Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa
File:                     3137392e36332e31322e302f32342d3234203d3e20323731353937.roa (raw, json)
Hash identifier:          3Rl8Ie7oTMMn4Vdl+RmT3Y0udHANkuhId3m2dgiH8aM=
Subject key identifier:   3A:AC:34:96:25:15:88:FA:13:DD:3A:5F:0E:E8:60:D7:09:C7:65:36
Certificate issuer:       /CN=98437F0FE77FDF7A20AD9D0D24200BE51BE10147
Certificate serial:       5E79F2FA39C2863ED72D8B13CF9D91DDEBBE3902
Authority key identifier: 98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa
Signing time:             Thu 23 Nov 2023 18:59:25 +0000
ROA not before:           Thu 23 Nov 2023 18:54:25 +0000
ROA not after:            Thu 21 Nov 2024 18:59:25 +0000
asID:                     271597
IP address blocks:        179.63.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:f2:fa:39:c2:86:3e:d7:2d:8b:13:cf:9d:91:dd:eb:be:39:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98437F0FE77FDF7A20AD9D0D24200BE51BE10147
        Validity
            Not Before: Nov 23 18:54:25 2023 GMT
            Not After : Nov 21 18:59:25 2024 GMT
        Subject: CN=3AAC3496251588FA13DD3A5F0EE860D709C76536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:a8:76:f2:61:b2:76:c8:ba:fe:0a:dd:19:
                    8d:32:4f:be:4d:b9:69:48:74:37:1f:c9:4f:50:c7:
                    b9:62:76:4f:0d:83:04:f1:95:b8:2a:80:9f:e8:0b:
                    13:ed:1d:e1:c1:6b:22:ef:32:84:14:bb:00:9e:3d:
                    88:93:ae:7e:7c:c3:7e:f7:68:6f:82:38:5c:ef:36:
                    3c:f2:a9:3e:08:a6:a7:d1:84:26:fc:20:69:67:4f:
                    a1:55:61:42:7d:a1:a4:05:4b:e4:79:e4:ee:4a:b6:
                    4b:f7:db:10:b3:35:48:75:10:31:80:df:e1:6a:7f:
                    25:d5:0b:cf:b4:b5:f7:0c:b5:14:21:a8:0a:7d:54:
                    c2:2e:2c:e1:b2:27:3d:1b:4e:b7:dd:7d:47:37:86:
                    d7:47:88:aa:f7:02:13:f3:a8:d3:91:89:f7:44:a3:
                    34:38:9f:e7:b6:a9:fe:f4:64:21:26:33:a0:99:ae:
                    bc:ca:4b:06:7d:63:c1:70:ae:cb:28:82:a8:3c:a2:
                    d8:2e:91:35:c6:94:b1:2c:b4:f8:b9:30:ac:7d:ce:
                    10:d8:2a:12:96:17:1d:f1:ec:66:e3:45:df:e1:62:
                    a9:48:0c:c2:87:9b:43:0a:80:b2:c5:cd:d9:96:7b:
                    b1:9a:23:ba:66:4c:a2:69:af:b7:f4:79:e7:65:9d:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:34:96:25:15:88:FA:13:DD:3A:5F:0E:E8:60:D7:09:C7:65:36
            X509v3 Authority Key Identifier:
                keyid:98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31322e302f32342d3234203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:2d:0f:e9:3c:68:19:f6:4b:f0:6e:69:dd:b1:60:0d:f6:
