Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3234203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32302d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          nqZ5UhNdEsJdMENwPXjA6I8J2VgxRp/P1Clw/59vhCg=
Subject key identifier:   01:5D:50:05:45:21:47:66:54:BD:F9:41:FA:BA:E1:80:E8:DB:F7:9F
Certificate issuer:       /CN=93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12
Certificate serial:       6B003B31628491428B483A939B4DE3AD58CC86CD
Authority key identifier: 93:22:6D:8A:C4:BC:07:05:86:4D:AB:3F:B6:AD:47:C0:B2:A1:7E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3234203d3e20323632363533.roa
Signing time:             Fri 29 Oct 2021 14:18:00 +0000
ROA not before:           Fri 29 Oct 2021 14:13:00 +0000
ROA not after:            Fri 28 Oct 2022 14:18:00 +0000
asID:                     262653
IP address blocks:        177.105.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:00:3b:31:62:84:91:42:8b:48:3a:93:9b:4d:e3:ad:58:cc:86:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12
        Validity
            Not Before: Oct 29 14:13:00 2021 GMT
            Not After : Oct 28 14:18:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:0d:11:5a:fe:de:4c:26:34:8e:a6:8d:74:
                    6a:0e:4b:3b:3e:ef:69:83:11:ae:fb:a8:4c:a1:4f:
                    55:65:a7:da:30:23:3d:e9:19:7d:62:53:31:bf:dd:
                    67:ff:a5:19:f8:66:c0:4f:7d:00:1a:c1:be:11:4d:
                    7a:dd:56:5a:b9:80:c4:a7:a9:8d:9a:20:be:65:f0:
                    ba:39:58:8b:ab:c2:1f:01:2a:35:6d:72:a5:98:36:
                    45:7b:5a:b8:3b:ed:73:6d:6b:ce:b4:73:d1:a7:07:
                    e8:00:4b:02:1a:d0:5e:43:74:0e:c8:00:cd:83:89:
                    b1:df:82:f2:4b:b4:5e:75:f8:72:9d:71:8d:34:bb:
                    a0:0b:7c:f2:26:4f:02:f0:6f:14:87:74:dd:c5:a1:
                    b6:f3:a4:57:cf:6b:f3:1e:12:44:19:44:19:16:6b:
                    68:92:55:66:68:fe:a2:88:8c:6d:c3:61:d1:c6:0a:
                    01:21:56:36:11:ed:0d:71:b8:0d:49:83:53:41:00:
                    98:85:f1:ed:c6:53:47:f1:f5:3e:14:a5:8f:d1:da:
                    c6:23:31:73:89:07:ff:8f:7b:fc:56:6a:ce:5c:55:
                    60:99:60:e9:26:1e:14:a7:ca:a8:a2:42:8c:16:9b:
                    11:7b:44:96:6d:ce:fe:90:8d:a3:37:7d:b1:01:01:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:50:05:45:21:47:66:54:BD:F9:41:FA:BA:E1:80:E8:DB:F7:9F
            X509v3 Authority Key Identifier:
                keyid:93:22:6D:8A:C4:BC:07:05:86:4D:AB:3F:B6:AD:47:C0:B2:A1:7E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93226D8AC4BC0705864DAB3FB6AD47C0B2A17E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32302d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:81:87:8f:42:1f:1c:b5:04:1b:ed:d3:88:1b:6b:f1:dd:
         9f:9c:bc:2a:89:60:98:28:1f:64:be:54:96:b5:fa:11:ca:f4:
         0b:81:ca:7f:66:da:a8:5f:e8:6c:24:ab:d4:c6:42:24:fb:0d:
         17:9b:a3:78:04:b4:7c:ab:6d:f2:d3:7a:6b:67:ba:82:d2:0c:
         e5:79:c8:46:7a:82:da:80:47:1f:01:a9:b3:fa:5e:94:d7:fe:
         24:17:d6:d2:cb:71:87:bd:16:cb:72:6f:48:c9:bf:8a:55:6b:
         95:80:af:73:5f:a8:29:f4:4f:19:46:0e:0c:49:86:17:9b:a2:
         5a:ac:5e:12:5a:f3:25:d2:ec:ae:e4:28:9f:9e:11:77:c7:c3:
         7a:1f:34:bf:3a:89:46:55:48:d7:05:84:5d:f5:06:b0:e6:fc:
         2a:06:3b:57:6c:ce:f6:ce:03:a0:76:58:5f:a7:ba:0d:67:48:
         92:4d:2d:1f:7e:87:47:75:c8:3b:f4:99:6c:f7:6b:df:3d:13:
         62:34:a1:f9:35:f7:4b:a6:b6:06:e0:86:9f:76:a2:3a:78:86:
         b3:41:3f:cd:e6:95:48:20:7c:7d:19:a5:9c:f9:c4:36:05:3d:
         c8:23:1a:6f:d0:82:3e:9d:6e:f6:14:a7:30:9b:a0:24:61:c8:
         73:62:67:c8
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUawA7MWKEkUKLSDqTm03jrVjMhs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMyMjZEOEFDNEJDMDcwNTg2NERBQjNGQjZBRDQ3QzBC
MkExN0UxMjAeFw0yMTEwMjkxNDEzMDBaFw0yMjEwMjgxNDE4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ2OTBEMTE1QUZFREU0QzI2
MzQ4RUE2OEQ3NDZBMEU0QjNCM0VFRjY5ODMxMUFFRkJBODRDQTE0RjU1NjVBN0RB
MzAyMzNERTkxOTdENjI1MzMxQkZERDY3RkZBNTE5Rjg2NkMwNEY3RDAwMUFDMUJF
MTE0RDdBREQ1NjVBQjk4MEM0QTdBOThEOUEyMEJFNjVGMEJBMzk1ODhCQUJDMjFG
MDEyQTM1NkQ3MkE1OTgzNjQ1N0I1QUI4M0JFRDczNkQ2QkNFQjQ3M0QxQTcwN0U4
MDA0QjAyMUFEMDVFNDM3NDBFQzgwMENEODM4OUIxREY4MkYyNEJCNDVFNzVGODcy
OUQ3MThEMzRCQkEwMEI3Q0YyMjY0RjAyRjA2RjE0ODc3NEREQzVBMUI2RjNBNDU3
Q0Y2QkYzMUUxMjQ0MTk0NDE5MTY2QjY4OTI1NTY2NjhGRUEyODg4QzZEQzM2MUQx
QzYwQTAxMjE1NjM2MTFFRDBENzFCODBENDk4MzUzNDEwMDk4ODVGMUVEQzY1MzQ3
RjFGNTNFMTRBNThGRDFEQUM2MjMzMTczODkwN0ZGOEY3QkZDNTY2QUNFNUM1NTYw
OTk2MEU5MjYxRTE0QTdDQUE4QTI0MjhDMTY5QjExN0I0NDk2NkRDRUZFOTA4REEz
Mzc3REIxMDEwMTQ2NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtGkNEVr+3kwmNI6mjXRqDks7Pu9pgxGu+6hMoU9VZafaMCM96Rl9
YlMxv91n/6UZ+GbAT30AGsG+EU163VZauYDEp6mNmiC+ZfC6OViLq8IfASo1bXKl
mDZFe1q4O+1zbWvOtHPRpwfoAEsCGtBeQ3QOyADNg4mx34LyS7RedfhynXGNNLug
C3zyJk8C8G8Uh3TdxaG286RXz2vzHhJEGUQZFmtoklVmaP6iiIxtw2HRxgoBIVY2
Ee0NcbgNSYNTQQCYhfHtxlNH8fU+FKWP0drGIzFziQf/j3v8VmrOXFVgmWDpJh4U
p8qookKMFpsRe0SWbc7+kI2jN32xAQFGYwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FAFdUAVFIUdmVL35Qfq64YDo2/efMB8GA1UdIwQYMBaAFJMibYrEvAcFhk2rP7at
R8CyoX4SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pER2VRNlNTdGRUQ3k5
VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAvOTMyMjZEOEFDNEJDMDcw
NTg2NERBQjNGQjZBRDQ3QzBCMkExN0UxMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MzIyNkQ4QUM0QkMwNzA1ODY0REFCM0ZCNkFENDdDMEIyQTE3
RTEyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KREdlUTZTU3RkVEN5OVRzTXZO
NzltaVFyVEhDU1J2WGcyczJrTHREODFmei8wLzMxMzczNzJlMzEzMDM1MmUzMjMw
MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzIzNjM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BASxadAwDQYJKoZIhvcNAQELBQADggEBAH1PgYePQh8ctQQb7dOIG2vx3Z+cvCqJ
YJgoH2S+VJa1+hHK9AuByn9m2qhf6Gwkq9TGQiT7DRebo3gEtHyrbfLTemtnuoLS
DOV5yEZ6gtqARx8BqbP6XpTX/iQX1tLLcYe9Fstyb0jJv4pVa5WAr3NfqCn0TxlG
DgxJhhebolqsXhJa8yXS7K7kKJ+eEXfHw3ofNL86iUZVSNcFhF31BrDm/CoGO1ds
zvbOA6B2WF+nug1nSJJNLR9+h0d1yDv0mWz3a989E2I0ofk190umtgbghp92ojp4
hrNBP83mlUggfH0ZpZz5xDYFPcgjGm/Qgj6dbvYUpzCboCRhyHNiZ8g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org