Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131322e302f32342d3234203d3e203532353531.roa
File:                     3137372e3133302e3131322e302f32342d3234203d3e203532353531.roa (raw, json)
Hash identifier:          v9v7E+GNjzAlL0PnFhCY5IELUkjgKb+sm+ZWPG1tyEA=
Subject key identifier:   8D:2A:98:4B:CC:BA:D3:32:68:6A:F8:5B:24:28:1E:D4:47:1F:50:F5
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       0B0B17BC4642A45455879F748DDAF4E5E8894104
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131322e302f32342d3234203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:15:26 +0000
ROA not before:           Wed 03 May 2023 19:10:26 +0000
ROA not after:            Wed 01 May 2024 19:15:26 +0000
asID:                     52551
IP address blocks:        177.130.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:17:bc:46:42:a4:54:55:87:9f:74:8d:da:f4:e5:e8:89:41:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:10:26 2023 GMT
            Not After : May  1 19:15:26 2024 GMT
        Subject: CN=8D2A984BCCBAD332686AF85B24281ED4471F50F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:41:ad:68:e0:b9:a9:7f:0c:4e:b0:95:88:
                    a5:54:6d:40:de:a4:fd:87:8e:95:04:5e:5e:55:e2:
                    b8:87:a3:ef:58:0a:ac:bb:b0:e4:35:b3:83:0d:9c:
                    54:7c:ea:56:81:0b:8b:44:62:cb:99:9b:be:95:be:
                    9d:95:c2:d5:2b:ce:d6:f5:1f:6f:2e:59:a7:a8:56:
                    89:f9:ac:47:7e:8c:32:15:7f:c2:6e:4e:6a:f1:8a:
                    96:f6:d4:d5:dd:42:4a:f3:7a:df:f2:93:cc:c8:85:
                    e3:5d:e0:ed:fa:7e:87:0a:24:e8:cb:c9:b1:e2:72:
                    b1:1d:f1:96:08:79:e4:5a:a8:2e:29:67:a3:63:33:
                    38:d8:16:b6:9f:f2:85:b7:f7:b1:cc:7f:7e:90:0f:
                    5f:f8:a6:39:d5:ba:bf:ac:4c:0b:fa:14:6b:fc:33:
                    32:b9:15:11:41:c2:d7:e0:43:d9:88:d9:a9:da:78:
                    a6:be:fa:7c:4e:6e:f5:fc:41:79:b5:55:5b:36:d2:
                    fe:0d:dd:c2:6a:95:de:10:14:38:63:12:a3:07:04:
                    08:14:33:52:1f:a4:a1:ff:e7:f4:49:81:c3:89:ba:
                    3b:03:31:41:34:76:06:db:43:ff:9f:7f:7c:c0:95:
                    28:1b:81:db:fc:30:ef:62:0c:7e:d6:3f:a0:97:03:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:98:4B:CC:BA:D3:32:68:6A:F8:5B:24:28:1E:D4:47:1F:50:F5
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131322e302f32342d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:98:56:e0:f8:55:ee:45:83:df:79:bd:0a:c1:d2:b7:7b:7b:
         8d:0b:01:24:b0:8f:67:da:61:ff:7b:3b:3e:4c:15:1d:70:89:
         66:6c:36:48:89:a9:2b:6b:28:6d:93:b1:7b:ff:e6:ce:6d:4f:
         0b:d2:50:16:42:59:7d:20:13:15:f7:f8:b2:da:0d:57:49:e6:
         9b:d8:61:9d:07:32:40:04:45:bb:7c:9b:f2:f4:d2:ad:52:a3:
         83:06:37:8d:71:85:3d:f0:fa:2d:56:77:3c:7f:d3:7b:bd:01:
         b5:96:54:83:d5:21:5a:6c:b9:d1:2c:39:1e:03:b8:10:ae:0a:
         26:0f:c8:e6:56:db:cc:a2:96:bc:a5:3f:e2:97:a0:f3:b6:f2:
         c8:3f:da:2e:69:6f:f2:0f:ca:40:70:40:86:94:19:9c:e6:94:
         ef:e1:3f:64:96:ed:7e:ad:95:32:d3:e9:6a:be:1e:d6:3b:b6:
         66:22:08:3f:f9:40:b9:e3:5c:77:9e:81:90:b4:a9:44:70:5f:
         04:ad:00:b7:f8:1e:d6:fe:7b:3f:59:95:4d:90:f8:37:f6:8c:
         e5:e7:37:dd:44:61:84:0b:75:51:78:0d:3e:60:2c:bc:da:eb:
         54:6c:f3:13:14:20:52:54:4a:c9:a7:0e:de:16:84:6c:f0:7a:
         f8:e4:91:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCwsXvEZCpFRVh590jdr05eiJQQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2OTM4MTk5MUZBQjU0QjA4MkU2MEFGMDNFRDcyNkJC
MjE1MjQxRjAeFw0yMzA1MDMxOTEwMjZaFw0yNDA1MDExOTE1MjZaMDMxMTAvBgNV
BAMTKDhEMkE5ODRCQ0NCQUQzMzI2ODZBRjg1QjI0MjgxRUQ0NDcxRjUwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILUGtaOC5qX8MTrCViKVUbUDe
pP2HjpUEXl5V4riHo+9YCqy7sOQ1s4MNnFR86laBC4tEYsuZm76Vvp2VwtUrztb1
H28uWaeoVon5rEd+jDIVf8JuTmrxipb21NXdQkrzet/yk8zIheNd4O36focKJOjL
ybHicrEd8ZYIeeRaqC4pZ6NjMzjYFraf8oW397HMf36QD1/4pjnVur+sTAv6FGv8
MzK5FRFBwtfgQ9mI2anaeKa++nxObvX8QXm1VVs20v4N3cJqld4QFDhjEqMHBAgU
M1IfpKH/5/RJgcOJujsDMUE0dgbbQ/+ff3zAlSgbgdv8MO9iDH7WP6CXA0jbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjSqYS8y60zJoavhbJCge1EcfUPUwHwYDVR0j
BBgwFoAUjWk4GZH6tUsILmCvA+1ya7IVJB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXZGl1TEExckx6djFOOEI4d3c1S2FReVY5M0s2eWpWSnJSamliRDlM
ZWMvMC84RDY5MzgxOTkxRkFCNTRCMDgyRTYwQUYwM0VENzI2QkIyMTUyNDFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhENjkzODE5OTFGQUI1NEIw
ODJFNjBBRjAzRUQ3MjZCQjIxNTI0MUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2RpdUxBMXJMenYxTjhCOHd3NUthUXlWOTNLNnlqVkpyUmppYkQ5TGVjLzAv
MzEzNzM3MmUzMTMzMzAyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgnAwDQYJKoZIhvcNAQELBQADggEBAIWYVuD4
Ve5Fg995vQrB0rd7e40LASSwj2faYf97Oz5MFR1wiWZsNkiJqStrKG2TsXv/5s5t
TwvSUBZCWX0gExX3+LLaDVdJ5pvYYZ0HMkAERbt8m/L00q1So4MGN41xhT3w+i1W
dzx/03u9AbWWVIPVIVpsudEsOR4DuBCuCiYPyOZW28yilrylP+KXoPO28sg/2i5p
b/IPykBwQIaUGZzmlO/hP2SW7X6tlTLT6Wq+HtY7tmYiCD/5QLnjXHeegZC0qURw
XwStALf4Htb+ez9ZlU2Q+Df2jOXnN91EYYQLdVF4DT5gLLza61Rs8xMUIFJUSsmn
Dt4WhGzwevjkkTc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org