Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
File:                     3137372e36362e3234302e302f32312d3332203d3e203533303035.roa (raw, json)
Hash identifier:          zijOi9/UL38bv+CodVpBINP4+0kuO9guAk/yCrdS6xU=
Subject key identifier:   72:C9:7A:E4:28:29:05:74:F4:71:A5:33:62:13:1C:0D:46:BA:57:15
Certificate issuer:       /CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
Certificate serial:       75DC8FD260C6F6B0C219173BA780DDDE3C888805
Authority key identifier: 41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
Signing time:             Thu 12 Oct 2023 19:43:14 +0000
ROA not before:           Thu 12 Oct 2023 19:38:14 +0000
ROA not after:            Thu 10 Oct 2024 19:43:14 +0000
asID:                     53005
IP address blocks:        177.66.240.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:8f:d2:60:c6:f6:b0:c2:19:17:3b:a7:80:dd:de:3c:88:88:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
        Validity
            Not Before: Oct 12 19:38:14 2023 GMT
            Not After : Oct 10 19:43:14 2024 GMT
        Subject: CN=72C97AE428290574F471A53362131C0D46BA5715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:26:16:43:1b:a4:56:15:fe:aa:b2:51:66:
                    89:21:1b:c1:3a:8a:60:9a:c0:46:c7:fa:f7:ec:b5:
                    1b:4b:5e:e3:57:ab:5d:70:89:2a:bb:02:d6:c0:26:
                    23:b7:08:eb:c1:3c:49:dc:53:d3:08:32:1b:c9:6d:
                    eb:41:58:48:33:e2:4f:ad:53:a8:a8:56:37:3f:67:
                    e9:4a:f9:3f:c3:be:27:24:29:10:74:d9:a6:5e:ea:
                    62:47:97:f9:12:f7:5d:85:e7:ef:96:aa:7b:12:99:
                    63:56:78:e5:a2:21:9e:ed:69:70:e6:87:99:c0:e6:
                    35:bc:7f:37:70:f8:4a:c9:cd:b9:ca:96:32:d8:be:
                    68:a2:38:7f:76:12:fc:b2:b3:a5:29:13:0c:0c:f6:
                    45:9c:2d:59:6c:ce:7a:2b:11:03:19:a9:81:2e:ba:
                    ee:62:da:ae:4f:06:ea:18:67:f8:78:f8:98:f8:d0:
                    d7:03:c0:8f:c0:a6:c7:bf:db:37:1b:f8:76:ff:d1:
                    2f:6f:ba:42:fa:77:f2:92:3d:58:cd:53:96:b8:d9:
                    a6:aa:2c:94:fb:a2:8a:0d:97:5a:93:9b:83:c2:9f:
                    03:14:7e:e9:57:ee:f1:96:29:d7:eb:cd:78:9a:4d:
                    c2:96:5f:de:7b:66:b2:41:01:88:8e:6d:87:6c:87:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:7A:E4:28:29:05:74:F4:71:A5:33:62:13:1C:0D:46:BA:57:15
            X509v3 Authority Key Identifier:
                keyid:41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:80:b2:6e:9f:fe:8e:3e:f1:a7:4e:2a:95:5f:39:62:33:77:
         17:a5:7b:83:2d:b3:52:83:77:19:aa:ef:78:45:31:f0:97:af:
         3b:f1:03:ca:10:5c:81:f6:2c:f2:29:f7:d7:5b:9b:e1:04:36:
         ea:31:ec:3f:64:fd:51:2e:03:3c:99:72:b3:c8:d2:35:e8:ef:
         74:07:26:e6:f9:35:ed:d0:a9:d6:af:2c:e8:50:a9:3d:16:8c:
         3e:44:69:b5:5c:91:ae:48:62:ca:ca:f6:79:f2:21:a5:a8:cb:
         43:9a:a2:79:0f:10:dc:f1:3b:40:3c:14:e0:9f:08:ff:b4:1d:
         9b:58:3d:2e:58:9b:35:0d:e0:17:93:a7:55:cc:c7:82:15:79:
         bc:c7:92:7e:24:81:1e:c2:77:b3:05:b7:93:07:c3:15:7e:a6:
         46:fd:6e:51:34:c1:59:ba:15:7a:34:99:06:99:44:fe:89:fd:
         12:7d:0b:8d:09:6c:9f:e0:d1:fc:92:3f:7d:2a:10:fe:87:d6:
         ad:99:86:7c:58:60:7e:71:04:4c:db:62:73:49:e6:88:23:35:
         ec:db:01:fb:23:fc:b1:b1:c4:69:d1:90:18:46:2e:e6:8f:8a:
         12:e5:5a:32:e2:fc:66:8b:49:fd:72:1e:86:42:1f:fa:08:d1:
         74:c2:36:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUddyP0mDG9rDCGRc7p4Dd3jyIiAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFCQzZGRUE0MEY1OEY2MUREODEyMzZCRTBGNkM0M0Q5
RDgwN0QxNTAeFw0yMzEwMTIxOTM4MTRaFw0yNDEwMTAxOTQzMTRaMDMxMTAvBgNV
BAMTKDcyQzk3QUU0MjgyOTA1NzRGNDcxQTUzMzYyMTMxQzBENDZCQTU3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfSYWQxukVhX+qrJRZokhG8E6
imCawEbH+vfstRtLXuNXq11wiSq7AtbAJiO3COvBPEncU9MIMhvJbetBWEgz4k+t
U6ioVjc/Z+lK+T/DvickKRB02aZe6mJHl/kS912F5++WqnsSmWNWeOWiIZ7taXDm
h5nA5jW8fzdw+ErJzbnKljLYvmiiOH92Evyys6UpEwwM9kWcLVlsznorEQMZqYEu
uu5i2q5PBuoYZ/h4+Jj40NcDwI/Apse/2zcb+Hb/0S9vukL6d/KSPVjNU5a42aaq
LJT7oooNl1qTm4PCnwMUfulX7vGWKdfrzXiaTcKWX957ZrJBAYiObYdsh/3ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcsl65CgpBXT0caUzYhMcDUa6VxUwHwYDVR0j
BBgwFoAUQbxv6kD1j2HdgSNr4PbEPZ2AfRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9VSlJWeXZlTjk5VjF0QUVqaWFnWG4xaGsxV1ZGU0tuM1pXNjFvU3hZ
N0MvMC80MUJDNkZFQTQwRjU4RjYxREQ4MTIzNkJFMEY2QzQzRDlEODA3RDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxQkM2RkVBNDBGNThGNjFE
RDgxMjM2QkUwRjZDNDNEOUQ4MDdEMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvVUpSVnl2ZU45OVYxdEFFamlhZ1huMWhrMVdWRlNLbjNaVzYxb1N4WTdDLzAv
MzEzNzM3MmUzNjM2MmUzMjM0MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNTMz
MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsULwMA0GCSqGSIb3DQEBCwUAA4IBAQBkgLJun/6O
PvGnTiqVXzliM3cXpXuDLbNSg3cZqu94RTHwl6878QPKEFyB9izyKffXW5vhBDbq
Mew/ZP1RLgM8mXKzyNI16O90Bybm+TXt0KnWryzoUKk9Fow+RGm1XJGuSGLKyvZ5
8iGlqMtDmqJ5DxDc8TtAPBTgnwj/tB2bWD0uWJs1DeAXk6dVzMeCFXm8x5J+JIEe
wnezBbeTB8MVfqZG/W5RNMFZuhV6NJkGmUT+if0SfQuNCWyf4NH8kj99KhD+h9at
mYZ8WGB+cQRM22JzSeaIIzXs2wH7I/yxscRp0ZAYRi7mj4oS5Voy4vxmi0n9ch6G
Qh/6CNF0wjbP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org