Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/1/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa
File:                     3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (raw, json)
Hash identifier:          cGV+afa3EHtLqjzJbU/Gevl8XHw08L73MWPC1i3hFDk=
Subject key identifier:   9E:8B:4D:C0:56:0E:AE:43:E9:7D:AB:04:E8:55:D9:41:35:FA:ED:70
Certificate issuer:       /CN=64FB6B0BBCE5E5AC3523328445E1887192364E01
Certificate serial:       332EFF6D775C910FB541DBED9B4E2EC49A5379D9
Authority key identifier: 64:FB:6B:0B:BC:E5:E5:AC:35:23:32:84:45:E1:88:71:92:36:4E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64FB6B0BBCE5E5AC3523328445E1887192364E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/1/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa
Signing time:             Thu 04 Apr 2024 16:43:17 +0000
ROA not before:           Thu 04 Apr 2024 16:38:17 +0000
ROA not after:            Thu 03 Apr 2025 16:43:17 +0000
asID:                     28277
IP address blocks:        177.136.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:ff:6d:77:5c:91:0f:b5:41:db:ed:9b:4e:2e:c4:9a:53:79:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64FB6B0BBCE5E5AC3523328445E1887192364E01
        Validity
            Not Before: Apr  4 16:38:17 2024 GMT
            Not After : Apr  3 16:43:17 2025 GMT
        Subject: CN=9E8B4DC0560EAE43E97DAB04E855D94135FAED70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:2e:14:57:1d:a4:b6:eb:60:7d:ec:e8:38:
                    48:ba:17:f5:be:09:7f:1e:08:cd:16:74:1b:47:ba:
                    47:fe:2e:04:63:85:39:a4:08:8b:df:29:84:9d:30:
                    c9:2c:eb:eb:d2:17:7a:a8:b4:e2:da:34:20:59:96:
                    46:eb:41:0f:a6:81:9b:fe:e8:86:e7:90:94:4a:55:
                    66:8e:0c:da:07:70:23:5f:11:36:05:c9:b1:56:83:
                    10:25:cb:07:55:c2:e5:36:18:5d:08:25:64:da:f9:
                    5f:2f:93:aa:06:75:40:4a:db:ef:ed:79:61:0b:6b:
                    ca:f8:30:f6:66:33:df:fb:7d:33:3e:80:68:d2:e4:
                    3a:ea:7b:6b:48:22:d6:47:f3:13:92:f6:70:02:4e:
                    ca:dd:f3:f5:4c:8e:92:42:5d:89:2c:f9:28:f4:69:
                    68:19:a6:7a:ed:ed:3b:8d:7c:70:70:d6:9f:4d:b0:
                    fb:e0:f8:a4:fe:85:b0:7d:1b:07:d9:47:33:14:e4:
                    28:e7:62:99:d1:e4:93:30:9f:1f:e3:80:39:9f:7a:
                    11:53:37:1f:75:e0:00:bb:a1:f5:e3:f7:c5:10:c2:
                    f2:59:cc:d5:eb:f8:ed:43:b5:16:d0:98:d4:ab:7a:
                    37:23:2d:14:21:fd:c9:ca:f6:ca:65:1d:36:bb:53:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8B:4D:C0:56:0E:AE:43:E9:7D:AB:04:E8:55:D9:41:35:FA:ED:70
            X509v3 Authority Key Identifier:
                keyid:64:FB:6B:0B:BC:E5:E5:AC:35:23:32:84:45:E1:88:71:92:36:4E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/1/64FB6B0BBCE5E5AC3523328445E1887192364E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64FB6B0BBCE5E5AC3523328445E1887192364E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/1/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:ba:43:3a:97:e7:af:a3:1a:c4:97:0b:68:31:d1:0c:b9:
         8d:24:e8:60:6d:0e:96:6e:a6:7d:f8:29:29:ba:91:26:ed:c0:
         96:d9:23:29:e6:3b:df:76:69:4f:3c:e0:b6:35:45:e3:dd:42:
         0c:93:77:0c:82:07:2c:b7:4f:dc:c5:7e:2e:c8:34:1f:d5:38:
         84:7c:16:e6:d0:d8:a4:8d:54:84:e8:69:c3:ab:c7:e7:8f:c4:
         1c:54:44:b5:b4:f8:aa:81:42:64:b1:c2:fa:0e:9f:f8:b9:c0:
         5d:a9:3d:f4:4c:bd:c2:ed:2b:a2:9b:0c:60:85:51:15:e8:d4:
         cf:cc:aa:fc:35:96:fc:83:ee:dc:a6:c7:92:5a:ed:d5:18:fb:
         8d:d7:45:92:23:dc:79:e7:1f:47:58:64:09:be:1b:95:7b:26:
         ce:f3:a7:19:71:ba:28:62:b0:53:88:6c:0e:8f:c5:3c:bf:2c:
         f3:ce:5d:1d:22:5c:ca:b2:73:8a:e9:97:b7:6b:33:37:97:67:
         be:6c:a6:1c:80:aa:2c:4b:b4:97:19:ac:b2:9b:5e:a4:1b:ca:
         b0:da:da:5b:f5:2f:63:65:10:e5:20:2f:14:65:3a:f1:7d:96:
         17:3e:72:17:9c:40:16:9e:35:47:01:30:b0:72:c7:5e:5f:08:
         d9:35:70:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMy7/bXdckQ+1Qdvtm04uxJpTedkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRGQjZCMEJCQ0U1RTVBQzM1MjMzMjg0NDVFMTg4NzE5
MjM2NEUwMTAeFw0yNDA0MDQxNjM4MTdaFw0yNTA0MDMxNjQzMTdaMDMxMTAvBgNV
BAMTKDlFOEI0REMwNTYwRUFFNDNFOTdEQUIwNEU4NTVEOTQxMzVGQUVENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5y4UVx2ktutgfezoOEi6F/W+
CX8eCM0WdBtHukf+LgRjhTmkCIvfKYSdMMks6+vSF3qotOLaNCBZlkbrQQ+mgZv+
6IbnkJRKVWaODNoHcCNfETYFybFWgxAlywdVwuU2GF0IJWTa+V8vk6oGdUBK2+/t
eWELa8r4MPZmM9/7fTM+gGjS5Drqe2tIItZH8xOS9nACTsrd8/VMjpJCXYks+Sj0
aWgZpnrt7TuNfHBw1p9NsPvg+KT+hbB9GwfZRzMU5CjnYpnR5JMwnx/jgDmfehFT
Nx914AC7ofXj98UQwvJZzNXr+O1DtRbQmNSrejcjLRQh/cnK9splHTa7UwlPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnotNwFYOrkPpfasE6FXZQTX67XAwHwYDVR0j
BBgwFoAUZPtrC7zl5aw1IzKEReGIcZI2TgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ
RzEvMS82NEZCNkIwQkJDRTVFNUFDMzUyMzMyODQ0NUUxODg3MTkyMzY0RTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RkI2QjBCQkNFNUU1QUMz
NTIzMzI4NDQ1RTE4ODcxOTIzNjRFMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3dHZwRkhGM0JrWlBjNUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzEv
MzEzNzM3MmUzMTMzMzYyZTM4MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsYhYMA0GCSqGSIb3DQEBCwUAA4IBAQBMlLpDOpfn
r6MaxJcLaDHRDLmNJOhgbQ6WbqZ9+CkpupEm7cCW2SMp5jvfdmlPPOC2NUXj3UIM
k3cMggcst0/cxX4uyDQf1TiEfBbm0NikjVSE6GnDq8fnj8QcVES1tPiqgUJkscL6
Dp/4ucBdqT30TL3C7SuimwxghVEV6NTPzKr8NZb8g+7cpseSWu3VGPuN10WSI9x5
5x9HWGQJvhuVeybO86cZcbooYrBTiGwOj8U8vyzzzl0dIlzKsnOK6Ze3azM3l2e+
bKYcgKosS7SXGayym16kG8qw2tpb9S9jZRDlIC8UZTrxfZYXPnIXnEAWnjVHATCw
csdeXwjZNXCR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org