Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235342e302f32332d3234203d3e20323637333031.roa
File:                     3137372e3133372e3235342e302f32332d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          ZJpABSxHqDCsaBiwncowaIzPFmZMttuuuDhiYmVwKTM=
Subject key identifier:   DE:D5:D7:5C:D5:94:BB:EC:7A:2C:BA:24:96:31:86:7C:89:52:95:52
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       7D3AFE973CBF342337F31A68DBB0179F74A69243
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235342e302f32332d3234203d3e20323637333031.roa
Signing time:             Fri 19 May 2023 22:06:03 +0000
ROA not before:           Fri 19 May 2023 22:01:03 +0000
ROA not after:            Fri 17 May 2024 22:06:03 +0000
asID:                     267301
IP address blocks:        177.137.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:fe:97:3c:bf:34:23:37:f3:1a:68:db:b0:17:9f:74:a6:92:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 19 22:01:03 2023 GMT
            Not After : May 17 22:06:03 2024 GMT
        Subject: CN=DED5D75CD594BBEC7A2CBA249631867C89529552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:f5:72:d3:c0:df:8d:04:3c:60:c8:a1:cc:
                    7d:cf:a4:59:e0:aa:30:7c:83:c6:a6:15:7c:6d:7a:
                    c2:90:63:90:63:73:fc:f2:fb:d1:ed:11:31:d0:4e:
                    66:1f:55:62:27:03:0f:85:62:b3:d8:64:f8:8e:66:
                    a5:bf:63:cf:d0:14:11:df:de:ec:45:06:b1:ee:64:
                    11:93:62:3f:b0:95:8f:f8:3c:b9:40:bc:14:30:a7:
                    9a:9f:73:5e:d3:e3:ff:22:4e:cf:ac:a8:29:2e:6d:
                    b0:8f:52:16:2b:56:67:4d:36:25:4c:f3:91:bb:2c:
                    8c:48:05:49:a6:41:50:2b:92:52:1e:0a:ba:25:59:
                    0c:dc:7c:03:5c:95:19:0e:56:7f:36:b1:1a:69:7d:
                    2c:b6:19:a0:18:7d:f4:1f:2e:df:fc:4b:17:72:e4:
                    e9:02:42:e8:af:56:7e:85:cb:21:15:a9:6b:ba:42:
                    49:e6:aa:2f:5b:ee:4e:a2:64:40:f2:71:69:02:c4:
                    c0:b0:d1:30:12:32:8f:74:ec:a4:24:20:54:69:db:
                    52:88:c4:5d:7b:5f:cc:e6:c9:42:fd:85:4d:39:dc:
                    7a:a1:d3:e0:b4:1d:55:76:ef:eb:c1:19:0e:80:d6:
                    4a:f4:97:02:ec:d6:9a:6e:14:3e:fc:95:3d:d5:7b:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:D7:5C:D5:94:BB:EC:7A:2C:BA:24:96:31:86:7C:89:52:95:52
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235342e302f32332d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:11:e8:b3:e5:7d:a8:99:d3:ce:3a:ca:9b:5f:cf:d2:89:
         f2:a8:25:d6:83:16:12:74:f7:9b:96:2f:85:95:30:d7:40:26:
         78:a1:c0:e1:0c:dc:2f:61:c6:09:92:15:02:83:e6:80:41:39:
         fa:75:2b:75:d9:06:bb:10:60:a9:d6:d1:e5:c8:5c:44:f4:8b:
         7c:06:52:d5:6d:e7:75:b8:49:ea:40:fb:7b:0e:4b:c3:84:8f:
         07:83:79:be:4b:dd:d1:5a:77:32:5d:32:4a:d9:42:3f:26:ab:
         65:e9:c0:01:b4:95:85:eb:38:bb:c2:f0:3f:f5:ad:a8:10:7e:
         08:bb:25:36:5e:72:c2:78:e1:54:96:db:bc:0b:cf:4e:7b:c7:
         cc:71:65:09:90:31:dc:fe:e4:44:03:f1:c5:ea:7b:a9:50:b4:
         50:ce:e5:f8:9c:1c:71:66:ad:f0:12:f9:2b:55:c8:2e:5c:31:
         7a:b5:d9:9a:fc:75:09:be:2c:b7:ce:54:80:5b:88:5d:39:72:
         5a:12:36:8e:f9:7b:ec:61:2b:96:77:b0:15:5b:ed:e5:b9:6e:
         a1:c5:60:be:20:99:f9:98:20:a2:58:52:9e:cd:5d:d2:af:43:
         bf:e2:0c:26:09:63:eb:ee:6b:95:9e:54:e0:4c:3b:fc:7e:3a:
         84:f3:f7:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfTr+lzy/NCM38xpo27AXn3SmkkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0MTAxQTMzRDk2MEUyRTQ2OEVGRThEMkUyRTcwMUU4
QTA3MzI2MTAeFw0yMzA1MTkyMjAxMDNaFw0yNDA1MTcyMjA2MDNaMDMxMTAvBgNV
BAMTKERFRDVENzVDRDU5NEJCRUM3QTJDQkEyNDk2MzE4NjdDODk1Mjk1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+fVy08DfjQQ8YMihzH3PpFng
qjB8g8amFXxtesKQY5Bjc/zy+9HtETHQTmYfVWInAw+FYrPYZPiOZqW/Y8/QFBHf
3uxFBrHuZBGTYj+wlY/4PLlAvBQwp5qfc17T4/8iTs+sqCkubbCPUhYrVmdNNiVM
85G7LIxIBUmmQVArklIeCrolWQzcfANclRkOVn82sRppfSy2GaAYffQfLt/8Sxdy
5OkCQuivVn6FyyEVqWu6Qknmqi9b7k6iZEDycWkCxMCw0TASMo907KQkIFRp21KI
xF17X8zmyUL9hU053Hqh0+C0HVV27+vBGQ6A1kr0lwLs1ppuFD78lT3Ve42nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3tXXXNWUu+x6LLokljGGfIlSlVIwHwYDVR0j
BBgwFoAUGUEBoz2WDi5Gjv6NLi5wHooHMmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMC8xOTQxMDFBMzNEOTYwRTJFNDY4RUZFOEQyRTJFNzAxRThBMDczMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NDEwMUEzM0Q5NjBFMkU0
NjhFRkU4RDJFMkU3MDFFOEEwNzMyNjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzAv
MzEzNzM3MmUzMTMzMzcyZTMyMzUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzNzMzMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGJ/jANBgkqhkiG9w0BAQsFAAOCAQEAHaYR
6LPlfaiZ0846yptfz9KJ8qgl1oMWEnT3m5YvhZUw10AmeKHA4QzcL2HGCZIVAoPm
gEE5+nUrddkGuxBgqdbR5chcRPSLfAZS1W3ndbhJ6kD7ew5Lw4SPB4N5vkvd0Vp3
Ml0yStlCPyarZenAAbSVhes4u8LwP/WtqBB+CLslNl5ywnjhVJbbvAvPTnvHzHFl
CZAx3P7kRAPxxep7qVC0UM7l+JwccWat8BL5K1XILlwxerXZmvx1Cb4st85UgFuI
XTlyWhI2jvl77GErlnewFVvt5bluocVgviCZ+ZggolhSns1d0q9Dv+IMJglj6+5r
lZ5U4Ew7/H46hPP31Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org