Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
File:                     3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          QuhHvVZF/w/WZ4X6h8U3vKixnte6jAvf9OFLSQxbkTQ=
Subject key identifier:   72:D0:8D:A3:5E:CC:D4:1F:7E:08:4B:60:FE:4D:8C:EB:CB:2F:64:3C
Certificate issuer:       /CN=40209EB56DBE9B90721379291AA6F10A592354FB
Certificate serial:       5861CB7E4CDA43451E570B2C7EF52F8489A66D50
Authority key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 02 Apr 2024 14:18:44 +0000
ROA not before:           Tue 02 Apr 2024 14:13:44 +0000
ROA not after:            Tue 01 Apr 2025 14:18:44 +0000
asID:                     262417
IP address blocks:        177.129.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:61:cb:7e:4c:da:43:45:1e:57:0b:2c:7e:f5:2f:84:89:a6:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Validity
            Not Before: Apr  2 14:13:44 2024 GMT
            Not After : Apr  1 14:18:44 2025 GMT
        Subject: CN=72D08DA35ECCD41F7E084B60FE4D8CEBCB2F643C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:c1:90:f3:66:a7:d3:40:94:2e:57:84:eb:
                    a3:be:00:fc:68:6f:98:fe:6e:a4:d4:34:9b:8d:57:
                    8f:12:ee:3f:37:0a:fa:c7:cb:1c:a1:ca:42:96:a4:
                    82:13:f7:a9:ab:63:9d:50:22:c1:6f:c7:38:be:be:
                    4a:22:f5:87:51:dd:9e:3b:2c:a2:c0:7d:3f:59:0b:
                    a7:4e:34:b1:a9:d5:90:b9:24:6b:a1:9e:fd:16:f8:
                    1e:fd:0e:e2:fb:8a:07:6a:e8:a2:32:cc:f2:d8:fe:
                    e6:00:5a:71:55:80:dd:32:6b:de:a2:6c:5a:7d:ee:
                    ae:bb:1f:2d:ab:2d:05:5e:cf:10:f2:f7:34:8f:7d:
                    d2:96:31:8d:25:e8:28:06:63:96:11:d3:3c:5e:5c:
                    fb:cd:11:0c:f7:db:3f:2b:81:a2:2f:fc:2a:3e:e9:
                    1d:37:dd:aa:f8:20:ca:7f:0b:f0:93:42:fe:28:bd:
                    ab:52:90:4f:02:47:48:a4:5e:ab:08:b8:64:f1:ca:
                    e9:18:68:23:2b:88:e7:2a:8f:01:be:6c:18:60:30:
                    35:b8:85:9c:02:d0:21:63:2c:08:b3:99:69:49:28:
                    5c:88:70:b2:1d:b8:9c:76:be:97:95:b1:fa:5d:c9:
                    9b:28:2e:33:47:66:b2:ad:cc:16:c5:b7:db:d6:e7:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:8D:A3:5E:CC:D4:1F:7E:08:4B:60:FE:4D:8C:EB:CB:2F:64:3C
            X509v3 Authority Key Identifier:
                keyid:40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3132392e3230302e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:88:64:0f:0c:c0:68:28:33:16:aa:8e:b8:1d:03:31:df:3a:
         95:32:b2:56:62:47:bd:f3:4d:85:3d:e6:7c:68:1d:4b:51:88:
         4e:5a:4a:4c:2e:72:3d:8b:76:24:15:5b:bd:6b:5a:fc:b1:00:
         12:50:95:c9:ef:98:4c:75:cb:d5:c5:f5:a8:38:ab:10:14:b4:
         ae:fb:aa:02:4b:fa:23:13:0a:c3:d0:0f:7e:46:f5:64:44:ef:
         00:36:db:e6:93:f2:e9:2d:05:41:d1:25:3d:98:57:1b:8d:e5:
         11:60:45:ca:38:d7:a7:7f:92:de:5d:17:aa:60:9f:f5:78:54:
         d0:95:3b:c6:d2:eb:cf:f2:b7:1e:9c:94:45:e4:58:c7:9d:2f:
         9f:f3:2d:1d:b4:01:30:13:59:c1:10:79:32:6f:f7:cf:95:09:
         4c:dc:8b:a9:60:46:a1:ac:0f:ea:d6:a2:a2:93:df:be:1b:db:
         c6:6a:32:26:a8:bc:8a:64:1e:e7:ef:ed:70:2d:a0:96:de:94:
         9b:9c:fe:ce:09:8d:4a:59:0e:91:91:a5:e2:46:ca:08:d3:81:
         d7:9d:95:84:41:d7:d4:7c:20:8a:4b:82:14:49:ce:41:74:c5:
         80:80:9a:02:e1:39:14:0b:04:09:04:4b:5c:61:c1:8b:1b:4f:
         1e:da:ff:89
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWGHLfkzaQ0UeVwssfvUvhImmbVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyMDlFQjU2REJFOUI5MDcyMTM3OTI5MUFBNkYxMEE1
OTIzNTRGQjAeFw0yNDA0MDIxNDEzNDRaFw0yNTA0MDExNDE4NDRaMDMxMTAvBgNV
BAMTKDcyRDA4REEzNUVDQ0Q0MUY3RTA4NEI2MEZFNEQ4Q0VCQ0IyRjY0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuY8GQ82an00CULleE66O+APxo
b5j+bqTUNJuNV48S7j83CvrHyxyhykKWpIIT96mrY51QIsFvxzi+vkoi9YdR3Z47
LKLAfT9ZC6dONLGp1ZC5JGuhnv0W+B79DuL7igdq6KIyzPLY/uYAWnFVgN0ya96i
bFp97q67Hy2rLQVezxDy9zSPfdKWMY0l6CgGY5YR0zxeXPvNEQz32z8rgaIv/Co+
6R033ar4IMp/C/CTQv4ovatSkE8CR0ikXqsIuGTxyukYaCMriOcqjwG+bBhgMDW4
hZwC0CFjLAizmWlJKFyIcLIduJx2vpeVsfpdyZsoLjNHZrKtzBbFt9vW54e1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUctCNo17M1B9+CEtg/k2M68svZDwwHwYDVR0j
BBgwFoAUQCCetW2+m5ByE3kpGqbxClkjVPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVCNDVSekZnM0c0aVVpejRmdVU0cVQ4UEdvNjRSUlBMdHphTVd4ZkdV
ZlIvMC80MDIwOUVCNTZEQkU5QjkwNzIxMzc5MjkxQUE2RjEwQTU5MjM1NEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwMjA5RUI1NkRCRTlCOTA3
MjEzNzkyOTFBQTZGMTBBNTkyMzU0RkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQjQ1UnpGZzNHNGlVaXo0ZnVVNHFUOFBHbzY0UlJQTHR6YU1XeGZHVWZSLzAv
MzEzNzM3MmUzMTMyMzkyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGByDANBgkqhkiG9w0BAQsFAAOCAQEAUIhk
DwzAaCgzFqqOuB0DMd86lTKyVmJHvfNNhT3mfGgdS1GITlpKTC5yPYt2JBVbvWta
/LEAElCVye+YTHXL1cX1qDirEBS0rvuqAkv6IxMKw9APfkb1ZETvADbb5pPy6S0F
QdElPZhXG43lEWBFyjjXp3+S3l0XqmCf9XhU0JU7xtLrz/K3HpyUReRYx50vn/Mt
HbQBMBNZwRB5Mm/3z5UJTNyLqWBGoawP6taiopPfvhvbxmoyJqi8imQe5+/tcC2g
lt6Um5z+zgmNSlkOkZGl4kbKCNOB152VhEHX1HwgikuCFEnOQXTFgICaAuE5FAsE
CQRLXGHBixtPHtr/iQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org