Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32322d3232203d3e203631363732.roa (raw, json)
Hash identifier:          ituX6wigcJiVaLkOrqb+VtLYdyUSOy81fLmt/spqLoo=
Subject key identifier:   E6:95:3F:6E:2F:79:66:AF:2E:2E:56:30:29:95:5E:3F:5E:51:5F:AB
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       2F56AE5597CE7983D719239966FFB9026189F492
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
Signing time:             Thu 27 Jul 2023 13:56:05 +0000
ROA not before:           Thu 27 Jul 2023 13:51:05 +0000
ROA not after:            Thu 25 Jul 2024 13:56:05 +0000
asID:                     61672
IP address blocks:        177.11.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:ae:55:97:ce:79:83:d7:19:23:99:66:ff:b9:02:61:89:f4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jul 27 13:51:05 2023 GMT
            Not After : Jul 25 13:56:05 2024 GMT
        Subject: CN=E6953F6E2F7966AF2E2E563029955E3F5E515FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:7c:57:9c:52:44:ff:42:11:09:3e:3c:9a:
                    60:31:67:db:17:dd:08:8a:11:82:0e:91:cf:61:dc:
                    42:31:8f:af:f5:6b:ee:8e:e0:4f:31:34:8c:86:a6:
                    aa:bf:38:e7:58:5b:60:27:16:6b:9c:da:1a:5d:60:
                    a6:57:bf:08:c6:31:3f:50:11:cf:47:bd:f3:97:62:
                    07:dd:04:e7:8b:5d:73:79:44:e7:21:79:6f:b5:16:
                    86:3a:98:95:88:88:89:c9:c2:e4:d0:03:1f:36:49:
                    3b:31:fa:43:ce:45:a9:64:fd:01:2f:b3:ec:f4:5b:
                    48:6f:e4:7e:a2:98:19:92:ff:26:b5:12:31:32:e8:
                    fb:1c:62:e7:43:4d:8b:fc:d8:70:85:f2:12:35:6a:
                    1b:8b:2c:8f:a2:3a:69:71:f8:8c:06:43:f2:0d:73:
                    d6:6d:28:79:cb:5b:28:e3:d3:a3:e3:6f:8b:b7:4b:
                    fa:e7:d5:d8:d5:0d:c1:da:25:79:b7:6e:07:6e:0e:
                    cf:e5:ce:8c:bc:29:d2:74:bd:b2:95:aa:16:52:61:
                    a8:57:a8:87:6f:8a:72:8b:4c:99:a7:24:f6:8f:93:
                    a7:79:61:ae:b6:59:e4:dc:8f:ed:82:c6:43:45:76:
                    4a:a5:21:c9:b6:ff:53:26:de:19:69:46:40:0c:7a:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:3F:6E:2F:79:66:AF:2E:2E:56:30:29:95:5E:3F:5E:51:5F:AB
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ca:ab:99:23:5f:7a:53:f6:38:7d:27:0d:1b:07:b9:26:cb:
         d7:11:c3:58:9c:60:84:74:b1:f4:25:a7:70:a8:79:82:1b:7b:
         74:a5:d8:fd:4e:8c:43:78:9a:7b:4d:9c:35:c9:38:16:7c:3e:
         1d:f4:a8:e4:80:c9:98:69:ba:dc:6c:55:a9:e7:04:59:f5:fa:
         88:f7:f9:b2:a6:35:0d:06:9a:09:8d:4d:d6:f3:f6:73:d4:d2:
         7d:51:a3:49:f8:06:92:bc:c6:28:49:ac:80:38:26:72:9b:9e:
         5e:08:8b:88:e4:15:47:ce:cd:8c:58:65:df:45:4b:e9:84:96:
         56:29:8a:d5:a8:f8:00:1e:19:57:31:4d:8c:2e:f4:98:bc:a8:
         03:17:48:2a:24:7f:6c:a5:5e:38:c1:e0:a5:6c:63:83:bd:71:
         af:29:e3:43:7c:74:fd:35:db:6b:4e:a1:ef:74:1c:fa:a0:3b:
         87:10:a4:13:b8:5f:85:46:fd:f5:fa:63:72:ef:7f:f5:81:c1:
         27:27:47:f5:57:81:ad:2d:b5:87:c6:1e:79:ce:8a:38:30:f3:
         2e:5f:c9:3c:a8:bb:6c:f6:47:a8:2d:0f:1c:21:df:bf:9d:cf:
         9c:a3:f8:5b:d3:14:f3:05:67:e9:00:9f:fb:67:3a:2f:b9:0c:
         16:e1:cb:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL1auVZfOeYPXGSOZZv+5AmGJ9JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2NDVGN0E5QTVGM0IyOTJFNDFBRUI5RTAxNDA5QTNC
MTUyNkMzOTAeFw0yMzA3MjcxMzUxMDVaFw0yNDA3MjUxMzU2MDVaMDMxMTAvBgNV
BAMTKEU2OTUzRjZFMkY3OTY2QUYyRTJFNTYzMDI5OTU1RTNGNUU1MTVGQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpnxXnFJE/0IRCT48mmAxZ9sX
3QiKEYIOkc9h3EIxj6/1a+6O4E8xNIyGpqq/OOdYW2AnFmuc2hpdYKZXvwjGMT9Q
Ec9HvfOXYgfdBOeLXXN5ROcheW+1FoY6mJWIiInJwuTQAx82STsx+kPORalk/QEv
s+z0W0hv5H6imBmS/ya1EjEy6PscYudDTYv82HCF8hI1ahuLLI+iOmlx+IwGQ/IN
c9ZtKHnLWyjj06Pjb4u3S/rn1djVDcHaJXm3bgduDs/lzoy8KdJ0vbKVqhZSYahX
qIdvinKLTJmnJPaPk6d5Ya62WeTcj+2CxkNFdkqlIcm2/1Mm3hlpRkAMet3rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5pU/bi95Zq8uLlYwKZVeP15RX6swHwYDVR0j
BBgwFoAUH2RfeppfOykuQa654BQJo7FSbDkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMC8xRjY0NUY3QTlBNUYzQjI5MkU0MUFFQjlFMDE0MDlBM0IxNTI2QzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNjQ1RjdBOUE1RjNCMjky
RTQxQUVCOUUwMTQwOUEzQjE1MjZDMzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzAv
MzEzNzM3MmUzMTMxMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQtkMA0GCSqGSIb3DQEBCwUAA4IBAQCbyquZI196
U/Y4fScNGwe5JsvXEcNYnGCEdLH0JadwqHmCG3t0pdj9ToxDeJp7TZw1yTgWfD4d
9KjkgMmYabrcbFWp5wRZ9fqI9/mypjUNBpoJjU3W8/Zz1NJ9UaNJ+AaSvMYoSayA
OCZym55eCIuI5BVHzs2MWGXfRUvphJZWKYrVqPgAHhlXMU2MLvSYvKgDF0gqJH9s
pV44weClbGODvXGvKeNDfHT9NdtrTqHvdBz6oDuHEKQTuF+FRv31+mNy73/1gcEn
J0f1V4GtLbWHxh55zoo4MPMuX8k8qLts9keoLQ8cId+/nc+co/hb0xTzBWfpAJ/7
ZzovuQwW4cvP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org