Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3234203d3e20323632343835.roa
File:                     3137372e36362e302e302f32322d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          6subacZg/TzvIoxHXoZuBUMG+47l0gzrZBNaBOFHPq0=
Subject key identifier:   51:45:B9:CE:52:64:47:A9:15:A6:FA:9D:7A:A4:35:44:C3:8A:62:CC
Certificate issuer:       /CN=E5509040688CAFD0507F848C279AFDB596EBEC85
Certificate serial:       13EB90F230B1621CA0082644C709A95BDBBF48CF
Authority key identifier: E5:50:90:40:68:8C:AF:D0:50:7F:84:8C:27:9A:FD:B5:96:EB:EC:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5509040688CAFD0507F848C279AFDB596EBEC85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3234203d3e20323632343835.roa
Signing time:             Thu 17 Nov 2022 08:00:00 +0000
ROA not before:           Thu 17 Nov 2022 07:55:00 +0000
ROA not after:            Thu 16 Nov 2023 08:00:00 +0000
asID:                     262485
IP address blocks:        177.66.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:90:f2:30:b1:62:1c:a0:08:26:44:c7:09:a9:5b:db:bf:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5509040688CAFD0507F848C279AFDB596EBEC85
        Validity
            Not Before: Nov 17 07:55:00 2022 GMT
            Not After : Nov 16 08:00:00 2023 GMT
        Subject: CN=5145B9CE526447A915A6FA9D7AA43544C38A62CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:3c:b2:6f:07:00:1d:af:51:97:15:1d:02:
                    50:00:cd:16:e2:ce:c6:f0:3f:60:4c:f9:3b:15:28:
                    e9:6f:d4:6f:00:61:10:5b:4b:8e:a2:77:29:53:c7:
                    3b:f7:41:cb:6f:9d:ee:b9:e5:57:6c:85:66:cb:95:
                    f2:48:2b:a7:ba:10:fe:a7:23:a7:5d:a7:44:af:53:
                    b9:5c:c7:45:82:d6:ed:ee:31:3b:5a:6f:92:8a:c6:
                    4e:dd:7a:7b:e8:f6:6e:c1:b5:36:96:f7:5a:50:1d:
                    66:1f:62:44:4e:47:ab:fb:9b:d6:bf:04:36:5d:c2:
                    42:e7:03:98:9b:46:5a:c0:08:df:f3:e2:6f:51:b7:
                    dc:d8:36:e0:1f:c9:cf:c5:f8:4e:b4:d5:5a:5d:88:
                    cd:d9:f2:ae:8b:a8:08:e7:a9:ab:ae:b3:c3:0e:4d:
                    3f:69:d9:e2:43:59:ae:8e:15:f7:0d:7a:98:07:85:
                    07:37:e1:84:e5:93:5e:e2:e7:a1:63:b2:1f:78:3b:
                    8c:ad:27:b0:af:f1:0c:07:94:94:35:9d:23:72:44:
                    9c:2c:0f:1d:47:ae:ff:1f:26:aa:bf:f8:1a:0b:8c:
                    ba:89:ea:14:3f:d2:3e:1e:06:af:53:00:31:0a:22:
                    7e:b7:7a:f3:24:5f:62:a4:c0:36:13:e4:de:32:93:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:B9:CE:52:64:47:A9:15:A6:FA:9D:7A:A4:35:44:C3:8A:62:CC
            X509v3 Authority Key Identifier:
