Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34362e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34362e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          d90jSg8WbawR9F5ZX/GffRWuJrujAj8Q8zC2WL2zQyM=
Subject key identifier:   01:8A:33:A3:D1:E0:7E:A8:A4:DA:0C:25:F6:4E:4A:D8:84:D6:AF:E8
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       0E44AD0B8E919E6F514F4F900B4CC8C9B9E04515
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34362e302f32342d3234203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:56 +0000
ROA not before:           Mon 26 Feb 2024 13:52:56 +0000
ROA not after:            Mon 24 Feb 2025 13:57:56 +0000
asID:                     263038
IP address blocks:        177.23.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:ad:0b:8e:91:9e:6f:51:4f:4f:90:0b:4c:c8:c9:b9:e0:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:56 2024 GMT
            Not After : Feb 24 13:57:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:29:95:44:d4:06:08:b8:45:2d:d1:97:6d:
                    79:d9:af:74:79:45:7b:c3:76:9e:92:c8:57:d6:32:
                    e0:02:62:8f:3b:40:4e:ae:cd:bd:9c:2b:99:10:1d:
                    91:74:da:7e:6b:55:b1:48:22:e3:69:35:28:c2:95:
                    fe:82:dd:b0:f6:ab:75:5f:f0:b0:fc:55:fc:58:18:
                    a7:01:48:38:66:9a:5e:97:0e:d7:70:c8:68:10:35:
                    4a:52:a0:07:01:a8:93:7e:2b:c0:2b:93:42:7c:d9:
                    e5:8d:c0:6c:ef:32:e1:cf:2f:5d:0a:e3:6f:4e:4a:
                    f6:cd:27:d4:ed:65:45:68:d6:05:e9:cb:84:30:3b:
                    c2:b4:3d:4a:19:8d:6c:59:c5:80:3b:07:b0:ac:95:
                    3a:2b:00:75:98:81:c7:a0:88:01:e6:e4:0b:ee:7e:
                    37:2a:4c:b1:08:6b:5d:87:77:73:29:d4:f5:4e:1e:
                    75:07:a7:34:70:1a:b9:60:75:83:26:02:31:46:c3:
                    0e:c1:3d:49:a2:7f:67:9e:f9:25:28:60:f7:e1:53:
                    94:83:93:07:5a:fa:28:7d:5c:ce:33:0e:7a:e6:b7:
                    0c:02:96:0d:e6:47:b4:cd:10:08:5d:16:57:09:d9:
                    af:8c:2f:8d:7a:c7:b0:8f:e6:51:fd:4b:ac:a2:51:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:33:A3:D1:E0:7E:A8:A4:DA:0C:25:F6:4E:4A:D8:84:D6:AF:E8
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34362e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:0a:17:4c:ba:c3:fb:fe:3c:5b:97:f5:16:d0:01:11:dd:
         07:ec:07:3c:97:db:d9:30:72:40:98:d0:68:7b:43:2b:43:76:
         59:d6:e3:15:7d:f4:95:30:de:b1:fa:0f:8f:58:49:66:c4:76:
         34:45:a9:b3:c5:68:45:cb:11:f1:d6:2a:75:32:37:cc:2f:4b:
         3a:0c:f5:2b:29:60:0d:fb:78:be:b1:ea:ce:38:ae:b6:0a:bb:
         a8:cb:a9:88:a4:cd:f1:95:ed:f0:73:78:14:49:9d:6f:48:85:
         64:ba:3b:c3:94:0c:a7:74:0c:5f:67:9a:18:f7:ed:66:38:f7:
         f2:d5:fb:20:45:a7:27:dd:73:2e:c5:41:fd:df:64:ba:62:8b:
         75:be:28:51:6d:e3:d3:3c:9f:11:38:de:cd:81:ea:bf:61:d9:
         83:b3:70:a0:da:39:b9:c5:be:e9:44:f9:a6:a2:b8:69:91:1f:
         49:b7:d9:99:7b:d8:20:d3:c7:69:99:3a:5c:8d:9f:c6:e9:50:
         ac:09:80:06:14:a5:3f:42:7f:a7:0f:26:bc:54:c1:47:33:fd:
         e8:fc:68:76:2c:e1:13:a7:6f:74:98:ca:23:01:5a:2a:7e:e4:
         1b:fb:a6:55:ed:7b:06:c3:d5:19:8e:16:63:ef:66:1a:ff:2b:
         8f:69:cc:e4
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUDkStC46Rnm9RT0+QC0zIybngRRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI0RjBGQjhDQ0M5MTI5QjVFRTZGMUU3REY4MTg0Q0Mz
NEM0MkMyQTAeFw0yNDAyMjYxMzUyNTZaFw0yNTAyMjQxMzU3NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTI5MzI5OTU0NEQ0MDYwOEI4
NDUyREQxOTc2RDc5RDlBRjc0Nzk0NTdCQzM3NjlFOTJDODU3RDYzMkUwMDI2MjhG
M0I0MDRFQUVDREJEOUMyQjk5MTAxRDkxNzREQTdFNkI1NUIxNDgyMkUzNjkzNTI4
QzI5NUZFODJEREIwRjZBQjc1NUZGMEIwRkM1NUZDNTgxOEE3MDE0ODM4NjY5QTVF
OTcwRUQ3NzBDODY4MTAzNTRBNTJBMDA3MDFBODkzN0UyQkMwMkI5MzQyN0NEOUU1
OERDMDZDRUYzMkUxQ0YyRjVEMEFFMzZGNEU0QUY2Q0QyN0Q0RUQ2NTQ1NjhENjA1
RTlDQjg0MzAzQkMyQjQzRDRBMTk4RDZDNTlDNTgwM0IwN0IwQUM5NTNBMkIwMDc1
OTg4MUM3QTA4ODAxRTZFNDBCRUU3RTM3MkE0Q0IxMDg2QjVEODc3NzczMjlENEY1
NEUxRTc1MDdBNzM0NzAxQUI5NjA3NTgzMjYwMjMxNDZDMzBFQzEzRDQ5QTI3RjY3
OUVGOTI1Mjg2MEY3RTE1Mzk0ODM5MzA3NUFGQTI4N0Q1Q0NFMzMwRTdBRTZCNzBD
MDI5NjBERTY0N0I0Q0QxMDA4NUQxNjU3MDlEOUFGOEMyRjhEN0FDN0IwOEZFNjUx
RkQ0QkFDQTI1MTlFMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAkpMplUTUBgi4RS3Rl2152a90eUV7w3aekshX1jLgAmKPO0BOrs29
nCuZEB2RdNp+a1WxSCLjaTUowpX+gt2w9qt1X/Cw/FX8WBinAUg4Zppelw7XcMho
EDVKUqAHAaiTfivAK5NCfNnljcBs7zLhzy9dCuNvTkr2zSfU7WVFaNYF6cuEMDvC
tD1KGY1sWcWAOwewrJU6KwB1mIHHoIgB5uQL7n43KkyxCGtdh3dzKdT1Th51B6c0
cBq5YHWDJgIxRsMOwT1Jon9nnvklKGD34VOUg5MHWvoofVzOMw565rcMApYN5ke0
zRAIXRZXCdmvjC+Nesewj+ZR/UusolGeKQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAGKM6PR4H6opNoMJfZOStiE1q/oMB8GA1UdIwQYMBaAFNJPD7jMyRKbXubx59+B
hMw0xCwqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVKZDVmcGtqZURtaTF0
ejJxWTFCZXQ2ckhSaUNmQVdWUWQ2NGdyNk1ZSzJtLzAvRDI0RjBGQjhDQ0M5MTI5
QjVFRTZGMUU3REY4MTg0Q0MzNEM0MkMyQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMjRGMEZCOENDQzkxMjlCNUVFNkYxRTdERjgxODRDQzM0QzQy
QzJBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81SmQ1ZnBramVEbWkxdHoycVkx
QmV0NnJIUmlDZkFXVlFkNjRncjZNWUsybS8wLzMxMzczNzJlMzIzMzJlMzQzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMwMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALEX
LjANBgkqhkiG9w0BAQsFAAOCAQEAHbwKF0y6w/v+PFuX9RbQARHdB+wHPJfb2TBy
QJjQaHtDK0N2WdbjFX30lTDesfoPj1hJZsR2NEWps8VoRcsR8dYqdTI3zC9LOgz1
KylgDft4vrHqzjiutgq7qMupiKTN8ZXt8HN4FEmdb0iFZLo7w5QMp3QMX2eaGPft
Zjj38tX7IEWnJ91zLsVB/d9kumKLdb4oUW3j0zyfETjezYHqv2HZg7NwoNo5ucW+
6UT5pqK4aZEfSbfZmXvYINPHaZk6XI2fxulQrAmABhSlP0J/pw8mvFTBRzP96Pxo
dizhE6dvdJjKIwFaKn7kG/umVe17BsPVGY4WY+9mGv8rj2nM5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org