Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39352e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          azmHBYncv83hq6wNKtGCXoHcMTdGIXs1Jfqw4B6Errw=
Subject key identifier:   61:95:73:F6:43:ED:8F:D3:BA:54:CA:53:49:85:04:80:0D:4F:81:B1
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       35ADA0B53026C37A3F3D04CD6A8B6F0BD7E141AB
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:16 +0000
ROA not before:           Tue 28 Nov 2023 13:04:16 +0000
ROA not after:            Tue 26 Nov 2024 13:09:16 +0000
asID:                     53047
IP address blocks:        177.101.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:a0:b5:30:26:c3:7a:3f:3d:04:cd:6a:8b:6f:0b:d7:e1:41:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:16 2023 GMT
            Not After : Nov 26 13:09:16 2024 GMT
        Subject: CN=619573F643ED8FD3BA54CA53498504800D4F81B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:b0:67:da:de:0f:74:8f:00:db:dd:1d:c6:
                    9e:26:03:d5:c4:08:10:3e:72:1e:08:06:75:b5:2b:
                    41:86:b5:c3:46:90:e6:c9:cb:70:ab:5a:98:cd:13:
                    d0:38:5f:63:f5:df:3d:95:b3:34:f1:44:69:92:e7:
                    97:a4:32:c1:0b:08:1a:ce:fd:aa:f3:c5:d2:ed:aa:
                    50:e3:53:70:ec:23:b6:8e:ee:3d:a2:2d:98:dc:5c:
                    6a:5c:d5:d6:5e:9c:dd:cd:63:dd:33:c3:cf:0d:5a:
                    4b:83:95:5b:71:f8:3a:f3:5f:bd:90:2f:99:2f:80:
                    ef:af:27:e4:fd:bd:7e:fe:a2:2e:5a:0c:d4:79:8f:
                    99:b8:2d:a9:ea:29:a5:fe:4e:54:a4:c3:cd:f2:a1:
                    d4:59:e6:48:66:e1:18:d2:ae:b0:3b:97:f2:90:fb:
                    4c:3c:04:70:d1:68:c6:87:16:da:eb:8b:d6:77:a8:
                    0f:aa:7c:2c:69:17:66:da:68:9e:8f:8a:e8:20:e5:
                    e7:03:f8:b5:f9:4f:a8:d0:ba:32:7b:e2:ac:a9:45:
                    3c:25:49:f4:34:f7:ab:fe:db:df:9a:1d:36:04:d7:
                    94:40:9b:4b:e0:af:ac:a4:e5:3b:06:7e:59:34:de:
                    03:0d:90:c5:82:79:b3:13:b0:a5:84:44:15:ae:5c:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:73:F6:43:ED:8F:D3:BA:54:CA:53:49:85:04:80:0D:4F:81:B1
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:ff:87:22:18:c4:a8:94:19:5f:89:20:ee:f3:63:ce:20:
         d9:5a:dc:03:98:ce:02:10:02:8c:0b:52:bf:56:79:7f:11:a7:
         c3:5a:d1:ed:94:9e:55:96:58:50:90:5f:dd:cf:c0:2f:d6:78:
         30:67:f0:c1:01:ca:8c:f0:ed:14:5a:7c:d0:44:d2:b2:d0:19:
         54:27:f1:33:5a:58:83:e7:c7:57:08:b7:d5:3a:e5:d2:5d:28:
         19:b3:20:4a:b4:72:77:93:9e:43:87:e9:86:68:50:b8:84:49:
         4f:b6:26:96:66:92:f0:7c:2b:42:93:87:6d:e7:29:69:4e:5f:
         60:f8:d1:f8:72:ff:bf:10:0a:bc:1a:1e:95:c5:fd:25:c5:8d:
         92:da:54:a1:cd:46:26:dd:81:32:42:ac:c4:64:41:99:4b:fb:
         e1:7c:78:50:b3:e9:ca:48:25:ed:3e:4f:7b:cf:a8:2b:f6:4d:
         34:8b:b6:41:3f:83:50:86:ec:06:aa:7f:e8:8e:54:7c:d8:02:
         bb:ba:e2:00:bf:51:5a:70:ce:e3:27:3b:55:17:8a:66:79:d7:
         02:81:1b:61:9b:7d:de:7e:ec:73:da:9d:bf:4a:88:07:f4:4a:
         6e:36:1f:06:d8:25:c1:55:f7:28:bc:22:54:c2:8e:4f:db:eb:
         ad:82:c2:e0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNa2gtTAmw3o/PQTNaotvC9fhQaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1NzQyRTVDM0I3NjQ2MTczMjA0QkUyNDM4MDlEQjJE
MjQyRjc3NzAeFw0yMzExMjgxMzA0MTZaFw0yNDExMjYxMzA5MTZaMDMxMTAvBgNV
BAMTKDYxOTU3M0Y2NDNFRDhGRDNCQTU0Q0E1MzQ5ODUwNDgwMEQ0RjgxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRrBn2t4PdI8A290dxp4mA9XE
CBA+ch4IBnW1K0GGtcNGkObJy3CrWpjNE9A4X2P13z2VszTxRGmS55ekMsELCBrO
/arzxdLtqlDjU3DsI7aO7j2iLZjcXGpc1dZenN3NY90zw88NWkuDlVtx+DrzX72Q
L5kvgO+vJ+T9vX7+oi5aDNR5j5m4LanqKaX+TlSkw83yodRZ5khm4RjSrrA7l/KQ
+0w8BHDRaMaHFtrri9Z3qA+qfCxpF2baaJ6Piugg5ecD+LX5T6jQujJ74qypRTwl
SfQ096v+29+aHTYE15RAm0vgr6yk5TsGflk03gMNkMWCebMTsKWERBWuXCwnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYZVz9kPtj9O6VMpTSYUEgA1PgbEwHwYDVR0j
BBgwFoAU+ldC5cO3ZGFzIEviQ4CdstJC93cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9GQTU3NDJFNUMzQjc2NDYxNzMyMDRCRTI0MzgwOURCMkQyNDJGNzc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNTc0MkU1QzNCNzY0NjE3
MzIwNEJFMjQzODA5REIyRDI0MkY3NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVfMA0GCSqGSIb3DQEBCwUAA4IBAQBrJ/+HIhjE
qJQZX4kg7vNjziDZWtwDmM4CEAKMC1K/Vnl/EafDWtHtlJ5VllhQkF/dz8Av1ngw
Z/DBAcqM8O0UWnzQRNKy0BlUJ/EzWliD58dXCLfVOuXSXSgZsyBKtHJ3k55Dh+mG
aFC4hElPtiaWZpLwfCtCk4dt5ylpTl9g+NH4cv+/EAq8Gh6Vxf0lxY2S2lShzUYm
3YEyQqzEZEGZS/vhfHhQs+nKSCXtPk97z6gr9k00i7ZBP4NQhuwGqn/ojlR82AK7
uuIAv1FacM7jJztVF4pmedcCgRthm33efuxz2p2/SogH9EpuNh8G2CXBVfcovCJU
wo5P2+utgsLg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org