Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (raw, json)
Hash identifier:          LtLguEXX91F4SHA+cW4BTz2YOI96tGwadNLbHRvZo74=
Subject key identifier:   AF:FF:21:FA:78:84:CD:5D:AD:37:A8:F3:50:18:A0:44:B0:81:2B:D5
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       6DB20D31DF448FBEE0D745BF91C01FB5D962B40E
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa
Signing time:             Wed 10 Apr 2024 13:48:47 +0000
ROA not before:           Wed 10 Apr 2024 13:43:47 +0000
ROA not after:            Wed 09 Apr 2025 13:48:47 +0000
asID:                     270594
IP address blocks:        177.37.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b2:0d:31:df:44:8f:be:e0:d7:45:bf:91:c0:1f:b5:d9:62:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: Apr 10 13:43:47 2024 GMT
            Not After : Apr  9 13:48:47 2025 GMT
        Subject: CN=AFFF21FA7884CD5DAD37A8F35018A044B0812BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:43:5d:29:b0:6e:8c:73:03:00:b0:11:37:
                    0c:1f:fe:e1:a3:6f:84:61:4e:02:99:fb:3b:30:65:
                    6b:13:43:a5:90:e3:12:b9:35:a4:a6:9f:24:4b:44:
                    01:19:23:69:8f:6e:18:81:5a:a1:10:08:75:4d:ff:
                    e8:33:4d:7c:e9:a9:70:ed:f5:a3:96:12:bb:d1:44:
                    71:9b:c3:13:a7:f4:86:46:ff:57:d3:51:2b:64:0e:
                    41:58:d9:23:b2:6e:f4:7c:1d:4b:54:7e:e0:15:32:
                    42:25:94:a0:a9:77:a1:4c:d4:f6:6f:7f:0e:98:b9:
                    eb:ed:3c:60:ba:c4:82:58:fa:94:1d:5f:90:03:26:
                    ef:4d:7e:0d:ea:12:96:7c:e3:f2:ee:1d:7d:3b:23:
                    1b:15:f0:21:56:48:3d:85:ff:05:5f:e1:31:d4:11:
                    1f:e1:8d:e1:7f:b9:df:97:13:d7:f1:b7:0f:ae:6d:
                    9a:d2:8f:d5:ef:d6:d0:01:56:d4:9a:59:af:70:7e:
                    d1:bf:38:a2:7f:be:ef:ff:1d:8f:0f:fd:0d:78:95:
                    d7:b4:7f:ea:a4:1e:c4:f5:2b:b9:0b:fc:fa:2c:8d:
                    c3:ca:37:98:9c:a9:6f:9c:4b:e9:4e:ca:2b:fb:a5:
                    57:0d:96:63:de:7d:94:89:16:2a:0b:63:e1:7a:06:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:21:FA:78:84:CD:5D:AD:37:A8:F3:50:18:A0:44:B0:81:2B:D5
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32322d3232203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:b0:1a:e7:cc:a7:d7:25:e7:4f:35:51:be:d3:9e:86:17:
         3d:92:9e:f1:09:25:0f:f6:c8:79:7f:9e:f8:ef:47:2a:97:58:
         46:4c:e4:1f:43:18:8b:70:96:70:43:59:6b:3b:43:1a:56:21:
         34:18:70:ac:42:6a:96:69:97:d2:af:2a:de:4a:00:8c:d8:d3:
         fc:52:65:b6:a2:fa:c7:1a:9d:f6:9f:ab:63:43:11:15:54:0d:
         b1:82:54:4f:d4:db:72:64:eb:6f:f2:50:c3:99:b6:61:d5:de:
         08:19:cc:99:43:a5:5e:fc:f8:03:5d:1f:62:a2:26:fb:2e:fd:
         63:bd:30:cc:71:0e:d1:48:3f:7c:f2:ef:8b:68:52:cc:bf:e2:
         69:bf:5d:61:84:02:fa:09:eb:71:4d:6e:aa:32:23:b2:c1:97:
         76:1b:4c:2b:65:70:0e:55:a0:c8:bc:47:e5:ff:e8:84:a1:a1:
         a8:ac:78:c0:e9:5d:90:e1:2b:ab:94:47:25:1e:a2:a0:02:5f:
         bb:e5:a3:80:4a:d5:3d:34:bd:a4:49:cc:d2:97:0c:b8:91:09:
         ab:8a:75:e6:ff:5e:81:29:1c:84:57:48:3b:3e:03:e9:68:65:
         58:66:bc:f0:c3:5b:62:b5:a8:b1:27:7b:f1:cd:04:50:55:da:
         ab:63:49:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbbINMd9Ej77g10W/kcAftdlitA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJDRTQwMTgwRjZFODIwRjMxOTIwODI0RDgyQjI4NUNG
MEUzMjk5MjAeFw0yNDA0MTAxMzQzNDdaFw0yNTA0MDkxMzQ4NDdaMDMxMTAvBgNV
BAMTKEFGRkYyMUZBNzg4NENENURBRDM3QThGMzUwMThBMDQ0QjA4MTJCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGkNdKbBujHMDALARNwwf/uGj
b4RhTgKZ+zswZWsTQ6WQ4xK5NaSmnyRLRAEZI2mPbhiBWqEQCHVN/+gzTXzpqXDt
9aOWErvRRHGbwxOn9IZG/1fTUStkDkFY2SOybvR8HUtUfuAVMkIllKCpd6FM1PZv
fw6YuevtPGC6xIJY+pQdX5ADJu9Nfg3qEpZ84/LuHX07IxsV8CFWSD2F/wVf4THU
ER/hjeF/ud+XE9fxtw+ubZrSj9Xv1tABVtSaWa9wftG/OKJ/vu//HY8P/Q14lde0
f+qkHsT1K7kL/PosjcPKN5icqW+cS+lOyiv7pVcNlmPefZSJFioLY+F6BgJ3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr/8h+niEzV2tN6jzUBigRLCBK9UwHwYDVR0j
BBgwFoAU+85AGA9ugg8xkggk2CsoXPDjKZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0gzdkJnQ1VrNXBEWXpZWHhidTRvcVI3TVBTWDJWUFczZWlWWDRGN3k2
em8vMC9GQkNFNDAxODBGNkU4MjBGMzE5MjA4MjREODJCMjg1Q0YwRTMyOTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCQ0U0MDE4MEY2RTgyMEYz
MTkyMDgyNEQ4MkIyODVDRjBFMzI5OTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIM3ZCZ0NVazVwRFl6WVh4YnU0b3FSN01QU1gyVlBXM2VpVlg0Rjd5NnpvLzAv
MzEzNzM3MmUzMzM3MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMw
MzUzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSUcMA0GCSqGSIb3DQEBCwUAA4IBAQBMP7Aa58yn
1yXnTzVRvtOehhc9kp7xCSUP9sh5f57470cql1hGTOQfQxiLcJZwQ1lrO0MaViE0
GHCsQmqWaZfSryreSgCM2NP8UmW2ovrHGp32n6tjQxEVVA2xglRP1NtyZOtv8lDD
mbZh1d4IGcyZQ6Ve/PgDXR9ioib7Lv1jvTDMcQ7RSD988u+LaFLMv+Jpv11hhAL6
CetxTW6qMiOywZd2G0wrZXAOVaDIvEfl/+iEoaGorHjA6V2Q4SurlEclHqKgAl+7
5aOAStU9NL2kSczSlwy4kQmrinXm/16BKRyEV0g7PgPpaGVYZrzww1titaixJ3vx
zQRQVdqrY0nH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org