Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
File:                     3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          +k2JfBOADolb4G3zCy9vRDIDUjElKkXGIYLgH4tSA5w=
Subject key identifier:   CA:F7:4F:0B:2D:A7:F4:7D:41:4E:20:1B:CF:37:04:AD:41:54:F2:83
Certificate issuer:       /CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Certificate serial:       19E24CCEE21EF48C39ED88DC510734B14EAF5560
Authority key identifier: 67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
Signing time:             Mon 11 Mar 2024 19:21:28 +0000
ROA not before:           Mon 11 Mar 2024 19:16:28 +0000
ROA not after:            Mon 10 Mar 2025 19:21:28 +0000
asID:                     262441
IP address blocks:        179.106.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e2:4c:ce:e2:1e:f4:8c:39:ed:88:dc:51:07:34:b1:4e:af:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
        Validity
            Not Before: Mar 11 19:16:28 2024 GMT
            Not After : Mar 10 19:21:28 2025 GMT
        Subject: CN=CAF74F0B2DA7F47D414E201BCF3704AD4154F283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:44:dc:3c:fb:94:67:a8:68:46:ac:70:ce:
                    f3:8b:a1:ff:c9:9e:a2:15:22:c4:af:26:a9:37:a6:
                    96:c1:15:5c:a2:c7:02:b3:ae:03:be:fe:9b:6c:33:
                    35:48:8a:60:ea:7c:b9:fa:9e:fd:3f:d5:ef:08:d4:
                    c8:c3:91:7a:75:cb:4a:76:31:ef:f1:cf:2e:0b:29:
                    8e:2e:69:1c:7a:f7:2f:fd:e4:8c:fc:a8:a7:a0:87:
                    0a:eb:ab:43:f6:d6:89:f0:4c:54:24:3d:91:64:1c:
                    3c:cd:0d:87:2f:de:12:c3:49:6a:ce:12:89:d0:e5:
                    d7:59:3b:6e:45:ea:9c:06:ab:5e:37:47:6b:e0:81:
                    71:dd:17:f5:b8:f7:b0:75:40:d3:17:4a:ea:60:4b:
                    3c:dc:78:eb:45:91:8f:58:41:6b:e1:ef:7f:6a:d4:
                    53:d0:c1:07:d5:4c:ae:16:d7:d7:44:32:fb:54:41:
                    aa:ec:8d:b7:b3:ff:95:ba:9c:9f:5c:3e:67:62:e7:
                    9f:24:25:4e:2e:cd:96:9c:c5:26:a3:31:ee:a6:fd:
                    82:70:5e:5a:f3:7d:aa:db:c8:1d:83:7f:0c:65:07:
                    03:ad:5f:10:cf:84:e7:26:b1:49:2c:89:4b:47:46:
                    b0:2c:f1:af:0e:2e:e1:74:7f:b4:3a:ab:2c:cc:a6:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:4F:0B:2D:A7:F4:7D:41:4E:20:1B:CF:37:04:AD:41:54:F2:83
            X509v3 Authority Key Identifier:
                keyid:67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:03:f5:07:5c:c1:21:59:05:77:9d:1c:f3:24:4b:96:36:
         5e:d9:69:4c:f2:3f:e3:ea:e0:81:7e:8f:32:17:d7:d8:70:9d:
         41:d3:0e:9c:fd:96:91:bf:0c:67:90:cd:68:9e:79:8c:68:04:
         20:0f:23:1b:10:f1:13:52:65:99:7b:cb:46:c7:62:91:91:1d:
         5c:ed:09:92:15:34:78:78:3f:55:e3:e7:67:00:52:f8:c8:91:
         0d:a0:c9:bc:f6:c9:f8:48:2f:54:51:b7:ca:eb:e8:80:50:04:
         88:cd:3a:29:a5:15:db:d6:8d:a0:d3:b8:b3:a7:f7:78:e2:6d:
         5d:6d:ee:64:95:fa:6c:76:30:19:97:1a:ae:f4:56:91:0c:3f:
         e7:77:29:d4:c8:48:47:5a:eb:95:3e:1c:0a:e9:6a:4d:60:e0:
         48:8a:21:53:64:5f:b4:35:4f:3c:5e:36:3d:4f:d8:25:12:ef:
         29:ef:7c:65:43:67:4d:61:88:2c:6b:be:90:4d:38:08:ee:75:
         3f:a7:9f:b2:f7:93:4c:57:a6:77:ba:be:d1:c2:b6:05:91:05:
         0f:d4:17:57:f8:4b:a0:1f:51:77:ee:37:11:59:f1:01:9a:1d:
         60:95:be:dc:fd:c4:1a:cc:bb:05:aa:ec:7e:60:6a:80:02:df:
         56:e9:e7:4e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGeJMzuIe9Iw57YjcUQc0sU6vVWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4RjQ2NzcyRkNCQkNCNzRGMzJFMUYzMDgzODlEMjY4
RjU1QTQ1RjAeFw0yNDAzMTExOTE2MjhaFw0yNTAzMTAxOTIxMjhaMDMxMTAvBgNV
BAMTKENBRjc0RjBCMkRBN0Y0N0Q0MTRFMjAxQkNGMzcwNEFENDE1NEYyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFkTcPPuUZ6hoRqxwzvOLof/J
nqIVIsSvJqk3ppbBFVyixwKzrgO+/ptsMzVIimDqfLn6nv0/1e8I1MjDkXp1y0p2
Me/xzy4LKY4uaRx69y/95Iz8qKeghwrrq0P21onwTFQkPZFkHDzNDYcv3hLDSWrO
EonQ5ddZO25F6pwGq143R2vggXHdF/W497B1QNMXSupgSzzceOtFkY9YQWvh739q
1FPQwQfVTK4W19dEMvtUQarsjbez/5W6nJ9cPmdi558kJU4uzZacxSajMe6m/YJw
XlrzfarbyB2DfwxlBwOtXxDPhOcmsUksiUtHRrAs8a8OLuF0f7Q6qyzMptQXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyvdPCy2n9H1BTiAbzzcErUFU8oMwHwYDVR0j
BBgwFoAUZ49Gdy/LvLdPMuHzCDidJo9VpF8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMC82NzhGNDY3NzJGQ0JCQ0I3NEYzMkUxRjMwODM4OUQyNjhGNTVBNDVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3OEY0Njc3MkZDQkJDQjc0
RjMyRTFGMzA4Mzg5RDI2OEY1NUE0NUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLNqgDANBgkqhkiG9w0BAQsFAAOCAQEAWwcD
9QdcwSFZBXedHPMkS5Y2XtlpTPI/4+rggX6PMhfX2HCdQdMOnP2Wkb8MZ5DNaJ55
jGgEIA8jGxDxE1JlmXvLRsdikZEdXO0JkhU0eHg/VePnZwBS+MiRDaDJvPbJ+Egv
VFG3yuvogFAEiM06KaUV29aNoNO4s6f3eOJtXW3uZJX6bHYwGZcarvRWkQw/53cp
1MhIR1rrlT4cCulqTWDgSIohU2RftDVPPF42PU/YJRLvKe98ZUNnTWGILGu+kE04
CO51P6efsveTTFemd7q+0cK2BZEFD9QXV/hLoB9Rd+43EVnxAZodYJW+3P3EGsy7
BarsfmBqgALfVunnTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org