Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/3137372e33372e31362e302f32322d3234203d3e20323730363036.roa
File:                     3137372e33372e31362e302f32322d3234203d3e20323730363036.roa (raw, json)
Hash identifier:          AqgF2u4mCkN3YdbRrjDCxfjmhjB/7bSNIqTXpIJ48eo=
Subject key identifier:   FF:E1:ED:50:17:6C:5C:C7:FC:46:F7:55:75:87:22:69:9D:3D:44:C1
Certificate issuer:       /CN=00E132F255B6446666FF71FD619CCC18C5082AE7
Certificate serial:       57385B1715A980DEFAF8BF57FEDE1A796472F840
Authority key identifier: 00:E1:32:F2:55:B6:44:66:66:FF:71:FD:61:9C:CC:18:C5:08:2A:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00E132F255B6446666FF71FD619CCC18C5082AE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/3137372e33372e31362e302f32322d3234203d3e20323730363036.roa
Signing time:             Fri 18 Aug 2023 20:48:27 +0000
ROA not before:           Fri 18 Aug 2023 20:43:27 +0000
ROA not after:            Fri 16 Aug 2024 20:48:27 +0000
asID:                     270606
IP address blocks:        177.37.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:5b:17:15:a9:80:de:fa:f8:bf:57:fe:de:1a:79:64:72:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00E132F255B6446666FF71FD619CCC18C5082AE7
        Validity
            Not Before: Aug 18 20:43:27 2023 GMT
            Not After : Aug 16 20:48:27 2024 GMT
        Subject: CN=FFE1ED50176C5CC7FC46F755758722699D3D44C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:ff:40:f2:28:c3:fd:2c:a7:d9:66:3d:02:
                    31:71:f7:04:b3:d0:f6:87:80:24:bf:14:6e:84:71:
                    ea:27:44:97:5a:22:7e:d1:4d:e9:53:43:09:30:37:
                    35:8e:ae:96:41:70:33:cd:2c:6f:79:ea:45:7d:75:
                    a2:04:0e:78:a4:ed:05:4d:c7:fc:3a:7e:1e:e6:be:
                    9c:64:6e:35:40:1f:11:38:8e:8e:1b:2f:c8:db:cd:
                    d5:93:19:6f:e1:9c:46:f4:64:97:3f:dd:18:68:f4:
                    c4:26:c3:2d:81:7d:e0:89:59:51:0e:63:c9:1c:1f:
                    5b:98:c1:8b:bc:4b:f7:a9:a3:80:62:57:3a:aa:7b:
                    d2:1f:3b:f0:71:1a:a2:f5:68:12:f0:e4:5b:e9:f9:
                    19:91:57:e7:71:7a:f6:b0:d9:05:08:98:fd:cd:62:
                    04:c6:47:e0:6f:75:6a:b1:4e:a7:62:ee:37:0e:cb:
                    22:e5:43:cd:3b:d0:44:38:4a:cd:5b:f1:b7:21:6f:
                    6e:b2:03:ce:10:8f:77:ff:61:a2:3d:b1:36:aa:10:
                    72:fe:2b:8b:36:85:74:8c:aa:2f:c5:36:0a:be:a4:
                    22:91:a7:0f:ce:30:f5:8a:de:0b:a5:34:7e:e0:22:
                    8f:3a:08:50:a2:d6:50:9d:d1:92:0d:49:c7:86:45:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:ED:50:17:6C:5C:C7:FC:46:F7:55:75:87:22:69:9D:3D:44:C1
            X509v3 Authority Key Identifier:
                keyid:00:E1:32:F2:55:B6:44:66:66:FF:71:FD:61:9C:CC:18:C5:08:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/00E132F255B6446666FF71FD619CCC18C5082AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00E132F255B6446666FF71FD619CCC18C5082AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/3137372e33372e31362e302f32322d3234203d3e20323730363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:61:46:b7:f8:12:1f:e3:be:de:2d:1f:c3:46:6e:6b:a7:bf:
         db:e0:ca:53:7c:68:a1:14:56:85:f7:a5:d6:a9:f0:1e:1d:fa:
         4b:41:31:d7:6e:70:c3:06:ee:f0:08:75:4c:63:ec:4c:85:d4:
         4f:f7:74:9f:02:83:a4:0c:ed:c4:9f:8e:82:80:8f:e5:9f:d4:
         1c:3d:fe:ed:c7:05:45:eb:ec:c2:ea:03:38:72:a4:09:26:70:
         10:84:dc:c5:0d:f9:b7:81:c3:38:c9:5c:6a:52:d6:5f:ab:cc:
         78:0c:3e:a3:17:71:0e:43:09:c6:75:8c:9e:55:c9:ff:98:55:
         18:94:73:f7:c7:da:76:35:a7:ad:9a:0b:36:1b:9a:fb:59:ca:
         e4:38:00:03:cc:0d:7f:03:a3:6c:c3:be:5e:99:ad:74:6d:24:
         1f:74:39:fe:fa:b9:d7:68:1c:50:cb:37:65:db:33:0d:19:88:
         6e:57:c3:3e:ac:3d:e3:73:0f:af:79:d5:81:63:c6:b1:1e:f6:
         e6:ee:c2:f8:35:fd:4d:8f:8a:92:3a:4a:c8:14:f0:5e:60:b8:
         e3:8c:89:54:ee:8d:31:94:90:a4:1b:c0:cb:9e:13:71:02:34:
         c5:b1:28:a5:d0:ff:65:48:06:f5:28:72:b2:38:eb:9b:17:79:
         1b:90:09:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVzhbFxWpgN76+L9X/t4aeWRy+EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFMTMyRjI1NUI2NDQ2NjY2RkY3MUZENjE5Q0NDMThD
NTA4MkFFNzAeFw0yMzA4MTgyMDQzMjdaFw0yNDA4MTYyMDQ4MjdaMDMxMTAvBgNV
BAMTKEZGRTFFRDUwMTc2QzVDQzdGQzQ2Rjc1NTc1ODcyMjY5OUQzRDQ0QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEf/9A8ijD/Syn2WY9AjFx9wSz
0PaHgCS/FG6EceonRJdaIn7RTelTQwkwNzWOrpZBcDPNLG956kV9daIEDnik7QVN
x/w6fh7mvpxkbjVAHxE4jo4bL8jbzdWTGW/hnEb0ZJc/3Rho9MQmwy2BfeCJWVEO
Y8kcH1uYwYu8S/epo4BiVzqqe9IfO/BxGqL1aBLw5Fvp+RmRV+dxevaw2QUImP3N
YgTGR+BvdWqxTqdi7jcOyyLlQ8070EQ4Ss1b8bchb26yA84Qj3f/YaI9sTaqEHL+
K4s2hXSMqi/FNgq+pCKRpw/OMPWK3gulNH7gIo86CFCi1lCd0ZINSceGRf/PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/+HtUBdsXMf8RvdVdYciaZ09RMEwHwYDVR0j
BBgwFoAUAOEy8lW2RGZm/3H9YZzMGMUIKucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dhNUhVd1dCdDZIV2N1RUpab0pyTm9rd3hVYmN2VmNkYjdSYk1TZnZz
MmUvMC8wMEUxMzJGMjU1QjY0NDY2NjZGRjcxRkQ2MTlDQ0MxOEM1MDgyQUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwRTEzMkYyNTVCNjQ0NjY2
NkZGNzFGRDYxOUNDQzE4QzUwODJBRTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXYTVIVXdXQnQ2SFdjdUVKWm9Kck5va3d4VWJjdlZjZGI3UmJNU2Z2czJlLzAv
MzEzNzM3MmUzMzM3MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzYzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSUQMA0GCSqGSIb3DQEBCwUAA4IBAQC0YUa3+BIf
477eLR/DRm5rp7/b4MpTfGihFFaF96XWqfAeHfpLQTHXbnDDBu7wCHVMY+xMhdRP
93SfAoOkDO3En46CgI/ln9QcPf7txwVF6+zC6gM4cqQJJnAQhNzFDfm3gcM4yVxq
UtZfq8x4DD6jF3EOQwnGdYyeVcn/mFUYlHP3x9p2Naetmgs2G5r7WcrkOAADzA1/
A6Nsw75ema10bSQfdDn++rnXaBxQyzdl2zMNGYhuV8M+rD3jcw+vedWBY8axHvbm
7sL4Nf1Nj4qSOkrIFPBeYLjjjIlU7o0xlJCkG8DLnhNxAjTFsSil0P9lSAb1KHKy
OOubF3kbkAkd
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org