71:57:15:17:88:7E:0C:45:83:D6:7E:A5
            X509v3 Authority Key Identifier:
                keyid:77:A1:47:79:42:E2:90:1D:13:8E:89:97:CD:0C:04:DE:6C:B0:93:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/77A1477942E2901D138E8997CD0C04DE6CB093C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77A1477942E2901D138E8997CD0C04DE6CB093C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhFWnpn6ge4JhHfWnwkqZiFzec4p5UK7rfpGzvZHKLwS/0/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:7e:61:31:c7:30:3f:87:88:73:f4:4d:47:a0:cc:b2:5a:
         dc:1e:49:58:5b:6f:7f:1e:fe:e6:42:f6:75:eb:44:a9:03:be:
         4a:4d:d4:2b:48:4a:76:ca:16:6c:c9:31:03:67:77:0d:71:92:
         e3:28:2d:f4:28:8a:fa:d7:9c:c3:1a:2f:f9:ac:f0:e0:7f:db:
         70:05:07:b0:9d:c4:c5:ea:f9:3f:c5:f6:4b:c1:d7:83:1a:be:
         99:78:3d:8c:1b:89:4a:de:84:cc:20:0c:3a:4b:88:b1:f2:f3:
         a6:77:4c:9b:48:60:29:89:fb:58:0e:08:ea:6b:a9:90:a0:58:
         7f:a8:76:53:c9:95:10:8c:e4:a0:46:98:ad:30:53:1e:3d:90:
         7e:0f:38:ad:8b:2c:b7:1e:df:e5:ca:c8:0b:88:06:7a:e7:9d:
         af:76:91:e5:d4:91:59:dd:2a:ba:b0:bb:12:93:45:60:54:0f:
         2f:e2:1b:34:5f:ba:06:16:d1:03:d1:e3:91:81:d3:a9:0f:f6:
         9f:1e:98:ba:cd:55:54:c0:d7:51:92:a5:0e:1e:4e:c3:d3:97:
         01:d0:6c:54:9e:f5:5e:af:ba:45:c0:b0:3a:eb:03:40:34:0a:
         56:8e:f9:6e:88:4a:b1:95:c1:7e:e0:b5:82:09:d5:69:cb:34:
         e8:69:1c:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ5diuHqfgdHFlJ6rNvS7cBOdzKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdBMTQ3Nzk0MkUyOTAxRDEzOEU4OTk3Q0QwQzA0REU2
Q0IwOTNDNTAeFw0yMjEyMDgxOTM2NDRaFw0yMzEyMDcxOTQxNDRaMDMxMTAvBgNV
BAMTKDExNDBEN0NBMTU2QThBNTU3MTU3MTUxNzg4N0UwQzQ1ODNENjdFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/KNs3f7pW5TljxXSbginX8+z
Sk7j2+7JVPVwju0pItFRXPv7IPcafGhx/Wk/S6PCrr+E92zWNbI+b+JFA0lfCH0I
fnbvmpkE0o88GU/MPq0cgPLJH3MHEdt0+5UxEtQY+cP4SKBaeth+gt4XlRYa7PFy
365iR2VYpldkbw/e1NS9akNPvACJxHZnCheu7MeU/bZGA8mnedIgfN2SPzK9jGYR
8N5Ld7FJmvxKp5ca0OTtcL+elgdn6CMX+TpW5lWGJ7cPYWQ2XSlH5qVbsH6GVGuL
7gW7w6j8U+JqmYNrJD46kvvMBE9WzJSkgHzm0YMnqFvWwjxXJZYsZwtoFIshAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEUDXyhVqilVxVxUXiH4MRYPWfqUwHwYDVR0j
BBgwFoAUd6FHeULikB0TjomXzQwE3mywk8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhGV25wbjZnZTRKaEhmV253a3FaaUZ6ZWM0cDVVSzdyZnBHenZaSEtM
d1MvMC83N0ExNDc3OTQyRTI5MDFEMTM4RTg5OTdDRDBDMDRERTZDQjA5M0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QTE0Nzc5NDJFMjkwMUQx
MzhFODk5N0NEMEMwNERFNkNCMDkzQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZoRlducG42Z2U0SmhIZldud2txWmlGemVjNHA1VUs3cmZwR3p2WkhLTHdTLzAv
MzEzNzMwMmUzMjM0MzQyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9EgwDQYJKoZIhvcNAQELBQADggEBAFe1fmEx
xzA/h4hz9E1HoMyyWtweSVhbb38e/uZC9nXrRKkDvkpN1CtISnbKFmzJMQNndw1x
kuMoLfQoivrXnMMaL/ms8OB/23AFB7CdxMXq+T/F9kvB14Mavpl4PYwbiUrehMwg
DDpLiLHy86Z3TJtIYCmJ+1gOCOprqZCgWH+odlPJlRCM5KBGmK0wUx49kH4POK2L
LLce3+XKyAuIBnrnna92keXUkVndKrqwuxKTRWBUDy/iGzRfugYW0QPR45GB06kP
9p8emLrNVVTA11GSpQ4eTsPTlwHQbFSe9V6vukXAsDrrA0A0ClaO+W6ISrGVwX7g
tYIJ1WnLNOhpHKs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org