Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38392e302f32342d3234203d3e20323633363034.roa
File:                     3137372e37312e38392e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          WgAOu5A9XoVj6l6cHcRvwJTYo8s9KnUgx+sK1e01Glc=
Subject key identifier:   69:9A:DC:E4:36:A9:0F:0A:DC:66:F7:98:71:A4:26:2E:74:E7:C2:FD
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       50F51212E59FEFA73108CACED5C043F3F24724C2
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38392e302f32342d3234203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:56 +0000
ROA not before:           Thu 21 Sep 2023 13:31:56 +0000
ROA not after:            Thu 19 Sep 2024 13:36:56 +0000
asID:                     263604
IP address blocks:        177.71.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:12:12:e5:9f:ef:a7:31:08:ca:ce:d5:c0:43:f3:f2:47:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:56 2023 GMT
            Not After : Sep 19 13:36:56 2024 GMT
        Subject: CN=699ADCE436A90F0ADC66F79871A4262E74E7C2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:3a:11:14:f8:53:9f:61:8a:23:c1:f4:9b:
                    e5:3d:97:79:16:d5:bb:a2:da:22:3f:c9:3d:96:59:
                    f3:1c:5e:40:8b:d8:90:a5:ae:dd:ce:7a:a6:ac:ce:
                    07:b9:58:be:1b:c2:86:e4:0e:ec:79:74:da:dc:02:
                    7e:e6:8e:85:61:60:72:c5:65:f1:a3:93:3c:7a:fe:
                    54:e0:2d:e3:31:03:f3:03:1f:f7:7f:f1:6b:2b:08:
                    79:b9:e4:c7:32:ae:d8:2d:c4:f0:fd:a9:6a:c5:e8:
                    95:45:44:72:ef:a6:e6:19:07:a6:63:b2:d2:e7:bc:
                    ad:9c:27:0d:51:1f:49:c3:e2:d8:0f:3b:6b:76:17:
                    7b:e6:98:cb:06:76:eb:0d:d4:d4:d5:ed:91:c4:f1:
                    63:64:da:b1:25:03:2e:df:2f:01:af:f2:30:c5:de:
                    10:46:e3:12:f7:85:0b:83:5f:ac:4a:26:73:d5:ac:
                    86:f4:73:59:75:91:55:a0:ec:4a:9f:7a:14:fe:6b:
                    a5:4b:15:30:0a:48:62:ff:b8:fd:89:46:50:b0:6f:
                    8c:e8:3d:59:a1:41:70:f2:c6:44:e6:9b:b5:34:e4:
                    18:42:f1:35:c2:15:cf:f4:e9:d9:01:ea:d1:00:18:
                    49:89:f1:0c:b4:cd:aa:03:6f:4c:3e:a4:ac:e7:cd:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:DC:E4:36:A9:0F:0A:DC:66:F7:98:71:A4:26:2E:74:E7:C2:FD
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38392e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fa:26:95:bd:f0:7a:69:c8:dd:56:a2:99:6c:e9:3e:4b:a2:
         13:1f:95:4f:eb:ef:cf:0c:d7:c9:97:57:62:78:97:14:aa:a9:
         dc:f6:24:f9:ea:29:d5:10:28:20:03:e2:ae:79:df:57:d8:8f:
         1a:84:13:bd:55:77:92:70:e7:c9:07:fd:53:57:8d:a8:08:98:
         31:82:45:35:10:44:3b:bb:7d:23:f9:24:26:7c:4b:3f:86:a6:
         cf:eb:81:47:ac:5c:66:de:cf:a0:99:af:a8:ab:2e:07:ef:43:
         50:99:8c:18:63:4b:ff:18:7e:fd:13:f5:d0:36:ff:4f:d3:6e:
         88:94:cd:3e:13:46:33:be:d5:d1:ee:fc:7d:71:1d:45:36:26:
         d1:eb:b7:3d:7a:b2:fe:d7:3d:52:ec:c1:7d:a2:a3:b8:28:0c:
         98:cb:fe:58:51:28:ee:5f:e9:5b:45:1e:18:8d:0b:39:7b:d9:
         5c:6f:39:02:f3:b3:59:8a:82:4e:24:1a:69:74:06:18:62:00:
         38:33:21:ed:df:af:9d:11:91:ba:06:99:ac:18:68:d7:c3:de:
         0b:a6:ec:da:a3:a6:52:b7:ba:50:44:56:05:d5:da:5b:5d:22:
         aa:e7:ad:92:5a:bf:4b:c0:e9:70:de:22:2b:11:0f:cb:b7:c2:
         36:3e:65:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUPUSEuWf76cxCMrO1cBD8/JHJMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDk4QUM4MzIxOTk3QkE0QzhFOEZERTZDODZBQjhD
MDcwNDVCQjAeFw0yMzA5MjExMzMxNTZaFw0yNDA5MTkxMzM2NTZaMDMxMTAvBgNV
BAMTKDY5OUFEQ0U0MzZBOTBGMEFEQzY2Rjc5ODcxQTQyNjJFNzRFN0MyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUDoRFPhTn2GKI8H0m+U9l3kW
1bui2iI/yT2WWfMcXkCL2JClrt3Oeqaszge5WL4bwobkDux5dNrcAn7mjoVhYHLF
ZfGjkzx6/lTgLeMxA/MDH/d/8WsrCHm55McyrtgtxPD9qWrF6JVFRHLvpuYZB6Zj
stLnvK2cJw1RH0nD4tgPO2t2F3vmmMsGdusN1NTV7ZHE8WNk2rElAy7fLwGv8jDF
3hBG4xL3hQuDX6xKJnPVrIb0c1l1kVWg7EqfehT+a6VLFTAKSGL/uP2JRlCwb4zo
PVmhQXDyxkTmm7U05BhC8TXCFc/06dkB6tEAGEmJ8Qy0zaoDb0w+pKznzWVHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaZrc5DapDwrcZveYcaQmLnTnwv0wHwYDVR0j
BBgwFoAUEcSYrIMhmXukyOj95shquMBwRbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMC8xMUM0OThBQzgzMjE5OTdCQTRDOEU4RkRFNkM4NkFCOEMwNzA0NUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQzQ5OEFDODMyMTk5N0JB
NEM4RThGREU2Qzg2QUI4QzA3MDQ1QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzAv
MzEzNzM3MmUzNzMxMmUzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUdZMA0GCSqGSIb3DQEBCwUAA4IBAQCe+iaVvfB6
acjdVqKZbOk+S6ITH5VP6+/PDNfJl1dieJcUqqnc9iT56inVECggA+Kued9X2I8a
hBO9VXeScOfJB/1TV42oCJgxgkU1EEQ7u30j+SQmfEs/hqbP64FHrFxm3s+gma+o
qy4H70NQmYwYY0v/GH79E/XQNv9P026IlM0+E0YzvtXR7vx9cR1FNibR67c9erL+
1z1S7MF9oqO4KAyYy/5YUSjuX+lbRR4YjQs5e9lcbzkC87NZioJOJBppdAYYYgA4
MyHt36+dEZG6BpmsGGjXw94Lpuzao6ZSt7pQRFYF1dpbXSKq562SWr9LwOlw3iIr
EQ/Lt8I2PmX4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org