Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36352e302f32342d3234203d3e203532353235.roa
File:                     3137392e3130362e36352e302f32342d3234203d3e203532353235.roa (raw, json)
Hash identifier:          UH5ohg8pGtmOD+/8JMI4Ex4hZI67Z221EE46ftaUKoQ=
Subject key identifier:   72:BB:03:7F:25:42:2D:5D:6F:C1:E4:39:99:F0:C7:FD:47:1D:18:B4
Certificate issuer:       /CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
Certificate serial:       5496955966B84F453F05E2B832908CD03FFC6BF5
Authority key identifier: 1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36352e302f32342d3234203d3e203532353235.roa
Signing time:             Mon 18 Dec 2023 18:07:26 +0000
ROA not before:           Mon 18 Dec 2023 18:02:26 +0000
ROA not after:            Mon 16 Dec 2024 18:07:26 +0000
asID:                     52525
IP address blocks:        179.106.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:95:59:66:b8:4f:45:3f:05:e2:b8:32:90:8c:d0:3f:fc:6b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Validity
            Not Before: Dec 18 18:02:26 2023 GMT
            Not After : Dec 16 18:07:26 2024 GMT
        Subject: CN=72BB037F25422D5D6FC1E43999F0C7FD471D18B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:e9:d9:81:18:69:09:ed:1d:c7:22:9d:55:
                    95:57:03:4a:d8:9f:82:70:14:1e:60:e5:60:b0:6b:
                    88:ad:27:b1:e1:11:9b:00:1c:2b:a8:5f:bd:9c:dc:
                    df:21:6d:33:66:23:06:e2:1c:97:6b:39:65:d2:a3:
                    e4:bb:f4:83:a1:ad:89:f3:5e:d4:39:66:f2:97:fc:
                    57:58:e7:eb:61:8a:f8:20:29:26:36:1e:d1:3e:73:
                    b6:80:41:a9:3a:3e:8b:09:25:f7:1d:64:d3:fd:50:
                    d4:d9:7e:29:94:13:b1:97:59:16:14:2c:c7:8f:c0:
                    29:1c:49:71:68:47:df:4b:97:12:db:8f:eb:a2:6c:
                    a2:bf:91:9d:4a:44:c9:0c:b7:0a:9d:ca:9c:c3:1c:
                    19:f0:be:0b:e5:5d:31:0a:1b:a5:c9:b6:5c:dc:b2:
                    af:7a:02:53:b5:a5:30:ff:3c:8f:0b:e5:bc:69:86:
                    b9:05:fc:c0:c1:03:e2:53:55:f7:8e:7c:47:0c:ca:
                    a5:9f:68:27:31:be:48:ac:63:e2:6c:19:01:f5:07:
                    b2:61:31:d8:1f:73:a8:52:00:7b:41:6f:b1:11:b4:
                    12:c8:8f:c5:b4:17:d0:fe:da:5a:a1:5c:1d:7c:19:
                    5a:72:ae:55:40:57:f7:13:e7:d7:bc:46:8b:dc:46:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:03:7F:25:42:2D:5D:6F:C1:E4:39:99:F0:C7:FD:47:1D:18:B4
            X509v3 Authority Key Identifier:
                keyid:1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36352e302f32342d3234203d3e203532353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:bf:88:db:9d:71:1c:49:03:25:a9:8e:d5:e0:df:28:a5:b5:
