Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          9+xTbv/g0wEU8SwNxAMop7GjXdXCgfVq8K0FglaVDac=
Subject key identifier:   DA:8C:A0:65:B9:26:DD:82:A3:ED:84:93:E0:85:F9:7F:00:8F:C0:59
Certificate issuer:       /CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
Certificate serial:       4BD423DD3A352BC5885AC0A2F4F62CDD1492BDAE
Authority key identifier: C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 18 Jan 2024 13:11:37 +0000
ROA not before:           Thu 18 Jan 2024 13:06:37 +0000
ROA not after:            Thu 16 Jan 2025 13:11:37 +0000
asID:                     263457
IP address blocks:        177.190.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d4:23:dd:3a:35:2b:c5:88:5a:c0:a2:f4:f6:2c:dd:14:92:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
        Validity
            Not Before: Jan 18 13:06:37 2024 GMT
            Not After : Jan 16 13:11:37 2025 GMT
        Subject: CN=DA8CA065B926DD82A3ED8493E085F97F008FC059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:f8:c2:36:f5:a2:e1:26:09:ce:8d:88:04:
                    64:00:00:9f:fa:66:88:43:5b:48:94:1d:5a:4c:c2:
                    f9:6d:3d:cf:04:f0:f4:eb:b5:83:ea:09:3b:99:41:
                    f6:21:34:c5:de:a4:dd:3c:60:3b:7d:bf:ec:8e:33:
                    22:ae:85:bd:ab:d0:a5:7f:46:9e:19:f7:ae:96:d8:
                    ab:ae:1e:d8:b5:6d:03:83:6b:4e:b4:b7:46:58:76:
                    d8:a3:42:65:c3:5a:bf:34:32:bf:17:e1:d6:28:95:
                    0b:b4:97:0f:2f:44:91:54:47:fe:db:ef:84:80:b6:
                    1f:6a:89:78:0f:56:d8:c1:e8:4e:56:e1:c9:cf:03:
                    9b:2f:12:ee:08:14:01:2a:89:69:88:95:03:e0:c9:
                    e2:c3:90:3f:46:5d:ca:a6:df:2f:3e:03:1c:bd:18:
                    df:5a:ba:60:a2:e2:51:58:80:50:46:96:73:72:ab:
                    55:bf:4d:75:65:30:98:99:41:18:73:cd:b7:4d:5f:
                    2a:02:12:74:dd:05:8f:0f:4d:6b:b8:34:e0:bd:aa:
                    de:a3:5f:d0:3a:77:a4:4c:5e:ea:6c:5a:6d:32:bc:
                    c0:59:4b:fe:09:a5:ec:2e:59:9c:ca:fa:97:b9:3a:
                    66:77:d7:0b:16:db:0d:30:f2:52:a1:06:56:fa:94:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:A0:65:B9:26:DD:82:A3:ED:84:93:E0:85:F9:7F:00:8F:C0:59
            X509v3 Authority Key Identifier:
                keyid:C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4e:bb:de:7e:29:1f:7b:09:9e:a0:0d:52:57:0f:01:59:7b:
         35:30:dd:25:b7:4b:58:b3:20:47:b8:c7:a5:f5:d1:5d:12:d3:
