Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232342e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          crFUvJCdLYQTl8g4WyoPN+AsFLGdAhD+rzJr4IFZJlw=
Subject key identifier:   7C:14:4B:38:0C:6C:C9:57:CD:5B:BF:01:06:53:D9:DC:BF:35:F0:02
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       1ECB7C28B800A0657B761EB1830BFEE314F3F081
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:17:01 +0000
ROA not before:           Sun 19 Mar 2023 14:12:01 +0000
ROA not after:            Sun 17 Mar 2024 14:17:01 +0000
asID:                     28656
IP address blocks:        177.55.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cb:7c:28:b8:00:a0:65:7b:76:1e:b1:83:0b:fe:e3:14:f3:f0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:12:01 2023 GMT
            Not After : Mar 17 14:17:01 2024 GMT
        Subject: CN=7C144B380C6CC957CD5BBF010653D9DCBF35F002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:fa:b2:e6:61:d7:2c:ab:b0:ce:53:75:7f:
                    a8:ef:57:5a:6d:0f:67:e4:be:bb:09:f1:7a:03:81:
                    32:77:60:4f:0b:6c:46:9c:2e:78:31:d8:c0:a8:8b:
                    66:0f:c8:3c:7d:95:4b:6f:04:9c:5e:d9:ee:20:40:
                    d4:63:d4:f1:b0:07:94:14:9f:97:59:d9:0f:75:55:
                    8d:60:a8:55:b2:18:ce:7e:14:c7:97:0a:99:fc:51:
                    22:38:6e:f8:60:ee:82:93:0e:db:ad:2e:ff:4a:4f:
                    2d:34:44:e7:cf:fc:15:91:5c:57:4a:fe:01:b0:45:
                    68:cf:4b:05:46:f1:db:5c:ad:85:32:c1:9b:c4:54:
                    d2:b2:9b:67:d2:9b:a1:61:de:71:74:55:bb:d0:c6:
                    b4:07:b5:8a:f3:8a:e7:32:77:24:ef:60:49:6d:58:
                    ce:91:ef:1a:f3:63:16:24:8f:0e:ac:2f:f6:20:df:
                    be:e3:0c:06:a7:19:92:73:61:33:f7:d5:73:34:c1:
                    ef:4f:e7:73:88:8c:ed:fe:74:ec:de:5a:62:ef:0c:
                    cd:ea:2b:a9:11:1d:e2:2b:98:8a:9e:df:9f:9e:85:
                    a3:dd:69:1b:97:28:12:e0:bc:13:04:6e:a0:f0:a5:
                    c9:49:b1:bc:11:96:ca:33:71:d9:02:e9:0a:89:58:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:4B:38:0C:6C:C9:57:CD:5B:BF:01:06:53:D9:DC:BF:35:F0:02
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:7b:eb:ef:45:b5:c0:24:b3:75:fa:0d:81:a4:7e:19:f0:c9:
         9c:8b:8b:09:7c:16:0d:41:ac:d0:a5:35:27:07:8d:41:46:5e:
         a3:f0:4c:e1:d3:89:a0:f4:fc:98:53:04:db:22:04:fd:8e:c3:
         0d:8d:cf:c7:85:7d:e3:aa:dc:9b:34:38:cd:1f:6f:40:02:68:
         a3:c2:d3:89:d3:72:52:02:c8:bd:76:1e:36:ef:0f:4a:76:f9:
         64:bf:18:49:68:9c:81:31:54:e0:b1:f2:0c:9e:d7:fb:4a:b5:
         f5:dc:ec:53:97:40:49:a5:26:d2:5b:4d:4b:ed:2a:46:c4:52:
         d4:77:ba:6c:ec:f8:3f:54:d1:a4:53:51:3d:0f:e8:46:ff:22:
         64:66:9b:0e:dc:73:0c:3d:b3:b9:db:69:77:35:45:8b:26:5f:
         e5:22:95:99:1a:b3:0e:a5:25:a3:dc:17:02:1b:ca:97:48:0f:
         e1:a3:6e:69:15:a4:c7:c0:1f:cc:d0:1f:d3:9f:52:de:f2:9f:
         1e:69:fd:8e:6e:ab:2e:f3:4b:c7:b0:51:69:08:b5:97:cf:fd:
         28:b8:2c:ea:1d:60:47:c7:57:b4:4a:13:87:8d:ff:6b:5d:40:
         12:f1:94:12:2a:4e:58:b4:b2:34:dc:5b:37:33:8f:26:51:4b:
         a3:e2:bb:bb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHst8KLgAoGV7dh6xgwv+4xTz8IEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQTVCNUU2QzVDQTBFRTRDOEEwMjQ4QzQyOTVCQjAy
NTczRkE1QzAeFw0yMzAzMTkxNDEyMDFaFw0yNDAzMTcxNDE3MDFaMDMxMTAvBgNV
BAMTKDdDMTQ0QjM4MEM2Q0M5NTdDRDVCQkYwMTA2NTNEOURDQkYzNUYwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqX/qy5mHXLKuwzlN1f6jvV1pt
D2fkvrsJ8XoDgTJ3YE8LbEacLngx2MCoi2YPyDx9lUtvBJxe2e4gQNRj1PGwB5QU
n5dZ2Q91VY1gqFWyGM5+FMeXCpn8USI4bvhg7oKTDtutLv9KTy00ROfP/BWRXFdK
/gGwRWjPSwVG8dtcrYUywZvEVNKym2fSm6Fh3nF0VbvQxrQHtYrziucydyTvYElt
WM6R7xrzYxYkjw6sL/Yg377jDAanGZJzYTP31XM0we9P53OIjO3+dOzeWmLvDM3q
K6kRHeIrmIqe35+ehaPdaRuXKBLgvBMEbqDwpclJsbwRlsozcdkC6QqJWK0lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfBRLOAxsyVfNW78BBlPZ3L818AIwHwYDVR0j
BBgwFoAU8spbXmxcoO5MigJIxClbsCVz+lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC9GMkNBNUI1RTZDNUNBMEVFNEM4QTAyNDhDNDI5NUJCMDI1NzNGQTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQ0E1QjVFNkM1Q0EwRUU0
QzhBMDI0OEM0Mjk1QkIwMjU3M0ZBNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTfgMA0GCSqGSIb3DQEBCwUAA4IBAQC7e+vvRbXA
JLN1+g2BpH4Z8Mmci4sJfBYNQazQpTUnB41BRl6j8Ezh04mg9PyYUwTbIgT9jsMN
jc/HhX3jqtybNDjNH29AAmijwtOJ03JSAsi9dh427w9KdvlkvxhJaJyBMVTgsfIM
ntf7SrX13OxTl0BJpSbSW01L7SpGxFLUd7ps7Pg/VNGkU1E9D+hG/yJkZpsO3HMM
PbO522l3NUWLJl/lIpWZGrMOpSWj3BcCG8qXSA/ho25pFaTHwB/M0B/Tn1Le8p8e
af2Obqsu80vHsFFpCLWXz/0ouCzqHWBHx1e0ShOHjf9rXUAS8ZQSKk5YtLI03Fs3
M48mUUuj4ru7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org