         9c:4d:05:1b:d4:73:b9:f0:95:cf:7a:67:04:02:ee:b8:81:c6:
         c8:46:78:75:bf:53:b0:f1:03:2d:3d:29:13:ef:8a:c5:08:60:
         f0:9d:b7:b7:f5:f3:ba:f3:6a:81:04:31:e1:a8:ab:bd:5b:ba:
         35:c6:75:73:be:fa:9a:68:54:14:f0:47:97:ec:d4:65:fd:da:
         69:0c:6b:ea:96:d6:df:c2:c6:7a:7f:8a:49:3b:4a:fa:07:b5:
         72:52:2e:b6:a9:de:d6:46:f9:44:07:0a:93:87:05:e2:0a:78:
         a5:9d:b3:21:a5:19:7c:97:14:e2:2f:62:9d:39:bf:58:5c:1b:
         43:39:6e:5a:8a:9b:56:77:8f:94:8e:93:41:62:58:c1:8c:eb:
         0c:30:49:b7:a2:b8:52:7d:7f:21:50:36:9a:ba:7f:88:7b:23:
         f2:63:f3:be:c3:6a:f1:71:68:ce:3e:52:31:6c:42:2b:90:b6:
         21:76:bf:e0:91:05:34:b2:73:15:3d:79:53:fd:c6:5c:f3:d8:
         ed:e9:ce:48:fc:13:2c:da:f8:39:bf:0f:88:b9:44:80:00:68:
         24:7b:11:05:f5:2e:66:cc:31:96:80:38:b7:ab:21:67:af:e8:
         c0:f0:1d:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVJaVWWa4T0U/BeK4MpCM0D/8a/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2MDE2NzU1Q0M1MkEzMTc3RUQxRjcwNjk3NTc1MEI2
Q0Q2QzdBOTAeFw0yMzEyMTgxODAyMjZaFw0yNDEyMTYxODA3MjZaMDMxMTAvBgNV
BAMTKDcyQkIwMzdGMjU0MjJENUQ2RkMxRTQzOTk5RjBDN0ZENDcxRDE4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9h+nZgRhpCe0dxyKdVZVXA0rY
n4JwFB5g5WCwa4itJ7HhEZsAHCuoX72c3N8hbTNmIwbiHJdrOWXSo+S79IOhrYnz
XtQ5ZvKX/FdY5+thivggKSY2HtE+c7aAQak6PosJJfcdZNP9UNTZfimUE7GXWRYU
LMePwCkcSXFoR99LlxLbj+uibKK/kZ1KRMkMtwqdypzDHBnwvgvlXTEKG6XJtlzc
sq96AlO1pTD/PI8L5bxphrkF/MDBA+JTVfeOfEcMyqWfaCcxvkisY+JsGQH1B7Jh
Mdgfc6hSAHtBb7ERtBLIj8W0F9D+2lqhXB18GVpyrlVAV/cT59e8RovcRmRVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcrsDfyVCLV1vweQ5mfDH/UcdGLQwHwYDVR0j
BBgwFoAUHGAWdVzFKjF37R9waXV1C2zWx6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNYbUZ4S0dWVXVmMTZ4MUtWMWthTlBjeEZTUDhDS2ZKd2Jha21rMXN6
amovMC8xQzYwMTY3NTVDQzUyQTMxNzdFRDFGNzA2OTc1NzUwQjZDRDZDN0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNjAxNjc1NUNDNTJBMzE3
N0VEMUY3MDY5NzU3NTBCNkNENkM3QTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzWG1GeEtHVlV1ZjE2eDFLVjFrYU5QY3hGU1A4Q0tmSndiYWttazFzempqLzAv
MzEzNzM5MmUzMTMwMzYyZTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAs2pBMA0GCSqGSIb3DQEBCwUAA4IBAQCjv4jbnXEc
SQMlqY7V4N8opbWcTQUb1HO58JXPemcEAu64gcbIRnh1v1Ow8QMtPSkT74rFCGDw
nbe39fO682qBBDHhqKu9W7o1xnVzvvqaaFQU8EeX7NRl/dppDGvqltbfwsZ6f4pJ
O0r6B7VyUi62qd7WRvlEBwqThwXiCnilnbMhpRl8lxTiL2KdOb9YXBtDOW5aiptW
d4+UjpNBYljBjOsMMEm3orhSfX8hUDaaun+IeyPyY/O+w2rxcWjOPlIxbEIrkLYh
dr/gkQU0snMVPXlT/cZc89jt6c5I/BMs2vg5vw+IuUSAAGgkexEF9S5mzDGWgDi3
qyFnr+jA8B19
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org