Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32332d3233203d3e203532393133.roa
File:                     3137392e3132372e34302e302f32332d3233203d3e203532393133.roa (raw, json)
Hash identifier:          cgF7i8Fr1kxUHn1+bErWSnBLNf7iPgbotsI1uyLsZpU=
Subject key identifier:   84:71:76:D9:F5:38:1C:CC:4D:9E:0E:B7:24:DF:EB:E3:C6:CC:DA:EE
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       3AD59B3334B5E111BEABF883B9DF9880BF045140
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32332d3233203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:42 +0000
ROA not before:           Thu 07 Mar 2024 21:15:42 +0000
ROA not after:            Thu 06 Mar 2025 21:20:42 +0000
asID:                     52913
IP address blocks:        179.127.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d5:9b:33:34:b5:e1:11:be:ab:f8:83:b9:df:98:80:bf:04:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:42 2024 GMT
            Not After : Mar  6 21:20:42 2025 GMT
        Subject: CN=847176D9F5381CCC4D9E0EB724DFEBE3C6CCDAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:54:75:53:d5:77:37:78:e8:7b:65:fa:6f:
                    41:99:cc:bc:12:00:68:ac:e0:cc:ab:13:c1:6d:73:
                    48:65:ba:bd:14:42:b7:ed:d2:8f:4d:0a:3e:fa:87:
                    4a:6c:aa:cf:68:c2:42:e0:de:5d:62:7e:1f:22:70:
                    fe:58:e5:1a:c2:b6:30:57:2a:d0:31:b0:45:b2:d6:
                    d8:ed:9c:37:80:a4:66:28:4b:39:cf:61:ca:7b:45:
                    32:cb:1f:39:19:9e:96:ba:6c:c9:b7:f3:a7:4e:0a:
                    61:31:da:8b:dd:c2:70:e5:a8:bc:21:5d:fa:2c:f1:
                    64:3f:dc:8d:89:d6:76:c4:51:d4:26:a4:3c:d0:79:
                    8c:b6:f3:14:92:a9:01:eb:2b:e3:1d:f4:99:2a:83:
                    54:10:49:8f:21:1f:14:9b:61:1f:30:52:2c:e3:e5:
                    b2:71:ef:d6:fc:51:e8:c2:4c:77:b4:4c:0a:94:a6:
                    c2:58:0a:ac:b5:4c:c7:59:83:24:38:90:fa:aa:4f:
                    de:e9:80:6d:bb:95:39:f3:c1:12:27:e8:4d:27:57:
                    db:a0:24:3e:05:22:8d:f2:2c:25:93:d3:7e:21:03:
                    4f:ab:34:cb:e0:b5:98:5c:65:0c:45:32:49:ee:7c:
                    3e:8b:8b:90:12:4c:5f:d4:8a:f3:7a:4e:a8:24:87:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:76:D9:F5:38:1C:CC:4D:9E:0E:B7:24:DF:EB:E3:C6:CC:DA:EE
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32332d3233203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:bf:b7:ab:36:35:a4:b7:dc:88:e6:62:ca:81:42:71:a9:
         10:49:64:1e:c0:d0:3f:0b:1e:d2:ef:ea:29:74:b9:fb:bf:19:
         1a:fe:d5:af:73:0e:1a:31:f4:c6:b8:8d:09:70:df:ee:39:6f:
         5c:8f:75:de:1a:54:6b:d8:e4:35:43:64:ab:4b:2e:ed:60:7a:
         ea:34:d3:e2:fe:f2:98:45:e2:98:a9:57:ab:57:72:26:1a:4e:
         3a:28:26:8a:77:2e:ae:40:1d:d7:40:e9:89:df:50:9b:2e:43:
         e3:23:16:e4:a7:c7:d3:e8:7a:ce:96:a6:a7:e5:57:4a:8f:44:
         6c:dd:1e:36:f5:ae:ca:4e:c2:b5:23:98:8f:06:0f:05:27:d3:
         8a:7c:40:f1:d1:76:ab:0d:65:1b:75:d7:de:a4:cf:ec:73:57:
         7c:cb:39:47:19:66:18:c3:72:71:a9:b3:92:75:d3:9c:92:d8:
         a1:a2:a7:2a:29:29:4c:00:89:f1:66:9b:96:a7:73:a6:4b:82:
         35:98:ac:be:19:fe:ef:30:3e:34:ee:bf:7e:50:ee:60:8f:13:
         cc:7c:78:cd:da:2b:5f:01:d9:62:8d:aa:3c:aa:03:50:92:0b:
         76:fa:08:e7:ff:a3:e6:9b:b7:59:52:08:ce:95:fc:7c:27:fe:
         3f:9c:75:54
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOtWbMzS14RG+q/iDud+YgL8EUUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2MjZGQjhDMzlBOTVGOUFBNzY2RTI5NkQzRjY0Nzg0
QTVFRUEyQjAeFw0yNDAzMDcyMTE1NDJaFw0yNTAzMDYyMTIwNDJaMDMxMTAvBgNV
BAMTKDg0NzE3NkQ5RjUzODFDQ0M0RDlFMEVCNzI0REZFQkUzQzZDQ0RBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwFR1U9V3N3joe2X6b0GZzLwS
AGis4MyrE8Ftc0hlur0UQrft0o9NCj76h0psqs9owkLg3l1ifh8icP5Y5RrCtjBX
KtAxsEWy1tjtnDeApGYoSznPYcp7RTLLHzkZnpa6bMm386dOCmEx2ovdwnDlqLwh
Xfos8WQ/3I2J1nbEUdQmpDzQeYy28xSSqQHrK+Md9Jkqg1QQSY8hHxSbYR8wUizj
5bJx79b8UejCTHe0TAqUpsJYCqy1TMdZgyQ4kPqqT97pgG27lTnzwRIn6E0nV9ug
JD4FIo3yLCWT034hA0+rNMvgtZhcZQxFMknufD6Li5ASTF/UivN6Tqgkh3J/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhHF22fU4HMxNng63JN/r48bM2u4wHwYDVR0j
BBgwFoAU4GJvuMOalfmqdm4pbT9keEpe6iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM
TnIvMC9FMDYyNkZCOEMzOUE5NUY5QUE3NjZFMjk2RDNGNjQ3ODRBNUVFQTJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UwNjI2RkI4QzM5QTk1RjlB
QTc2NkUyOTZEM0Y2NDc4NEE1RUVBMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAv
MzEzNzM5MmUzMTMyMzcyZTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBs38oMA0GCSqGSIb3DQEBCwUAA4IBAQACWr+3qzY1
pLfciOZiyoFCcakQSWQewNA/Cx7S7+opdLn7vxka/tWvcw4aMfTGuI0JcN/uOW9c
j3XeGlRr2OQ1Q2SrSy7tYHrqNNPi/vKYReKYqVerV3ImGk46KCaKdy6uQB3XQOmJ
31CbLkPjIxbkp8fT6HrOlqan5VdKj0Rs3R429a7KTsK1I5iPBg8FJ9OKfEDx0Xar
DWUbddfepM/sc1d8yzlHGWYYw3JxqbOSddOcktihoqcqKSlMAInxZpuWp3OmS4I1
mKy+Gf7vMD407r9+UO5gjxPMfHjN2itfAdlijao8qgNQkgt2+gjn/6Pmm7dZUgjO
lfx8J/4/nHVU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org