Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa
File:                     3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa (raw, json)
Hash identifier:          Rtuhm1iPZqp3H8IrGEAr0XYVNwh1Ts7SrY10QbsWYIc=
Subject key identifier:   36:2F:BC:59:7D:44:DB:81:12:0D:B1:AB:F9:AD:55:6F:FF:94:C2:AA
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       720E953AC35844CB42B2F5EE633A7DB381B48B49
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:58 +0000
ROA not before:           Mon 23 Oct 2023 12:55:58 +0000
ROA not after:            Mon 21 Oct 2024 13:00:58 +0000
asID:                     28598
IP address blocks:        177.104.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0e:95:3a:c3:58:44:cb:42:b2:f5:ee:63:3a:7d:b3:81:b4:8b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:58 2023 GMT
            Not After : Oct 21 13:00:58 2024 GMT
        Subject: CN=362FBC597D44DB81120DB1ABF9AD556FFF94C2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:c8:c6:50:38:f2:10:f4:43:d7:33:f2:ea:
                    47:be:da:76:19:5d:c0:de:7c:33:4b:e5:95:9f:53:
                    b0:42:c2:88:68:3a:2d:d2:ca:39:2a:2f:47:2e:44:
                    39:0b:05:a8:c6:ab:50:7d:5b:28:33:95:11:45:31:
                    e1:de:0d:af:90:62:82:c6:ab:5b:f2:a5:0b:a1:9a:
                    89:54:51:54:b6:54:ea:e1:c9:c2:9c:5e:0d:d7:c8:
                    b4:29:8a:29:7b:65:a3:52:ef:fb:32:b8:51:69:e4:
                    d6:e1:96:42:4c:15:85:fc:99:6c:e3:61:8f:9b:a0:
                    1c:df:cc:2f:7a:53:e9:18:6b:71:e5:e8:fa:88:7e:
                    a8:11:bd:b3:ed:fb:01:73:4d:e7:be:d1:ed:85:e4:
                    f4:d6:02:9f:71:74:60:1c:c8:1b:75:2a:0d:d7:c7:
                    5b:a7:c1:72:c5:91:a3:cf:da:0a:bc:c0:84:70:9b:
                    fc:1a:b0:7d:69:7a:6e:1a:29:ba:86:ba:1e:0a:01:
                    c6:e1:52:13:24:74:d8:ec:15:14:c1:e0:4a:cc:8a:
                    83:a2:12:3f:c1:95:f2:99:8d:35:78:b3:e6:43:30:
                    86:9d:4e:2a:b6:97:71:5d:3f:5b:27:cd:32:a3:c2:
                    b4:8d:18:f1:d3:18:e0:d4:e6:59:0f:bd:ad:82:7b:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:BC:59:7D:44:DB:81:12:0D:B1:AB:F9:AD:55:6F:FF:94:C2:AA
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:fb:94:a4:8f:d6:4b:93:07:0f:fe:e1:09:ee:76:06:9e:
         9a:b5:fe:d6:43:55:91:f9:34:8a:27:ad:1d:de:ab:62:d8:1c:
         70:b7:ad:63:b1:1e:6b:3e:51:a6:27:2d:3e:58:92:95:e0:2c:
         bb:58:ea:ca:ca:dd:85:aa:3c:46:4b:2a:24:c1:ba:68:8c:e5:
         0c:cb:da:2c:10:42:57:50:f8:de:82:c9:4e:00:87:e4:82:eb:
         e4:95:7f:8c:a4:4b:7a:d1:75:02:2d:e0:04:fa:49:7f:5a:0f:
         b4:e3:d1:80:f3:47:a8:45:1f:ed:78:c5:10:d5:d1:b4:6e:9d:
         6e:cb:54:f7:75:5c:81:7d:2f:1e:05:61:62:19:ab:96:f5:85:
         a8:30:7c:c2:da:fa:f8:e6:ab:db:0d:9a:7c:75:ff:7d:23:22:
         9e:7a:ff:4f:f5:1f:55:b6:83:e5:25:75:10:90:7b:3a:72:40:
         ae:7b:50:c4:41:d9:a6:be:1c:b7:22:53:1a:d3:3e:08:fe:30:
         6a:e0:1a:ff:07:7d:7d:2f:b2:74:f7:5e:e9:e8:01:5a:ba:b7:
         06:44:c4:2e:45:f0:9f:14:18:3c:58:51:4a:09:04:2a:7c:b1:
         5a:30:54:5e:d7:4a:9c:9f:4a:22:91:8c:21:68:8e:93:91:9d:
         a9:98:76:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcg6VOsNYRMtCsvXuYzp9s4G0i0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU1NThaFw0yNDEwMjExMzAwNThaMDMxMTAvBgNV
BAMTKDM2MkZCQzU5N0Q0NERCODExMjBEQjFBQkY5QUQ1NTZGRkY5NEMyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJL8jGUDjyEPRD1zPy6ke+2nYZ
XcDefDNL5ZWfU7BCwohoOi3SyjkqL0cuRDkLBajGq1B9WygzlRFFMeHeDa+QYoLG
q1vypQuhmolUUVS2VOrhycKcXg3XyLQpiil7ZaNS7/syuFFp5NbhlkJMFYX8mWzj
YY+boBzfzC96U+kYa3Hl6PqIfqgRvbPt+wFzTee+0e2F5PTWAp9xdGAcyBt1Kg3X
x1unwXLFkaPP2gq8wIRwm/wasH1pem4aKbqGuh4KAcbhUhMkdNjsFRTB4ErMioOi
Ej/BlfKZjTV4s+ZDMIadTiq2l3FdP1snzTKjwrSNGPHTGODU5lkPva2CeydNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNi+8WX1E24ESDbGr+a1Vb/+UwqowHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzNzM3MmUzMTMwMzQyZTMxMzEzMjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxaHAwDQYJKoZIhvcNAQELBQADggEBABjo+5Sk
j9ZLkwcP/uEJ7nYGnpq1/tZDVZH5NIonrR3eq2LYHHC3rWOxHms+UaYnLT5YkpXg
LLtY6srK3YWqPEZLKiTBumiM5QzL2iwQQldQ+N6CyU4Ah+SC6+SVf4ykS3rRdQIt
4AT6SX9aD7Tj0YDzR6hFH+14xRDV0bRunW7LVPd1XIF9Lx4FYWIZq5b1hagwfMLa
+vjmq9sNmnx1/30jIp56/0/1H1W2g+UldRCQezpyQK57UMRB2aa+HLciUxrTPgj+
MGrgGv8HfX0vsnT3XunoAVq6twZExC5F8J8UGDxYUUoJBCp8sVowVF7XSpyfSiKR
jCFojpORnamYdjQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org