Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
File:                     3137372e32312e39362e302f31392d3234203d3e203533323436.roa (raw, json)
Hash identifier:          5Og1UIijIBUG1aNrgex9TURp3TtkEIDrnqi8g4IVqFs=
Subject key identifier:   65:4B:78:DE:28:83:9D:25:65:39:6B:81:C0:F3:60:73:A4:F5:C0:F3
Certificate issuer:       /CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
Certificate serial:       6E77C3B0563CD76B5B004862F0689C7422814EFF
Authority key identifier: 48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
Signing time:             Thu 05 Oct 2023 14:24:02 +0000
ROA not before:           Thu 05 Oct 2023 14:19:02 +0000
ROA not after:            Thu 03 Oct 2024 14:24:02 +0000
asID:                     53246
IP address blocks:        177.21.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:77:c3:b0:56:3c:d7:6b:5b:00:48:62:f0:68:9c:74:22:81:4e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
        Validity
            Not Before: Oct  5 14:19:02 2023 GMT
            Not After : Oct  3 14:24:02 2024 GMT
        Subject: CN=654B78DE28839D2565396B81C0F36073A4F5C0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:6c:ae:76:3f:db:9a:87:a6:6e:58:7c:0a:
                    8a:00:4a:38:f0:1f:be:7a:f2:29:65:f0:af:54:2f:
                    23:72:fa:02:12:51:5c:6f:db:23:c4:2a:a0:d8:64:
                    e8:22:bd:0e:d6:e9:f2:0a:4c:5b:9c:79:25:c8:f0:
                    db:23:c2:20:3c:f8:2f:60:d4:56:99:71:fd:bc:05:
                    73:61:98:62:5b:a9:16:41:0e:41:9e:e7:7c:5c:81:
                    6e:1a:30:2b:c5:d0:0d:7e:76:50:5a:f0:d2:32:be:
                    b1:95:77:ca:fe:df:18:5a:0c:de:13:5d:51:8c:c5:
                    20:ba:b8:a5:5c:a4:56:34:0f:ba:78:64:b7:af:64:
                    a3:f3:19:3e:88:55:f8:52:61:19:11:dd:b3:84:61:
                    d1:d0:4e:4c:fb:a3:e5:ab:63:ec:42:cb:06:a4:64:
                    20:cc:18:39:33:39:b7:23:fd:a6:27:da:94:c4:07:
                    31:87:56:7b:1b:7b:3d:52:bf:d5:16:65:69:64:fa:
                    21:cc:13:1c:92:e5:f1:0d:fb:f8:a9:8e:a3:11:09:
                    84:0a:5d:04:17:99:45:62:50:7d:5b:84:db:58:84:
                    74:fb:15:92:d9:bc:a5:4c:75:a5:d3:b9:e8:a8:05:
                    e1:3e:76:b7:85:0e:c7:44:d1:7a:b3:f7:79:8a:c6:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:78:DE:28:83:9D:25:65:39:6B:81:C0:F3:60:73:A4:F5:C0:F3
            X509v3 Authority Key Identifier:
                keyid:48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137372e32312e39362e302f31392d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:38:81:80:07:68:e9:b7:dd:e0:3e:59:f6:d9:b2:da:b3:17:
         6f:4d:54:55:34:df:16:b8:43:eb:ba:25:5c:f1:12:47:88:3a:
         ad:2a:45:ed:8e:2b:32:8a:96:b2:5e:72:f2:bf:df:d8:e8:5f:
         1d:38:b6:ca:87:86:4e:9b:06:3e:9c:18:10:7c:a6:76:8d:d8:
         bc:09:a0:78:59:41:76:54:b6:81:e0:39:a8:99:2c:f4:f4:2b:
         50:36:32:c1:8d:34:8d:36:5a:54:16:97:78:36:6f:68:b9:4e:
         ed:dd:93:e5:66:08:00:f9:46:5b:c8:3b:11:e4:4f:f2:c5:2f:
         be:3d:f0:6d:89:74:d5:ee:6a:a0:06:64:b3:25:8e:d7:67:59:
         68:6c:b2:4c:8b:47:55:01:19:19:a4:80:65:7f:d2:81:8d:fe:
         d5:c8:5b:6e:f2:72:83:1b:28:e4:16:b2:bb:9e:76:5f:9c:a5:
         f5:1e:cc:ab:51:e2:f9:d9:ed:a1:ce:8c:b7:17:6e:be:02:61:
         24:97:4e:42:e8:c5:4d:d1:43:6e:bc:7b:58:19:5a:d1:8b:86:
         25:44:86:4a:c2:f1:04:64:7f:c6:0c:da:8a:dd:ba:30:b0:7d:
         2e:b7:fb:94:d7:68:70:19:2c:c7:79:27:f0:cb:48:d3:cb:0a:
         f1:b9:57:a7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbnfDsFY812tbAEhi8GicdCKBTv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEM0M4QkUyQzAyOTI1NUJFNkQ2RjI5NTZBRjc0Njgx
QjgzNzBGOTAeFw0yMzEwMDUxNDE5MDJaFw0yNDEwMDMxNDI0MDJaMDMxMTAvBgNV
BAMTKDY1NEI3OERFMjg4MzlEMjU2NTM5NkI4MUMwRjM2MDczQTRGNUMwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQGyudj/bmoemblh8CooASjjw
H7568ill8K9ULyNy+gISUVxv2yPEKqDYZOgivQ7W6fIKTFuceSXI8NsjwiA8+C9g
1FaZcf28BXNhmGJbqRZBDkGe53xcgW4aMCvF0A1+dlBa8NIyvrGVd8r+3xhaDN4T
XVGMxSC6uKVcpFY0D7p4ZLevZKPzGT6IVfhSYRkR3bOEYdHQTkz7o+WrY+xCywak
ZCDMGDkzObcj/aYn2pTEBzGHVnsbez1Sv9UWZWlk+iHMExyS5fEN+/ipjqMRCYQK
XQQXmUViUH1bhNtYhHT7FZLZvKVMdaXTueioBeE+dreFDsdE0Xqz93mKxtNXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZUt43iiDnSVlOWuBwPNgc6T1wPMwHwYDVR0j
BBgwFoAUSNPIviwCklW+bW8pVq90aBuDcPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJ2UW5tTmVRcWlVZERxRjRxZ1hSQkJOM29DUGtNRVBmZEhZOGkzSlZQ
eDEvMC80OEQzQzhCRTJDMDI5MjU1QkU2RDZGMjk1NkFGNzQ2ODFCODM3MEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4RDNDOEJFMkMwMjkyNTVC
RTZENkYyOTU2QUY3NDY4MUI4MzcwRjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSdlFubU5lUXFpVWREcUY0cWdYUkJCTjNvQ1BrTUVQZmRIWThpM0pWUHgxLzAv
MzEzNzM3MmUzMjMxMmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzUzMzMy
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBbEVYDANBgkqhkiG9w0BAQsFAAOCAQEAcDiBgAdo6bfd
4D5Z9tmy2rMXb01UVTTfFrhD67olXPESR4g6rSpF7Y4rMoqWsl5y8r/f2OhfHTi2
yoeGTpsGPpwYEHymdo3YvAmgeFlBdlS2geA5qJks9PQrUDYywY00jTZaVBaXeDZv
aLlO7d2T5WYIAPlGW8g7EeRP8sUvvj3wbYl01e5qoAZksyWO12dZaGyyTItHVQEZ
GaSAZX/SgY3+1chbbvJygxso5Bayu552X5yl9R7Mq1Hi+dntoc6MtxduvgJhJJdO
QujFTdFDbrx7WBla0YuGJUSGSsLxBGR/xgzait26MLB9Lrf7lNdocBksx3kn8MtI
08sK8blXpw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org