Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34372e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          xZRz8Cc8nGZVUa80lvDh12pBz79LqSm4M4i4J3NPxMw=
Subject key identifier:   52:49:85:61:01:DB:C3:AF:C6:69:90:CF:0C:B9:AF:CA:36:0A:4B:AD
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       4729539AE840997E24F8A8D1006140CD7629AE6F
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:04:19 +0000
ROA not before:           Fri 09 Jun 2023 21:59:19 +0000
ROA not after:            Fri 07 Jun 2024 22:04:19 +0000
asID:                     263427
IP address blocks:        177.91.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:29:53:9a:e8:40:99:7e:24:f8:a8:d1:00:61:40:cd:76:29:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 21:59:19 2023 GMT
            Not After : Jun  7 22:04:19 2024 GMT
        Subject: CN=5249856101DBC3AFC66990CF0CB9AFCA360A4BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:71:d6:7c:96:5b:60:5f:df:c6:9d:fa:fd:
                    15:df:69:08:dc:2e:ae:2d:75:0a:95:61:63:2b:21:
                    6f:6b:1e:2f:fe:19:22:b3:5f:02:c9:90:39:b1:ee:
                    9f:d7:aa:4a:6b:e7:10:61:79:2c:da:ca:22:87:bb:
                    a6:8c:ad:8a:c0:cb:0a:35:d2:98:8b:a5:40:cc:13:
                    16:32:02:e9:72:e0:b7:de:1d:31:ba:b8:5b:5e:2c:
                    74:74:c0:e3:f8:75:04:81:81:73:85:ac:bc:93:b9:
                    38:dd:c6:ae:0c:0d:32:c7:c6:44:3c:97:23:c1:e9:
                    62:e2:0f:95:76:d7:02:6d:d7:4e:89:27:e8:03:b2:
                    b7:9c:bc:14:60:b9:83:68:3f:d9:7a:83:59:0f:bf:
                    40:11:d1:a0:eb:c7:a1:07:43:fd:77:60:c0:ef:f9:
                    c7:6c:b5:14:6a:83:da:54:58:5a:52:15:0b:19:fb:
                    61:ee:35:ac:fd:a7:ce:d1:37:83:86:c1:6f:db:66:
                    e6:bd:d8:2f:32:3b:29:84:bd:80:04:3d:64:2d:1d:
                    89:61:8c:4c:9f:3d:4f:53:38:1d:57:e5:8b:c5:78:
                    8f:d9:5f:b9:43:92:66:99:fc:1b:a5:56:3d:c4:10:
                    66:d6:84:5e:39:bd:d5:47:b0:a5:ee:e7:02:4c:fa:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:85:61:01:DB:C3:AF:C6:69:90:CF:0C:B9:AF:CA:36:0A:4B:AD
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:56:74:38:ff:99:85:53:73:a7:de:c0:8d:bc:36:f4:68:79:
         0f:81:3e:82:1a:65:ae:4a:07:8b:c5:a6:7c:8c:d5:b8:a7:41:
         4c:b5:3a:f0:b9:09:20:6e:b4:77:da:73:c5:fb:60:af:cd:d5:
         ad:7b:6c:1c:6d:1b:22:0c:da:85:74:1e:ec:89:78:87:d8:79:
         22:d6:6d:25:e1:3e:68:fe:59:cd:6c:54:0e:d5:15:a7:56:d0:
         8d:7e:f5:25:3f:5a:41:93:07:93:35:8c:24:d9:19:8c:64:a0:
         e9:70:f3:d8:b4:05:86:80:64:fc:81:5f:d9:63:d9:1c:49:ae:
         e6:34:cc:96:6c:ef:87:e0:f6:68:41:56:c0:83:24:19:02:56:
         20:3d:59:28:93:b1:27:3d:08:65:8f:f3:74:57:f7:58:43:0b:
         1c:e9:3b:20:74:a0:c4:e0:9f:70:44:44:c3:63:78:77:68:dc:
         d9:8f:84:37:85:1f:9a:34:cc:79:e4:d9:37:84:d4:99:fd:f5:
         b5:2b:e5:44:76:5c:48:42:84:b2:9b:f9:a4:e3:71:6c:bb:05:
         e8:f8:04:2c:f2:f7:2c:67:e0:9b:d1:0e:11:c3:69:cf:de:ce:
         90:d8:44:29:dd:8e:34:f6:13:ec:dd:8e:6d:1c:a5:d4:08:f3:
         17:2d:2d:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURylTmuhAmX4k+KjRAGFAzXYprm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0MDVDMEM5OTk3ODQxQzhGOUM2ODgwMURFMDUxOEU1
QUM0QzIwOTAeFw0yMzA2MDkyMTU5MTlaFw0yNDA2MDcyMjA0MTlaMDMxMTAvBgNV
BAMTKDUyNDk4NTYxMDFEQkMzQUZDNjY5OTBDRjBDQjlBRkNBMzYwQTRCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ+XHWfJZbYF/fxp36/RXfaQjc
Lq4tdQqVYWMrIW9rHi/+GSKzXwLJkDmx7p/Xqkpr5xBheSzayiKHu6aMrYrAywo1
0piLpUDMExYyAuly4LfeHTG6uFteLHR0wOP4dQSBgXOFrLyTuTjdxq4MDTLHxkQ8
lyPB6WLiD5V21wJt106JJ+gDsrecvBRguYNoP9l6g1kPv0AR0aDrx6EHQ/13YMDv
+cdstRRqg9pUWFpSFQsZ+2HuNaz9p87RN4OGwW/bZua92C8yOymEvYAEPWQtHYlh
jEyfPU9TOB1X5YvFeI/ZX7lDkmaZ/BulVj3EEGbWhF45vdVHsKXu5wJM+qhrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUkmFYQHbw6/GaZDPDLmvyjYKS60wHwYDVR0j
BBgwFoAUv0BcDJmXhByPnGiAHeBRjlrEwgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC9CRjQwNUMwQzk5OTc4NDFDOEY5QzY4ODAxREUwNTE4RTVBQzRDMjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNDA1QzBDOTk5Nzg0MUM4
RjlDNjg4MDFERTA1MThFNUFDNEMyMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzM3MmUzOTMxMmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVsvMA0GCSqGSIb3DQEBCwUAA4IBAQC/VnQ4/5mF
U3On3sCNvDb0aHkPgT6CGmWuSgeLxaZ8jNW4p0FMtTrwuQkgbrR32nPF+2CvzdWt
e2wcbRsiDNqFdB7siXiH2Hki1m0l4T5o/lnNbFQO1RWnVtCNfvUlP1pBkweTNYwk
2RmMZKDpcPPYtAWGgGT8gV/ZY9kcSa7mNMyWbO+H4PZoQVbAgyQZAlYgPVkok7En
PQhlj/N0V/dYQwsc6TsgdKDE4J9wRETDY3h3aNzZj4Q3hR+aNMx55Nk3hNSZ/fW1
K+VEdlxIQoSym/mk43FsuwXo+AQs8vcsZ+Cb0Q4Rw2nP3s6Q2EQp3Y409hPs3Y5t
HKXUCPMXLS0R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org