Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32332d3233203d3e203533303438.roa
File:                     3137372e3133372e35342e302f32332d3233203d3e203533303438.roa (raw, json)
Hash identifier:          XE6flwwrNe8qlgd2K4mOyhMS+YDsGc3ahoIte0TjLSg=
Subject key identifier:   CD:8B:D1:C2:69:58:A4:FE:47:69:D3:CE:6F:69:E5:74:AA:56:FD:E3
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       1513EE449567F6B9420D577594D46642C6306705
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32332d3233203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:16 +0000
ROA not before:           Wed 23 Nov 2022 18:34:16 +0000
ROA not after:            Wed 22 Nov 2023 18:39:16 +0000
asID:                     53048
IP address blocks:        177.137.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:13:ee:44:95:67:f6:b9:42:0d:57:75:94:d4:66:42:c6:30:67:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:16 2022 GMT
            Not After : Nov 22 18:39:16 2023 GMT
        Subject: CN=CD8BD1C26958A4FE4769D3CE6F69E574AA56FDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:37:46:e2:a0:1c:ac:2e:7e:15:4a:f7:49:
                    cd:c1:14:e2:91:c2:96:c9:01:00:ed:52:9d:1e:23:
                    95:12:b7:f9:db:7b:2e:91:fd:e8:3f:13:30:c1:e9:
                    be:74:30:c7:ae:e8:e7:aa:d8:ed:d2:83:b0:db:e6:
                    e9:05:3a:b6:18:54:21:8d:32:07:d4:0e:a0:60:15:
                    53:b3:11:c1:49:7c:7d:cd:67:ef:d0:21:59:28:76:
                    f3:e2:eb:c0:f3:c1:e9:0d:03:db:12:00:bb:95:5c:
                    89:fc:fd:a3:e2:c0:d8:52:43:63:d3:cf:bc:23:b9:
                    78:7f:83:c5:06:7c:04:42:c3:77:32:95:43:16:24:
                    56:1a:f5:4d:4e:e5:2e:0e:e9:27:e2:17:75:a0:2d:
                    4d:68:d0:9f:73:5f:57:c9:29:0d:44:6d:ab:f3:bf:
                    b4:eb:c4:57:6d:d7:b6:7d:fc:68:44:5a:89:cf:8c:
                    3f:92:f2:3a:79:9b:2b:a2:b4:35:e8:37:59:f7:cd:
                    75:bd:1b:c2:41:d3:d8:9c:9b:23:e0:7f:91:6e:78:
                    a5:84:20:f1:c5:1c:b7:7e:9d:3d:94:bd:16:2c:44:
                    03:76:51:87:b0:ef:cc:ff:5f:e4:d7:1d:47:56:18:
                    f8:8c:09:6b:d2:10:70:1c:93:ca:b1:5e:4a:5c:f2:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8B:D1:C2:69:58:A4:FE:47:69:D3:CE:6F:69:E5:74:AA:56:FD:E3
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32332d3233203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:80:b2:d5:44:c0:15:97:1d:0e:21:bc:4e:cd:3a:7f:4f:
         07:03:b4:3e:f3:a1:58:72:4d:43:38:79:d3:2a:22:4b:cd:29:
         3c:42:ec:2b:b8:12:3a:20:75:c8:b9:b4:21:51:fb:3f:07:3f:
         7a:91:b7:a4:c0:93:53:56:b7:d1:5c:ab:3e:18:d5:39:8d:de:
         92:08:3a:2e:34:77:81:ed:c5:dc:37:74:72:0a:15:67:af:18:
         cc:9e:83:d2:d4:9e:ea:24:f7:f3:b3:ce:b7:64:2e:68:e4:d0:
         34:e4:dd:b9:f7:19:9e:e6:70:36:82:c7:72:b4:a2:e7:a0:10:
         7e:86:34:42:c5:89:5b:01:e6:ae:c8:c8:88:f8:84:b5:cc:94:
         ae:fd:c8:8e:87:c1:88:06:f8:4a:f7:1b:53:69:4d:27:70:8c:
         65:af:9b:09:d3:0e:8b:7b:5a:f2:f7:70:ab:3a:6d:ee:8b:59:
         07:62:16:02:d1:cc:b6:29:7b:2f:7a:5a:e4:92:35:fb:26:ef:
         a5:28:65:8e:05:03:e9:7b:64:da:18:ce:0b:94:c2:bb:6b:9f:
         d1:56:d9:3c:ee:ed:3b:66:a3:b4:9a:cc:8b:5c:e2:fa:7e:a4:
         3b:91:39:23:a6:b4:b1:46:c5:ee:c4:2f:33:82:99:1e:d2:2d:
         1b:64:e5:c9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFRPuRJVn9rlCDVd1lNRmQsYwZwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MTZaFw0yMzExMjIxODM5MTZaMDMxMTAvBgNV
BAMTKENEOEJEMUMyNjk1OEE0RkU0NzY5RDNDRTZGNjlFNTc0QUE1NkZERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpzdG4qAcrC5+FUr3Sc3BFOKR
wpbJAQDtUp0eI5USt/nbey6R/eg/EzDB6b50MMeu6Oeq2O3Sg7Db5ukFOrYYVCGN
MgfUDqBgFVOzEcFJfH3NZ+/QIVkodvPi68DzwekNA9sSALuVXIn8/aPiwNhSQ2PT
z7wjuXh/g8UGfARCw3cylUMWJFYa9U1O5S4O6SfiF3WgLU1o0J9zX1fJKQ1Ebavz
v7TrxFdt17Z9/GhEWonPjD+S8jp5myuitDXoN1n3zXW9G8JB09icmyPgf5FueKWE
IPHFHLd+nT2UvRYsRAN2UYew78z/X+TXHUdWGPiMCWvSEHAck8qxXkpc8r7xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzYvRwmlYpP5HadPOb2nldKpW/eMwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzEzNzM3MmUzMTMzMzcyZTM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYk2MA0GCSqGSIb3DQEBCwUAA4IBAQAO0ICy1UTA
FZcdDiG8Ts06f08HA7Q+86FYck1DOHnTKiJLzSk8QuwruBI6IHXIubQhUfs/Bz96
kbekwJNTVrfRXKs+GNU5jd6SCDouNHeB7cXcN3RyChVnrxjMnoPS1J7qJPfzs863
ZC5o5NA05N259xme5nA2gsdytKLnoBB+hjRCxYlbAeauyMiI+IS1zJSu/ciOh8GI
BvhK9xtTaU0ncIxlr5sJ0w6Le1ry93CrOm3ui1kHYhYC0cy2KXsvelrkkjX7Ju+l
KGWOBQPpe2TaGM4LlMK7a5/RVtk87u07ZqO0msyLXOL6fqQ7kTkjprSxRsXuxC8z
gpke0i0bZOXJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org