Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35332e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          e27M4cmNLUVtzsVL4cPnmL5GE8qNx+o8/i1a+HhmDXU=
Subject key identifier:   11:20:21:53:C5:6B:D3:8A:98:D1:27:A5:E0:C8:6E:0C:A1:DA:33:D7
Certificate issuer:       /CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
Certificate serial:       077788191BE5F933A0824FEE6D8C1C5EF984341A
Authority key identifier: 9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
Signing time:             Wed 12 Jul 2023 18:33:07 +0000
ROA not before:           Wed 12 Jul 2023 18:28:07 +0000
ROA not after:            Wed 10 Jul 2024 18:33:07 +0000
asID:                     52930
IP address blocks:        177.185.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:77:88:19:1b:e5:f9:33:a0:82:4f:ee:6d:8c:1c:5e:f9:84:34:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
        Validity
            Not Before: Jul 12 18:28:07 2023 GMT
            Not After : Jul 10 18:33:07 2024 GMT
        Subject: CN=11202153C56BD38A98D127A5E0C86E0CA1DA33D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:e6:4f:ec:e0:6c:c9:13:01:33:de:80:fe:
                    91:20:2c:7f:82:47:cb:32:2a:d0:ed:e9:78:d5:c4:
                    bc:3c:30:c6:13:c8:db:ab:d5:2f:52:be:dd:d9:e0:
                    ed:88:a0:c3:36:29:29:b7:eb:88:80:e9:08:7a:3a:
                    7d:52:6e:df:18:79:1c:54:e4:c4:73:3d:a5:a2:cf:
                    1b:96:7b:fb:ec:22:5b:4c:d5:34:28:c5:ad:8f:ec:
                    22:5f:14:9a:8a:96:60:47:fe:4d:9d:4d:c2:d5:6e:
                    fc:d3:33:d7:dc:40:3f:0a:e4:83:95:4b:89:d6:71:
                    d2:00:a5:2e:65:b8:24:79:fb:af:c1:23:17:52:70:
                    70:89:08:27:5d:2b:9e:d7:d4:c6:b9:e8:d8:ea:a5:
                    78:59:fc:7f:3f:78:32:ca:72:79:bb:75:62:ae:2d:
                    00:d2:52:25:33:44:24:e4:65:31:0a:c1:be:ce:43:
                    71:4a:31:3a:65:f7:37:f3:62:09:56:86:fa:f7:06:
                    e1:7a:ac:03:78:74:4b:92:40:2c:4a:92:e1:de:ee:
                    38:1a:60:f3:07:61:6a:25:be:35:2b:a5:28:ed:82:
                    29:16:9c:8c:8d:82:aa:14:0d:77:d9:24:34:73:ce:
                    67:dc:d9:9f:ef:41:f0:0a:ce:26:2c:3e:a7:c8:c9:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:20:21:53:C5:6B:D3:8A:98:D1:27:A5:E0:C8:6E:0C:A1:DA:33:D7
            X509v3 Authority Key Identifier:
                keyid:9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:ed:af:23:6a:bf:30:f0:58:ad:9f:ff:dd:0e:1a:39:3c:b2:
         5f:9d:a2:b6:bb:aa:66:4b:6d:1d:c7:08:45:52:91:39:c3:ec:
         96:9b:81:00:f6:07:00:31:6c:b9:ed:f6:41:14:d2:bd:f9:28:
         9c:2f:91:a9:35:3c:5d:4e:40:33:24:de:92:20:8d:d5:9e:1a:
         7b:9f:36:b3:51:87:ef:a6:ae:cc:d8:b6:53:c3:d6:1f:16:bf:
         4e:06:6c:d2:44:72:59:71:0e:af:84:68:d6:a8:8a:94:74:85:
         b6:54:c3:e4:40:97:61:d3:9a:71:fb:a4:8d:79:48:a6:32:0c:
         ca:81:07:01:95:30:72:20:49:19:8b:b8:7c:21:c2:f6:ec:4b:
         ac:e9:37:cb:1c:48:e2:6e:1f:c3:c0:a5:fa:73:e6:2c:42:e6:
         69:b4:be:89:61:8b:f5:6e:b8:c3:2a:c4:3e:9b:22:8d:6a:72:
         55:9e:e2:b6:fe:4f:ba:64:a0:43:54:64:58:00:72:79:47:4e:
         fa:92:46:a4:e9:5c:4a:b4:8d:bc:48:83:24:66:62:bb:ab:72:
         f2:88:ae:df:e0:cf:45:07:71:28:e2:a0:bc:18:89:08:5e:ce:
         e1:28:34:92:61:0c:98:67:27:36:7d:39:48:3d:17:e0:fb:a3:
         aa:88:36:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB3eIGRvl+TOggk/ubYwcXvmENBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0NDdCREVEOEJERTg2OERDNDVGMjdFOTdDNjU4RjQ1
OTA1MUZCMTAeFw0yMzA3MTIxODI4MDdaFw0yNDA3MTAxODMzMDdaMDMxMTAvBgNV
BAMTKDExMjAyMTUzQzU2QkQzOEE5OEQxMjdBNUUwQzg2RTBDQTFEQTMzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB++ZP7OBsyRMBM96A/pEgLH+C
R8syKtDt6XjVxLw8MMYTyNur1S9Svt3Z4O2IoMM2KSm364iA6Qh6On1Sbt8YeRxU
5MRzPaWizxuWe/vsIltM1TQoxa2P7CJfFJqKlmBH/k2dTcLVbvzTM9fcQD8K5IOV
S4nWcdIApS5luCR5+6/BIxdScHCJCCddK57X1Ma56NjqpXhZ/H8/eDLKcnm7dWKu
LQDSUiUzRCTkZTEKwb7OQ3FKMTpl9zfzYglWhvr3BuF6rAN4dEuSQCxKkuHe7jga
YPMHYWolvjUrpSjtgikWnIyNgqoUDXfZJDRzzmfc2Z/vQfAKziYsPqfIyYb/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUESAhU8Vr04qY0Sel4MhuDKHaM9cwHwYDVR0j
BBgwFoAUn0R73ti96GjcRfJ+l8ZY9FkFH7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC85RjQ0N0JERUQ4QkRFODY4REM0NUYyN0U5N0M2NThGNDU5MDUxRkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGNDQ3QkRFRDhCREU4NjhE
QzQ1RjI3RTk3QzY1OEY0NTkwNTFGQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzNzM3MmUzMTM4MzUyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsbk1MA0GCSqGSIb3DQEBCwUAA4IBAQDd7a8jar8w
8Fitn//dDho5PLJfnaK2u6pmS20dxwhFUpE5w+yWm4EA9gcAMWy57fZBFNK9+Sic
L5GpNTxdTkAzJN6SII3Vnhp7nzazUYfvpq7M2LZTw9YfFr9OBmzSRHJZcQ6vhGjW
qIqUdIW2VMPkQJdh05px+6SNeUimMgzKgQcBlTByIEkZi7h8IcL27Eus6TfLHEji
bh/DwKX6c+YsQuZptL6JYYv1brjDKsQ+myKNanJVnuK2/k+6ZKBDVGRYAHJ5R076
kkak6VxKtI28SIMkZmK7q3LyiK7f4M9FB3Eo4qC8GIkIXs7hKDSSYQyYZyc2fTlI
PRfg+6OqiDZk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org