Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
File:                     3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (raw, json)
Hash identifier:          Vq1MyzUjySZLdi3rZF91F7tjNmbbFQJy5R+F3A1bSaA=
Subject key identifier:   AD:6A:85:29:AB:55:43:AA:F3:3D:AF:35:53:92:7E:B5:90:5A:F5:96
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       4C933D2F23442D299FF06EE2539CA7B745B89EE6
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:33 +0000
ROA not before:           Wed 03 Apr 2024 23:53:33 +0000
ROA not after:            Wed 02 Apr 2025 23:58:33 +0000
asID:                     52573
IP address blocks:        177.86.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:3d:2f:23:44:2d:29:9f:f0:6e:e2:53:9c:a7:b7:45:b8:9e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:33 2024 GMT
            Not After : Apr  2 23:58:33 2025 GMT
        Subject: CN=AD6A8529AB5543AAF33DAF3553927EB5905AF596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:05:a5:d9:90:40:fa:1a:0e:7f:a8:49:38:
                    3e:fa:de:ad:dd:3f:83:7b:14:82:4b:37:9b:ee:12:
                    f9:a5:97:8f:0d:3f:15:9e:fd:e4:14:c8:94:e0:55:
                    f6:f5:56:3c:e5:1e:80:fe:f2:e3:b4:b3:ce:d1:fa:
                    13:ae:0d:6c:97:08:49:a1:6b:d8:c2:04:68:c9:47:
                    81:af:54:4b:25:5b:c5:cc:56:af:81:30:30:b9:26:
                    7f:df:61:44:c7:1d:00:a8:b4:cf:98:89:fd:c1:14:
                    79:45:ed:24:94:e0:f2:45:26:36:94:c8:11:48:d4:
                    7e:04:d6:60:70:93:28:e6:c9:9c:9b:3f:c7:9f:55:
                    d0:e4:26:46:3d:3a:53:27:1d:5b:61:8f:80:4b:56:
                    d8:ab:a1:1a:cb:dc:2e:93:3d:62:fc:d4:9c:f7:d2:
                    6e:c2:e0:af:96:f3:9f:df:78:49:f1:c7:e6:9c:43:
                    5d:4e:08:05:a4:52:90:14:23:41:9f:a2:bb:95:13:
                    eb:33:e0:7a:0a:51:cf:60:1b:64:df:f3:e5:c4:e1:
                    b3:82:a6:e3:d5:13:2f:94:2e:7e:99:56:f3:2d:ac:
                    36:3b:d4:0b:61:26:9f:1d:58:60:84:d9:3d:fb:70:
                    9f:36:bb:3a:4c:a8:31:3e:98:f4:01:80:f5:2f:11:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:85:29:AB:55:43:AA:F3:3D:AF:35:53:92:7E:B5:90:5A:F5:96
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:6d:38:9b:a3:41:46:3f:44:76:1b:61:68:b2:00:0d:4d:d5:
         25:2c:90:65:ef:e9:98:c6:5e:ef:c4:12:d1:ec:e4:69:e5:c3:
         32:1a:70:f2:4e:3b:ea:f5:a3:2c:8c:f2:1b:36:b6:67:05:6b:
         b5:d0:7e:3c:86:2b:8a:58:e3:f3:4f:b9:2b:c7:ab:5f:37:01:
         6c:e3:eb:3c:df:57:95:b8:42:7e:68:8c:eb:db:f8:b5:9d:35:
         42:58:08:45:a5:5f:95:18:99:33:d1:1d:47:a4:69:57:c4:0f:
         2b:22:c9:41:13:a6:51:b4:01:e3:7b:a1:fa:3b:cc:96:2b:4d:
         d4:6f:29:f0:76:fc:b7:b5:84:5c:3e:fa:4b:2d:1a:c8:40:3f:
         44:c4:5e:93:8b:ae:d3:8c:25:68:c5:d3:39:4a:2b:17:1e:be:
         db:01:82:a7:7f:48:6d:dd:cd:52:19:10:f8:d1:80:d1:8b:03:
         5c:cf:5f:a9:43:28:e1:f6:4d:59:7f:a6:66:f3:81:90:3b:64:
         24:21:8f:86:41:9a:5b:5d:68:e0:4f:f6:78:00:08:b0:12:53:
         a3:b6:4d:39:e0:16:fa:e6:d1:6a:12:ea:08:59:b3:d1:17:e5:
         bc:b4:b0:70:f9:a9:8c:e8:32:87:59:f4:8b:56:ae:7f:61:63:
         a1:5b:00:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTJM9LyNELSmf8G7iU5ynt0W4nuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0MTI0RTI4RkY0MzQ5OTIwRUNDOEQ0QzFFRTE2QUYx
QjYzNkE0NzAeFw0yNDA0MDMyMzUzMzNaFw0yNTA0MDIyMzU4MzNaMDMxMTAvBgNV
BAMTKEFENkE4NTI5QUI1NTQzQUFGMzNEQUYzNTUzOTI3RUI1OTA1QUY1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8twWl2ZBA+hoOf6hJOD763q3d
P4N7FIJLN5vuEvmll48NPxWe/eQUyJTgVfb1VjzlHoD+8uO0s87R+hOuDWyXCEmh
a9jCBGjJR4GvVEslW8XMVq+BMDC5Jn/fYUTHHQCotM+Yif3BFHlF7SSU4PJFJjaU
yBFI1H4E1mBwkyjmyZybP8efVdDkJkY9OlMnHVthj4BLVtiroRrL3C6TPWL81Jz3
0m7C4K+W85/feEnxx+acQ11OCAWkUpAUI0GforuVE+sz4HoKUc9gG2Tf8+XE4bOC
puPVEy+ULn6ZVvMtrDY71AthJp8dWGCE2T37cJ82uzpMqDE+mPQBgPUvEVC5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrWqFKatVQ6rzPa81U5J+tZBa9ZYwHwYDVR0j
BBgwFoAUhUEk4o/0NJkg7MjUwe4WrxtjakcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpHQVdRNGd1TTVKUHBBdHM1NUx0TG1WQ3NGWE15UGh6Y1BadFNRRWs0
aGsvMS84NTQxMjRFMjhGRjQzNDk5MjBFQ0M4RDRDMUVFMTZBRjFCNjM2QTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDEyNEUyOEZGNDM0OTky
MEVDQzhENEMxRUUxNkFGMUI2MzZBNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqR0FXUTRndU01SlBwQXRzNTVMdExtVkNzRlhNeVBoemNQWnRTUUVrNGhrLzEv
MzEzNzM3MmUzODM2MmUzMTM2MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVaoMA0GCSqGSIb3DQEBCwUAA4IBAQDHbTibo0FG
P0R2G2FosgANTdUlLJBl7+mYxl7vxBLR7ORp5cMyGnDyTjvq9aMsjPIbNrZnBWu1
0H48hiuKWOPzT7krx6tfNwFs4+s831eVuEJ+aIzr2/i1nTVCWAhFpV+VGJkz0R1H
pGlXxA8rIslBE6ZRtAHje6H6O8yWK03Ubynwdvy3tYRcPvpLLRrIQD9ExF6Ti67T
jCVoxdM5SisXHr7bAYKnf0ht3c1SGRD40YDRiwNcz1+pQyjh9k1Zf6Zm84GQO2Qk
IY+GQZpbXWjgT/Z4AAiwElOjtk054Bb65tFqEuoIWbPRF+W8tLBw+amM6DKHWfSL
Vq5/YWOhWwAg
-----END CERTIFICATE-----
Generated at Sat Jun 29 02:28:21 2024 by rpki-client on console-ams.rpki-client.org