                keyid:E5:50:90:40:68:8C:AF:D0:50:7F:84:8C:27:9A:FD:B5:96:EB:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/E5509040688CAFD0507F848C279AFDB596EBEC85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5509040688CAFD0507F848C279AFDB596EBEC85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:55:9b:92:95:c4:9f:95:d7:87:ee:14:37:e8:a1:44:da:
         b2:99:2b:ba:f5:26:ca:7a:7c:48:c9:3e:c0:f0:ee:3a:0a:d4:
         38:50:0f:db:bf:ba:93:62:4e:c1:ba:8b:51:94:72:27:8a:80:
         79:ca:9f:6a:67:8f:33:0a:08:63:0b:05:4d:f0:3c:e8:5c:2c:
         e1:43:c5:69:01:f9:20:51:f0:53:44:4e:29:be:c8:1c:f1:5f:
         df:46:14:f0:97:aa:0e:7b:1a:a7:17:7e:92:7d:b6:0e:05:02:
         71:bb:e2:c8:81:91:09:e3:b5:f9:36:09:a2:8d:0b:42:3a:86:
         8f:e9:f0:fb:b3:db:41:51:11:99:bd:e3:ec:6f:00:b6:c8:3d:
         47:bd:4b:6a:48:17:4c:cb:d9:65:f5:d6:9e:da:1d:42:28:9d:
         99:11:35:ed:19:d7:51:4f:3b:f6:67:cc:e5:c7:da:33:2f:fe:
         6c:3c:13:eb:c0:64:af:5c:f9:b7:a3:f6:f2:fc:74:8e:68:de:
         67:c4:e0:59:e0:1c:85:74:a5:94:2b:24:6f:38:37:55:f8:f0:
         3c:c5:c4:da:7e:6e:f3:34:29:af:a4:e2:27:09:95:ae:cb:30:
         ec:54:7a:aa:5a:cf:d4:fb:d7:51:74:c3:17:d1:02:26:0f:c6:
         fc:d4:1e:a2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE+uQ8jCxYhygCCZExwmpW9u/SM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU1MDkwNDA2ODhDQUZEMDUwN0Y4NDhDMjc5QUZEQjU5
NkVCRUM4NTAeFw0yMjExMTcwNzU1MDBaFw0yMzExMTYwODAwMDBaMDMxMTAvBgNV
BAMTKDUxNDVCOUNFNTI2NDQ3QTkxNUE2RkE5RDdBQTQzNTQ0QzM4QTYyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasDyybwcAHa9RlxUdAlAAzRbi
zsbwP2BM+TsVKOlv1G8AYRBbS46idylTxzv3Qctvne655VdshWbLlfJIK6e6EP6n
I6ddp0SvU7lcx0WC1u3uMTtab5KKxk7denvo9m7BtTaW91pQHWYfYkROR6v7m9a/
BDZdwkLnA5ibRlrACN/z4m9Rt9zYNuAfyc/F+E601VpdiM3Z8q6LqAjnqauus8MO
TT9p2eJDWa6OFfcNepgHhQc34YTlk17i56Fjsh94O4ytJ7Cv8QwHlJQ1nSNyRJws
Dx1Hrv8fJqq/+BoLjLqJ6hQ/0j4eBq9TADEKIn63evMkX2KkwDYT5N4ykyqRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUUW5zlJkR6kVpvqdeqQ1RMOKYswwHwYDVR0j
BBgwFoAU5VCQQGiMr9BQf4SMJ5r9tZbr7IUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC9FNTUwOTA0MDY4OENBRkQwNTA3Rjg0OEMyNzlBRkRCNTk2RUJFQzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1NTA5MDQwNjg4Q0FGRDA1
MDdGODQ4QzI3OUFGREI1OTZFQkVDODUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzM3MmUzNjM2MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFCADANBgkqhkiG9w0BAQsFAAOCAQEAX2JVm5KVxJ+V
14fuFDfooUTaspkruvUmynp8SMk+wPDuOgrUOFAP27+6k2JOwbqLUZRyJ4qAecqf
amePMwoIYwsFTfA86Fws4UPFaQH5IFHwU0ROKb7IHPFf30YU8JeqDnsapxd+kn22
DgUCcbviyIGRCeO1+TYJoo0LQjqGj+nw+7PbQVERmb3j7G8Atsg9R71LakgXTMvZ
ZfXWntodQiidmRE17RnXUU879mfM5cfaMy/+bDwT68Bkr1z5t6P28vx0jmjeZ8Tg
WeAchXSllCskbzg3VfjwPMXE2n5u8zQpr6TiJwmVrssw7FR6qlrP1PvXUXTDF9EC
Jg/G/NQeog==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:23 2023 by rpki-client on console-ams.rpki-client.org