Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          GPtBW5ztS48UYHRRVHFr5IMMQS3tPy+djLjtByhQdeQ=
Subject key identifier:   69:52:B7:6D:9E:20:59:E4:C0:D0:D5:72:DF:15:48:07:BF:22:8D:86
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       4D219010488EFD5713C41249E3D3831FC673E80C
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     28338
IP address blocks:        177.87.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:90:10:48:8e:fd:57:13:c4:12:49:e3:d3:83:1f:c6:73:e8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:d9:c5:cb:12:e6:7d:9c:2b:aa:76:b2:c9:
                    29:2d:10:6f:31:e3:47:3c:d3:ab:27:4f:ef:5d:37:
                    22:c8:62:42:da:00:08:ca:49:37:b8:b3:69:43:b6:
                    dc:43:90:c2:a9:de:02:c5:1b:98:97:c5:43:98:f3:
                    94:ce:12:cb:87:d0:fa:ca:82:88:a9:e9:7a:cf:17:
                    c4:a3:f4:cb:83:0b:45:5d:33:29:19:3f:e8:c9:97:
                    59:74:ab:1c:cd:d6:c8:17:23:78:84:11:4a:44:10:
                    09:0f:d5:ac:e9:68:1e:75:1a:ae:65:38:64:36:8b:
                    ff:07:02:e0:93:b5:b4:59:d6:28:3f:63:ad:e7:3d:
                    88:96:6a:c4:7b:92:ec:8a:8e:28:ec:72:b5:12:28:
                    9d:a8:7d:23:f2:98:0c:7a:14:b3:59:e8:4b:04:d7:
                    ef:45:75:4b:2f:39:04:8c:00:16:b0:4a:f3:88:43:
                    cd:94:f8:e7:53:66:97:7c:4f:6a:c2:c9:5e:15:40:
                    9e:e7:6f:e5:15:5c:c9:2a:b7:08:cb:72:27:62:1a:
                    b9:d1:72:e7:d4:1d:43:b3:5f:50:ba:6f:fe:85:10:
                    1a:f7:4b:e4:51:15:1b:b8:fa:5b:9e:d3:6a:31:55:
                    6d:8a:f9:9f:df:fb:51:27:16:8d:bc:ad:e1:d8:fe:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:B7:6D:9E:20:59:E4:C0:D0:D5:72:DF:15:48:07:BF:22:8D:86
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:20:b2:c0:82:fc:81:62:08:ee:8f:67:0d:ee:f9:3a:ba:
         0d:bc:c8:75:df:41:57:4f:fd:87:09:c6:37:53:13:6d:b5:c2:
         59:91:d3:11:1e:e3:8c:91:87:98:0f:7a:28:9b:8f:61:f0:0f:
         23:76:29:b7:d1:95:fc:01:57:60:dd:19:ed:36:31:ca:6a:38:
         be:52:f9:98:df:7b:78:8e:ae:db:fe:d2:5d:41:10:21:e8:8a:
         70:b1:36:68:c0:47:ee:8d:b2:9f:91:79:7d:c8:aa:95:d0:04:
         1b:79:d1:16:0a:66:ab:c0:ba:ed:de:cd:5b:17:ec:fc:9d:18:
         f2:73:3e:b1:4f:bc:2f:b9:2a:13:28:39:c3:85:26:dc:df:24:
         a6:e0:59:92:0a:0d:95:cf:2a:bb:e1:62:1d:4a:7e:23:7d:2a:
         de:7c:42:ca:6b:04:70:c2:f2:9b:e2:54:d0:00:a3:79:7c:07:
         52:3a:87:e4:a0:04:00:14:f4:9e:c3:6d:a4:4e:7a:99:6b:00:
