Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32322d3232203d3e203532353737.roa
File:                     3137372e38362e3231362e302f32322d3232203d3e203532353737.roa (raw, json)
Hash identifier:          LZsF/ngItPHMcxa2/tUUxVYInsj+TuEpl1iBBRT95dE=
Subject key identifier:   BE:09:FE:C4:35:31:F1:FF:0C:B9:D2:38:3F:D6:73:6E:5F:39:4D:58
Certificate issuer:       /CN=F9CFBEF845DAC73AEAAC81A34EB811728968C35B
Certificate serial:       3D20059BE3CC7E9D4E04945106AEEB539ACC6AC7
Authority key identifier: F9:CF:BE:F8:45:DA:C7:3A:EA:AC:81:A3:4E:B8:11:72:89:68:C3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32322d3232203d3e203532353737.roa
Signing time:             Wed 31 Aug 2022 01:09:22 +0000
ROA not before:           Wed 31 Aug 2022 01:04:22 +0000
ROA not after:            Wed 30 Aug 2023 01:09:22 +0000
asID:                     52577
IP address blocks:        177.86.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:20:05:9b:e3:cc:7e:9d:4e:04:94:51:06:ae:eb:53:9a:cc:6a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CFBEF845DAC73AEAAC81A34EB811728968C35B
        Validity
            Not Before: Aug 31 01:04:22 2022 GMT
            Not After : Aug 30 01:09:22 2023 GMT
        Subject: CN=BE09FEC43531F1FF0CB9D2383FD6736E5F394D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:2e:0f:04:a6:a3:5b:27:54:ff:2e:c5:0a:
                    75:49:b1:e2:b2:3c:a6:67:e3:12:7c:2f:d3:6f:0a:
                    30:ef:e2:22:2c:04:dd:ab:b7:f5:1d:5c:b9:2b:45:
                    1c:71:38:56:26:de:33:36:30:68:07:1d:8f:26:31:
                    58:b8:e1:46:04:a7:07:17:56:bb:7e:72:32:6f:67:
                    6a:8d:4f:eb:60:9c:7f:36:e2:be:78:de:64:8c:eb:
                    5b:77:c4:56:8d:19:0b:fa:c5:fb:38:6e:20:de:ac:
                    81:0b:e8:d9:ea:d7:cf:a5:ee:74:6f:b4:bb:b3:70:
                    15:76:61:47:79:a8:5a:87:65:35:18:42:ab:18:2c:
                    5e:1f:df:8c:af:7b:0b:ff:1e:55:d7:a7:54:63:bd:
                    5c:e4:a5:43:94:ef:fe:28:91:16:af:c3:67:f9:18:
                    5b:87:43:ac:e4:d3:8b:0e:f7:ed:40:c2:eb:7e:09:
                    ed:fd:73:0d:1a:63:33:8c:68:67:d6:d6:a6:38:50:
                    3e:57:20:dc:f2:2d:cb:a7:13:aa:90:e7:bf:c4:83:
                    6a:5f:0b:b4:3d:55:38:3f:2a:2e:9c:52:8b:82:d9:
                    fa:2e:2a:85:cb:55:40:53:90:4d:4d:d4:8d:67:6b:
                    dc:47:59:8c:9c:a8:a7:b4:7b:d5:72:06:5e:da:dc:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:09:FE:C4:35:31:F1:FF:0C:B9:D2:38:3F:D6:73:6E:5F:39:4D:58
            X509v3 Authority Key Identifier:
                keyid:F9:CF:BE:F8:45:DA:C7:3A:EA:AC:81:A3:4E:B8:11:72:89:68:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32322d3232203d3e203532353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:09:07:99:6c:ba:66:4a:f5:ad:bf:b1:c8:6a:a2:34:35:
         88:89:af:54:2b:d7:70:40:78:08:4e:ab:b9:af:62:63:2a:50:
         e0:e1:ee:02:a2:03:b8:23:d5:cf:4f:6a:18:ab:8f:42:bb:a8:
         14:1e:b6:11:bf:a2:61:17:24:8c:dc:e9:2c:ca:30:20:11:ac:
         84:5d:76:60:d9:a4:a1:7c:07:e9:7c:66:fe:12:6f:00:62:30:
         3f:e8:7f:2a:33:6c:d6:21:3c:52:56:cf:21:74:23:66:6d:29:
         2a:63:ac:de:c7:44:06:b7:2f:0b:e8:31:0f:1b:d5:66:38:ca:
         bd:4b:43:de:2d:8a:45:06:43:7d:22:59:74:e9:f5:96:dd:1a:
         06:f7:fd:fd:1d:bb:8a:1a:a3:44:2d:38:ce:5a:75:c3:63:4d:
         c8:10:63:e5:f3:d1:af:6e:39:72:9f:3e:1f:53:31:3a:9d:fc:
         0a:69:9e:95:4b:aa:51:77:ee:a5:17:7b:e4:55:13:1d:cb:31:
         30:29:76:a5:2b:f0:b8:f6:50:a6:3a:9a:b8:f6:ef:43:e1:eb:
         cc:cc:67:55:17:c7:d4:8d:a4:e9:7b:35:3b:f7:68:d4:99:c8:
         85:b4:ef:c3:3e:7d:e0:c8:ee:9d:dd:ca:b8:81:d8:64:3f:13:
         95:88:f3:4a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPSAFm+PMfp1OBJRRBq7rU5rMascwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlDRkJFRjg0NURBQzczQUVBQUM4MUEzNEVCODExNzI4
OTY4QzM1QjAeFw0yMjA4MzEwMTA0MjJaFw0yMzA4MzAwMTA5MjJaMDMxMTAvBgNV
BAMTKEJFMDlGRUM0MzUzMUYxRkYwQ0I5RDIzODNGRDY3MzZFNUYzOTRENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJi4PBKajWydU/y7FCnVJseKy
PKZn4xJ8L9NvCjDv4iIsBN2rt/UdXLkrRRxxOFYm3jM2MGgHHY8mMVi44UYEpwcX
Vrt+cjJvZ2qNT+tgnH824r543mSM61t3xFaNGQv6xfs4biDerIEL6Nnq18+l7nRv
tLuzcBV2YUd5qFqHZTUYQqsYLF4f34yvewv/HlXXp1RjvVzkpUOU7/4okRavw2f5
GFuHQ6zk04sO9+1Awut+Ce39cw0aYzOMaGfW1qY4UD5XINzyLcunE6qQ57/Eg2pf
C7Q9VTg/Ki6cUouC2fouKoXLVUBTkE1N1I1na9xHWYycqKe0e9VyBl7a3AWdAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUvgn+xDUx8f8MudI4P9Zzbl85TVgwHwYDVR0j
BBgwFoAU+c+++EXaxzrqrIGjTrgRcolow1swDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby95M25ORXRiMXYxYTVBZkI3YlhpdHRYSllBUWFjVXVWcFJDWlNTTmhhS0tZ
LzAvRjlDRkJFRjg0NURBQzczQUVBQUM4MUEzNEVCODExNzI4OTY4QzM1Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GOUNGQkVGODQ1REFDNzNBRUFB
QzgxQTM0RUI4MTE3Mjg5NjhDMzVCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby95
M25ORXRiMXYxYTVBZkI3YlhpdHRYSllBUWFjVXVWcFJDWlNTTmhhS0tZLzAvMzEz
NzM3MmUzODM2MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzUz
NzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCsVbYMA0GCSqGSIb3DQEBCwUAA4IBAQA74AkHmWy6Zkr1
rb+xyGqiNDWIia9UK9dwQHgITqu5r2JjKlDg4e4CogO4I9XPT2oYq49Cu6gUHrYR
v6JhFySM3OksyjAgEayEXXZg2aShfAfpfGb+Em8AYjA/6H8qM2zWITxSVs8hdCNm
bSkqY6zex0QGty8L6DEPG9VmOMq9S0PeLYpFBkN9Ill06fWW3RoG9/39HbuKGqNE
LTjOWnXDY03IEGPl89Gvbjlynz4fUzE6nfwKaZ6VS6pRd+6lF3vkVRMdyzEwKXal
K/C49lCmOpq49u9D4evMzGdVF8fUjaTpezU792jUmciFtO/DPn3gyO6d3cq4gdhk
PxOViPNK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org