Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3234203d3e20323731343433.roa
File:                     3137392e302e37322e302f32322d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          Rd7t1gp6BqepL9cAVBzDu0i2/CmSuGoPoGDrZ1qze1E=
Subject key identifier:   B8:D4:8C:30:EA:9E:20:F6:F3:37:96:91:DF:68:9E:87:89:E6:74:41
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       121ABC3C274FB615E2208049399517BC33A66D86
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3234203d3e20323731343433.roa
Signing time:             Mon 27 Mar 2023 15:35:02 +0000
ROA not before:           Mon 27 Mar 2023 15:30:02 +0000
ROA not after:            Mon 25 Mar 2024 15:35:02 +0000
asID:                     271443
IP address blocks:        179.0.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:bc:3c:27:4f:b6:15:e2:20:80:49:39:95:17:bc:33:a6:6d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 15:30:02 2023 GMT
            Not After : Mar 25 15:35:02 2024 GMT
        Subject: CN=B8D48C30EA9E20F6F3379691DF689E8789E67441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:72:0d:de:6d:4f:3d:95:ca:8d:8c:99:98:
                    1a:d8:82:8f:f4:39:9e:0a:c7:d2:54:bd:9b:98:82:
                    1a:83:33:0f:2e:91:b8:dc:c5:51:1d:9b:bd:32:4d:
                    ac:26:fa:d1:d3:fa:94:b4:d7:13:d2:0c:20:c6:5e:
                    48:b9:eb:60:a0:22:df:f4:71:30:83:b2:87:4d:ed:
                    7f:c3:72:43:c8:b5:95:ba:25:32:25:24:a9:15:1d:
                    9b:67:a5:6f:09:c1:88:ff:cf:49:ec:ab:d8:c7:6c:
                    a6:f0:32:f0:67:0c:3f:cd:53:2a:72:af:b9:08:58:
                    4b:50:9f:ba:67:1e:92:ec:65:c3:c6:18:76:82:a9:
                    36:e6:11:60:83:31:57:7b:f9:bb:95:7b:2b:42:30:
                    26:71:67:c6:ee:aa:c9:31:de:39:80:f8:a1:41:df:
                    4d:fb:23:12:a6:71:90:2d:23:8d:4d:f6:39:ca:5f:
                    9c:3f:f8:2c:f3:a7:b9:09:76:6f:f4:5e:81:0b:58:
                    ac:3e:7e:95:2c:17:00:cb:a7:af:4e:9b:43:c1:bf:
                    4b:d1:f6:8c:4e:2a:31:2e:dc:e3:80:fc:ce:b3:d0:
                    7d:a3:dc:3d:f0:82:46:dd:28:a5:af:75:48:9a:ec:
                    ba:b3:12:6e:74:a6:a6:78:6b:47:9f:78:8f:73:0b:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:8C:30:EA:9E:20:F6:F3:37:96:91:DF:68:9E:87:89:E6:74:41
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:52:66:7a:c3:9f:49:95:87:05:f4:96:1e:39:66:2e:c2:
         93:87:d4:82:86:4d:44:c1:79:25:04:a9:a7:e1:5f:1d:49:c4:
         ff:87:4a:ac:4b:05:e9:54:f8:65:e7:c5:c8:0b:fc:da:a0:5c:
         bd:78:fa:0a:8b:89:86:44:9a:53:a1:bb:0d:02:1c:b2:38:58:
         d1:15:86:a1:8b:54:61:d9:5a:e1:bf:a8:34:e1:3d:7f:23:50:
         da:b6:ac:33:07:04:ff:88:17:b2:aa:fa:0d:aa:ba:57:60:c1:
         de:eb:53:ff:a6:45:ce:32:24:e8:09:38:e0:d8:94:a1:9e:1d:
         33:ef:84:bb:26:a4:f7:53:f2:76:38:e7:99:e3:5d:91:50:7c:
         ab:d7:12:95:20:c0:a8:2f:04:ba:ca:f4:2d:c1:62:16:d4:33:
         bf:c9:4c:44:d8:9c:ff:5c:e2:ba:9d:16:3b:36:0a:84:d9:9d:
         87:ec:4d:ee:ed:60:c2:34:46:47:18:a1:81:ae:6a:a2:48:7e:
         1f:f5:30:75:e8:1c:06:97:0a:3a:38:10:67:70:bd:2f:49:a1:
         96:49:07:4b:b3:cc:6c:e4:a2:bd:cf:3a:20:97:23:98:82:fc:
         5a:29:68:36:b1:c7:a6:d9:e8:74:75:56:7f:54:18:07:75:a9:
         e0:30:e1:96
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEhq8PCdPthXiIIBJOZUXvDOmbYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjcxNTMwMDJaFw0yNDAzMjUxNTM1MDJaMDMxMTAvBgNV
BAMTKEI4RDQ4QzMwRUE5RTIwRjZGMzM3OTY5MURGNjg5RTg3ODlFNjc0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jnIN3m1PPZXKjYyZmBrYgo/0
OZ4Kx9JUvZuYghqDMw8ukbjcxVEdm70yTawm+tHT+pS01xPSDCDGXki562CgIt/0
cTCDsodN7X/DckPItZW6JTIlJKkVHZtnpW8JwYj/z0nsq9jHbKbwMvBnDD/NUypy
r7kIWEtQn7pnHpLsZcPGGHaCqTbmEWCDMVd7+buVeytCMCZxZ8buqskx3jmA+KFB
3037IxKmcZAtI41N9jnKX5w/+Czzp7kJdm/0XoELWKw+fpUsFwDLp69Om0PBv0vR
9oxOKjEu3OOA/M6z0H2j3D3wgkbdKKWvdUia7LqzEm50pqZ4a0efeI9zC1PPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuNSMMOqeIPbzN5aR32ieh4nmdEEwHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzEzNzM5MmUzMDJlMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTM0
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMASDANBgkqhkiG9w0BAQsFAAOCAQEANLJSZnrDn0mV
hwX0lh45Zi7Ck4fUgoZNRMF5JQSpp+FfHUnE/4dKrEsF6VT4ZefFyAv82qBcvXj6
CouJhkSaU6G7DQIcsjhY0RWGoYtUYdla4b+oNOE9fyNQ2rasMwcE/4gXsqr6Daq6
V2DB3utT/6ZFzjIk6Ak44NiUoZ4dM++Euyak91PydjjnmeNdkVB8q9cSlSDAqC8E
usr0LcFiFtQzv8lMRNic/1ziup0WOzYKhNmdh+xN7u1gwjRGRxihga5qokh+H/Uw
degcBpcKOjgQZ3C9L0mhlkkHS7PMbOSivc86IJcjmIL8WiloNrHHptnodHVWf1QY
B3Wp4DDhlg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org