Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38362e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          K005CbjgiY4w5NaHuOQd1lbRT8AvdFnwR+h5vRD1hdY=
Subject key identifier:   0B:35:89:4A:A2:68:D4:B8:F2:55:78:1C:B8:EC:C6:59:D6:95:50:62
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       235CE28C2DA03FB2BAA82150B410D7DA7DF59B51
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:14 +0000
ROA not before:           Tue 28 Nov 2023 13:04:14 +0000
ROA not after:            Tue 26 Nov 2024 13:09:14 +0000
asID:                     53047
IP address blocks:        177.101.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:e2:8c:2d:a0:3f:b2:ba:a8:21:50:b4:10:d7:da:7d:f5:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:14 2023 GMT
            Not After : Nov 26 13:09:14 2024 GMT
        Subject: CN=0B35894AA268D4B8F255781CB8ECC659D6955062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:86:23:46:fe:ff:ac:f9:f8:f9:92:13:96:
                    d2:ec:5d:b6:3c:60:26:4a:11:8f:e2:51:8b:82:6c:
                    fa:ba:07:c5:3a:fe:6c:fd:79:d0:db:8a:36:48:ed:
                    98:92:4c:4d:11:94:99:9b:71:a9:a4:be:17:4a:34:
                    f3:31:6f:c8:23:ed:7e:3e:eb:29:57:84:b8:74:dd:
                    ae:6b:94:58:9d:af:13:0d:8c:84:a5:7e:4f:12:d6:
                    20:e8:36:eb:e0:ec:bd:01:d0:14:a8:19:9d:80:25:
                    3d:9c:04:69:33:cc:11:49:d6:a3:a5:e5:73:05:d5:
                    f5:d2:a3:0a:24:0e:99:67:73:b4:64:48:7a:c4:1e:
                    77:9c:da:cf:83:1f:e3:1e:50:48:40:34:4a:35:bf:
                    bf:05:2a:4e:e9:e6:0d:bf:72:09:dd:38:65:7a:90:
                    65:cd:91:33:3a:49:7a:ac:e7:6d:08:8d:1d:f5:7b:
                    14:c5:11:2d:92:5f:e7:50:21:7f:d1:79:f7:f1:1f:
                    af:b4:1d:b8:48:df:77:e9:5c:3f:cc:13:9a:a0:27:
                    c3:b0:51:cf:60:79:70:3f:0c:8a:fd:f4:32:4b:7a:
                    55:9f:fe:23:3a:9e:8c:ff:8f:97:c9:1d:d9:fb:2b:
                    f5:96:09:f8:37:bc:83:0a:72:f1:90:43:e0:31:d7:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:89:4A:A2:68:D4:B8:F2:55:78:1C:B8:EC:C6:59:D6:95:50:62
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:18:cf:90:13:f6:87:86:81:7f:14:6f:d7:18:77:a4:8e:
         e8:36:13:28:52:24:fb:df:c5:da:a6:ca:20:7e:37:87:49:f8:
         3f:f7:49:8e:79:99:f2:08:1c:7d:3c:05:18:92:44:b6:44:75:
         6b:6b:7c:15:1c:5a:a9:33:a6:0e:3a:c3:87:64:c3:9e:72:b4:
         dc:19:03:53:cc:b2:f5:92:80:69:90:57:fc:81:ea:b5:70:26:
         84:97:c1:7f:90:1d:18:62:62:3d:a1:3f:18:68:48:7d:db:99:
         85:1a:cc:17:df:b1:67:5f:ec:eb:4c:db:e0:cd:06:44:07:1b:
         c3:15:ae:59:3f:e8:30:fa:61:e2:03:20:6e:b2:0e:78:35:6c:
         28:b5:f3:74:b5:a9:ff:52:5f:60:e1:8a:20:18:30:b2:21:62:
         20:01:6e:fb:e2:46:00:20:fa:e5:e3:86:65:bb:83:09:84:73:
         b9:aa:46:e9:b3:63:d3:b2:23:7d:6e:44:09:be:1e:d3:73:dc:
         c1:50:84:c0:49:81:dc:ed:25:12:84:c3:a3:4b:e8:66:7c:74:
         54:32:ba:25:32:37:59:c8:60:7f:89:db:68:15:62:56:90:22:
         c4:bc:93:65:a2:4a:1f:59:0f:b3:d9:24:ea:50:eb:0c:b6:b6:
         53:26:8e:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI1zijC2gP7K6qCFQtBDX2n31m1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1NzQyRTVDM0I3NjQ2MTczMjA0QkUyNDM4MDlEQjJE
MjQyRjc3NzAeFw0yMzExMjgxMzA0MTRaFw0yNDExMjYxMzA5MTRaMDMxMTAvBgNV
BAMTKDBCMzU4OTRBQTI2OEQ0QjhGMjU1NzgxQ0I4RUNDNjU5RDY5NTUwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCld4YjRv7/rPn4+ZITltLsXbY8
YCZKEY/iUYuCbPq6B8U6/mz9edDbijZI7ZiSTE0RlJmbcamkvhdKNPMxb8gj7X4+
6ylXhLh03a5rlFidrxMNjISlfk8S1iDoNuvg7L0B0BSoGZ2AJT2cBGkzzBFJ1qOl
5XMF1fXSowokDplnc7RkSHrEHnec2s+DH+MeUEhANEo1v78FKk7p5g2/cgndOGV6
kGXNkTM6SXqs520IjR31exTFES2SX+dQIX/ReffxH6+0HbhI33fpXD/ME5qgJ8Ow
Uc9geXA/DIr99DJLelWf/iM6noz/j5fJHdn7K/WWCfg3vIMKcvGQQ+Ax1yCFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCzWJSqJo1LjyVXgcuOzGWdaVUGIwHwYDVR0j
BBgwFoAU+ldC5cO3ZGFzIEviQ4CdstJC93cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9GQTU3NDJFNUMzQjc2NDYxNzMyMDRCRTI0MzgwOURCMkQyNDJGNzc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNTc0MkU1QzNCNzY0NjE3
MzIwNEJFMjQzODA5REIyRDI0MkY3NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsWVWMA0GCSqGSIb3DQEBCwUAA4IBAQDCSRjPkBP2
h4aBfxRv1xh3pI7oNhMoUiT738XapsogfjeHSfg/90mOeZnyCBx9PAUYkkS2RHVr
a3wVHFqpM6YOOsOHZMOecrTcGQNTzLL1koBpkFf8geq1cCaEl8F/kB0YYmI9oT8Y
aEh925mFGswX37FnX+zrTNvgzQZEBxvDFa5ZP+gw+mHiAyBusg54NWwotfN0tan/
Ul9g4YogGDCyIWIgAW774kYAIPrl44Zlu4MJhHO5qkbps2PTsiN9bkQJvh7Tc9zB
UITASYHc7SUShMOjS+hmfHRUMrolMjdZyGB/idtoFWJWkCLEvJNlokofWQ+z2STq
UOsMtrZTJo4J
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org