Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          EByXdMB1f+sJWDICXjGEyr/Jha1CrU75yQCKKAcDbOw=
Subject key identifier:   07:28:AA:7E:86:33:73:3F:A3:E8:37:C7:72:25:71:9A:6C:A2:F4:30
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       3CDAE5FB6900E2FD33FEFFEF585FE2415EF8E1F9
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:15 +0000
ROA not before:           Tue 28 Nov 2023 13:04:15 +0000
ROA not after:            Tue 26 Nov 2024 13:09:15 +0000
asID:                     53047
IP address blocks:        177.101.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:da:e5:fb:69:00:e2:fd:33:fe:ff:ef:58:5f:e2:41:5e:f8:e1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:15 2023 GMT
            Not After : Nov 26 13:09:15 2024 GMT
        Subject: CN=0728AA7E8633733FA3E837C77225719A6CA2F430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:7b:dc:ac:a8:22:50:8b:09:35:79:d4:09:
                    b5:30:5d:ef:0a:83:2e:5d:9a:41:3e:74:41:fc:b7:
                    e8:1c:75:6a:a8:74:9a:7b:ab:64:f4:93:be:e4:9c:
                    9d:0a:17:58:3e:af:e1:fd:90:32:8e:ec:94:d0:51:
                    73:0d:6e:e6:1e:dd:0d:b6:a3:43:ad:bb:7c:12:c4:
                    62:7a:b7:f6:8a:f3:9c:44:60:55:e4:59:3b:82:44:
                    20:4f:32:30:57:73:16:aa:87:e1:b4:e6:19:be:d4:
                    53:ce:ab:26:0c:c3:1f:11:3b:04:f3:d3:be:bb:c8:
                    02:5a:9c:eb:10:38:3e:87:54:d0:6b:f2:4a:35:a2:
                    d7:9f:2f:07:77:79:53:1d:d7:95:ee:a0:a5:c0:07:
                    f0:d8:45:4d:21:bf:9c:dc:93:79:37:49:a1:66:1e:
                    64:5e:0a:5a:c4:4e:1a:56:d9:37:28:a1:4f:d2:f3:
                    a6:24:6b:26:01:f2:06:a3:9a:95:d0:18:4b:92:15:
                    7b:90:6b:7f:9d:fe:cd:9e:2b:c7:6a:2b:12:3c:31:
                    4e:b2:13:71:83:b0:24:39:be:f5:28:bb:b1:d6:60:
                    72:52:05:de:5b:29:de:2c:5f:df:b8:ab:0b:ef:c5:
                    a3:87:86:27:dd:79:fa:34:ca:fb:6c:3d:c6:66:72:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:AA:7E:86:33:73:3F:A3:E8:37:C7:72:25:71:9A:6C:A2:F4:30
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:df:94:11:90:da:ed:14:ca:d5:a4:da:dd:6b:52:18:1d:
         17:6d:dc:74:b8:7a:5b:76:37:9f:95:b3:45:a0:0b:cc:20:c0:
         ee:1d:c9:37:80:2b:33:d5:05:da:10:fd:85:42:23:04:8e:c4:
         20:6f:6c:64:3e:0e:7d:1f:b7:3a:26:a7:bf:61:d7:08:da:5d:
         50:05:55:e9:2e:2d:87:ce:7c:05:65:40:54:4f:48:a3:74:33:
         02:d2:03:02:f7:b1:6b:89:6e:ed:c8:50:e7:8d:48:1d:c9:37:
         34:fb:4f:f0:88:8f:99:c9:c0:1f:4a:0a:b6:35:21:9f:b9:96:
         19:e1:06:69:ee:37:4b:28:0c:ed:67:a6:f1:0a:ab:72:e1:10:
         84:43:09:6a:fd:5f:1d:c5:31:c6:83:9d:59:4b:89:9d:23:15:
         bb:5b:45:d7:4e:af:f3:be:6d:8d:90:cb:8e:5a:87:b1:bd:99:
         d1:f6:55:58:99:0e:e5:4b:dc:0e:ff:59:5a:92:dd:2f:2d:b8:
         23:7a:a4:dd:20:da:5d:3b:5c:9f:c1:46:e3:3d:de:61:9c:34:
         72:db:33:3e:e9:d2:49:87:01:17:3a:d0:bd:6e:52:f8:89:0f:
         75:56:07:a8:d6:2c:20:9a:cc:01:67:1a:0a:2c:4f:ad:9f:f1:
         44:89:2d:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPNrl+2kA4v0z/v/vWF/iQV744fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1NzQyRTVDM0I3NjQ2MTczMjA0QkUyNDM4MDlEQjJE
MjQyRjc3NzAeFw0yMzExMjgxMzA0MTVaFw0yNDExMjYxMzA5MTVaMDMxMTAvBgNV
BAMTKDA3MjhBQTdFODYzMzczM0ZBM0U4MzdDNzcyMjU3MTlBNkNBMkY0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp3vcrKgiUIsJNXnUCbUwXe8K
gy5dmkE+dEH8t+gcdWqodJp7q2T0k77knJ0KF1g+r+H9kDKO7JTQUXMNbuYe3Q22
o0Otu3wSxGJ6t/aK85xEYFXkWTuCRCBPMjBXcxaqh+G05hm+1FPOqyYMwx8ROwTz
0767yAJanOsQOD6HVNBr8ko1otefLwd3eVMd15XuoKXAB/DYRU0hv5zck3k3SaFm
HmReClrEThpW2TcooU/S86YkayYB8gajmpXQGEuSFXuQa3+d/s2eK8dqKxI8MU6y
E3GDsCQ5vvUou7HWYHJSBd5bKd4sX9+4qwvvxaOHhifdefo0yvtsPcZmcnQnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUByiqfoYzcz+j6DfHciVxmmyi9DAwHwYDVR0j
BBgwFoAU+ldC5cO3ZGFzIEviQ4CdstJC93cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9GQTU3NDJFNUMzQjc2NDYxNzMyMDRCRTI0MzgwOURCMkQyNDJGNzc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNTc0MkU1QzNCNzY0NjE3
MzIwNEJFMjQzODA5REIyRDI0MkY3NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVbMA0GCSqGSIb3DQEBCwUAA4IBAQBJTd+UEZDa
7RTK1aTa3WtSGB0Xbdx0uHpbdjeflbNFoAvMIMDuHck3gCsz1QXaEP2FQiMEjsQg
b2xkPg59H7c6Jqe/YdcI2l1QBVXpLi2HznwFZUBUT0ijdDMC0gMC97FriW7tyFDn
jUgdyTc0+0/wiI+ZycAfSgq2NSGfuZYZ4QZp7jdLKAztZ6bxCqty4RCEQwlq/V8d
xTHGg51ZS4mdIxW7W0XXTq/zvm2NkMuOWoexvZnR9lVYmQ7lS9wO/1lakt0vLbgj
eqTdINpdO1yfwUbjPd5hnDRy2zM+6dJJhwEXOtC9blL4iQ91Vgeo1iwgmswBZxoK
LE+tn/FEiS3p
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org