         28:e5:88:53:79:fd:c3:cd:b9:93:3d:4c:f8:0e:34:90:a3:d5:
         7d:b0:94:bf:8d:a3:e7:25:5a:53:58:9d:46:da:ff:83:60:da:
         02:db:02:58:64:95:a8:9c:fd:46:ac:ff:28:d2:f8:5a:6a:94:
         b3:bb:78:d3
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUTSGQEEiO/VcTxBJJ49ODH8Zz6AwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1RTA2QjI0OUZENzEyQzMzNkQ2REJEODc3MTNENUEy
QjdENEM0NDAeFw0yNDAzMDUxNzU1MDFaFw0yNTAzMDQxODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUYwNEQ5QzVDQjEyRTY3RDlD
MkJBQTc2QjJDOTI5MkQxMDZGMzFFMzQ3M0NEM0FCMjc0RkVGNUQzNzIyQzg2MjQy
REEwMDA4Q0E0OTM3QjhCMzY5NDNCNkRDNDM5MEMyQTlERTAyQzUxQjk4OTdDNTQz
OThGMzk0Q0UxMkNCODdEMEZBQ0E4Mjg4QTlFOTdBQ0YxN0M0QTNGNENCODMwQjQ1
NUQzMzI5MTkzRkU4Qzk5NzU5NzRBQjFDQ0RENkM4MTcyMzc4ODQxMTRBNDQxMDA5
MEZENUFDRTk2ODFFNzUxQUFFNjUzODY0MzY4QkZGMDcwMkUwOTNCNUI0NTlENjI4
M0Y2M0FERTczRDg4OTY2QUM0N0I5MkVDOEE4RTI4RUM3MkI1MTIyODlEQTg3RDIz
RjI5ODBDN0ExNEIzNTlFODRCMDREN0VGNDU3NTRCMkYzOTA0OEMwMDE2QjA0QUYz
ODg0M0NEOTRGOEU3NTM2Njk3N0M0RjZBQzJDOTVFMTU0MDlFRTc2RkU1MTU1Q0M5
MkFCNzA4Q0I3MjI3NjIxQUI5RDE3MkU3RDQxRDQzQjM1RjUwQkE2RkZFODUxMDFB
Rjc0QkU0NTExNTFCQjhGQTVCOUVEMzZBMzE1NTZEOEFGOTlGREZGQjUxMjcxNjhE
QkNBREUxRDhGRUMyQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArwTZxcsS5n2cK6p2sskpLRBvMeNHPNOrJ0/vXTciyGJC2gAIykk3
uLNpQ7bcQ5DCqd4CxRuYl8VDmPOUzhLLh9D6yoKIqel6zxfEo/TLgwtFXTMpGT/o
yZdZdKsczdbIFyN4hBFKRBAJD9Ws6WgedRquZThkNov/BwLgk7W0WdYoP2Ot5z2I
lmrEe5Lsio4o7HK1EiidqH0j8pgMehSzWehLBNfvRXVLLzkEjAAWsErziEPNlPjn
U2aXfE9qwsleFUCe52/lFVzJKrcIy3InYhq50XLn1B1Ds19Qum/+hRAa90vkURUb
uPpbntNqMVVtivmf3/tRJxaNvK3h2P7CoQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGlSt22eIFnkwNDVct8VSAe/Io2GMB8GA1UdIwQYMBaAFGFeBrJJ/XEsM21tvYdx
PVorfUxEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzAvNjE1RTA2QjI0OUZENzEy
QzMzNkQ2REJEODc3MTNENUEyQjdENEM0NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82MTVFMDZCMjQ5RkQ3MTJDMzM2RDZEQkQ4NzcxM0Q1QTJCN0Q0
QzQ0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8wLzMxMzczNzJlMzgzNzJlMzIzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxVxgw
DQYJKoZIhvcNAQELBQADggEBADG6ILLAgvyBYgjuj2cN7vk6ug28yHXfQVdP/YcJ
xjdTE221wlmR0xEe44yRh5gPeiibj2HwDyN2KbfRlfwBV2DdGe02McpqOL5S+Zjf
e3iOrtv+0l1BECHoinCxNmjAR+6Nsp+ReX3IqpXQBBt50RYKZqvAuu3ezVsX7Pyd
GPJzPrFPvC+5KhMoOcOFJtzfJKbgWZIKDZXPKrvhYh1KfiN9Kt58QsprBHDC8pvi
VNAAo3l8B1I6h+SgBAAU9J7DbaROeplrACjliFN5/cPNuZM9TPgONJCj1X2wlL+N
o+clWlNYnUba/4Ng2gLbAlhklaic/Uas/yjS+FpqlLO7eNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org