         ef:50:9e:20:e0:c9:bc:27:40:0b:c9:2c:9b:08:f6:7d:b2:2e:
         4e:fc:5a:9a:60:69:e4:9c:41:35:b3:27:57:4e:da:28:9a:2f:
         20:df:ed:0f:0a:c9:2b:68:23:ca:91:61:02:06:14:f4:31:a7:
         ba:e1:46:25:c2:8a:64:82:81:f5:e5:07:71:e9:f8:47:9d:9e:
         9f:b7:7c:fc:e9:ae:c8:13:be:61:60:40:56:8c:7a:0e:79:6c:
         87:ea:b5:94:c1:c5:cb:a8:05:89:6d:cf:af:8b:c9:ea:d5:e3:
         bc:aa:0f:a1:60:48:51:3e:1c:70:fa:3a:03:ab:65:bb:85:78:
         7f:41:6a:ed:bb:a8:e1:bd:bc:d2:ba:f8:bd:8e:f4:91:f3:51:
         99:4a:95:78:9d:6a:0a:d4:a7:b4:5b:41:b3:c5:85:dd:66:89:
         80:d8:88:f3:a2:92:05:67:54:14:36:c1:4c:5a:4d:9a:e5:6b:
         68:ba:19:ec:32:6d:3e:52:3d:09:1e:1c:fc:a1:0a:b8:b0:2a:
         b2:ae:6f:8b:b7:9a:8a:c2:45:64:d4:5a:b2:df:92:07:a4:c2:
         06:f0:d4:26
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUS9Qj3To1K8WIWsCi9PYs3RSSva4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFCMzU5MDZFM0FENzI4NDc2OEFFRTVEQjZFRDQyNjVC
MjA1NkU5RjAeFw0yNDAxMTgxMzA2MzdaFw0yNTAxMTYxMzExMzdaMDMxMTAvBgNV
BAMTKERBOENBMDY1QjkyNkREODJBM0VEODQ5M0UwODVGOTdGMDA4RkMwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmfjCNvWi4SYJzo2IBGQAAJ/6
ZohDW0iUHVpMwvltPc8E8PTrtYPqCTuZQfYhNMXepN08YDt9v+yOMyKuhb2r0KV/
Rp4Z966W2KuuHti1bQODa060t0ZYdtijQmXDWr80Mr8X4dYolQu0lw8vRJFUR/7b
74SAth9qiXgPVtjB6E5W4cnPA5svEu4IFAEqiWmIlQPgyeLDkD9GXcqm3y8+Axy9
GN9aumCi4lFYgFBGlnNyq1W/TXVlMJiZQRhzzbdNXyoCEnTdBY8PTWu4NOC9qt6j
X9A6d6RMXupsWm0yvMBZS/4JpewuWZzK+pe5OmZ31wsW2w0w8lKhBlb6lD23AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2oygZbkm3YKj7YST4IX5fwCPwFkwHwYDVR0j
BBgwFoAUwbNZBuOtcoR2iu5dtu1CZbIFbp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVBU0dzZ3ZHbVdMOGFyYndZZm9wRVUySnlOYWVOU2I5OU1kbjRhOGVx
bVgvMC9DMUIzNTkwNkUzQUQ3Mjg0NzY4QUVFNURCNkVENDI2NUIyMDU2RTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MxQjM1OTA2RTNBRDcyODQ3
NjhBRUU1REI2RUQ0MjY1QjIwNTZFOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1QVNHc2d2R21XTDhhcmJ3WWZvcEVVMkp5TmFlTlNiOTlNZG40YThlcW1YLzAv
MzEzNzM3MmUzMTM5MzAyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+nTANBgkqhkiG9w0BAQsFAAOCAQEASU67
3n4pH3sJnqANUlcPAVl7NTDdJbdLWLMgR7jHpfXRXRLT71CeIODJvCdAC8ksmwj2
fbIuTvxammBp5JxBNbMnV07aKJovIN/tDwrJK2gjypFhAgYU9DGnuuFGJcKKZIKB
9eUHcen4R52en7d8/OmuyBO+YWBAVox6Dnlsh+q1lMHFy6gFiW3Pr4vJ6tXjvKoP
oWBIUT4ccPo6A6tlu4V4f0Fq7buo4b280rr4vY70kfNRmUqVeJ1qCtSntFtBs8WF
3WaJgNiI86KSBWdUFDbBTFpNmuVraLoZ7DJtPlI9CR4c/KEKuLAqsq5vi7eaisJF
ZNRast+SB6TCBvDUJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org