Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          K34C8Ezee9O7yLGPEegkFR555r632VG3Uq7U8V8xvZQ=
Subject key identifier:   A1:B3:90:A2:0F:50:25:9E:0C:F8:8F:67:46:A9:E4:0A:A2:5B:C5:4D
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       6419BCD0E77BD4BDBE16F7C5678B070BE1C76C43
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:19 +0000
ROA not before:           Tue 28 Nov 2023 13:04:19 +0000
ROA not after:            Tue 26 Nov 2024 13:09:19 +0000
asID:                     53047
IP address blocks:        177.101.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:bc:d0:e7:7b:d4:bd:be:16:f7:c5:67:8b:07:0b:e1:c7:6c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:19 2023 GMT
            Not After : Nov 26 13:09:19 2024 GMT
        Subject: CN=A1B390A20F50259E0CF88F6746A9E40AA25BC54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:05:a4:4a:cc:36:01:07:ac:f6:9a:dd:a6:
                    bc:44:53:38:d2:4a:89:9e:61:91:10:b5:83:80:b0:
                    e4:0a:9b:14:98:73:df:26:9a:05:7e:a5:37:a8:23:
                    e2:59:56:2e:46:a6:1b:3b:a3:18:70:b9:2f:00:a9:
                    c7:64:00:e0:59:69:72:cd:90:ec:92:f0:67:95:5a:
                    28:33:18:8d:31:0b:4d:44:40:2e:fd:41:a3:08:30:
                    52:0d:41:92:6a:95:29:da:43:4b:c6:59:71:0b:b4:
                    e4:8b:9f:bb:ed:41:8f:20:25:cc:cf:da:31:46:20:
                    e5:23:3f:6e:e2:e4:60:fd:9f:c4:64:58:55:bc:47:
                    3f:e4:ee:3e:b2:c8:7e:0d:0a:d3:41:9d:d8:7e:08:
                    3d:f9:68:6f:9b:23:fa:92:a5:22:0e:75:0e:d2:03:
                    13:38:79:34:f2:93:a6:f7:8f:e0:68:cc:21:1c:92:
                    21:37:c4:68:15:c1:de:b1:b2:42:75:be:34:41:20:
                    f1:87:fe:b0:95:1b:33:04:d1:0a:89:ff:02:35:3a:
                    27:cb:b1:c5:7e:19:d2:42:e9:b2:43:52:03:91:43:
                    07:50:0d:6b:71:05:c5:10:48:ba:3c:65:24:b2:31:
                    6f:97:93:b6:16:2a:a2:2e:ad:64:80:1a:78:89:27:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:90:A2:0F:50:25:9E:0C:F8:8F:67:46:A9:E4:0A:A2:5B:C5:4D
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6f:b0:73:b4:3b:d9:e3:4a:74:18:dc:00:c5:20:d0:f7:0d:
         99:ca:a5:6e:15:7a:c3:f4:69:ec:ae:16:ad:cd:42:12:0e:b1:
         83:67:12:60:97:7f:6c:51:f9:91:15:24:56:15:f3:60:e8:0c:
         21:a6:0c:ef:f7:d3:e8:c6:92:cc:a1:78:b9:f2:f6:f3:9f:95:
         94:cf:13:e5:cf:f8:91:6f:e8:ed:68:0f:86:5b:86:eb:03:bd:
         50:ec:8d:d2:ea:18:f0:38:f4:04:29:91:1e:5a:cc:33:77:24:
         99:94:5b:92:37:0b:c1:25:21:b3:7a:0b:ec:11:4a:30:75:88:
         b0:37:53:7f:12:ed:1e:cf:69:21:89:9b:17:41:be:b3:dd:cf:
         c8:7f:35:28:b1:8f:82:57:a6:0a:85:18:81:21:cc:50:4c:f6:
         7a:39:c2:9a:a0:d3:b2:53:36:f7:24:f3:85:51:cd:b4:25:73:
         ac:cc:9e:2b:0e:6e:36:9d:b1:fe:0a:0a:77:37:96:8a:d3:2d:
         db:a8:6d:4a:c9:45:7b:03:2e:2a:2d:9c:ab:b7:d0:6c:c2:aa:
         81:96:1b:bd:64:79:81:d9:44:f7:8d:57:6f:74:8b:49:ea:cb:
         a7:7b:79:ec:10:5d:64:02:e2:b3:d4:ff:06:3a:fe:ec:ae:9d:
         8f:89:fb:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZBm80Od71L2+FvfFZ4sHC+HHbEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1NzQyRTVDM0I3NjQ2MTczMjA0QkUyNDM4MDlEQjJE
MjQyRjc3NzAeFw0yMzExMjgxMzA0MTlaFw0yNDExMjYxMzA5MTlaMDMxMTAvBgNV
BAMTKEExQjM5MEEyMEY1MDI1OUUwQ0Y4OEY2NzQ2QTlFNDBBQTI1QkM1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4AWkSsw2AQes9prdprxEUzjS
SomeYZEQtYOAsOQKmxSYc98mmgV+pTeoI+JZVi5Gphs7oxhwuS8AqcdkAOBZaXLN
kOyS8GeVWigzGI0xC01EQC79QaMIMFINQZJqlSnaQ0vGWXELtOSLn7vtQY8gJczP
2jFGIOUjP27i5GD9n8RkWFW8Rz/k7j6yyH4NCtNBndh+CD35aG+bI/qSpSIOdQ7S
AxM4eTTyk6b3j+BozCEckiE3xGgVwd6xskJ1vjRBIPGH/rCVGzME0QqJ/wI1OifL
scV+GdJC6bJDUgORQwdQDWtxBcUQSLo8ZSSyMW+Xk7YWKqIurWSAGniJJ1GXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUobOQog9QJZ4M+I9nRqnkCqJbxU0wHwYDVR0j
BBgwFoAU+ldC5cO3ZGFzIEviQ4CdstJC93cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9GQTU3NDJFNUMzQjc2NDYxNzMyMDRCRTI0MzgwOURCMkQyNDJGNzc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNTc0MkU1QzNCNzY0NjE3
MzIwNEJFMjQzODA5REIyRDI0MkY3NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVeMA0GCSqGSIb3DQEBCwUAA4IBAQArb7BztDvZ
40p0GNwAxSDQ9w2ZyqVuFXrD9GnsrhatzUISDrGDZxJgl39sUfmRFSRWFfNg6Awh
pgzv99PoxpLMoXi58vbzn5WUzxPlz/iRb+jtaA+GW4brA71Q7I3S6hjwOPQEKZEe
WswzdySZlFuSNwvBJSGzegvsEUowdYiwN1N/Eu0ez2khiZsXQb6z3c/IfzUosY+C
V6YKhRiBIcxQTPZ6OcKaoNOyUzb3JPOFUc20JXOszJ4rDm42nbH+Cgp3N5aK0y3b
qG1KyUV7Ay4qLZyrt9BswqqBlhu9ZHmB2UT3jVdvdItJ6sune3nsEF1kAuKz1P8G
Ov7srp2Pift0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org