Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32332d3233203d3e20323632343931.roa
File:                     3137372e36362e39362e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          B0guJ+8cLWKrAIEsdwrvcxlF5+jyzWDYk0fmu256ymc=
Subject key identifier:   9F:7C:05:8D:6E:AD:35:4E:68:B2:51:F2:6B:78:D6:25:D9:D0:DE:30
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       63B0948605034CB238A2C29CC616F91905FFCBBE
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:48:00 +0000
ROA not before:           Sat 26 Nov 2022 02:43:00 +0000
ROA not after:            Sat 25 Nov 2023 02:48:00 +0000
asID:                     262491
IP address blocks:        177.66.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:94:86:05:03:4c:b2:38:a2:c2:9c:c6:16:f9:19:05:ff:cb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:43:00 2022 GMT
            Not After : Nov 25 02:48:00 2023 GMT
        Subject: CN=3082010A0282010100C02BCDDD7242541426A648DDC7206012057CB5B54C7CCC5D4465554B78560911629812F58655595281D8E0A8B843382971A03214F8078DA89FB5090D2010B5942D75B3C82A4FA0F190A044CB3D8A38932A2344A7AB04FF07E7D412574C6002B5D34C815164E98994C7411C78D237BF021E31F863930669C541C3006458B0637041E46F63A6C83957A3F0B335F7E585CADE1B1372B7CE05EA020FFFBED8807E9B6553233C81F983841F7CD3D1AFD9EA08172BD361C4CB6340E5783C4924920EBB75972D2E2975C61D8ED98E307F8EB1E919F36A486FCBD207C481C09BB0390B4660C23D258EBD53EE4B19C5120428EA50327A9162D68FB2BD3A759B228877481F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:cd:dd:72:42:54:14:26:a6:48:dd:c7:20:
                    60:12:05:7c:b5:b5:4c:7c:cc:5d:44:65:55:4b:78:
                    56:09:11:62:98:12:f5:86:55:59:52:81:d8:e0:a8:
                    b8:43:38:29:71:a0:32:14:f8:07:8d:a8:9f:b5:09:
                    0d:20:10:b5:94:2d:75:b3:c8:2a:4f:a0:f1:90:a0:
                    44:cb:3d:8a:38:93:2a:23:44:a7:ab:04:ff:07:e7:
                    d4:12:57:4c:60:02:b5:d3:4c:81:51:64:e9:89:94:
                    c7:41:1c:78:d2:37:bf:02:1e:31:f8:63:93:06:69:
                    c5:41:c3:00:64:58:b0:63:70:41:e4:6f:63:a6:c8:
                    39:57:a3:f0:b3:35:f7:e5:85:ca:de:1b:13:72:b7:
                    ce:05:ea:02:0f:ff:be:d8:80:7e:9b:65:53:23:3c:
                    81:f9:83:84:1f:7c:d3:d1:af:d9:ea:08:17:2b:d3:
                    61:c4:cb:63:40:e5:78:3c:49:24:92:0e:bb:75:97:
                    2d:2e:29:75:c6:1d:8e:d9:8e:30:7f:8e:b1:e9:19:
                    f3:6a:48:6f:cb:d2:07:c4:81:c0:9b:b0:39:0b:46:
                    60:c2:3d:25:8e:bd:53:ee:4b:19:c5:12:04:28:ea:
                    50:32:7a:91:62:d6:8f:b2:bd:3a:75:9b:22:88:77:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:05:8D:6E:AD:35:4E:68:B2:51:F2:6B:78:D6:25:D9:D0:DE:30
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:f1:f8:2c:d9:8d:36:fb:da:2f:f5:3c:3f:92:d3:ca:e2:
         85:e3:ae:f5:15:56:5f:a8:f4:c8:90:4b:01:fe:76:7b:21:df:
         42:d6:ee:33:62:08:cf:ce:d0:79:9e:08:c0:d8:7a:af:27:9c:
         2c:eb:fb:33:87:ec:f3:9f:38:09:04:ab:e0:4f:e7:bb:65:f9:
         9b:1e:6f:c4:36:d1:39:70:0e:2f:99:ca:8d:e6:c8:b8:1d:31:
