Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
File:                     3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (raw, json)
Hash identifier:          Bvq00ZKA4xH/qBZlzlfdlVIxzUoFvYKxM2qRqEqGDi4=
Subject key identifier:   FC:74:BA:79:8C:90:CA:C0:5C:A1:B4:20:84:1A:FD:54:53:CA:68:DB
Certificate issuer:       /CN=866B234EB1F6AE9493FDAF0E29615A62E0010EF7
Certificate serial:       3AEB78E635D089C63E1C31BDE40C8CFDD1BD006A
Authority key identifier: 86:6B:23:4E:B1:F6:AE:94:93:FD:AF:0E:29:61:5A:62:E0:01:0E:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/866B234EB1F6AE9493FDAF0E29615A62E0010EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
Signing time:             Mon 18 Sep 2023 20:18:16 +0000
ROA not before:           Mon 18 Sep 2023 20:13:16 +0000
ROA not after:            Mon 16 Sep 2024 20:18:16 +0000
asID:                     52795
IP address blocks:        177.39.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:78:e6:35:d0:89:c6:3e:1c:31:bd:e4:0c:8c:fd:d1:bd:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B234EB1F6AE9493FDAF0E29615A62E0010EF7
        Validity
            Not Before: Sep 18 20:13:16 2023 GMT
            Not After : Sep 16 20:18:16 2024 GMT
        Subject: CN=FC74BA798C90CAC05CA1B420841AFD5453CA68DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:ba:55:ed:47:7c:a5:d9:85:b2:4f:f9:76:
                    46:87:01:77:14:8d:29:f3:87:94:71:af:74:23:84:
                    66:12:96:b9:c2:f3:6e:73:86:8e:88:07:44:f1:8c:
                    75:40:8e:a6:06:87:8b:fd:c1:71:ae:6c:31:d6:bc:
                    64:94:ad:72:18:b4:11:e8:87:12:3b:b5:e9:da:85:
                    9e:6f:28:c5:fb:dc:8d:20:05:20:93:6d:9c:bf:f0:
                    71:84:bf:c8:f3:6c:33:eb:86:55:a5:bf:52:35:86:
                    b9:f2:89:69:21:6e:5c:8b:f4:36:12:5e:4c:97:3c:
                    26:9a:75:40:63:53:d4:4c:06:3b:8e:3f:f2:c5:14:
                    07:8b:46:ab:62:22:20:78:bb:84:07:36:0e:49:3e:
                    99:da:63:ce:dd:7d:53:6a:73:63:3a:b9:bc:5e:86:
                    8b:cc:13:f1:c1:80:98:9a:96:38:4e:49:3b:17:6b:
                    96:14:67:76:03:51:20:4c:49:ac:88:41:82:87:c3:
                    61:2f:51:37:80:cc:5d:46:ad:64:47:c3:83:30:95:
                    2c:03:7a:22:65:49:ad:6c:16:4c:c3:c0:5a:0c:2d:
                    4d:bf:0e:ef:9b:2a:7c:bc:88:1e:6b:46:f7:1b:2b:
                    e9:5f:01:74:8b:d2:27:95:a8:fa:d8:68:69:3e:a5:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:BA:79:8C:90:CA:C0:5C:A1:B4:20:84:1A:FD:54:53:CA:68:DB
            X509v3 Authority Key Identifier:
                keyid:86:6B:23:4E:B1:F6:AE:94:93:FD:AF:0E:29:61:5A:62:E0:01:0E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/866B234EB1F6AE9493FDAF0E29615A62E0010EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/866B234EB1F6AE9493FDAF0E29615A62E0010EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:91:40:23:6d:d7:cc:0b:be:26:35:bc:76:00:8d:07:2e:
         d3:79:a4:0c:22:b5:9b:7f:57:0b:37:3c:0c:bd:9a:e0:b3:4d:
         78:26:82:f1:5c:67:4e:9b:8f:2f:5e:a0:b5:96:56:22:7d:d6:
         17:a2:c7:a1:09:92:18:20:c6:cb:c0:d1:86:9f:d8:75:39:ee:
         79:33:98:5e:dd:1a:2a:05:e8:00:7f:9f:6e:ed:e7:a2:ef:70:
         38:9d:31:3e:83:f7:36:c3:16:4b:1c:25:1f:01:5a:44:7a:32:
         b8:23:80:38:6a:3d:39:1f:c8:a7:9d:f3:f2:07:24:b2:c7:76:
         a3:81:25:46:d8:18:93:14:d1:8a:98:5c:d0:8b:47:d9:36:e0:
         f8:e8:25:c1:44:b6:97:88:6d:63:3b:7c:7b:8f:28:4d:bf:e9:
         60:91:23:d0:96:e6:fd:c9:bb:f0:0f:ac:86:bc:14:3e:d8:a9:
         81:c6:7f:23:b9:81:03:9c:69:12:89:9d:0b:9a:95:76:70:34:
         fc:98:64:fa:85:7c:38:f5:71:b7:76:0c:59:72:96:f5:8c:d6:
         b7:f2:3f:d5:25:c1:3d:fc:04:56:10:9c:55:03:ed:1b:e1:56:
         76:4b:a1:5e:4c:2f:af:0b:a3:63:12:ed:db:9e:04:31:db:3c:
         b2:da:a3:98
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUOut45jXQicY+HDG95AyM/dG9AGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QjIzNEVCMUY2QUU5NDkzRkRBRjBFMjk2MTVBNjJF
MDAxMEVGNzAeFw0yMzA5MTgyMDEzMTZaFw0yNDA5MTYyMDE4MTZaMDMxMTAvBgNV
BAMTKEZDNzRCQTc5OEM5MENBQzA1Q0ExQjQyMDg0MUFGRDU0NTNDQTY4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFobpV7Ud8pdmFsk/5dkaHAXcU
jSnzh5Rxr3QjhGYSlrnC825zho6IB0TxjHVAjqYGh4v9wXGubDHWvGSUrXIYtBHo
hxI7tenahZ5vKMX73I0gBSCTbZy/8HGEv8jzbDPrhlWlv1I1hrnyiWkhblyL9DYS
XkyXPCaadUBjU9RMBjuOP/LFFAeLRqtiIiB4u4QHNg5JPpnaY87dfVNqc2M6ubxe
hovME/HBgJialjhOSTsXa5YUZ3YDUSBMSayIQYKHw2EvUTeAzF1GrWRHw4MwlSwD
eiJlSa1sFkzDwFoMLU2/Du+bKny8iB5rRvcbK+lfAXSL0ieVqPrYaGk+pS5FAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU/HS6eYyQysBcobQghBr9VFPKaNswHwYDVR0j
BBgwFoAUhmsjTrH2rpST/a8OKWFaYuABDvcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9WdGJreDRLVEw5cU5YNm9GakdFN0Z4NVhXcGd3TWJwclByNThKQm5IUkdk
LzAvODY2QjIzNEVCMUY2QUU5NDkzRkRBRjBFMjk2MTVBNjJFMDAxMEVGNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84NjZCMjM0RUIxRjZBRTk0OTNG
REFGMEUyOTYxNUE2MkUwMDEwRUY3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9W
dGJreDRLVEw5cU5YNm9GakdFN0Z4NVhXcGd3TWJwclByNThKQm5IUkdkLzAvMzEz
NzM3MmUzMzM5MmUzMjMxMzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzcz
OTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDsSfYMA0GCSqGSIb3DQEBCwUAA4IBAQBULpFAI23XzAu+
JjW8dgCNBy7TeaQMIrWbf1cLNzwMvZrgs014JoLxXGdOm48vXqC1llYifdYXoseh
CZIYIMbLwNGGn9h1Oe55M5he3RoqBegAf59u7eei73A4nTE+g/c2wxZLHCUfAVpE
ejK4I4A4aj05H8innfPyBySyx3ajgSVG2BiTFNGKmFzQi0fZNuD46CXBRLaXiG1j
O3x7jyhNv+lgkSPQlub9ybvwD6yGvBQ+2KmBxn8juYEDnGkSiZ0LmpV2cDT8mGT6
hXw49XG3dgxZcpb1jNa38j/VJcE9/ARWEJxVA+0b4VZ2S6FeTC+vC6NjEu3bngQx
2zyy2qOY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org