Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
File:                     3137372e38372e32372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          nwUbnlIs71u0s/ASHnb3mKkPkJDMGrf0yjl9+IEseCY=
Subject key identifier:   08:24:8C:35:E5:60:18:61:AF:D3:EA:A6:FD:49:E2:91:DC:BE:4B:E9
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       7DF88D426A0E03FFA84526C5BA1E0764033C1BD6
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 04 Jan 2024 15:00:00 +0000
ROA not before:           Thu 04 Jan 2024 14:55:00 +0000
ROA not after:            Thu 02 Jan 2025 15:00:00 +0000
asID:                     52468
IP address blocks:        177.87.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:8d:42:6a:0e:03:ff:a8:45:26:c5:ba:1e:07:64:03:3c:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jan  4 14:55:00 2024 GMT
            Not After : Jan  2 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:4b:8a:f4:6f:41:37:b8:78:1b:5d:78:bf:
                    42:06:e9:c0:e3:78:5d:05:a1:db:64:8f:c7:32:70:
                    d8:2b:6c:e6:a1:9e:c6:67:17:82:0b:fc:4d:42:4b:
                    12:cf:bb:37:a2:ca:b2:bd:f2:0c:ec:ce:69:a9:ff:
                    ce:95:ef:0d:ac:26:f8:eb:cc:3e:a2:28:5b:52:7c:
                    bb:e8:5b:c4:ba:5e:ec:bd:73:a8:21:31:63:ad:6c:
                    19:66:ed:fc:0f:bc:ac:52:c6:2f:96:0c:a7:79:8e:
                    99:b8:8b:8f:87:5b:8e:91:b3:61:8a:a6:89:30:ca:
                    23:79:b7:56:28:cb:75:6e:49:71:43:79:eb:7f:16:
                    a9:2c:db:14:93:d2:44:45:e2:19:dc:1c:9c:40:22:
                    de:16:d7:f0:87:36:58:99:38:03:72:29:cf:3a:18:
                    a8:d6:70:60:77:59:1c:5f:7c:89:f7:f5:64:61:54:
                    25:7d:fc:c8:92:d6:14:32:c7:de:02:1b:15:55:4e:
                    9f:2d:4b:f0:45:36:0e:8c:87:6d:58:6e:42:76:5b:
                    34:86:2c:7f:04:c1:3b:45:3b:c4:59:3a:cc:0a:67:
                    7b:43:6a:11:e7:30:34:16:5a:9b:00:0a:d8:58:9d:
                    b2:b0:9d:2a:da:15:b8:40:4e:2d:4c:8b:c7:e6:16:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:8C:35:E5:60:18:61:AF:D3:EA:A6:FD:49:E2:91:DC:BE:4B:E9
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:48:43:d2:1a:1e:d6:c6:36:47:40:22:b9:db:05:44:c8:
         06:51:a8:31:af:fd:84:9b:5c:ca:bc:51:1a:0e:af:f7:2b:e4:
         91:e0:43:7f:49:60:4a:6e:74:6e:85:95:2e:91:94:07:db:c5:
         33:bd:a3:81:c8:49:2c:ae:56:56:24:f1:9c:fe:ac:bf:82:f3:
         c9:6a:3f:4a:08:6e:d6:6a:c5:22:8c:0a:25:86:6b:71:81:69:
         f6:12:07:b5:55:61:46:a4:a2:c8:e2:9b:c2:69:d9:9c:99:14:
         9d:02:ce:0f:ea:f6:2b:d8:85:98:28:0d:09:1b:34:5c:e4:10:
         0a:9e:e4:3c:92:f2:e0:33:be:8c:01:ab:2b:d6:b6:fc:09:5b:
