Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
File:                     3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (raw, json)
Hash identifier:          hVPMPT3rLci3Eo5VcOIwxFrCMUhAvmWkw2c/ttHER6I=
Subject key identifier:   42:0D:72:05:F6:5D:AF:DB:9A:53:C9:B6:F0:5B:8C:DD:DE:67:F0:13
Certificate issuer:       /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial:       588C4F5F679AAF2093945A72E32944638E148797
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
Signing time:             Wed 20 Dec 2023 15:04:10 +0000
ROA not before:           Wed 20 Dec 2023 14:59:10 +0000
ROA not after:            Wed 18 Dec 2024 15:04:10 +0000
asID:                     263566
IP address blocks:        177.44.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:4f:5f:67:9a:af:20:93:94:5a:72:e3:29:44:63:8e:14:87:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
        Validity
            Not Before: Dec 20 14:59:10 2023 GMT
            Not After : Dec 18 15:04:10 2024 GMT
        Subject: CN=420D7205F65DAFDB9A53C9B6F05B8CDDDE67F013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:b4:d9:16:7c:47:12:07:d1:56:f8:c9:41:
                    f1:70:b2:b1:62:37:27:43:19:f2:09:fd:98:5b:de:
                    6c:d4:53:20:aa:ec:02:1b:21:13:86:7d:0e:51:6b:
                    b0:a6:41:ac:5e:82:13:e5:c9:f4:7e:b5:f5:e7:37:
                    d3:8c:2a:5c:b1:3d:5a:af:f7:08:db:77:98:40:a7:
                    62:30:40:b7:68:7b:f5:aa:6d:0e:32:bc:44:b4:5f:
                    ff:dd:97:83:a0:cc:8d:93:11:34:37:6e:a2:b3:2d:
                    aa:e8:6c:96:42:89:bc:87:75:d3:5a:ff:be:fe:47:
                    e2:0c:7a:c5:19:b4:fb:fb:93:80:8c:ed:c5:ca:20:
                    3e:60:27:b7:38:b9:75:48:a8:88:fa:ad:65:4d:52:
                    b0:2c:08:c5:81:cc:e1:50:4e:49:02:eb:dc:03:9c:
                    4d:ed:65:cb:d7:a6:d6:9e:27:7b:48:37:14:10:5e:
                    7e:e7:74:04:4a:6c:3b:ec:40:62:52:8a:22:34:0a:
                    99:d6:00:7a:bf:80:ce:a0:12:60:21:de:6c:e9:d1:
                    84:3a:4c:c0:45:93:60:1d:c3:47:3c:40:61:7a:24:
                    fd:30:25:98:9f:7d:70:d4:2a:fb:3e:11:39:a4:8e:
                    8f:d3:57:7d:c0:ad:2a:0e:f4:a9:65:ca:19:b3:6c:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0D:72:05:F6:5D:AF:DB:9A:53:C9:B6:F0:5B:8C:DD:DE:67:F0:13
            X509v3 Authority Key Identifier:
                keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:79:c7:01:47:c9:d2:5a:3f:74:aa:77:7b:09:4a:f7:10:55:
         13:fe:52:82:29:33:c4:9e:b8:0f:60:04:4e:19:4e:e8:d7:7e:
         66:a5:7c:f3:14:fc:ac:3f:9f:1e:75:03:b7:08:4d:8c:0d:dd:
         e4:0e:74:0b:49:83:32:5a:a4:df:92:dc:9d:1e:6d:d6:34:93:
         3e:6a:5b:a4:90:f4:2c:02:70:03:cb:d7:90:e1:25:ae:5c:28:
         e2:83:f5:28:c1:de:da:74:2d:50:22:cf:71:12:5b:04:10:12:
         40:58:50:f6:42:01:6f:21:77:17:24:0f:a6:8b:80:98:1f:30:
         50:7a:7d:99:bc:d2:63:1b:f7:aa:47:46:40:bb:7a:61:5a:ce:
         e3:aa:7b:f4:2a:06:a1:69:06:e1:3e:48:79:ce:02:c0:b8:0e:
         bd:43:8d:a9:99:56:9d:7c:88:34:3f:3c:f2:7a:df:83:d2:01:
         66:ac:f0:92:49:8d:8b:4c:ce:fc:ca:25:e9:9a:7a:7d:db:94:
         e7:2d:ab:58:95:f9:6d:a4:e7:6a:03:3d:95:c7:39:f2:d5:5c:
         49:42:d0:4f:73:92:d3:d4:a6:b6:f8:46:d1:ec:0a:22:a3:b2:
         1d:dc:1c:db:a4:54:3a:2a:56:50:eb:4e:f5:e1:a9:a6:b2:33:
         d7:54:3c:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWIxPX2earyCTlFpy4ylEY44Uh5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFMjI0MjAzRDAwMzcxMTFCRjY4RjMxN0FBNUI3OUZB
QjNFRkI3NzAeFw0yMzEyMjAxNDU5MTBaFw0yNDEyMTgxNTA0MTBaMDMxMTAvBgNV
BAMTKDQyMEQ3MjA1RjY1REFGREI5QTUzQzlCNkYwNUI4Q0REREU2N0YwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dbTZFnxHEgfRVvjJQfFwsrFi
NydDGfIJ/Zhb3mzUUyCq7AIbIROGfQ5Ra7CmQaxeghPlyfR+tfXnN9OMKlyxPVqv
9wjbd5hAp2IwQLdoe/WqbQ4yvES0X//dl4OgzI2TETQ3bqKzLarobJZCibyHddNa
/77+R+IMesUZtPv7k4CM7cXKID5gJ7c4uXVIqIj6rWVNUrAsCMWBzOFQTkkC69wD
nE3tZcvXptaeJ3tINxQQXn7ndARKbDvsQGJSiiI0CpnWAHq/gM6gEmAh3mzp0YQ6
TMBFk2Adw0c8QGF6JP0wJZiffXDUKvs+ETmkjo/TV33ArSoO9KllyhmzbAd9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQg1yBfZdr9uaU8m28FuM3d5n8BMwHwYDVR0j
BBgwFoAUOOIkID0ANxEb9o8xeqW3n6s++3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw
c2QvMC8zOEUyMjQyMDNEMDAzNzExMUJGNjhGMzE3QUE1Qjc5RkFCM0VGQjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RTIyNDIwM0QwMDM3MTEx
QkY2OEYzMTdBQTVCNzlGQUIzRUZCNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0YWZYcmVQZVltYlJDMmlpZVVOWHliRlV3cHdlOHFudHZ2MmkyckpBcHNkLzAv
MzEzNzM3MmUzNDM0MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxLNgwDQYJKoZIhvcNAQELBQADggEBABR5xwFH
ydJaP3Sqd3sJSvcQVRP+UoIpM8SeuA9gBE4ZTujXfmalfPMU/Kw/nx51A7cITYwN
3eQOdAtJgzJapN+S3J0ebdY0kz5qW6SQ9CwCcAPL15DhJa5cKOKD9SjB3tp0LVAi
z3ESWwQQEkBYUPZCAW8hdxckD6aLgJgfMFB6fZm80mMb96pHRkC7emFazuOqe/Qq
BqFpBuE+SHnOAsC4Dr1DjamZVp18iDQ/PPJ634PSAWas8JJJjYtMzvzKJemaen3b
lOctq1iV+W2k52oDPZXHOfLVXElC0E9zktPUprb4RtHsCiKjsh3cHNukVDoqVlDr
TvXhqaayM9dUPGs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org