Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
File:                     3137372e36372e38382e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier:          fs+cvo/L0CHsvbS5L7yst+1GqvA2sqZKxRjeqMpltCs=
Subject key identifier:   D0:48:1E:6B:06:57:03:0C:AB:B0:57:74:DD:9A:0B:1F:54:A6:8D:B9
Certificate issuer:       /CN=16C13A9D4AC04E63F87F30936C08AEAE60ABF22F
Certificate serial:       13EEC6C88F1BCC7C92EF87351B786164D6938071
Authority key identifier: 16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
Signing time:             Sat 04 Mar 2023 01:13:10 +0000
ROA not before:           Sat 04 Mar 2023 01:08:10 +0000
ROA not after:            Sat 02 Mar 2024 01:13:10 +0000
asID:                     52674
IP address blocks:        177.67.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ee:c6:c8:8f:1b:cc:7c:92:ef:87:35:1b:78:61:64:d6:93:80:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C13A9D4AC04E63F87F30936C08AEAE60ABF22F
        Validity
            Not Before: Mar  4 01:08:10 2023 GMT
            Not After : Mar  2 01:13:10 2024 GMT
        Subject: CN=D0481E6B0657030CABB05774DD9A0B1F54A68DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:fc:7f:2b:d4:2a:20:bb:1d:0a:3b:ce:68:
                    04:24:4e:18:56:56:83:ed:61:b1:ee:f8:df:87:0a:
                    ec:6e:13:50:ce:5d:eb:12:12:7c:51:8e:ff:e4:f9:
                    d0:d2:20:3e:cc:ed:e8:1f:df:b8:ca:b9:a2:5f:fb:
                    2b:e7:ca:ac:9a:22:40:c3:74:92:6d:a3:9d:fa:75:
                    c7:8b:1b:86:32:61:8f:cd:c1:b0:96:49:fa:aa:bc:
                    81:9a:5d:38:ca:cf:f5:88:c8:93:48:ec:10:d5:68:
                    10:77:d1:dd:c3:95:58:af:e5:ef:9d:1f:b5:9f:83:
                    f5:87:ba:37:2e:6a:e0:63:7c:98:e3:97:87:a3:e9:
                    aa:5f:d0:4f:1b:1b:d8:6e:e0:d3:0a:d4:57:cd:75:
                    6a:c9:e8:27:a9:87:64:62:58:af:0d:6b:48:14:c4:
                    2e:bf:cb:da:cf:da:30:85:78:1c:00:fe:af:79:87:
                    e8:5b:ec:26:d7:ac:95:c6:1d:71:b3:93:a2:ec:bd:
                    98:4e:56:3a:b9:7d:64:23:c1:6b:83:aa:aa:9c:70:
                    9a:aa:e6:27:7c:72:34:fd:74:75:24:5f:84:cc:3b:
                    af:8c:e7:41:c1:97:1c:49:86:80:c8:76:c8:cc:bf:
                    e8:c3:7d:f4:3c:68:f4:ff:e2:97:02:7f:62:ad:86:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:48:1E:6B:06:57:03:0C:AB:B0:57:74:DD:9A:0B:1F:54:A6:8D:B9
            X509v3 Authority Key Identifier:
                keyid:16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:71:b5:5a:7f:75:49:1f:fe:fd:18:03:fb:ce:78:cd:66:
         0e:d9:13:07:d6:17:f5:09:38:e5:38:27:d6:f3:de:f1:a9:4f:
         e1:94:48:06:17:1c:64:d0:67:5c:f3:2e:89:4b:ff:e9:7a:d4:
         66:e3:a8:64:f2:b7:ef:fc:15:b6:e3:2a:3e:df:77:d6:f6:6c:
         c1:56:f2:a1:0e:12:09:89:c5:e7:41:b1:03:3b:5f:2d:cf:a4:
         c1:6f:bb:d6:70:71:35:b5:ea:11:75:2d:95:82:3d:5c:e9:da:
         62:bb:9e:3d:9c:0e:67:96:0d:70:6c:41:c4:f7:4d:5c:fc:26:
         f1:68:30:99:bb:00:a5:00:05:c6:54:8d:36:86:0a:fb:df:e4:
         b5:90:fa:50:58:4b:25:80:89:e4:56:7b:f2:c3:78:b9:f1:60:
         81:93:40:74:96:ba:fe:ff:85:68:a7:f7:fb:cb:f4:e3:cd:cb:
         d4:ea:af:0a:df:be:05:e2:46:4b:ce:96:05:ed:50:3b:20:d2:
         a4:6f:b6:49:a2:2a:7a:65:6a:37:19:e8:7e:6a:01:70:67:44:
         5f:d1:eb:91:dc:85:52:fc:6f:26:43:fb:f4:69:cc:79:ab:b2:
         bb:2c:97:8b:eb:3e:37:b8:cf:c0:44:24:30:9e:ab:55:a1:1b:
         79:34:fa:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE+7GyI8bzHyS74c1G3hhZNaTgHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZDMTNBOUQ0QUMwNEU2M0Y4N0YzMDkzNkMwOEFFQUU2
MEFCRjIyRjAeFw0yMzAzMDQwMTA4MTBaFw0yNDAzMDIwMTEzMTBaMDMxMTAvBgNV
BAMTKEQwNDgxRTZCMDY1NzAzMENBQkIwNTc3NEREOUEwQjFGNTRBNjhEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTW/x/K9QqILsdCjvOaAQkThhW
VoPtYbHu+N+HCuxuE1DOXesSEnxRjv/k+dDSID7M7egf37jKuaJf+yvnyqyaIkDD
dJJto536dceLG4YyYY/NwbCWSfqqvIGaXTjKz/WIyJNI7BDVaBB30d3DlViv5e+d
H7Wfg/WHujcuauBjfJjjl4ej6apf0E8bG9hu4NMK1FfNdWrJ6Ceph2RiWK8Na0gU
xC6/y9rP2jCFeBwA/q95h+hb7CbXrJXGHXGzk6LsvZhOVjq5fWQjwWuDqqqccJqq
5id8cjT9dHUkX4TMO6+M50HBlxxJhoDIdsjMv+jDffQ8aPT/4pcCf2KthqtHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0EgeawZXAwyrsFd03ZoLH1SmjbkwHwYDVR0j
BBgwFoAUFsE6nUrATmP4fzCTbAiurmCr8i8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVZdjh5b3lTMW5XWjFDamJvOHZFUTZ3MWs2U0dZZzlvUHlhY0dSM1hX
c0gvMC8xNkMxM0E5RDRBQzA0RTYzRjg3RjMwOTM2QzA4QUVBRTYwQUJGMjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2QzEzQTlENEFDMDRFNjNG
ODdGMzA5MzZDMDhBRUFFNjBBQkYyMkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1WXY4eW95UzFuV1oxQ2pibzh2RVE2dzFrNlNHWWc5b1B5YWNHUjNYV3NILzAv
MzEzNzM3MmUzNjM3MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFDWDANBgkqhkiG9w0BAQsFAAOCAQEAiG1xtVp/dUkf
/v0YA/vOeM1mDtkTB9YX9Qk45Tgn1vPe8alP4ZRIBhccZNBnXPMuiUv/6XrUZuOo
ZPK37/wVtuMqPt931vZswVbyoQ4SCYnF50GxAztfLc+kwW+71nBxNbXqEXUtlYI9
XOnaYruePZwOZ5YNcGxBxPdNXPwm8WgwmbsApQAFxlSNNoYK+9/ktZD6UFhLJYCJ
5FZ78sN4ufFggZNAdJa6/v+FaKf3+8v0483L1OqvCt++BeJGS86WBe1QOyDSpG+2
SaIqemVqNxnofmoBcGdEX9HrkdyFUvxvJkP79GnMeauyuyyXi+s+N7jPwEQkMJ6r
VaEbeTT6Zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org