Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          6VCUDbk1AVpc2c2gpatwHREMIRo0r30agFO8du/IH0U=
Subject key identifier:   75:EE:92:AA:1A:4E:35:C1:C5:12:45:BD:93:CE:A9:D3:40:D3:66:EF
Certificate issuer:       /CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
Certificate serial:       5BE7A4EA8789C86110C2243D4923714D1011DA15
Authority key identifier: BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
Signing time:             Thu 24 Aug 2023 20:00:00 +0000
ROA not before:           Thu 24 Aug 2023 19:55:00 +0000
ROA not after:            Thu 22 Aug 2024 20:00:00 +0000
asID:                     262903
IP address blocks:        177.23.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e7:a4:ea:87:89:c8:61:10:c2:24:3d:49:23:71:4d:10:11:da:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Validity
            Not Before: Aug 24 19:55:00 2023 GMT
            Not After : Aug 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:4b:35:3d:9d:28:ef:ab:20:7e:bc:80:39:
                    51:c9:ff:0d:ea:45:19:8a:fe:ba:90:63:8e:95:eb:
                    89:cd:6c:7e:3d:17:02:05:1e:47:fa:fe:63:f6:18:
                    18:d7:f7:eb:f7:fb:48:8b:c6:c1:4e:11:67:5f:88:
                    0a:11:1d:6b:da:68:ff:38:82:33:00:b2:07:d0:82:
                    22:39:fc:49:a3:85:14:87:bf:f4:17:0b:29:d4:10:
                    af:b6:ef:d0:09:cd:83:10:ab:98:87:4a:6f:ae:ce:
                    ce:d0:41:f9:84:d8:6f:de:c4:39:9e:91:e4:81:cc:
                    6a:44:44:32:9b:fc:11:ba:97:d0:2a:12:bd:4b:b7:
                    b6:71:c7:61:cc:da:e7:55:be:0b:22:d9:4f:24:8e:
                    e9:c5:83:9c:b0:c3:d5:a7:5a:d0:42:6e:d3:5e:75:
                    77:6d:42:24:45:26:33:f2:39:c8:59:b8:1c:c8:a0:
                    14:35:41:29:2e:52:0e:de:52:d3:b6:28:06:b2:80:
                    3c:45:56:cd:5c:6e:b0:fd:ca:15:63:af:fb:8b:55:
                    6a:12:f1:cb:5b:42:0c:71:8a:20:81:8c:58:43:89:
                    d0:68:6f:01:f5:a1:6f:c0:ce:8f:51:68:df:fa:ec:
                    22:0b:71:d0:6d:22:f7:12:61:d9:d1:ce:d2:7a:87:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:92:AA:1A:4E:35:C1:C5:12:45:BD:93:CE:A9:D3:40:D3:66:EF
            X509v3 Authority Key Identifier:
                keyid:BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:73:dd:15:a2:7c:d4:6e:2b:06:bd:c3:b3:bf:c5:d7:2f:1b:
         ee:ad:2e:4c:b9:39:8a:3e:74:28:fc:1c:2b:66:d4:b3:6c:11:
         0d:3a:17:4d:d5:98:35:b6:85:d3:29:8c:c9:4a:d0:23:76:7e:
         e5:53:c3:c2:32:68:fd:ab:d8:6b:be:36:65:a0:76:d2:78:13:
         61:08:c2:bd:f5:5f:7b:7f:95:a4:e6:ba:02:90:da:9c:42:09:
         61:a9:07:ca:80:51:8c:8d:ce:fe:71:b8:95:c9:cd:5f:d2:50:
         e5:18:d8:34:4b:48:82:50:dc:7f:bb:98:3e:ac:8d:e0:c8:8c:
         fb:da:06:6d:45:53:90:4c:42:0d:8a:fa:31:d9:bd:dd:70:d1:
         24:e7:a3:00:85:c1:de:2a:20:69:72:1f:12:f5:c6:61:00:b3:
         6d:02:50:2e:35:6e:7d:b3:fd:d4:80:58:e0:8b:53:c6:32:5b:
         82:2c:4b:42:d5:e1:17:2b:af:c5:e7:0c:16:dd:5e:c5:5b:fb:
         41:36:43:14:db:3d:7c:49:18:f3:ed:5e:65:c7:43:1f:5f:9b:
         da:8c:65:9f:a0:07:ff:76:8d:a4:ea:d3:50:75:f7:c5:ca:9a:
         7b:cb:25:d5:6b:30:88:de:a3:cb:45:e1:c7:2a:7f:86:21:5a:
         37:f9:ae:1f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUW+ek6oeJyGEQwiQ9SSNxTRAR2hUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkExREI0OTU2RDhGNUVGQUYwOTcwRjE3MUQ2NzYzQTI4
NjYzM0M0RjAeFw0yMzA4MjQxOTU1MDBaFw0yNDA4MjIyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY0RjRCMzUzRDlEMjhFRkFC
MjA3RUJDODAzOTUxQzlGRjBERUE0NTE5OEFGRUJBOTA2MzhFOTVFQjg5Q0Q2QzdF
M0QxNzAyMDUxRTQ3RkFGRTYzRjYxODE4RDdGN0VCRjdGQjQ4OEJDNkMxNEUxMTY3
NUY4ODBBMTExRDZCREE2OEZGMzg4MjMzMDBCMjA3RDA4MjIyMzlGQzQ5QTM4NTE0
ODdCRkY0MTcwQjI5RDQxMEFGQjZFRkQwMDlDRDgzMTBBQjk4ODc0QTZGQUVDRUNF
RDA0MUY5ODREODZGREVDNDM5OUU5MUU0ODFDQzZBNDQ0NDMyOUJGQzExQkE5N0Qw
MkExMkJENEJCN0I2NzFDNzYxQ0NEQUU3NTVCRTBCMjJEOTRGMjQ4RUU5QzU4MzlD
QjBDM0Q1QTc1QUQwNDI2RUQzNUU3NTc3NkQ0MjI0NDUyNjMzRjIzOUM4NTlCODFD
QzhBMDE0MzU0MTI5MkU1MjBFREU1MkQzQjYyODA2QjI4MDNDNDU1NkNENUM2RUIw
RkRDQTE1NjNBRkZCOEI1NTZBMTJGMUNCNUI0MjBDNzE4QTIwODE4QzU4NDM4OUQw
Njg2RjAxRjVBMTZGQzBDRThGNTE2OERGRkFFQzIyMEI3MUQwNkQyMkY3MTI2MUQ5
RDFDRUQyN0E4NzI1QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtk9LNT2dKO+rIH68gDlRyf8N6kUZiv66kGOOleuJzWx+PRcCBR5H
+v5j9hgY1/fr9/tIi8bBThFnX4gKER1r2mj/OIIzALIH0IIiOfxJo4UUh7/0Fwsp
1BCvtu/QCc2DEKuYh0pvrs7O0EH5hNhv3sQ5npHkgcxqREQym/wRupfQKhK9S7e2
ccdhzNrnVb4LItlPJI7pxYOcsMPVp1rQQm7TXnV3bUIkRSYz8jnIWbgcyKAUNUEp
LlIO3lLTtigGsoA8RVbNXG6w/coVY6/7i1VqEvHLW0IMcYoggYxYQ4nQaG8B9aFv
wM6PUWjf+uwiC3HQbSL3EmHZ0c7SeoclqwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHXukqoaTjXBxRJFvZPOqdNA02bvMB8GA1UdIwQYMBaAFLodtJVtj1768JcPFx1n
Y6KGYzxPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzAvQkExREI0OTU2RDhGNUVG
QUYwOTcwRjE3MUQ2NzYzQTI4NjYzM0M0Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQTFEQjQ5NTZEOEY1RUZBRjA5NzBGMTcxRDY3NjNBMjg2NjMz
QzRGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80OWFQdkFIeTlvOUo1TENvWjR5
aWlqUDY1TTVTS0ZGemZlVHdod0RETmU0di8wLzMxMzczNzJlMzIzMzJlMzIzMTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sRfUMA0GCSqGSIb3DQEBCwUAA4IBAQDQc90VonzUbisGvcOzv8XXLxvurS5MuTmK
PnQo/BwrZtSzbBENOhdN1Zg1toXTKYzJStAjdn7lU8PCMmj9q9hrvjZloHbSeBNh
CMK99V97f5Wk5roCkNqcQglhqQfKgFGMjc7+cbiVyc1f0lDlGNg0S0iCUNx/u5g+
rI3gyIz72gZtRVOQTEINivox2b3dcNEk56MAhcHeKiBpch8S9cZhALNtAlAuNW59
s/3UgFjgi1PGMluCLEtC1eEXK6/F5wwW3V7FW/tBNkMU2z18SRjz7V5lx0MfX5va
jGWfoAf/do2k6tNQdffFypp7yyXVazCI3qPLReHHKn+GIVo3+a4f
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org