Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34332e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          5jCUqaCCbiLMQL3076mm8/F9tjsi2f/YOW4OOZBakWE=
Subject key identifier:   48:6D:99:38:5C:74:33:9F:22:0C:5E:AF:3A:42:FF:45:92:74:D6:B3
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       491C31A5A5EBF1C753C78C329081845A6A5ED27E
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:33 +0000
ROA not before:           Tue 07 Nov 2023 11:39:33 +0000
ROA not after:            Tue 05 Nov 2024 11:44:33 +0000
asID:                     52871
IP address blocks:        177.136.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1c:31:a5:a5:eb:f1:c7:53:c7:8c:32:90:81:84:5a:6a:5e:d2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:33 2023 GMT
            Not After : Nov  5 11:44:33 2024 GMT
        Subject: CN=486D99385C74339F220C5EAF3A42FF459274D6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:24:82:93:54:11:0c:b5:bb:98:97:01:38:
                    e5:eb:6e:dd:cb:d4:2e:46:ab:b3:84:70:2f:81:d4:
                    08:5c:0a:29:40:f4:9d:3d:42:02:d5:af:4d:ee:43:
                    04:87:7c:ad:e4:e8:6c:42:6b:a9:5d:0a:f8:67:42:
                    d4:bd:a9:22:9d:33:f3:4d:e2:3a:6d:7f:c0:29:48:
                    c7:e1:1d:1e:11:9e:bc:72:da:e8:d6:8b:77:2e:f1:
                    a9:7b:a2:78:8c:ab:80:6f:f2:e7:ab:4f:73:89:75:
                    41:5d:e3:8f:ec:c0:d4:10:ca:fc:65:6f:a9:9d:ea:
                    9c:6a:7b:63:00:56:4b:b8:e8:90:ac:19:82:b6:9e:
                    26:09:f1:1a:c9:c8:a4:73:06:cd:c2:d7:b8:56:79:
                    55:b7:af:12:67:6f:a6:39:52:c5:30:e9:d7:7f:5f:
                    a2:ae:7e:e4:cd:a0:55:8c:c1:cb:26:0f:03:95:e9:
                    9a:3f:ad:e2:ae:f0:cd:ff:2a:e2:40:9e:e2:a5:78:
                    f3:4c:2d:f9:ef:af:19:d0:ac:2d:dc:74:28:dc:d0:
                    26:44:4e:7e:d7:94:86:e3:12:b6:1a:2e:aa:cb:38:
                    6e:7e:36:d8:aa:4c:67:76:14:fc:da:38:59:06:1d:
                    d3:9d:7a:3e:ee:87:a5:24:0f:0f:3f:2a:60:47:05:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6D:99:38:5C:74:33:9F:22:0C:5E:AF:3A:42:FF:45:92:74:D6:B3
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34332e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7b:cc:3f:c4:30:2e:8d:d4:b2:5c:79:da:c9:d7:87:7c:5e:
         12:ce:a9:5e:67:db:10:4b:a7:9d:b2:a2:de:7a:45:4f:0a:c5:
         08:53:37:bf:03:31:f7:17:65:57:d3:1e:4e:3d:0d:d9:23:07:
         a0:cb:a0:e9:fb:7f:6a:69:ff:00:51:92:a3:79:04:dc:43:dd:
         32:6b:b9:1d:99:55:a1:1b:e5:e2:73:fb:37:a1:d9:00:89:f4:
         fa:fa:38:64:f8:8a:03:ed:39:cd:0a:74:c2:26:81:79:4c:71:
         9a:68:5e:d4:67:e2:06:ec:55:7a:0a:dd:d7:97:ff:1b:69:2d:
         35:d4:cb:be:39:6b:37:9f:08:c4:5c:e7:19:14:df:29:b6:55:
         95:4b:08:9d:d3:b6:b1:51:23:e9:d8:f2:79:bd:98:3f:69:99:
         aa:cb:30:15:69:43:6d:03:65:38:9b:67:34:47:ad:df:a8:8f:
         36:17:6e:cb:df:2b:b5:36:b9:6d:af:aa:16:5e:89:4f:e5:88:
         3f:59:1b:fd:07:64:91:86:f1:69:50:8d:6f:15:09:3d:0b:f7:
         16:c2:52:08:9e:2d:84:f0:8f:fd:f6:52:2a:15:a6:04:54:04:
         38:31:77:bf:f8:60:c3:63:e7:ab:47:96:18:7b:55:1b:8f:c2:
         31:3e:3b:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSRwxpaXr8cdTx4wykIGEWmpe0n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJCNzY2QUY0RDcxQjZBNEM3MzA2QzMxNzlFNDA3RjQy
MDQ3RTRCODAeFw0yMzExMDcxMTM5MzNaFw0yNDExMDUxMTQ0MzNaMDMxMTAvBgNV
BAMTKDQ4NkQ5OTM4NUM3NDMzOUYyMjBDNUVBRjNBNDJGRjQ1OTI3NEQ2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qSSCk1QRDLW7mJcBOOXrbt3L
1C5Gq7OEcC+B1AhcCilA9J09QgLVr03uQwSHfK3k6GxCa6ldCvhnQtS9qSKdM/NN
4jptf8ApSMfhHR4Rnrxy2ujWi3cu8al7oniMq4Bv8uerT3OJdUFd44/swNQQyvxl
b6md6pxqe2MAVku46JCsGYK2niYJ8RrJyKRzBs3C17hWeVW3rxJnb6Y5UsUw6dd/
X6KufuTNoFWMwcsmDwOV6Zo/reKu8M3/KuJAnuKlePNMLfnvrxnQrC3cdCjc0CZE
Tn7XlIbjErYaLqrLOG5+NtiqTGd2FPzaOFkGHdOdej7uh6UkDw8/KmBHBUCTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSG2ZOFx0M58iDF6vOkL/RZJ01rMwHwYDVR0j
BBgwFoAUgrdmr01xtqTHMGwxeeQH9CBH5LgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMC84MkI3NjZBRjRENzFCNkE0QzczMDZDMzE3OUU0MDdGNDIwNDdFNEI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyQjc2NkFGNEQ3MUI2QTRD
NzMwNkMzMTc5RTQwN0Y0MjA0N0U0QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzAv
MzEzNzM3MmUzMTMzMzYyZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzgzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYgrMA0GCSqGSIb3DQEBCwUAA4IBAQAqe8w/xDAu
jdSyXHnaydeHfF4SzqleZ9sQS6edsqLeekVPCsUIUze/AzH3F2VX0x5OPQ3ZIweg
y6Dp+39qaf8AUZKjeQTcQ90ya7kdmVWhG+Xic/s3odkAifT6+jhk+IoD7TnNCnTC
JoF5THGaaF7UZ+IG7FV6Ct3Xl/8baS011Mu+OWs3nwjEXOcZFN8ptlWVSwid07ax
USPp2PJ5vZg/aZmqyzAVaUNtA2U4m2c0R63fqI82F27L3yu1Nrltr6oWXolP5Yg/
WRv9B2SRhvFpUI1vFQk9C/cWwlIIni2E8I/99lIqFaYEVAQ4MXe/+GDDY+erR5YY
e1Ubj8IxPjt2
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org