Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230332e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3230332e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          GnMCrDtMRBmsDyJ/2eWHjC/FNGBLh7TDzLPAyUdy8Ss=
Subject key identifier:   78:31:73:B2:81:7B:5A:C3:0A:70:5D:D2:65:4C:8D:7F:C8:D1:D6:3F
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       182C5FA87B5129803B6DEE5373C9DEA98FF5EB14
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230332e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:41 +0000
ROA not before:           Mon 04 Dec 2023 19:39:41 +0000
ROA not after:            Mon 02 Dec 2024 19:44:41 +0000
asID:                     262901
IP address blocks:        177.22.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2c:5f:a8:7b:51:29:80:3b:6d:ee:53:73:c9:de:a9:8f:f5:eb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:41 2023 GMT
            Not After : Dec  2 19:44:41 2024 GMT
        Subject: CN=783173B2817B5AC30A705DD2654C8D7FC8D1D63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:5f:8e:96:63:90:e4:30:11:6e:c2:36:8e:
                    e3:3e:b1:75:35:c5:31:ea:71:16:d6:f0:a2:a0:59:
                    14:ef:b5:e6:0a:63:9a:b6:b6:54:0f:24:10:70:a1:
                    cd:f0:f4:ab:be:be:4d:d3:6c:4b:fa:b8:03:59:94:
                    c0:91:22:69:3d:f2:b1:d0:fc:c4:96:3c:7c:33:bd:
                    7f:f1:81:99:7c:ef:07:22:46:61:f9:e3:c6:5c:f4:
                    9e:71:8d:3d:55:c9:69:7a:dc:17:e5:39:88:90:56:
                    b6:5e:0e:de:b4:d2:8e:18:80:43:ab:6b:58:8b:22:
                    61:08:16:ec:98:f3:bc:52:bd:18:57:37:f7:f2:18:
                    93:cc:7c:98:23:e4:1f:c4:bb:bb:0c:1b:0b:23:2e:
                    b7:02:d7:30:c7:d5:16:06:bf:47:fe:85:c9:b6:77:
                    13:bd:75:4c:ea:d2:cf:73:e2:cf:22:9c:4e:5b:4c:
                    b2:f4:95:67:d7:44:87:d2:21:a3:96:e4:2f:86:a2:
                    10:28:89:8d:a3:7f:44:7e:5e:26:6c:e8:58:19:ff:
                    9b:8a:a1:d7:e0:3c:08:1d:42:0a:c5:85:84:99:f8:
                    8f:13:de:7f:b5:b3:57:32:f3:d5:ae:c6:8e:13:ee:
                    5b:5e:e6:a7:a5:2d:d8:2b:4b:2e:03:dc:40:e2:51:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:73:B2:81:7B:5A:C3:0A:70:5D:D2:65:4C:8D:7F:C8:D1:D6:3F
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230332e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:70:cb:ac:b1:38:2a:1a:d1:11:e4:3c:c2:48:a2:a1:90:50:
         22:11:9f:0c:9c:7f:bf:05:4a:d7:32:22:bb:72:f5:3d:36:dc:
         85:c3:ff:d0:25:4d:54:a2:d0:d2:3c:f8:cf:48:7b:95:65:a7:
         b9:57:59:da:8d:8f:66:e3:12:8f:26:34:c4:25:ab:ca:0d:95:
         cb:a1:10:92:b0:90:2c:63:ca:21:da:fe:90:97:51:b4:58:7c:
         b3:62:7a:41:86:7b:03:59:0e:91:71:67:55:fc:a9:f4:e2:c6:
         ed:4b:eb:8a:ec:59:90:ff:ef:91:35:a3:57:c2:89:41:d4:cf:
         17:f4:95:29:b7:41:40:cb:3e:81:a4:bf:ff:bf:d2:6a:6d:21:
         9b:db:8a:d4:c3:e0:79:8f:31:e8:ef:79:a6:22:cd:92:c8:5c:
         2f:05:0e:bb:d0:05:ce:f2:83:3c:90:98:95:ce:80:53:8c:88:
         af:58:66:2b:2e:cd:15:c9:db:c8:64:21:92:11:13:b4:7d:ad:
         cf:30:70:b1:11:fd:d7:57:6c:ac:7b:a8:0f:f7:77:b9:90:6f:
         52:ce:b5:15:08:6d:c3:c3:b1:9e:1e:a5:22:c9:2a:3d:5b:4d:
         56:33:c3:fc:a8:eb:6e:4c:f5:19:a1:03:a2:4e:37:cc:56:6c:
         f8:cb:38:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGCxfqHtRKYA7be5Tc8neqY/16xQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5NDFaFw0yNDEyMDIxOTQ0NDFaMDMxMTAvBgNV
BAMTKDc4MzE3M0IyODE3QjVBQzMwQTcwNUREMjY1NEM4RDdGQzhEMUQ2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfm1+OlmOQ5DARbsI2juM+sXU1
xTHqcRbW8KKgWRTvteYKY5q2tlQPJBBwoc3w9Ku+vk3TbEv6uANZlMCRImk98rHQ
/MSWPHwzvX/xgZl87wciRmH548Zc9J5xjT1VyWl63BflOYiQVrZeDt600o4YgEOr
a1iLImEIFuyY87xSvRhXN/fyGJPMfJgj5B/Eu7sMGwsjLrcC1zDH1RYGv0f+hcm2
dxO9dUzq0s9z4s8inE5bTLL0lWfXRIfSIaOW5C+GohAoiY2jf0R+XiZs6FgZ/5uK
odfgPAgdQgrFhYSZ+I8T3n+1s1cy89Wuxo4T7lte5qelLdgrSy4D3EDiUdlbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeDFzsoF7WsMKcF3SZUyNf8jR1j8wHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzEzNzM3MmUzMjMyMmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFsswDQYJKoZIhvcNAQELBQADggEBAGhwy6yx
OCoa0RHkPMJIoqGQUCIRnwycf78FStcyIrty9T023IXD/9AlTVSi0NI8+M9Ie5Vl
p7lXWdqNj2bjEo8mNMQlq8oNlcuhEJKwkCxjyiHa/pCXUbRYfLNiekGGewNZDpFx
Z1X8qfTixu1L64rsWZD/75E1o1fCiUHUzxf0lSm3QUDLPoGkv/+/0mptIZvbitTD
4HmPMejveaYizZLIXC8FDrvQBc7ygzyQmJXOgFOMiK9YZisuzRXJ28hkIZIRE7R9
rc8wcLER/ddXbKx7qA/3d7mQb1LOtRUIbcPDsZ4epSLJKj1bTVYzw/yo625M9Rmh
A6JON8xWbPjLOP0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org