Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa
File:                     3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa (raw, json)
Hash identifier:          aipMNo667dG8fHPaH7OMvRif30+7kznF44WUrF7f19w=
Subject key identifier:   E9:56:EE:41:63:13:28:CC:B3:53:E3:8B:0D:28:2D:C3:EE:3E:8A:EE
Certificate issuer:       /CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
Certificate serial:       2E382452EF95D10EC91221C312BCCA1E0C54003A
Authority key identifier: 8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa
Signing time:             Wed 06 Sep 2023 22:17:36 +0000
ROA not before:           Wed 06 Sep 2023 22:12:36 +0000
ROA not after:            Wed 04 Sep 2024 22:17:36 +0000
asID:                     270888
IP address blocks:        177.129.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:38:24:52:ef:95:d1:0e:c9:12:21:c3:12:bc:ca:1e:0c:54:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
        Validity
            Not Before: Sep  6 22:12:36 2023 GMT
            Not After : Sep  4 22:17:36 2024 GMT
        Subject: CN=E956EE41631328CCB353E38B0D282DC3EE3E8AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:5f:ab:5b:d7:2b:bc:6c:cc:2d:d5:a5:9c:
                    af:97:0c:0f:35:58:a5:85:8f:58:6d:a5:ea:88:9b:
                    d3:9b:ba:78:fa:96:14:77:65:5e:4c:5d:8e:4c:b6:
                    84:33:af:19:82:70:84:f0:a0:ba:aa:12:eb:ba:34:
                    15:1b:35:18:a0:d1:ca:65:55:d8:fc:c2:b1:8f:c8:
                    42:9f:63:6e:d1:6d:e6:c1:b2:77:10:ed:26:58:ef:
                    37:8f:3c:a5:d3:9e:7c:bf:24:0f:9b:49:4b:66:f0:
                    23:1b:22:28:ad:79:62:04:bc:05:f3:0e:3d:b0:5e:
                    a7:8b:77:c9:b7:72:a0:b8:0e:08:a2:1f:ba:5a:94:
                    dd:e3:a9:ae:d2:b8:79:de:c3:21:b1:0f:a2:75:59:
                    d3:81:0f:f1:a4:33:b6:c4:59:57:ea:7a:a5:15:9d:
                    dc:ec:0b:72:88:58:f7:4f:59:28:eb:18:fc:36:3b:
                    e0:45:5b:4c:f2:5d:d3:2e:5d:5c:a0:10:ca:ab:bc:
                    98:46:18:49:d8:b9:8a:6a:71:1c:c2:77:08:9b:16:
                    cd:83:86:a3:e1:75:a1:77:0b:2a:e0:c8:c8:26:d6:
                    56:df:29:f0:ef:3a:4a:e3:a8:b8:2e:71:45:bc:f2:
                    2c:85:a1:62:9d:da:76:dd:1c:34:e0:91:8c:ab:92:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:EE:41:63:13:28:CC:B3:53:E3:8B:0D:28:2D:C3:EE:3E:8A:EE
            X509v3 Authority Key Identifier:
                keyid:8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:ff:87:45:be:65:56:a9:42:de:f4:99:e5:b9:cb:98:8f:93:
         97:df:a7:6c:0d:4a:5a:54:1f:5b:65:70:c1:31:2b:67:07:e3:
         c8:d9:45:ed:a9:7f:06:39:ec:f4:15:6d:2d:ca:e2:c1:95:33:
         04:51:50:87:d1:0c:79:06:73:1e:fc:75:d8:42:19:13:b2:db:
         55:90:63:3f:d6:6d:cb:31:6e:e0:07:01:06:4f:6f:90:21:64:
         04:89:eb:30:b6:eb:4f:98:01:14:c4:4f:70:52:f8:7c:c4:82:
         dc:ec:bf:e7:88:c4:2b:9b:5a:6a:a4:cb:f8:fd:63:33:99:fc:
         05:91:aa:97:05:43:27:2b:06:7f:fd:fd:32:87:d9:3e:62:46:
         a3:82:8f:dd:a2:02:17:9c:29:89:b0:74:86:49:ca:e9:c6:7a:
         38:c8:96:77:b2:97:37:b0:ed:3a:b5:97:77:b5:15:ff:1d:76:
         60:08:ec:fa:05:5e:89:ce:5e:7a:33:41:1f:b4:f0:51:cc:56:
         c1:5d:95:ef:8b:0c:e8:7d:3f:ce:b9:f8:16:31:5d:74:41:cf:
         bd:5f:63:99:cc:d9:f1:8c:48:9f:58:ec:33:d5:95:aa:67:df:
         f1:f2:2b:a7:8b:7c:c3:14:f7:cb:1f:c1:33:26:b3:82:5a:26:
         a4:74:ac:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULjgkUu+V0Q7JEiHDErzKHgxUADowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFDMjM1QkM2MEVBREI4MDk1QjkzNURGRUU1RkM3MDQ3
MzQ4QjMzQjAeFw0yMzA5MDYyMjEyMzZaFw0yNDA5MDQyMjE3MzZaMDMxMTAvBgNV
BAMTKEU5NTZFRTQxNjMxMzI4Q0NCMzUzRTM4QjBEMjgyREMzRUUzRThBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ1+rW9crvGzMLdWlnK+XDA81
WKWFj1htpeqIm9Obunj6lhR3ZV5MXY5MtoQzrxmCcITwoLqqEuu6NBUbNRig0cpl
Vdj8wrGPyEKfY27RbebBsncQ7SZY7zePPKXTnny/JA+bSUtm8CMbIiiteWIEvAXz
Dj2wXqeLd8m3cqC4DgiiH7palN3jqa7SuHnewyGxD6J1WdOBD/GkM7bEWVfqeqUV
ndzsC3KIWPdPWSjrGPw2O+BFW0zyXdMuXVygEMqrvJhGGEnYuYpqcRzCdwibFs2D
hqPhdaF3CyrgyMgm1lbfKfDvOkrjqLgucUW88iyFoWKd2nbdHDTgkYyrkvHrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6VbuQWMTKMyzU+OLDSgtw+4+iu4wHwYDVR0j
BBgwFoAUisI1vGDq24CVuTXf7l/HBHNIszswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZmaEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3
ZlQvMC84QUMyMzVCQzYwRUFEQjgwOTVCOTM1REZFRTVGQzcwNDczNDhCMzNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBQzIzNUJDNjBFQURCODA5
NUI5MzVERkVFNUZDNzA0NzM0OEIzM0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2ZmhBY2lFWHkyY1FqVFVqY1hnTXpvVnBuZjNBZHNjcFlZaHh1aDJyd2ZULzAv
MzEzNzM3MmUzMTMyMzkyZTMyMzQzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGB8jANBgkqhkiG9w0BAQsFAAOCAQEAyf+H
Rb5lVqlC3vSZ5bnLmI+Tl9+nbA1KWlQfW2VwwTErZwfjyNlF7al/Bjns9BVtLcri
wZUzBFFQh9EMeQZzHvx12EIZE7LbVZBjP9ZtyzFu4AcBBk9vkCFkBInrMLbrT5gB
FMRPcFL4fMSC3Oy/54jEK5taaqTL+P1jM5n8BZGqlwVDJysGf/39MofZPmJGo4KP
3aICF5wpibB0hknK6cZ6OMiWd7KXN7DtOrWXd7UV/x12YAjs+gVeic5eejNBH7Tw
UcxWwV2V74sM6H0/zrn4FjFddEHPvV9jmczZ8YxIn1jsM9WVqmff8fIrp4t8wxT3
yx/BMyazglompHSswQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org