         70:1c:7e:50:6e:68:58:5f:bf:b2:23:f9:9e:c2:ed:00:c1:16:
         31:b9:44:d3:a4:23:36:cd:a7:65:47:71:f6:fc:e4:30:07:cd:
         09:aa:77:1e:82:1f:24:08:ee:ce:2d:4e:7c:37:e9:23:9a:c0:
         41:b1:83:15:0a:d6:2b:5a:ae:40:13:f0:21:a1:f3:06:23:0e:
         56:bc:54:d4:0c:85:dd:61:40:04:43:46:bf:28:ee:81:f3:0b:
         9f:4b:fe:b9:00:27:ba:72:d5:6d:50:07:8f:e8:04:75:b2:6c:
         3a:e4:12:d1:51:dc:ad:e4:04:40:80:27:b0:be:84:69:27:2d:
         24:b6:e8:29:dc:00:2d:fb:46:68:56:56:42:0f:ab:09:92:00:
         59:a6:08:13:52:63:b8:0f:11:cf:9c:21:96:93:81:63:78:e7:
         02:03:89:d8:42:fa:36:31:81:58:16:60:41:9e:3a:fc:36:47:
         15:35:8c:18:50:75:1c:b1:3e:e5:18:e1:28:df:ea:97:90:71:
         70:78:cf:5c:38:d5:a4:b6:df:20:3d:77:01:20:16:86:19:88:
         32:37:c8:cb:2e:3e:0a:70:09:54:e4:5c:77:7f:0a:cc:f6:66:
         f8:f4:19:8b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXnny+jnChj7XLYsTz52R3eu+OQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg0MzdGMEZFNzdGREY3QTIwQUQ5RDBEMjQyMDBCRTUx
QkUxMDE0NzAeFw0yMzExMjMxODU0MjVaFw0yNDExMjExODU5MjVaMDMxMTAvBgNV
BAMTKDNBQUMzNDk2MjUxNTg4RkExM0REM0E1RjBFRTg2MEQ3MDlDNzY1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8qh28mGydsi6/grdGY0yT75N
uWlIdDcfyU9Qx7lidk8NgwTxlbgqgJ/oCxPtHeHBayLvMoQUuwCePYiTrn58w373
aG+COFzvNjzyqT4IpqfRhCb8IGlnT6FVYUJ9oaQFS+R55O5Ktkv32xCzNUh1EDGA
3+FqfyXVC8+0tfcMtRQhqAp9VMIuLOGyJz0bTrfdfUc3htdHiKr3AhPzqNORifdE
ozQ4n+e2qf70ZCEmM6CZrrzKSwZ9Y8Fwrssogqg8otgukTXGlLEstPi5MKx9zhDY
KhKWFx3x7GbjRd/hYqlIDMKHm0MKgLLFzdmWe7GaI7pmTKJpr7f0eedlnRorAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOqw0liUViPoT3TpfDuhg1wnHZTYwHwYDVR0j
BBgwFoAUmEN/D+d/33ogrZ0NJCAL5RvhAUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkd3N2ZNM3Bpa002YVRRSmdMWTlCWDV5MkN2and4d0RnUjNwUUxUWVdM
eHUvMC85ODQzN0YwRkU3N0ZERjdBMjBBRDlEMEQyNDIwMEJFNTFCRTEwMTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4NDM3RjBGRTc3RkRGN0Ey
MEFEOUQwRDI0MjAwQkU1MUJFMTAxNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHdzdmTTNwaWtNNmFUUUpnTFk5Qlg1eTJDdmp3eHdEZ1IzcFFMVFlXTHh1LzAv
MzEzNzM5MmUzNjMzMmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz8MMA0GCSqGSIb3DQEBCwUAA4IBAQAfhC0P6Txo
GfZL8G5p3bFgDfZwHH5QbmhYX7+yI/mewu0AwRYxuUTTpCM2zadlR3H2/OQwB80J
qncegh8kCO7OLU58N+kjmsBBsYMVCtYrWq5AE/AhofMGIw5WvFTUDIXdYUAEQ0a/
KO6B8wufS/65ACe6ctVtUAeP6AR1smw65BLRUdyt5ARAgCewvoRpJy0ktugp3AAt
+0ZoVlZCD6sJkgBZpggTUmO4DxHPnCGWk4FjeOcCA4nYQvo2MYFYFmBBnjr8NkcV
NYwYUHUcsT7lGOEo3+qXkHFweM9cONWktt8gPXcBIBaGGYgyN8jLLj4KcAlU5Fx3
fwrM9mb49BmL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org