Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          W2Q3CALU7uGG/tk4nYgF2N5nO3CQi+boHe/1eR4OReA=
Subject key identifier:   F5:2F:CC:5F:1D:E3:46:3C:9E:A3:21:91:A0:59:88:DF:43:AF:8A:8E
Certificate issuer:       /CN=81162F75A7037BA4B812202269BFCFBA63E840FE
Certificate serial:       7A30A1B7D3813BDE74FBA6BB3427013291B406FC
Authority key identifier: 81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 17 Jan 2024 09:05:14 +0000
ROA not before:           Wed 17 Jan 2024 09:00:14 +0000
ROA not after:            Wed 15 Jan 2025 09:05:14 +0000
asID:                     61602
IP address blocks:        177.124.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:30:a1:b7:d3:81:3b:de:74:fb:a6:bb:34:27:01:32:91:b4:06:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81162F75A7037BA4B812202269BFCFBA63E840FE
        Validity
            Not Before: Jan 17 09:00:14 2024 GMT
            Not After : Jan 15 09:05:14 2025 GMT
        Subject: CN=F52FCC5F1DE3463C9EA32191A05988DF43AF8A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:3b:4c:9b:5a:24:d8:5d:6f:32:f8:c0:83:
                    4b:c1:0b:30:10:2c:a2:85:1f:94:72:d3:49:82:72:
                    3e:b3:a5:1b:1c:3d:df:10:33:e1:d8:84:4b:db:3f:
                    1f:e8:c2:d3:5a:a3:b3:a6:f3:74:31:ed:63:f8:f4:
                    e4:cd:df:76:2e:78:8f:17:d2:94:f6:45:02:aa:a6:
                    b1:cc:e1:bc:18:59:60:7a:2e:4f:f4:73:b5:f5:ca:
                    74:9b:9d:9c:73:85:ba:4c:5a:da:88:3e:b7:75:87:
                    6c:cf:fb:72:71:98:0f:55:3e:e4:1c:f2:c2:b8:59:
                    0c:f9:82:25:bc:b2:c6:74:17:1f:a8:4e:1f:3d:0d:
                    8b:52:0e:6e:48:cb:15:55:03:77:bd:56:4a:1f:83:
                    9c:79:cf:6a:07:36:b3:d6:66:0a:45:9a:53:2a:97:
                    95:94:10:74:ea:15:93:d4:3c:8b:05:8d:ca:03:b9:
                    95:63:1c:37:1e:0a:0b:74:6b:c7:5a:b3:cc:f7:52:
                    1a:e1:83:59:eb:62:21:4e:e3:3f:69:29:4d:13:09:
                    0a:42:e4:82:4e:9e:2a:63:7a:27:73:4e:ab:1a:98:
                    ff:11:e4:1f:8d:7b:94:43:ac:b2:67:4a:0f:ec:65:
                    74:e0:53:ca:46:71:34:58:c1:4a:e0:3f:23:4d:e8:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2F:CC:5F:1D:E3:46:3C:9E:A3:21:91:A0:59:88:DF:43:AF:8A:8E
            X509v3 Authority Key Identifier:
                keyid:81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/81162F75A7037BA4B812202269BFCFBA63E840FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135392e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:53:c9:24:ed:b0:05:6c:d9:c0:52:23:c9:0a:a4:b1:5f:
         76:4d:b2:94:f8:bf:9a:3a:6f:ed:94:9e:72:10:a9:8e:44:d6:
         0a:00:21:01:db:e6:a4:b9:f5:51:8e:6b:1e:df:7b:40:78:ea:
         ea:b1:56:f5:e7:ed:57:8a:16:31:73:ce:03:11:fe:08:5d:22:
         3c:0d:64:a9:6b:95:cf:36:c9:ae:31:7b:9f:28:61:db:42:bb:
         19:f5:dd:60:96:ad:6c:6e:97:32:84:99:47:e4:0b:14:59:5d:
         c5:4a:51:7b:87:68:d1:ab:cf:27:d2:b3:80:7b:d8:a6:23:05:
         bd:b8:35:49:3b:2f:aa:2c:14:4b:02:68:13:b2:4c:3b:7a:56:
         a8:0c:bb:1a:ac:a9:31:93:3d:f3:53:6c:46:ea:dd:94:b5:96:
         48:14:a8:13:98:3d:81:2b:83:e5:d6:88:cb:03:05:21:57:ae:
         79:8f:e5:6d:78:03:0c:78:c4:ab:f5:b3:8f:ca:83:7b:81:b4:
         6e:5c:9b:d6:db:37:16:c4:1e:2f:5a:31:60:cc:97:ae:16:ba:
         44:44:68:55:bb:91:a3:79:b3:83:24:cb:81:bf:6c:f5:10:8b:
         70:3c:54:fc:29:d3:bb:1a:3f:7b:62:1b:29:5d:e0:f1:66:09:
         e0:d5:e7:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUejCht9OBO950+6a7NCcBMpG0BvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNjJGNzVBNzAzN0JBNEI4MTIyMDIyNjlCRkNGQkE2
M0U4NDBGRTAeFw0yNDAxMTcwOTAwMTRaFw0yNTAxMTUwOTA1MTRaMDMxMTAvBgNV
BAMTKEY1MkZDQzVGMURFMzQ2M0M5RUEzMjE5MUEwNTk4OERGNDNBRjhBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPTtMm1ok2F1vMvjAg0vBCzAQ
LKKFH5Ry00mCcj6zpRscPd8QM+HYhEvbPx/owtNao7Om83Qx7WP49OTN33YueI8X
0pT2RQKqprHM4bwYWWB6Lk/0c7X1ynSbnZxzhbpMWtqIPrd1h2zP+3JxmA9VPuQc
8sK4WQz5giW8ssZ0Fx+oTh89DYtSDm5IyxVVA3e9Vkofg5x5z2oHNrPWZgpFmlMq
l5WUEHTqFZPUPIsFjcoDuZVjHDceCgt0a8das8z3Uhrhg1nrYiFO4z9pKU0TCQpC
5IJOnipjeidzTqsamP8R5B+Ne5RDrLJnSg/sZXTgU8pGcTRYwUrgPyNN6JRPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9S/MXx3jRjyeoyGRoFmI30Ovio4wHwYDVR0j
BBgwFoAUgRYvdacDe6S4EiAiab/PumPoQP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMS84MTE2MkY3NUE3MDM3QkE0QjgxMjIwMjI2OUJGQ0ZCQTYzRTg0MEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxMTYyRjc1QTcwMzdCQTRC
ODEyMjAyMjY5QkZDRkJBNjNFODQwRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfJ8wDQYJKoZIhvcNAQELBQADggEBAEfAU8kk
7bAFbNnAUiPJCqSxX3ZNspT4v5o6b+2UnnIQqY5E1goAIQHb5qS59VGOax7fe0B4
6uqxVvXn7VeKFjFzzgMR/ghdIjwNZKlrlc82ya4xe58oYdtCuxn13WCWrWxulzKE
mUfkCxRZXcVKUXuHaNGrzyfSs4B72KYjBb24NUk7L6osFEsCaBOyTDt6VqgMuxqs
qTGTPfNTbEbq3ZS1lkgUqBOYPYErg+XWiMsDBSFXrnmP5W14Awx4xKv1s4/Kg3uB
tG5cm9bbNxbEHi9aMWDMl64WukREaFW7kaN5s4Mky4G/bPUQi3A8VPwp07saP3ti
Gyld4PFmCeDV56o=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org