         5c:1a:2d:a0:f1:6d:84:fb:13:dd:d5:81:b8:21:9b:6d:f0:11:
         98:dd:aa:3e:13:ed:cd:7d:c2:0c:85:db:83:9c:98:a7:64:f3:
         82:e0:44:ca:71:b4:83:fd:fb:80:f1:1e:1d:ff:cf:34:e1:0e:
         42:21:82:99:e2:e3:6c:76:3a:db:79:78:01:9e:cd:d6:81:c8:
         77:b6:72:5f:e5:af:e4:81:2b:42:48:6b:65:c8:5a:5e:60:6c:
         c5:2d:7a:d0:10:dd:96:c5:d0:b6:f5:73:22:59:36:ae:80:f4:
         3f:e2:cf:b9:2d:2c:fc:aa:2c:93:aa:81:9a:c8:b8:31:88:00:
         9d:31:6c:b6:fc:53:76:a2:80:df:b6:19:27:2a:27:1b:fe:47:
         69:6e:84:99:92:a2:d0:80:0c:fc:38:6b:77:fb:9b:54:96:b2:
         f2:10:26:8e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUY7CUhgUDTLI4osKcxhb5GQX/y74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyQTZFMUFGMDg0N0VBMUE3RDY3N0UyREEwOTEyQTFB
QkY0QjlBQzAeFw0yMjExMjYwMjQzMDBaFw0yMzExMjUwMjQ4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAyQkNEREQ3MjQyNTQxNDI2
QTY0OEREQzcyMDYwMTIwNTdDQjVCNTRDN0NDQzVENDQ2NTU1NEI3ODU2MDkxMTYy
OTgxMkY1ODY1NTU5NTI4MUQ4RTBBOEI4NDMzODI5NzFBMDMyMTRGODA3OERBODlG
QjUwOTBEMjAxMEI1OTQyRDc1QjNDODJBNEZBMEYxOTBBMDQ0Q0IzRDhBMzg5MzJB
MjM0NEE3QUIwNEZGMDdFN0Q0MTI1NzRDNjAwMkI1RDM0QzgxNTE2NEU5ODk5NEM3
NDExQzc4RDIzN0JGMDIxRTMxRjg2MzkzMDY2OUM1NDFDMzAwNjQ1OEIwNjM3MDQx
RTQ2RjYzQTZDODM5NTdBM0YwQjMzNUY3RTU4NUNBREUxQjEzNzJCN0NFMDVFQTAy
MEZGRkJFRDg4MDdFOUI2NTUzMjMzQzgxRjk4Mzg0MUY3Q0QzRDFBRkQ5RUEwODE3
MkJEMzYxQzRDQjYzNDBFNTc4M0M0OTI0OTIwRUJCNzU5NzJEMkUyOTc1QzYxRDhF
RDk4RTMwN0Y4RUIxRTkxOUYzNkE0ODZGQ0JEMjA3QzQ4MUMwOUJCMDM5MEI0NjYw
QzIzRDI1OEVCRDUzRUU0QjE5QzUxMjA0MjhFQTUwMzI3QTkxNjJENjhGQjJCRDNB
NzU5QjIyODg3NzQ4MUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwCvN3XJCVBQmpkjdxyBgEgV8tbVMfMxdRGVVS3hWCRFimBL1hlVZ
UoHY4Ki4QzgpcaAyFPgHjaiftQkNIBC1lC11s8gqT6DxkKBEyz2KOJMqI0SnqwT/
B+fUEldMYAK100yBUWTpiZTHQRx40je/Ah4x+GOTBmnFQcMAZFiwY3BB5G9jpsg5
V6PwszX35YXK3hsTcrfOBeoCD/++2IB+m2VTIzyB+YOEH3zT0a/Z6ggXK9NhxMtj
QOV4PEkkkg67dZctLil1xh2O2Y4wf46x6Rnzakhvy9IHxIHAm7A5C0Zgwj0ljr1T
7ksZxRIEKOpQMnqRYtaPsr06dZsiiHdIHwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJ98BY1urTVOaLJR8mt41iXZ0N4wMB8GA1UdIwQYMBaAFP4qbhrwhH6hp9Z34toJ
EqGr9LmsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h3UnRLQkt4U1A1YlFG
bW5DNTh5WlJCTnQ2RzVYTE15MUF3bTJOUTZkbnZOLzAvRkUyQTZFMUFGMDg0N0VB
MUE3RDY3N0UyREEwOTEyQTFBQkY0QjlBQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTJBNkUxQUYwODQ3RUExQTdENjc3RTJEQTA5MTJBMUFCRjRC
OUFDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Id1J0S0JLeFNQNWJRRm1uQzU4
eVpSQk50Nkc1WExNeTFBd20yTlE2ZG52Ti8wLzMxMzczNzJlMzYzNjJlMzkzNjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM0MzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbFC
YDANBgkqhkiG9w0BAQsFAAOCAQEAEU/x+CzZjTb72i/1PD+S08riheOu9RVWX6j0
yJBLAf52eyHfQtbuM2IIz87QeZ4IwNh6ryecLOv7M4fs8584CQSr4E/nu2X5mx5v
xDbROXAOL5nKjebIuB0xXBotoPFthPsT3dWBuCGbbfARmN2qPhPtzX3CDIXbg5yY
p2TzguBEynG0g/37gPEeHf/PNOEOQiGCmeLjbHY623l4AZ7N1oHId7ZyX+Wv5IEr
QkhrZchaXmBsxS160BDdlsXQtvVzIlk2roD0P+LPuS0s/Kosk6qBmsi4MYgAnTFs
tvxTdqKA37YZJyonG/5HaW6EmZKi0IAM/Dhrd/ubVJay8hAmjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org