Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
File:                     3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          ltNc5uZ7GjVE+a5eTYxqImAbS/4gJRvh66MXizJ+s6A=
Subject key identifier:   49:B8:B5:5D:FC:99:06:FD:A8:64:26:AB:26:41:D4:D3:99:C5:80:6C
Certificate issuer:       /CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
Certificate serial:       0CF43FEDA5B0E5FF94C7C8AF98F07994DE0F7EDF
Authority key identifier: 7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
Signing time:             Tue 10 Oct 2023 14:48:27 +0000
ROA not before:           Tue 10 Oct 2023 14:43:27 +0000
ROA not after:            Tue 08 Oct 2024 14:48:27 +0000
asID:                     262373
IP address blocks:        177.128.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f4:3f:ed:a5:b0:e5:ff:94:c7:c8:af:98:f0:79:94:de:0f:7e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
        Validity
            Not Before: Oct 10 14:43:27 2023 GMT
            Not After : Oct  8 14:48:27 2024 GMT
        Subject: CN=49B8B55DFC9906FDA86426AB2641D4D399C5806C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:79:31:98:97:b8:1b:df:1c:96:bb:5f:cf:
                    8f:fb:81:d7:df:43:57:1b:4a:79:2e:36:02:72:8e:
                    3c:5a:a7:9a:9b:4f:0d:c7:05:d6:a0:82:97:1f:e8:
                    46:2d:a8:7a:dd:19:d7:5c:f4:7f:c1:6b:d1:00:49:
                    de:75:88:53:16:8b:23:05:59:39:5d:68:a2:c9:1f:
                    07:c5:77:a0:44:51:81:b6:c3:20:be:89:58:ff:9d:
                    14:5b:94:22:e3:28:66:da:6e:10:68:aa:64:f3:00:
                    c8:1f:ea:ea:c8:b4:d1:68:6a:1d:45:87:e7:f6:cf:
                    67:99:c4:a5:86:57:22:ff:87:2c:f2:76:34:8d:aa:
                    1e:5e:36:23:72:17:6b:c9:1d:2d:39:6c:ec:77:0c:
                    1b:30:ff:c5:fd:06:b3:fc:ff:9d:22:cd:e6:ed:19:
                    b5:64:8f:97:9c:ab:97:47:78:b7:0b:5c:94:7b:78:
                    43:8c:70:50:f0:77:fe:f0:ca:ed:ba:4b:c0:96:c8:
                    3d:48:24:40:f0:9f:6d:59:b4:c3:62:81:05:57:e8:
                    16:1a:c5:23:8e:2a:c5:0e:01:56:37:b6:8e:d2:d8:
                    c4:3a:5c:52:d5:b3:9b:a8:77:9d:0c:4f:fc:72:f3:
                    d1:09:ab:89:c3:68:98:46:fe:ae:03:d2:2c:86:8f:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B8:B5:5D:FC:99:06:FD:A8:64:26:AB:26:41:D4:D3:99:C5:80:6C
            X509v3 Authority Key Identifier:
                keyid:7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:f6:01:c5:01:cd:3b:c3:98:d7:c0:40:39:2d:49:9d:42:
         31:e4:b2:74:e6:67:6f:8a:ef:84:c9:5f:60:bc:e5:63:c5:89:
         18:b4:c5:0a:c5:a4:fb:bd:09:da:d4:fd:63:53:b9:08:85:b6:
         cb:6c:a6:9c:ee:dc:86:07:98:b8:71:f3:00:80:96:40:a9:9d:
         46:fb:32:09:c2:88:72:80:cc:45:9b:0d:9b:c6:55:6a:d0:76:
         bc:33:92:85:8b:4b:c5:51:67:8a:32:ca:71:30:d7:44:81:7d:
         f5:1b:c6:3a:84:56:14:41:52:62:2a:e8:f3:10:ce:8f:0b:86:
         df:25:62:60:fb:b5:4e:44:40:9b:f8:71:0d:7f:1c:a9:c1:b2:
         78:80:87:bd:f8:fa:d8:3b:73:3f:a0:d9:c5:ea:e6:e3:42:cc:
         7c:bd:5b:c8:c4:75:0e:ac:db:32:e4:1c:3e:3b:bc:07:f7:e3:
         60:f3:ee:31:b1:50:2c:fd:86:3e:f7:0b:15:5c:87:4a:03:be:
         fc:9c:39:6a:b3:ff:85:00:fb:93:e9:c0:fb:b9:d7:2d:a4:8d:
         c3:12:8d:10:47:8b:50:65:a4:b2:07:44:ae:32:84:03:d5:4b:
         a5:cb:e5:b0:00:08:6d:a8:dc:d1:9d:c7:18:68:70:f7:1f:2b:
         3b:58:1e:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDPQ/7aWw5f+Ux8ivmPB5lN4Pft8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFOTVBMjYxMzdCMzBDNzQwQzk5RERENDhEQTZGRUFE
NjI5MDVCMTAeFw0yMzEwMTAxNDQzMjdaFw0yNDEwMDgxNDQ4MjdaMDMxMTAvBgNV
BAMTKDQ5QjhCNTVERkM5OTA2RkRBODY0MjZBQjI2NDFENEQzOTlDNTgwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxc3kxmJe4G98clrtfz4/7gdff
Q1cbSnkuNgJyjjxap5qbTw3HBdaggpcf6EYtqHrdGddc9H/Ba9EASd51iFMWiyMF
WTldaKLJHwfFd6BEUYG2wyC+iVj/nRRblCLjKGbabhBoqmTzAMgf6urItNFoah1F
h+f2z2eZxKWGVyL/hyzydjSNqh5eNiNyF2vJHS05bOx3DBsw/8X9BrP8/50izebt
GbVkj5ecq5dHeLcLXJR7eEOMcFDwd/7wyu26S8CWyD1IJEDwn21ZtMNigQVX6BYa
xSOOKsUOAVY3to7S2MQ6XFLVs5uod50MT/xy89EJq4nDaJhG/q4D0iyGj+WpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSbi1XfyZBv2oZCarJkHU05nFgGwwHwYDVR0j
BBgwFoAUe+laJhN7MMdAyZ3dSNpv6tYpBbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMC83QkU5NUEyNjEzN0IzMEM3NDBDOTlEREQ0OERBNkZFQUQ2MjkwNUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdCRTk1QTI2MTM3QjMwQzc0
MEM5OURERDQ4REE2RkVBRDYyOTA1QjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGAiDANBgkqhkiG9w0BAQsFAAOCAQEApQD2
AcUBzTvDmNfAQDktSZ1CMeSydOZnb4rvhMlfYLzlY8WJGLTFCsWk+70J2tT9Y1O5
CIW2y2ymnO7chgeYuHHzAICWQKmdRvsyCcKIcoDMRZsNm8ZVatB2vDOShYtLxVFn
ijLKcTDXRIF99RvGOoRWFEFSYiro8xDOjwuG3yViYPu1TkRAm/hxDX8cqcGyeICH
vfj62DtzP6DZxerm40LMfL1byMR1DqzbMuQcPju8B/fjYPPuMbFQLP2GPvcLFVyH
SgO+/Jw5arP/hQD7k+nA+7nXLaSNwxKNEEeLUGWksgdErjKEA9VLpcvlsAAIbajc
0Z3HGGhw9x8rO1ge1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org