Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa
File:                     3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          mG12LAe57fN5nEe07xzSBCCM4Dgj1S+EzXGOJKig0Rk=
Subject key identifier:   62:3F:BE:EF:4E:03:20:49:13:70:67:F2:87:E9:E8:FD:EC:54:FC:26
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       639FDAF95E02C6B0DA9D708F7FF66DCDD470D1A7
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:12 +0000
ROA not before:           Tue 30 Aug 2022 17:05:12 +0000
ROA not after:            Tue 29 Aug 2023 17:10:12 +0000
asID:                     28598
IP address blocks:        177.104.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:da:f9:5e:02:c6:b0:da:9d:70:8f:7f:f6:6d:cd:d4:70:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:12 2022 GMT
            Not After : Aug 29 17:10:12 2023 GMT
        Subject: CN=623FBEEF4E032049137067F287E9E8FDEC54FC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:ec:aa:82:24:0d:47:cd:d9:1a:09:14:fa:
                    1e:a6:6d:c8:da:8f:0c:23:8a:9f:98:bf:05:0a:c4:
                    69:60:2f:d3:08:d7:d3:26:a7:41:55:ac:f6:97:66:
                    4a:87:4e:07:bb:be:25:fa:a8:08:0e:39:6a:69:df:
                    7a:6f:eb:1a:38:e0:3b:72:54:0e:39:c8:26:cf:5b:
                    ee:51:eb:21:51:df:28:9e:9a:3c:bf:14:af:37:29:
                    93:31:c7:24:38:b3:33:b0:a6:2d:9e:5b:29:68:66:
                    7d:8e:b0:bf:f6:b7:77:16:56:2c:01:e4:4b:e2:f6:
                    00:85:c3:da:9c:8c:3c:a3:13:da:fb:d9:9d:07:04:
                    d3:7a:e9:59:7f:0e:d7:8b:c4:02:6c:eb:4c:48:ba:
                    90:c1:ab:e1:de:bc:fc:b4:26:0e:b1:6e:05:dc:60:
                    a0:a1:d8:ca:5e:d8:2a:fc:df:fa:71:fd:0b:33:fa:
                    d9:a5:14:dd:79:5b:d8:e6:1a:29:0f:34:2d:28:06:
                    9c:0a:97:c6:de:84:cf:2d:2b:35:84:01:65:af:e9:
                    a3:bc:58:7a:38:90:56:72:10:95:aa:76:b7:9a:4d:
                    b9:21:29:d5:bb:b5:cc:1e:13:aa:8e:12:27:12:aa:
                    30:b8:28:96:04:eb:cc:81:17:a1:4b:3a:50:13:25:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:BE:EF:4E:03:20:49:13:70:67:F2:87:E9:E8:FD:EC:54:FC:26
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:3e:ab:f1:41:4e:55:31:d0:b0:78:16:cb:ef:1f:8e:7a:
         66:cd:91:9e:1c:80:3f:13:01:86:60:00:11:33:76:a6:7b:52:
         be:79:8a:04:cc:99:4a:a2:45:af:ca:ba:96:99:ab:d4:30:3f:
         12:d1:fd:2d:ec:35:0f:cd:29:a0:6e:32:1b:f9:bc:db:75:a9:
         78:6f:31:57:1a:19:7d:b3:1e:4d:75:4e:04:96:c3:67:32:c6:
         4f:d1:70:32:0d:02:2d:18:11:2e:b1:a4:e8:64:0d:d3:45:1d:
         fa:5e:fe:64:2c:d5:3d:fa:fe:3d:51:76:92:2c:99:7f:d6:30:
         ba:13:c1:40:49:2f:84:52:55:58:de:10:da:f9:b8:a2:78:82:
         c7:59:f9:74:d4:42:67:52:f0:41:ff:83:fc:17:4f:11:c3:59:
         d4:3e:3c:e8:2a:ec:7c:32:77:a5:a0:81:91:e5:bd:4a:fd:ee:
         b3:47:b4:a2:e4:9c:ec:e3:b8:08:ad:e3:1d:58:31:91:15:74:
         66:1e:51:3b:fe:3d:2f:3a:4c:0e:7e:8c:9d:3e:c0:c3:10:ac:
         8d:6d:f6:0e:92:d4:12:31:cb:c4:1e:f4:44:98:8a:7a:e2:95:
         8d:fb:06:1e:2a:08:a7:46:8b:d5:3e:33:93:af:43:2b:7a:7c:
         a0:a2:de:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY5/a+V4CxrDanXCPf/ZtzdRw0acwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEODhCNjI4NUUzMUI3NTBCNjJFMjE5MUMwQTZGMTY0
NUY3NTBEMTAeFw0yMjA4MzAxNzA1MTJaFw0yMzA4MjkxNzEwMTJaMDMxMTAvBgNV
BAMTKDYyM0ZCRUVGNEUwMzIwNDkxMzcwNjdGMjg3RTlFOEZERUM1NEZDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0eyqgiQNR83ZGgkU+h6mbcja
jwwjip+YvwUKxGlgL9MI19Mmp0FVrPaXZkqHTge7viX6qAgOOWpp33pv6xo44Dty
VA45yCbPW+5R6yFR3yiemjy/FK83KZMxxyQ4szOwpi2eWyloZn2OsL/2t3cWViwB
5Evi9gCFw9qcjDyjE9r72Z0HBNN66Vl/DteLxAJs60xIupDBq+HevPy0Jg6xbgXc
YKCh2Mpe2Cr83/px/Qsz+tmlFN15W9jmGikPNC0oBpwKl8behM8tKzWEAWWv6aO8
WHo4kFZyEJWqdreaTbkhKdW7tcweE6qOEicSqjC4KJYE68yBF6FLOlATJekvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYj++704DIEkTcGfyh+no/exU/CYwHwYDVR0j
BBgwFoAUP9iLYoXjG3ULYuIZHApvFkX3UNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMC8zRkQ4OEI2Mjg1RTMxQjc1MEI2MkUyMTkxQzBBNkYxNjQ1Rjc1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRDg4QjYyODVFMzFCNzUw
QjYyRTIxOTFDMEE2RjE2NDVGNzUwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzAv
MzEzNzM3MmUzMTMwMzQyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxaHQwDQYJKoZIhvcNAQELBQADggEBAJuzPqvx
QU5VMdCweBbL7x+OembNkZ4cgD8TAYZgABEzdqZ7Ur55igTMmUqiRa/KupaZq9Qw
PxLR/S3sNQ/NKaBuMhv5vNt1qXhvMVcaGX2zHk11TgSWw2cyxk/RcDINAi0YES6x
pOhkDdNFHfpe/mQs1T36/j1RdpIsmX/WMLoTwUBJL4RSVVjeENr5uKJ4gsdZ+XTU
QmdS8EH/g/wXTxHDWdQ+POgq7Hwyd6WggZHlvUr97rNHtKLknOzjuAit4x1YMZEV
dGYeUTv+PS86TA5+jJ0+wMMQrI1t9g6S1BIxy8Qe9ESYinrilY37Bh4qCKdGi9U+
M5OvQyt6fKCi3vY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org