         6a:ed:8b:8e:3a:23:d6:6b:0f:10:57:f1:99:37:73:da:6a:7c:
         b2:80:4f:83:6d:d4:d3:c2:80:6f:79:d3:42:90:4b:3b:10:d1:
         fe:41:25:44:91:18:a5:13:fb:fd:ba:19:e3:5b:e0:03:21:b0:
         79:05:25:f9:ca:57:af:2c:37:a0:dc:95:aa:d2:63:4a:cd:55:
         36:2b:98:52:a5:51:8f:00:30:81:1f:49:80:84:4c:6f:d8:8a:
         11:19:dc:ba:66:1a:23:7e:fe:d7:52:93:a9:d1:65:aa:e9:e2:
         da:ac:0f:09
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUffiNQmoOA/+oRSbFuh4HZAM8G9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1RTA2QjI0OUZENzEyQzMzNkQ2REJEODc3MTNENUEy
QjdENEM0NDAeFw0yNDAxMDQxNDU1MDBaFw0yNTAxMDIxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUYyMzRCOEFGNDZGNDEzN0I4
NzgxQjVENzhCRjQyMDZFOUMwRTM3ODVEMDVBMURCNjQ4RkM3MzI3MEQ4MkI2Q0U2
QTE5RUM2NjcxNzgyMEJGQzRENDI0QjEyQ0ZCQjM3QTJDQUIyQkRGMjBDRUNDRTY5
QTlGRkNFOTVFRjBEQUMyNkY4RUJDQzNFQTIyODVCNTI3Q0JCRTg1QkM0QkE1RUVD
QkQ3M0E4MjEzMTYzQUQ2QzE5NjZFREZDMEZCQ0FDNTJDNjJGOTYwQ0E3Nzk4RTk5
Qjg4QjhGODc1QjhFOTFCMzYxOEFBNjg5MzBDQTIzNzlCNzU2MjhDQjc1NkU0OTcx
NDM3OUVCN0YxNkE5MkNEQjE0OTNEMjQ0NDVFMjE5REMxQzlDNDAyMkRFMTZEN0Yw
ODczNjU4OTkzODAzNzIyOUNGM0ExOEE4RDY3MDYwNzc1OTFDNUY3Qzg5RjdGNTY0
NjE1NDI1N0RGQ0M4OTJENjE0MzJDN0RFMDIxQjE1NTU0RTlGMkQ0QkYwNDUzNjBF
OEM4NzZENTg2RTQyNzY1QjM0ODYyQzdGMDRDMTNCNDUzQkM0NTkzQUNDMEE2NzdC
NDM2QTExRTczMDM0MTY1QTlCMDAwQUQ4NTg5REIyQjA5RDJBREExNUI4NDA0RTJE
NEM4QkM3RTYxNjk0MEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAryNLivRvQTe4eBtdeL9CBunA43hdBaHbZI/HMnDYK2zmoZ7GZxeC
C/xNQksSz7s3osqyvfIM7M5pqf/Ole8NrCb468w+oihbUny76FvEul7svXOoITFj
rWwZZu38D7ysUsYvlgyneY6ZuIuPh1uOkbNhiqaJMMojebdWKMt1bklxQ3nrfxap
LNsUk9JEReIZ3BycQCLeFtfwhzZYmTgDcinPOhio1nBgd1kcX3yJ9/VkYVQlffzI
ktYUMsfeAhsVVU6fLUvwRTYOjIdtWG5Cdls0hix/BME7RTvEWTrMCmd7Q2oR5zA0
FlqbAArYWJ2ysJ0q2hW4QE4tTIvH5haUCwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FAgkjDXlYBhhr9Pqpv1J4pHcvkvpMB8GA1UdIwQYMBaAFGFeBrJJ/XEsM21tvYdx
PVorfUxEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzAvNjE1RTA2QjI0OUZENzEy
QzMzNkQ2REJEODc3MTNENUEyQjdENEM0NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82MTVFMDZCMjQ5RkQ3MTJDMzM2RDZEQkQ4NzcxM0Q1QTJCN0Q0
QzQ0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8wLzMxMzczNzJlMzgzNzJlMzIzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxVxsw
DQYJKoZIhvcNAQELBQADggEBAF/SSEPSGh7WxjZHQCK52wVEyAZRqDGv/YSbXMq8
URoOr/cr5JHgQ39JYEpudG6FlS6RlAfbxTO9o4HISSyuVlYk8Zz+rL+C88lqP0oI
btZqxSKMCiWGa3GBafYSB7VVYUakosjim8Jp2ZyZFJ0Czg/q9ivYhZgoDQkbNFzk
EAqe5DyS8uAzvowBqyvWtvwJW2rti446I9ZrDxBX8Zk3c9pqfLKAT4Nt1NPCgG95
00KQSzsQ0f5BJUSRGKUT+/26GeNb4AMhsHkFJfnKV68sN6DclarSY0rNVTYrmFKl
UY8AMIEfSYCETG/YihEZ3LpmGiN+/tdSk6nRZarp4tqsDwk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org