Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3234203d3e203238363339.roa
File:                     3137372e3132392e36382e302f32322d3234203d3e203238363339.roa (raw, json)
Hash identifier:          OPm8cLebJJbB861E+/9RAccpBH013FQNVgCtnVGKggY=
Subject key identifier:   F2:49:36:15:0B:9A:37:2E:E0:48:8B:0A:CB:68:D7:1D:4A:31:B0:54
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       1238B1371CC444C458D2B876F24296D07689790B
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3234203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:28 +0000
ROA not before:           Fri 02 Sep 2022 18:50:28 +0000
ROA not after:            Fri 01 Sep 2023 18:55:28 +0000
asID:                     28639
IP address blocks:        177.129.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:b1:37:1c:c4:44:c4:58:d2:b8:76:f2:42:96:d0:76:89:79:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:28 2022 GMT
            Not After : Sep  1 18:55:28 2023 GMT
        Subject: CN=F24936150B9A372EE0488B0ACB68D71D4A31B054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:13:f3:fb:e7:66:53:e4:c9:d2:c3:6f:46:
                    06:e0:21:94:54:5a:42:9c:26:0a:91:29:00:c4:9d:
                    66:b4:2e:96:83:12:f9:f9:a0:cc:02:46:58:82:0b:
                    15:a0:ab:4f:5c:84:a3:58:4a:9e:68:46:d0:fc:60:
                    94:e2:bb:cf:92:c9:25:c8:3b:dd:40:f8:65:a1:32:
                    ac:c9:32:0c:32:7d:22:58:24:6d:f1:1b:e1:07:98:
                    42:e1:24:06:7a:f0:c0:5c:f9:66:4f:91:d3:0e:aa:
                    99:0a:84:0f:a8:04:04:d3:f7:aa:20:bb:f8:2e:d2:
                    12:ad:82:49:54:09:fd:b7:5e:68:fd:0b:dd:a0:a7:
                    80:6b:0d:02:43:61:99:18:08:dc:67:4c:33:f8:20:
                    f7:77:1a:32:70:2d:2b:0e:9b:9b:6f:7e:69:ec:98:
                    3a:cb:12:d2:7d:d0:a9:20:e6:04:c4:19:1e:db:73:
                    5b:1f:dd:4d:fb:9a:0a:8e:61:86:5a:0a:00:e5:b4:
                    4a:88:1c:58:cf:41:19:fc:af:23:1e:6c:86:fb:f7:
                    80:45:7b:32:48:6b:11:b4:62:e8:82:01:2c:e3:39:
                    cf:f8:d5:63:f6:35:22:15:4e:98:f1:fb:ad:26:f0:
                    bc:66:48:62:ed:31:38:bc:d0:b9:6b:99:fb:72:dc:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:36:15:0B:9A:37:2E:E0:48:8B:0A:CB:68:D7:1D:4A:31:B0:54
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3234203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:78:e8:0f:4f:a0:db:10:91:4d:54:32:74:70:84:5d:6a:
         f8:cd:f7:ee:17:65:a3:d0:84:c2:10:15:15:fc:1f:96:e7:bc:
         27:37:73:9f:9d:76:b9:ae:d8:18:3c:3d:57:2e:d2:fa:c7:93:
         1a:b2:ec:dd:a1:28:46:fe:07:31:89:79:3a:50:d8:46:d1:d0:
         48:61:d7:8a:be:93:0a:7c:43:30:8e:db:3b:2d:8c:e9:ef:d1:
         db:e7:8c:2f:52:9f:34:d3:08:ca:4c:1d:7a:91:56:13:b0:9c:
         74:36:04:01:5c:ad:3a:6e:2b:28:7d:53:f3:d9:9a:c5:11:2c:
         1e:f9:cf:e2:5b:a0:ea:f1:0a:c8:1e:4a:78:ea:19:e5:71:dc:
         3c:55:77:8b:41:3e:93:37:6f:42:98:89:2b:a8:09:66:71:7d:
         27:cf:5b:88:a3:87:dc:33:27:bc:39:6e:8a:7f:a5:ef:37:cf:
         3f:81:d7:bf:01:2c:b2:89:4e:22:34:61:81:f1:d6:de:8d:36:
         60:46:2d:53:80:b5:fc:6d:6e:37:d7:d3:eb:1b:8f:09:ae:1b:
         e2:61:95:25:8b:05:9e:27:b5:c7:81:17:74:9c:73:08:1c:4a:
         23:f8:a5:1e:0c:bb:c3:c2:47:c7:e0:27:46:0c:b1:c9:8d:f1:
         c0:b1:b7:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEjixNxzERMRY0rh28kKW0HaJeQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VCQzNGRTIyMzIwOTE5MDRDMDQzRkJDRTlGRTE2NjND
MUU5MkNCQjAeFw0yMjA5MDIxODUwMjhaFw0yMzA5MDExODU1MjhaMDMxMTAvBgNV
BAMTKEYyNDkzNjE1MEI5QTM3MkVFMDQ4OEIwQUNCNjhENzFENEEzMUIwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1xPz++dmU+TJ0sNvRgbgIZRU
WkKcJgqRKQDEnWa0LpaDEvn5oMwCRliCCxWgq09chKNYSp5oRtD8YJTiu8+SySXI
O91A+GWhMqzJMgwyfSJYJG3xG+EHmELhJAZ68MBc+WZPkdMOqpkKhA+oBATT96og
u/gu0hKtgklUCf23Xmj9C92gp4BrDQJDYZkYCNxnTDP4IPd3GjJwLSsOm5tvfmns
mDrLEtJ90Kkg5gTEGR7bc1sf3U37mgqOYYZaCgDltEqIHFjPQRn8ryMebIb794BF
ezJIaxG0YuiCASzjOc/41WP2NSIVTpjx+60m8LxmSGLtMTi80Llrmfty3NIHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8kk2FQuaNy7gSIsKy2jXHUoxsFQwHwYDVR0j
BBgwFoAUPrw/4iMgkZBMBD+86f4WY8HpLLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO
WGovMC8zRUJDM0ZFMjIzMjA5MTkwNEMwNDNGQkNFOUZFMTY2M0MxRTkyQ0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFQkMzRkUyMjMyMDkxOTA0
QzA0M0ZCQ0U5RkUxNjYzQzFFOTJDQkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5RDFlRHg2cUt4RWNVajhydWE4UU1LOEJmdnZBalNuc1dSUXAzdXJQTlhqLzAv
MzEzNzM3MmUzMTMyMzkyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsYFEMA0GCSqGSIb3DQEBCwUAA4IBAQBJTXjoD0+g
2xCRTVQydHCEXWr4zffuF2Wj0ITCEBUV/B+W57wnN3OfnXa5rtgYPD1XLtL6x5Ma
suzdoShG/gcxiXk6UNhG0dBIYdeKvpMKfEMwjts7LYzp79Hb54wvUp800wjKTB16
kVYTsJx0NgQBXK06bisofVPz2ZrFESwe+c/iW6Dq8QrIHkp46hnlcdw8VXeLQT6T
N29CmIkrqAlmcX0nz1uIo4fcMye8OW6Kf6XvN88/gde/ASyyiU4iNGGB8dbejTZg
Ri1TgLX8bW4319PrG48JrhviYZUliwWeJ7XHgRd0nHMIHEoj+KUeDLvDwkfH4CdG
DLHJjfHAsbfH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:13 2023 by rpki-client on console-fra.rpki-client.org