Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3137372e3132392e3136302e302f32322d3332203d3e20323633303432.roa
File:                     3137372e3132392e3136302e302f32322d3332203d3e20323633303432.roa (raw, json)
Hash identifier:          mdHgHDsy6l3Sq1AMMcMN/AiT4ii/nauKv47B9h2kv40=
Subject key identifier:   9E:2A:15:EA:CC:2A:AD:95:FC:0A:CD:19:24:5A:12:48:A1:4C:B6:73
Certificate issuer:       /CN=90524BFE16E4163C4B4EB6424540F3989155006C
Certificate serial:       4DDF5DDDDD0084B21A47418072F95B53ACF8B624
Authority key identifier: 90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3137372e3132392e3136302e302f32322d3332203d3e20323633303432.roa
Signing time:             Mon 03 Apr 2023 19:16:49 +0000
ROA not before:           Mon 03 Apr 2023 19:11:49 +0000
ROA not after:            Mon 01 Apr 2024 19:16:49 +0000
asID:                     263042
IP address blocks:        177.129.160.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:df:5d:dd:dd:00:84:b2:1a:47:41:80:72:f9:5b:53:ac:f8:b6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90524BFE16E4163C4B4EB6424540F3989155006C
        Validity
            Not Before: Apr  3 19:11:49 2023 GMT
            Not After : Apr  1 19:16:49 2024 GMT
        Subject: CN=9E2A15EACC2AAD95FC0ACD19245A1248A14CB673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:11:b2:5d:39:44:a3:9d:d6:cc:9c:54:4a:
                    d0:9e:58:0f:0d:2e:4e:0b:44:35:21:df:cf:4e:b1:
                    e6:9f:a0:ae:24:b9:83:72:6c:06:b7:f3:af:88:f5:
                    60:7f:16:15:34:58:43:01:8d:2c:b0:16:d4:a9:5d:
                    b7:54:03:64:6a:62:f0:4c:6d:25:69:cc:3d:1f:21:
                    0a:5a:d9:15:d0:de:17:02:52:eb:15:83:c2:0c:dd:
                    7c:e2:02:0c:06:e6:89:8d:d6:4f:9f:b1:0d:1e:4a:
                    f5:0e:b5:13:f7:52:bb:15:e2:b0:c8:1d:33:fd:c2:
                    7d:d0:89:e1:e7:5b:62:fa:2b:ec:85:23:a7:ea:5f:
                    95:61:86:3b:83:7c:9e:53:86:71:b1:ae:7f:2e:a9:
                    af:ed:7f:50:ed:d4:47:6d:6c:1f:79:f7:60:f5:9e:
                    49:3e:e5:91:32:e2:0a:bd:39:85:a5:27:50:bd:1f:
                    f6:8a:e6:3e:13:7f:47:9b:16:ef:af:a6:a0:07:a5:
                    94:74:8f:03:f5:fd:a2:28:58:45:2a:4a:a3:b6:cb:
                    7d:75:94:e6:27:46:4e:9f:55:e3:77:8f:0d:c5:80:
                    e7:ac:b8:ac:74:06:b1:20:58:05:51:68:6a:40:65:
                    28:03:80:2f:4a:73:b1:84:78:57:56:d3:8e:86:e5:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:15:EA:CC:2A:AD:95:FC:0A:CD:19:24:5A:12:48:A1:4C:B6:73
            X509v3 Authority Key Identifier:
                keyid:90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3137372e3132392e3136302e302f32322d3332203d3e20323633303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:b9:ec:18:9d:c5:d2:e9:87:9e:15:17:26:b1:eb:4c:09:
         9e:7f:3d:a2:77:ff:f8:9e:ff:34:9c:91:c2:a7:96:a1:40:71:
         cc:11:74:74:37:31:83:db:e9:3f:01:56:8c:54:f7:a3:23:e4:
         a9:e0:3e:96:e8:88:15:2b:e7:bb:c9:b1:11:07:29:34:ea:25:
         16:a1:9d:93:6e:fb:fd:8b:5a:49:e5:f5:7c:0e:8f:d6:6f:44:
         52:f5:02:61:b9:e1:e6:bc:13:b8:f4:1d:fc:fb:95:43:ab:7c:
         c9:39:74:c1:ae:02:d6:38:24:7e:86:b6:fc:50:3a:ea:c3:d4:
         f1:35:ed:72:13:52:cb:ec:1a:46:82:e4:3c:73:99:0c:35:1c:
         58:33:67:b3:fd:36:08:68:97:73:8e:8d:c4:4e:1d:9a:9d:b0:
         a3:9b:d1:f0:18:ee:68:13:d0:68:7e:a8:8d:1a:02:32:4f:d3:
         2b:d5:dc:25:a7:e2:62:e1:9d:e3:e7:2a:d1:45:fc:e9:d6:47:
         c3:62:4c:4a:7a:5c:af:b0:c1:a8:5d:f7:29:de:ae:85:e3:58:
         f8:c4:62:7d:4f:c4:93:3d:e8:c1:90:6c:21:89:5f:89:1d:05:
         19:df:4a:88:40:6f:f2:da:0f:83:7e:73:15:fb:81:7e:92:d1:
         88:8f:34:c7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTd9d3d0AhLIaR0GAcvlbU6z4tiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MjRCRkUxNkU0MTYzQzRCNEVCNjQyNDU0MEYzOTg5
MTU1MDA2QzAeFw0yMzA0MDMxOTExNDlaFw0yNDA0MDExOTE2NDlaMDMxMTAvBgNV
BAMTKDlFMkExNUVBQ0MyQUFEOTVGQzBBQ0QxOTI0NUExMjQ4QTE0Q0I2NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZRGyXTlEo53WzJxUStCeWA8N
Lk4LRDUh389OseafoK4kuYNybAa386+I9WB/FhU0WEMBjSywFtSpXbdUA2RqYvBM
bSVpzD0fIQpa2RXQ3hcCUusVg8IM3XziAgwG5omN1k+fsQ0eSvUOtRP3UrsV4rDI
HTP9wn3QieHnW2L6K+yFI6fqX5VhhjuDfJ5ThnGxrn8uqa/tf1Dt1EdtbB9592D1
nkk+5ZEy4gq9OYWlJ1C9H/aK5j4Tf0ebFu+vpqAHpZR0jwP1/aIoWEUqSqO2y311
lOYnRk6fVeN3jw3FgOesuKx0BrEgWAVRaGpAZSgDgC9Kc7GEeFdW046G5adHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnioV6swqrZX8Cs0ZJFoSSKFMtnMwHwYDVR0j
BBgwFoAUkFJL/hbkFjxLTrZCRUDzmJFVAGwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0gyb2FVa1NZSjZ5MmFaWXI4ZzNTNWJFN0xzUWJEcFFlUkZkMlhGWU1n
ZGcvMC85MDUyNEJGRTE2RTQxNjNDNEI0RUI2NDI0NTQwRjM5ODkxNTUwMDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwNTI0QkZFMTZFNDE2M0M0
QjRFQjY0MjQ1NDBGMzk4OTE1NTAwNkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIMm9hVWtTWUo2eTJhWllyOGczUzViRTdMc1FiRHBRZVJGZDJYRllNZ2RnLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGBoDANBgkqhkiG9w0BAQsFAAOCAQEAQD+5
7BidxdLph54VFyax60wJnn89onf/+J7/NJyRwqeWoUBxzBF0dDcxg9vpPwFWjFT3
oyPkqeA+luiIFSvnu8mxEQcpNOolFqGdk277/YtaSeX1fA6P1m9EUvUCYbnh5rwT
uPQd/PuVQ6t8yTl0wa4C1jgkfoa2/FA66sPU8TXtchNSy+waRoLkPHOZDDUcWDNn
s/02CGiXc46NxE4dmp2wo5vR8BjuaBPQaH6ojRoCMk/TK9XcJafiYuGd4+cq0UX8
6dZHw2JMSnpcr7DBqF33Kd6uheNY+MRifU/Ekz3owZBsIYlfiR0FGd9KiEBv8toP
g35zFfuBfpLRiI80xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org