Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136332e302f32342d3234203d3e20323632333034.roa
File:                     3137372e38372e3136332e302f32342d3234203d3e20323632333034.roa (raw, json)
Hash identifier:          eNpCWQUll9iUv0XI4Xw4vDNSObqvmbuWnGqrXRQpsAA=
Subject key identifier:   CB:87:1B:89:FD:C3:46:54:17:7B:58:72:27:15:FD:C1:0A:BA:82:CB
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       0615E918D1679C6939D4E75120BFE80A93C05A4C
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136332e302f32342d3234203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:54:04 +0000
ROA not before:           Wed 14 Jun 2023 20:49:04 +0000
ROA not after:            Wed 12 Jun 2024 20:54:04 +0000
asID:                     262304
IP address blocks:        177.87.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:e9:18:d1:67:9c:69:39:d4:e7:51:20:bf:e8:0a:93:c0:5a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:49:04 2023 GMT
            Not After : Jun 12 20:54:04 2024 GMT
        Subject: CN=CB871B89FDC34654177B58722715FDC10ABA82CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:4e:3c:33:89:4d:62:78:41:eb:fb:21:bf:
                    e0:22:08:82:4d:d4:f4:96:c1:7c:bd:00:11:85:c8:
                    88:fd:d3:30:d3:ae:3e:cf:05:36:dc:aa:29:8e:c9:
                    01:05:7f:f8:71:1c:67:a5:20:f2:34:14:cc:4d:d6:
                    89:fb:be:eb:11:31:44:13:c8:42:39:3f:f1:e5:9f:
                    84:fe:9d:39:23:57:d9:dc:df:54:a3:e1:26:34:37:
                    65:78:25:e0:79:e0:e9:9b:52:7b:7d:f0:14:f7:79:
                    9d:6f:9c:a8:ec:a6:b2:2f:5a:46:67:d4:19:ef:dc:
                    a7:9f:86:09:0a:ef:a2:24:ab:23:c4:9f:d9:bc:f9:
                    e1:e6:a7:04:1e:59:90:f2:c2:83:18:04:39:fd:03:
                    7a:55:90:4e:b9:d4:35:a0:cc:34:70:a4:7e:27:e7:
                    ac:1d:a0:67:6a:6e:c1:4a:71:51:47:96:a5:31:06:
                    1c:71:e1:07:d5:96:7e:06:2f:f9:c0:d3:9c:89:8e:
                    34:57:88:60:b1:4d:c4:4a:4c:c0:ef:02:1d:85:f6:
                    f1:2f:87:6e:3e:07:c1:65:ea:a3:da:bb:97:af:a3:
                    77:a2:b9:bf:c2:5d:7c:c1:b7:a3:94:41:b7:49:78:
                    5d:e3:9f:22:0d:ac:ff:71:34:3f:b2:55:62:c3:8e:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:1B:89:FD:C3:46:54:17:7B:58:72:27:15:FD:C1:0A:BA:82:CB
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136332e302f32342d3234203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:1f:f4:2d:84:6c:4b:59:37:dc:8b:09:62:cf:d4:a7:63:
         c7:7e:ad:09:1a:5a:f7:4e:27:09:a9:61:ed:dd:ac:c0:9e:62:
         02:6b:a4:53:2d:ed:fe:c6:f4:6d:bd:aa:20:76:bd:f2:09:9a:
         f5:1c:f6:da:ec:e8:65:89:e7:1d:62:83:b1:e9:76:43:36:57:
         80:50:45:66:f8:b6:82:13:3a:24:c5:a6:a8:3f:e1:2e:48:93:
         62:f8:d4:de:c2:95:0a:33:f0:7c:d7:e7:38:e4:71:9a:e6:c4:
         3b:a3:a8:48:ec:45:9d:fa:e2:b4:f0:68:d8:cc:70:1e:b2:35:
         b9:bc:a4:d1:90:81:85:21:c4:0a:4f:ce:94:43:b6:ec:35:bf:
         8e:c6:6b:60:a6:ff:75:09:39:a9:9b:75:bb:fd:c7:9a:56:b1:
         78:5d:c4:01:f7:c5:2c:b1:81:41:22:a6:21:27:a2:99:49:e3:
         22:30:73:e5:57:10:7f:4a:1e:af:5a:75:73:ea:23:b3:3c:f7:
         09:1e:3d:fe:7a:96:a9:c9:d6:61:fd:f9:16:28:fa:f1:d4:c1:
         bc:80:7a:a3:b2:69:db:27:30:43:7d:8d:12:3a:80:b3:fe:63:
         71:6b:cf:a4:b2:e2:35:de:dc:97:97:53:fa:95:10:9c:10:c9:
         5c:52:0e:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBhXpGNFnnGk51OdRIL/oCpPAWkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MxMTRFMUQ2RTZEQjgyRUFENUQ0MUY0MkRDNjdBMTQ1
M0E0RUZBQTAeFw0yMzA2MTQyMDQ5MDRaFw0yNDA2MTIyMDU0MDRaMDMxMTAvBgNV
BAMTKENCODcxQjg5RkRDMzQ2NTQxNzdCNTg3MjI3MTVGREMxMEFCQTgyQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCl048M4lNYnhB6/shv+AiCIJN
1PSWwXy9ABGFyIj90zDTrj7PBTbcqimOyQEFf/hxHGelIPI0FMxN1on7vusRMUQT
yEI5P/Hln4T+nTkjV9nc31Sj4SY0N2V4JeB54OmbUnt98BT3eZ1vnKjsprIvWkZn
1Bnv3KefhgkK76IkqyPEn9m8+eHmpwQeWZDywoMYBDn9A3pVkE651DWgzDRwpH4n
56wdoGdqbsFKcVFHlqUxBhxx4QfVln4GL/nA05yJjjRXiGCxTcRKTMDvAh2F9vEv
h24+B8Fl6qPau5evo3eiub/CXXzBt6OUQbdJeF3jnyINrP9xND+yVWLDjl05AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy4cbif3DRlQXe1hyJxX9wQq6gsswHwYDVR0j
BBgwFoAUPBFOHW5tuC6tXUH0LcZ6FFOk76owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhIQzJmSzl4cVE5Q1RHMlpoVDFjdXJWY3BUTm54a0Z1V3pQQ2VOM1ZN
SlovMC8zQzExNEUxRDZFNkRCODJFQUQ1RDQxRjQyREM2N0ExNDUzQTRFRkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMTE0RTFENkU2REI4MkVB
RDVENDFGNDJEQzY3QTE0NTNBNEVGQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVISEMyZks5eHFROUNURzJaaFQxY3VyVmNwVE5ueGtGdVd6UENlTjNWTUpaLzAv
MzEzNzM3MmUzODM3MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxV6MwDQYJKoZIhvcNAQELBQADggEBALg4H/Qt
hGxLWTfciwliz9SnY8d+rQkaWvdOJwmpYe3drMCeYgJrpFMt7f7G9G29qiB2vfIJ
mvUc9trs6GWJ5x1ig7HpdkM2V4BQRWb4toITOiTFpqg/4S5Ik2L41N7ClQoz8HzX
5zjkcZrmxDujqEjsRZ364rTwaNjMcB6yNbm8pNGQgYUhxApPzpRDtuw1v47Ga2Cm
/3UJOambdbv9x5pWsXhdxAH3xSyxgUEipiEnoplJ4yIwc+VXEH9KHq9adXPqI7M8
9wkePf56lqnJ1mH9+RYo+vHUwbyAeqOyadsnMEN9jRI6gLP+Y3Frz6Sy4jXe3JeX
U/qVEJwQyVxSDpA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org