Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235342e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3235342e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          94D9iq1nDvh46MVQ1RiyTIA66wtUeveFYXikdbQfQ6Q=
Subject key identifier:   1E:35:66:4C:01:38:7F:D8:33:04:53:AF:94:3A:4C:1F:D2:11:A7:CF
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       24CADE4F003E1C10093190069D39E21AE0A6FA28
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235342e302f32332d3233203d3e20323632383636.roa
Signing time:             Mon 30 Oct 2023 20:41:44 +0000
ROA not before:           Mon 30 Oct 2023 20:36:44 +0000
ROA not after:            Mon 28 Oct 2024 20:41:44 +0000
asID:                     262866
IP address blocks:        177.12.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ca:de:4f:00:3e:1c:10:09:31:90:06:9d:39:e2:1a:e0:a6:fa:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Oct 30 20:36:44 2023 GMT
            Not After : Oct 28 20:41:44 2024 GMT
        Subject: CN=1E35664C01387FD8330453AF943A4C1FD211A7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:19:01:76:c1:d7:c5:7b:fd:02:e5:60:10:
                    c6:21:df:a1:fc:02:05:a0:26:a1:e0:6e:80:86:12:
                    dd:65:29:2a:d1:a9:1c:99:a0:08:49:63:3c:23:ff:
                    ed:0b:49:81:c3:c9:3d:a4:c4:a2:22:2c:ed:28:e3:
                    62:a9:db:ed:2c:23:3c:d3:f0:be:8b:d4:97:fb:be:
                    d0:aa:50:96:c4:ec:64:2b:cc:ce:14:68:79:7e:fb:
                    92:19:a1:7d:b0:42:6d:77:e3:a7:45:63:a3:5f:24:
                    70:d4:4a:5a:8c:67:e4:11:9c:bc:0c:19:a0:62:07:
                    e7:a1:4e:e3:8b:1c:05:34:ba:89:4c:c4:c9:4f:62:
                    e0:8a:bd:fc:9c:f8:d1:3c:38:3e:ed:f9:c8:cb:c6:
                    1a:ba:1d:33:dd:87:35:bc:d1:61:8d:31:10:71:e7:
                    29:b3:5f:9b:a3:9c:25:52:bd:42:92:bb:71:47:ab:
                    30:67:79:f0:39:19:f7:49:61:29:83:ae:02:0a:43:
                    51:3a:9d:c3:0a:41:b2:ad:dd:27:b1:b9:04:9e:02:
                    ae:b5:e8:f1:0c:8b:d4:05:72:9e:ed:be:ff:19:8e:
                    11:dd:6e:30:5d:55:fb:dd:3d:fb:46:60:91:34:92:
                    96:27:17:13:c3:6a:4b:4f:06:a6:bc:dc:5f:f6:84:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:66:4C:01:38:7F:D8:33:04:53:AF:94:3A:4C:1F:D2:11:A7:CF
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235342e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:aa:1c:78:c8:f6:25:03:24:4e:b0:d5:f6:ea:46:49:4b:
         dd:2e:2a:6e:95:4c:ea:4b:8a:a0:8b:31:85:fc:f0:32:f8:03:
         bf:3c:ed:97:23:51:30:de:0b:f2:2a:98:e4:64:f8:f0:97:95:
         7d:86:0f:fb:ce:0c:db:5f:fb:4a:eb:11:94:fa:a1:83:96:34:
         45:fb:3e:1b:02:94:48:48:ee:10:34:8b:ca:0b:9a:5a:88:bc:
         7c:1f:d1:04:55:b4:dd:a1:98:cd:86:84:82:1e:5f:23:a4:b0:
         e6:00:4f:57:5e:43:7a:fc:5a:d3:f9:b4:f5:83:a2:ca:41:5e:
         92:04:0f:a8:2a:b7:b3:a0:92:94:09:ab:c8:a5:33:cf:eb:56:
         71:0b:39:8d:ea:06:ca:e0:7a:93:90:e6:74:21:7f:d4:14:17:
         ae:00:7d:1d:4e:18:3c:78:fb:9e:b1:7f:66:b2:39:28:c3:70:
         e3:58:b1:91:ee:6a:15:65:08:34:6d:fd:cc:81:4b:a0:96:1e:
         e3:fc:77:62:22:ef:fb:41:20:02:02:09:d8:2d:3e:a3:b8:59:
         e6:9f:cd:29:75:0a:05:15:12:08:d1:3f:c5:db:11:29:87:33:
         ac:21:e0:5b:df:5c:8a:fe:79:94:0e:a5:e6:df:65:98:c2:18:
         70:7d:7d:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJMreTwA+HBAJMZAGnTniGuCm+igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0MjBERjA5ODgxMEI4QjZGNDFCRDAzMzREMDhBRDI3
RTBCREMxQzAeFw0yMzEwMzAyMDM2NDRaFw0yNDEwMjgyMDQxNDRaMDMxMTAvBgNV
BAMTKDFFMzU2NjRDMDEzODdGRDgzMzA0NTNBRjk0M0E0QzFGRDIxMUE3Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqhkBdsHXxXv9AuVgEMYh36H8
AgWgJqHgboCGEt1lKSrRqRyZoAhJYzwj/+0LSYHDyT2kxKIiLO0o42Kp2+0sIzzT
8L6L1Jf7vtCqUJbE7GQrzM4UaHl++5IZoX2wQm1346dFY6NfJHDUSlqMZ+QRnLwM
GaBiB+ehTuOLHAU0uolMxMlPYuCKvfyc+NE8OD7t+cjLxhq6HTPdhzW80WGNMRBx
5ymzX5ujnCVSvUKSu3FHqzBnefA5GfdJYSmDrgIKQ1E6ncMKQbKt3SexuQSeAq61
6PEMi9QFcp7tvv8ZjhHdbjBdVfvdPftGYJE0kpYnFxPDaktPBqa83F/2hP0PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHjVmTAE4f9gzBFOvlDpMH9IRp88wHwYDVR0j
BBgwFoAU4UIN8JiBC4tvQb0DNNCK0n4L3BwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMC9FMTQyMERGMDk4ODEwQjhCNkY0MUJEMDMzNEQwOEFEMjdFMEJEQzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxNDIwREYwOTg4MTBCOEI2
RjQxQkQwMzM0RDA4QUQyN0UwQkRDMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzAv
MzEzNzM3MmUzMTMyMmUzMjM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxDP4wDQYJKoZIhvcNAQELBQADggEBAI7sqhx4
yPYlAyROsNX26kZJS90uKm6VTOpLiqCLMYX88DL4A7887ZcjUTDeC/IqmORk+PCX
lX2GD/vODNtf+0rrEZT6oYOWNEX7PhsClEhI7hA0i8oLmlqIvHwf0QRVtN2hmM2G
hIIeXyOksOYAT1deQ3r8WtP5tPWDospBXpIED6gqt7OgkpQJq8ilM8/rVnELOY3q
BsrgepOQ5nQhf9QUF64AfR1OGDx4+56xf2ayOSjDcONYsZHuahVlCDRt/cyBS6CW
HuP8d2Ii7/tBIAICCdgtPqO4WeafzSl1CgUVEgjRP8XbESmHM6wh4FvfXIr+eZQO
pebfZZjCGHB9fVI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org