Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          3ng2CqTkmbOvBBma9WDethUZL0nC0rfJ89+NCP3nOMw=
Subject key identifier:   A5:50:BF:A4:48:09:F9:4A:47:49:BC:04:8D:00:84:86:18:A0:27:FA
Certificate issuer:       /CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
Certificate serial:       4F75CC28EDDD02490BBD0784D5421A3306A51EEE
Authority key identifier: 54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa
Signing time:             Mon 07 Feb 2022 12:09:25 +0000
ROA not before:           Mon 07 Feb 2022 12:04:25 +0000
ROA not after:            Mon 06 Feb 2023 12:09:25 +0000
asID:                     53018
IP address blocks:        177.72.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:75:cc:28:ed:dd:02:49:0b:bd:07:84:d5:42:1a:33:06:a5:1e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
        Validity
            Not Before: Feb  7 12:04:25 2022 GMT
            Not After : Feb  6 12:09:25 2023 GMT
        Subject: CN=A550BFA44809F94A4749BC048D00848618A027FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:e8:0d:54:8e:94:06:c8:01:9c:62:1f:82:
                    c0:50:03:d7:db:93:f7:2b:70:9c:85:08:35:cd:5e:
                    9b:76:50:8c:79:5d:b0:75:d2:3b:96:98:7c:e4:ff:
                    a9:a5:e8:81:d0:11:37:9f:3c:00:2a:d5:90:7d:09:
                    83:87:77:da:ef:45:13:5a:ca:19:dc:88:e3:01:59:
                    2a:f7:2b:66:d5:1f:d3:a4:82:6f:54:b8:14:41:24:
                    1f:4e:5b:44:3e:11:c0:bd:be:c9:e2:10:43:0f:3f:
                    5c:05:7b:1b:29:68:23:da:68:d3:b0:75:49:1b:9c:
                    02:90:b7:68:7b:68:2a:47:79:d3:78:39:e1:19:4d:
                    dc:45:0e:0f:cc:04:a6:76:5e:f5:e2:ad:ec:9c:d3:
                    99:89:3a:a2:97:58:42:cb:2b:cb:8d:a2:67:fb:54:
                    b3:88:98:a7:55:d9:9a:18:f0:3d:39:38:a6:96:9f:
                    c0:6b:1d:a1:84:2a:7f:c3:e5:41:54:c8:cf:99:fc:
                    61:48:16:44:c1:80:96:17:2b:76:32:60:c5:c5:16:
                    17:99:e4:a8:b2:a6:ca:47:1f:f6:a7:cc:3b:f7:5f:
                    7e:24:1e:b4:bc:37:ed:d0:fa:02:db:93:ed:66:7a:
                    2d:1c:04:88:51:20:12:6e:7f:2f:41:60:60:4e:7a:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:BF:A4:48:09:F9:4A:47:49:BC:04:8D:00:84:86:18:A0:27:FA
            X509v3 Authority Key Identifier:
                keyid:54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:37:b0:b3:f9:65:0c:26:53:0b:23:ef:c5:21:09:76:af:77:
         3b:d5:2c:b5:d2:df:bb:0b:b9:bf:0e:c0:9a:00:d2:1c:81:0f:
         c6:98:1e:ec:0d:e0:7d:ce:1b:bb:53:61:94:fa:ad:89:be:dc:
         73:0f:41:1e:8e:4a:5f:33:f7:fb:a0:37:bb:31:45:ff:82:fb:
         08:10:bf:14:0a:16:e9:f1:24:d2:32:77:df:81:dd:f9:4d:f2:
         06:f6:93:47:a3:fb:fb:bb:b5:28:80:39:ba:7d:90:1f:6d:92:
         be:75:8e:72:8d:bf:b1:0c:e2:de:9f:92:d6:32:35:a4:58:8b:
         46:42:2c:ea:9f:6e:57:3f:24:ff:da:fe:fe:d2:c1:a6:49:fb:
         97:0e:34:04:05:ef:9a:33:0c:78:98:3c:81:8b:83:f9:af:52:
         65:8d:c9:fa:a8:90:3e:ca:70:9d:40:bb:3e:08:83:8e:f6:c3:
         2b:7c:35:6c:dd:b2:25:0d:72:36:ea:06:be:55:d3:6f:de:32:
         7d:5a:2c:a4:ef:d6:ff:54:3d:93:01:8b:41:10:b1:19:99:35:
         06:7b:f4:ba:51:dd:85:db:46:81:0a:31:08:1e:01:65:c0:d0:
         53:85:f7:a5:7e:bb:25:11:e8:ad:12:a8:8d:f1:a1:7a:a7:47:
         91:e4:8c:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT3XMKO3dAkkLvQeE1UIaMwalHu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQwMEEzMTIzQzhCNzExQTQ5M0Y0OTZBRjMzQjREQjhE
OTRGMDAyMjAeFw0yMjAyMDcxMjA0MjVaFw0yMzAyMDYxMjA5MjVaMDMxMTAvBgNV
BAMTKEE1NTBCRkE0NDgwOUY5NEE0NzQ5QkMwNDhEMDA4NDg2MThBMDI3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiE+gNVI6UBsgBnGIfgsBQA9fb
k/crcJyFCDXNXpt2UIx5XbB10juWmHzk/6ml6IHQETefPAAq1ZB9CYOHd9rvRRNa
yhnciOMBWSr3K2bVH9Okgm9UuBRBJB9OW0Q+EcC9vsniEEMPP1wFexspaCPaaNOw
dUkbnAKQt2h7aCpHedN4OeEZTdxFDg/MBKZ2XvXireyc05mJOqKXWELLK8uNomf7
VLOImKdV2ZoY8D05OKaWn8BrHaGEKn/D5UFUyM+Z/GFIFkTBgJYXK3YyYMXFFheZ
5KiypspHH/anzDv3X34kHrS8N+3Q+gLbk+1mei0cBIhRIBJufy9BYGBOeiGrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpVC/pEgJ+UpHSbwEjQCEhhigJ/owHwYDVR0j
BBgwFoAUVACjEjyLcRpJP0lq8ztNuNlPACIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC81NDAwQTMxMjNDOEI3MTFBNDkzRjQ5NkFGMzNCNERCOEQ5NEYwMDIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0MDBBMzEyM0M4QjcxMUE0
OTNGNDk2QUYzM0I0REI4RDk0RjAwMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUiMMA0GCSqGSIb3DQEBCwUAA4IBAQBRN7Cz+WUM
JlMLI+/FIQl2r3c71Sy10t+7C7m/DsCaANIcgQ/GmB7sDeB9zhu7U2GU+q2Jvtxz
D0EejkpfM/f7oDe7MUX/gvsIEL8UChbp8STSMnffgd35TfIG9pNHo/v7u7UogDm6
fZAfbZK+dY5yjb+xDOLen5LWMjWkWItGQizqn25XPyT/2v7+0sGmSfuXDjQEBe+a
Mwx4mDyBi4P5r1Jljcn6qJA+ynCdQLs+CIOO9sMrfDVs3bIlDXI26ga+VdNv3jJ9
Wiyk79b/VD2TAYtBELEZmTUGe/S6Ud2F20aBCjEIHgFlwNBThfelfrslEeitEqiN
8aF6p0eR5IyA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org