Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e32302e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32302e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          cM4BuSOmKA+tfJ4T7+Im2yp0gkuaQmCtVMhNb3CEchc=
Subject key identifier:   94:93:6C:02:92:8A:F5:3A:89:BB:DC:93:32:70:1B:D8:35:6F:FA:B7
Certificate issuer:       /CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
Certificate serial:       11216CC8DA2A73300AA415DB2E4271D78479E764
Authority key identifier: 2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e32302e302f32342d3234203d3e20323633363131.roa
Signing time:             Tue 22 Aug 2023 19:46:45 +0000
ROA not before:           Tue 22 Aug 2023 19:41:45 +0000
ROA not after:            Tue 20 Aug 2024 19:46:45 +0000
asID:                     263611
IP address blocks:        179.124.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:6c:c8:da:2a:73:30:0a:a4:15:db:2e:42:71:d7:84:79:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
        Validity
            Not Before: Aug 22 19:41:45 2023 GMT
            Not After : Aug 20 19:46:45 2024 GMT
        Subject: CN=94936C02928AF53A89BBDC9332701BD8356FFAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:c9:e2:d2:70:7d:d8:30:86:39:0c:ad:b4:
                    67:04:fc:b8:a0:34:24:90:93:28:a8:0b:45:b7:71:
                    11:c0:1c:01:4a:6a:f0:51:49:ec:c1:50:58:49:f9:
                    e7:ee:35:2a:3a:08:07:72:a3:0b:e8:39:a7:a9:36:
                    69:fb:58:b3:21:31:b2:9b:6d:f6:77:a0:93:bb:a9:
                    f0:9e:ce:4a:45:c8:a3:27:bd:54:44:be:22:07:b0:
                    df:f0:89:74:48:91:36:16:42:71:f4:f1:1a:a9:e1:
                    b1:91:01:5e:58:bb:1a:3f:8f:e5:fc:af:2a:11:bf:
                    05:88:31:91:53:49:f1:3f:87:bb:6b:65:a7:38:21:
                    3b:d9:6b:be:80:25:44:dd:68:aa:0e:a2:f6:cc:ae:
                    d9:77:f5:83:82:28:dc:d3:ad:5d:be:f4:e5:9e:42:
                    f2:c0:8b:b3:15:c0:cb:84:d6:88:a5:53:01:e7:02:
                    68:bc:17:c7:2a:02:7e:55:61:a3:f9:2e:8c:57:6e:
                    11:b1:28:60:4a:aa:bf:12:7d:75:6a:af:3d:6d:18:
                    7f:c6:e6:50:e8:72:9a:77:d6:21:a2:96:dd:b0:10:
                    68:c2:de:0e:16:cc:be:32:ec:83:80:f3:6a:05:2e:
                    f9:85:c9:a0:89:1b:e0:65:90:cb:06:25:c5:a9:4d:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:6C:02:92:8A:F5:3A:89:BB:DC:93:32:70:1B:D8:35:6F:FA:B7
            X509v3 Authority Key Identifier:
                keyid:2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e32302e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:43:90:9c:e5:6d:42:e8:86:28:87:75:a2:f3:20:5d:a7:82:
         08:c2:52:6e:3a:7b:d6:53:5c:d2:bb:81:e8:0c:58:7a:13:89:
         e1:d3:1d:fd:41:08:62:3f:17:93:00:2a:7d:7b:ee:35:82:8e:
         3e:16:8d:7f:25:14:66:e8:77:0f:26:07:92:7d:1f:86:9a:42:
         29:96:b2:86:fc:36:82:06:48:10:57:6a:7c:ad:9b:51:2b:2b:
         fb:d3:f2:2a:14:01:21:27:e6:5b:38:60:3a:2f:14:2c:e0:f1:
         3c:b0:b5:7d:64:27:a4:8a:28:c0:90:38:86:cd:47:9e:48:2a:
         2b:78:15:43:a1:a2:c5:32:6e:07:dc:54:e1:f1:54:9e:c5:8e:
         0d:ba:04:ef:69:04:10:1e:1c:e7:f8:e5:63:9d:d5:bf:ec:0e:
         7a:af:23:66:34:4b:b6:86:d4:5e:4b:a9:b2:2b:b7:f0:7a:6f:
         5e:98:36:f5:5d:15:08:4e:57:16:9d:1b:d5:e5:a2:fe:21:82:
         4f:20:75:60:0c:99:e2:61:7a:33:03:39:ab:5f:58:af:22:8e:
         09:a4:e5:ee:a8:57:7b:cc:7b:ad:8a:35:40:6d:de:e0:9e:90:
         1e:83:5f:55:d5:03:49:e3:c0:88:2e:ec:a1:97:57:0f:50:93:
         bf:c5:cc:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUESFsyNoqczAKpBXbLkJx14R552QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExRjJCNDc4NjlGQkYzMThFMDA4MkNBOURENkRFQkEw
NDc4MDI4MzAeFw0yMzA4MjIxOTQxNDVaFw0yNDA4MjAxOTQ2NDVaMDMxMTAvBgNV
BAMTKDk0OTM2QzAyOTI4QUY1M0E4OUJCREM5MzMyNzAxQkQ4MzU2RkZBQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRMni0nB92DCGOQyttGcE/Lig
NCSQkyioC0W3cRHAHAFKavBRSezBUFhJ+efuNSo6CAdyowvoOaepNmn7WLMhMbKb
bfZ3oJO7qfCezkpFyKMnvVREviIHsN/wiXRIkTYWQnH08Rqp4bGRAV5Yuxo/j+X8
ryoRvwWIMZFTSfE/h7trZac4ITvZa76AJUTdaKoOovbMrtl39YOCKNzTrV2+9OWe
QvLAi7MVwMuE1oilUwHnAmi8F8cqAn5VYaP5LoxXbhGxKGBKqr8SfXVqrz1tGH/G
5lDocpp31iGilt2wEGjC3g4WzL4y7IOA82oFLvmFyaCJG+BlkMsGJcWpTRt1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlJNsApKK9TqJu9yTMnAb2DVv+rcwHwYDVR0j
BBgwFoAUKh8rR4afvzGOAILKndbeugR4AoMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUoyYjFWbTc0dUFNWmdSSGlMd0VDM0dTcjhnZGl3bVo0SmNYeDl0VFNQ
QWkvMC8yQTFGMkI0Nzg2OUZCRjMxOEUwMDgyQ0E5REQ2REVCQTA0NzgwMjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBMUYyQjQ3ODY5RkJGMzE4
RTAwODJDQTlERDZERUJBMDQ3ODAyODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKMmIxVm03NHVBTVpnUkhpTHdFQzNHU3I4Z2Rpd21aNEpjWHg5dFRTUEFpLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfBQwDQYJKoZIhvcNAQELBQADggEBAAFDkJzl
bULohiiHdaLzIF2nggjCUm46e9ZTXNK7gegMWHoTieHTHf1BCGI/F5MAKn177jWC
jj4WjX8lFGbodw8mB5J9H4aaQimWsob8NoIGSBBXanytm1ErK/vT8ioUASEn5ls4
YDovFCzg8TywtX1kJ6SKKMCQOIbNR55IKit4FUOhosUybgfcVOHxVJ7Fjg26BO9p
BBAeHOf45WOd1b/sDnqvI2Y0S7aG1F5LqbIrt/B6b16YNvVdFQhOVxadG9Xlov4h
gk8gdWAMmeJhejMDOatfWK8ijgmk5e6oV3vMe62KNUBt3uCekB6DX1XVA0njwIgu
7KGXVw9Qk7/FzIM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org