Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3137362e302f32302d3332203d3e20323632353134.roa
File:                     3137372e35352e3137362e302f32302d3332203d3e20323632353134.roa (raw, json)
Hash identifier:          v9iAJk9gddX1KUxBeBltIOvx0jhfian+JeVJSG1UZpw=
Subject key identifier:   68:C2:BD:95:4D:65:72:BD:B5:C5:A8:0B:43:85:55:19:EE:6C:05:62
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       32891B9D27B7B3BA726337CD269FA0CCBD94F2E4
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3137362e302f32302d3332203d3e20323632353134.roa
Signing time:             Sun 26 Mar 2023 22:08:44 +0000
ROA not before:           Sun 26 Mar 2023 22:03:44 +0000
ROA not after:            Sun 24 Mar 2024 22:08:44 +0000
asID:                     262514
IP address blocks:        177.55.176.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:1b:9d:27:b7:b3:ba:72:63:37:cd:26:9f:a0:cc:bd:94:f2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:03:44 2023 GMT
            Not After : Mar 24 22:08:44 2024 GMT
        Subject: CN=68C2BD954D6572BDB5C5A80B43855519EE6C0562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:a9:ef:2c:8f:39:bf:3d:f6:d7:08:7e:d8:
                    81:d3:71:54:d4:14:06:c8:31:5c:cf:29:fc:34:3d:
                    73:e1:2c:3e:6b:9f:57:ed:57:be:8a:e7:ee:8c:56:
                    e3:80:61:4d:cb:cc:eb:6e:04:dc:57:fb:7e:7d:e0:
                    92:25:c2:97:eb:ab:17:87:e6:52:6a:30:64:4b:be:
                    a7:9b:0d:3a:5b:b1:08:41:2f:3c:22:f8:05:38:01:
                    86:a8:4b:56:f3:d8:74:33:8e:d9:42:ee:e4:ed:80:
                    a0:35:c9:91:22:ee:fa:4c:67:a0:a8:fc:aa:4b:30:
                    42:dc:f3:e9:ad:0f:81:a6:cf:f2:f5:bb:4a:d8:8d:
                    97:e1:0e:23:95:8d:ce:50:23:c6:f2:a2:2d:01:ec:
                    98:e5:a4:82:bd:33:64:1b:63:86:4a:22:65:ff:ef:
                    52:e7:39:31:69:34:84:68:a4:00:ee:41:35:e3:31:
                    ec:fd:ac:ec:66:2d:19:7d:ae:58:fd:35:af:96:c7:
                    af:26:3f:8a:34:88:71:be:d1:1b:cf:27:8b:42:78:
                    e7:81:77:4a:52:88:7f:34:1e:b5:be:02:2d:5a:a5:
                    c3:f6:56:f9:66:16:d8:fd:fb:85:72:19:d3:a1:35:
                    07:fc:37:5a:56:f0:64:9c:6c:3e:94:32:e0:e6:ec:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:BD:95:4D:65:72:BD:B5:C5:A8:0B:43:85:55:19:EE:6C:05:62
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3137362e302f32302d3332203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:69:45:10:c9:66:30:e6:c2:8b:3c:80:ca:de:dc:71:5c:a7:
         39:8c:64:cc:90:76:e9:6a:d4:58:b4:39:b7:cf:57:33:46:21:
         ab:ce:ab:55:c9:80:68:c5:9b:02:43:fe:54:d3:b0:59:38:6e:
         3d:f5:a2:57:b2:30:3c:9f:10:99:e5:f6:8d:d5:4c:b6:e0:a2:
         26:61:53:54:66:9e:fd:43:5e:3a:8e:12:58:2e:79:e9:5b:ce:
         da:79:9a:84:8f:3c:eb:91:97:73:55:c6:6d:13:ba:d8:81:f3:
         7f:d3:82:34:78:bc:f9:7f:7d:de:d2:f8:b2:58:12:9c:e0:3d:
         ba:00:0a:59:0b:e8:e7:de:c3:1d:e2:ea:1c:46:b3:4f:d5:d0:
         ee:38:45:16:f2:5e:50:f3:d3:e5:0b:17:87:d4:d9:c4:1d:1a:
         06:01:97:83:56:aa:3a:6d:7a:40:26:db:e5:b4:51:d1:08:ae:
         70:dc:bf:ca:6f:52:2b:e3:da:6c:d0:e5:e9:a1:6a:2b:a2:ae:
         45:e0:cb:5e:8e:07:de:2e:6e:e9:12:f3:05:ce:f9:3f:6d:56:
         95:ec:eb:1a:0d:5b:18:b3:20:27:5c:80:ea:38:c8:d1:f2:e4:
         1b:c5:11:55:b9:57:52:e0:bb:a9:8c:a3:46:71:2b:f7:4a:65:
         6e:30:45:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMokbnSe3s7pyYzfNJp+gzL2U8uQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjYyMjAzNDRaFw0yNDAzMjQyMjA4NDRaMDMxMTAvBgNV
BAMTKDY4QzJCRDk1NEQ2NTcyQkRCNUM1QTgwQjQzODU1NTE5RUU2QzA1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0qnvLI85vz321wh+2IHTcVTU
FAbIMVzPKfw0PXPhLD5rn1ftV76K5+6MVuOAYU3LzOtuBNxX+3594JIlwpfrqxeH
5lJqMGRLvqebDTpbsQhBLzwi+AU4AYaoS1bz2HQzjtlC7uTtgKA1yZEi7vpMZ6Co
/KpLMELc8+mtD4Gmz/L1u0rYjZfhDiOVjc5QI8byoi0B7JjlpIK9M2QbY4ZKImX/
71LnOTFpNIRopADuQTXjMez9rOxmLRl9rlj9Na+Wx68mP4o0iHG+0RvPJ4tCeOeB
d0pSiH80HrW+Ai1apcP2VvlmFtj9+4VyGdOhNQf8N1pW8GScbD6UMuDm7KAvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaMK9lU1lcr21xagLQ4VVGe5sBWIwHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzEzNzM3MmUzNTM1MmUzMTM3MzYyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxN7AwDQYJKoZIhvcNAQELBQADggEBAGZpRRDJ
ZjDmwos8gMre3HFcpzmMZMyQdulq1Fi0ObfPVzNGIavOq1XJgGjFmwJD/lTTsFk4
bj31oleyMDyfEJnl9o3VTLbgoiZhU1Rmnv1DXjqOElgueelbztp5moSPPOuRl3NV
xm0TutiB83/TgjR4vPl/fd7S+LJYEpzgPboAClkL6Ofewx3i6hxGs0/V0O44RRby
XlDz0+ULF4fU2cQdGgYBl4NWqjptekAm2+W0UdEIrnDcv8pvUivj2mzQ5emhaiui
rkXgy16OB94ubukS8wXO+T9tVpXs6xoNWxizICdcgOo4yNHy5BvFEVW5V1Lgu6mM
o0ZxK/dKZW4wRYY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org