Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          2I9Bvd5iMKdOTa3hZuxVmQtD/3npWkRS1hULMAL1ykA=
Subject key identifier:   3D:63:5A:CA:7A:35:E3:82:18:ED:8D:16:CE:7A:2A:68:4C:1E:62:06
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       102243925BD4D0715811D389C2A500C3371FC35E
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa
Signing time:             Wed 09 Aug 2023 02:21:56 +0000
ROA not before:           Wed 09 Aug 2023 02:16:56 +0000
ROA not after:            Wed 07 Aug 2024 02:21:56 +0000
asID:                     262866
IP address blocks:        177.12.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:43:92:5b:d4:d0:71:58:11:d3:89:c2:a5:00:c3:37:1f:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Aug  9 02:16:56 2023 GMT
            Not After : Aug  7 02:21:56 2024 GMT
        Subject: CN=3D635ACA7A35E38218ED8D16CE7A2A684C1E6206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:20:98:d1:88:d2:d9:97:69:72:5c:d3:3c:
                    f3:1b:7f:3c:02:cc:14:c4:b0:38:57:13:d6:87:8a:
                    58:34:f0:f3:c4:1c:be:5a:bc:99:c1:ac:35:90:af:
                    b2:b2:62:7e:11:ed:00:5f:bc:8b:91:80:44:0a:73:
                    31:f1:c9:e1:c4:14:f0:d1:c5:bf:98:73:0e:7a:36:
                    1c:1b:d7:96:06:26:b5:d9:a5:85:3e:da:d3:8c:bd:
                    3c:ac:14:ff:bb:21:a7:7a:7a:2c:1c:cc:71:c1:5c:
                    e1:73:6b:fc:73:03:4b:37:0d:d6:2a:25:b2:ee:6b:
                    ee:38:b1:9f:d3:d5:73:e6:9d:78:b6:1b:9c:6e:7a:
                    64:0a:0d:7c:68:55:a8:0b:7f:40:09:92:71:d0:62:
                    ea:d9:a5:57:cc:aa:ea:c5:73:d6:4a:c3:b4:02:f5:
                    bb:07:43:90:d2:85:b9:62:f5:87:57:06:e9:6c:51:
                    71:1e:f6:c5:a2:27:94:31:63:3c:cc:b7:76:45:41:
                    7e:50:c3:bf:db:0a:43:f4:92:2f:71:db:ef:21:81:
                    08:34:74:49:e2:ad:27:34:a0:71:dc:ed:4b:d2:c3:
                    32:2b:12:0e:bf:a5:95:d9:ca:04:40:99:fe:90:05:
                    da:22:72:54:89:9b:36:e6:28:0f:04:72:8a:7a:ec:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:5A:CA:7A:35:E3:82:18:ED:8D:16:CE:7A:2A:68:4C:1E:62:06
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32302d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:ab:30:da:51:d5:37:3a:71:14:2c:79:17:73:4d:64:f9:9c:
         e2:3d:c6:0f:41:de:b7:14:91:7c:f6:e3:79:c3:37:d0:af:ee:
         fa:14:01:d5:c2:a5:71:2c:5f:d0:e0:60:7d:cd:47:dc:e6:ba:
         e4:bf:ff:63:f8:03:a7:9e:96:1b:82:26:a7:be:f9:50:72:33:
         de:65:a4:df:a3:65:0b:c1:69:c6:75:2b:82:4a:7a:53:9f:68:
         1a:0c:08:a6:c6:db:51:88:8b:91:f2:1b:eb:f1:9d:8e:c6:e6:
         4e:a9:be:57:25:0a:6b:19:26:40:52:0c:4f:75:ef:40:a1:48:
         b7:55:db:57:20:59:68:be:98:51:92:ce:19:bd:9c:7d:8d:8c:
         d6:a5:fc:78:f2:39:e7:a7:5d:3c:d2:46:e6:6d:b6:18:3d:42:
         46:6b:9a:06:4b:bf:f5:4e:66:80:bc:f4:60:56:69:67:7e:a2:
         98:62:7d:41:10:c4:27:bd:43:a3:7d:b1:a7:b4:8a:68:7c:7c:
         0c:4a:a0:67:3a:0b:87:bc:be:b6:7b:91:dd:dc:3b:13:42:24:
         65:5e:75:49:7f:33:32:ea:44:0c:82:ec:bc:af:1c:58:f2:0d:
         f2:bf:7a:c5:4d:12:4f:a9:7f:05:a4:42:3b:cd:81:96:1d:a2:
         c5:a1:ce:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUECJDklvU0HFYEdOJwqUAwzcfw14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0MjBERjA5ODgxMEI4QjZGNDFCRDAzMzREMDhBRDI3
RTBCREMxQzAeFw0yMzA4MDkwMjE2NTZaFw0yNDA4MDcwMjIxNTZaMDMxMTAvBgNV
BAMTKDNENjM1QUNBN0EzNUUzODIxOEVEOEQxNkNFN0EyQTY4NEMxRTYyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3CCY0YjS2ZdpclzTPPMbfzwC
zBTEsDhXE9aHilg08PPEHL5avJnBrDWQr7KyYn4R7QBfvIuRgEQKczHxyeHEFPDR
xb+Ycw56Nhwb15YGJrXZpYU+2tOMvTysFP+7Iad6eiwczHHBXOFza/xzA0s3DdYq
JbLua+44sZ/T1XPmnXi2G5xuemQKDXxoVagLf0AJknHQYurZpVfMqurFc9ZKw7QC
9bsHQ5DShbli9YdXBulsUXEe9sWiJ5QxYzzMt3ZFQX5Qw7/bCkP0ki9x2+8hgQg0
dEnirSc0oHHc7UvSwzIrEg6/pZXZygRAmf6QBdoiclSJmzbmKA8Ecop67KavAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPWNayno144IY7Y0WznoqaEweYgYwHwYDVR0j
BBgwFoAU4UIN8JiBC4tvQb0DNNCK0n4L3BwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMC9FMTQyMERGMDk4ODEwQjhCNkY0MUJEMDMzNEQwOEFEMjdFMEJEQzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxNDIwREYwOTg4MTBCOEI2
RjQxQkQwMzM0RDA4QUQyN0UwQkRDMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzAv
MzEzNzM3MmUzMTMyMmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxDPAwDQYJKoZIhvcNAQELBQADggEBAL6rMNpR
1Tc6cRQseRdzTWT5nOI9xg9B3rcUkXz243nDN9Cv7voUAdXCpXEsX9DgYH3NR9zm
uuS//2P4A6eelhuCJqe++VByM95lpN+jZQvBacZ1K4JKelOfaBoMCKbG21GIi5Hy
G+vxnY7G5k6pvlclCmsZJkBSDE9170ChSLdV21cgWWi+mFGSzhm9nH2NjNal/Hjy
OeenXTzSRuZtthg9QkZrmgZLv/VOZoC89GBWaWd+ophifUEQxCe9Q6N9sae0imh8
fAxKoGc6C4e8vrZ7kd3cOxNCJGVedUl/MzLqRAyC7LyvHFjyDfK/esVNEk+pfwWk
QjvNgZYdosWhzhc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org