Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133322e302f32322d3232203d3e203631393137.roa
File:                     3137392e3132342e3133322e302f32322d3232203d3e203631393137.roa (raw, json)
Hash identifier:          vVWt4G+Dq6WhXyxOrApwe2aViOxhOqMNHseK3izShJI=
Subject key identifier:   6C:6E:0C:1A:A0:BE:0C:AE:85:82:34:D2:3C:B1:DF:D5:BF:69:39:BC
Certificate issuer:       /CN=BA58EA98FCDCC73FCA332747FF11D3A152683827
Certificate serial:       13E14297A2BDB8899E5CAA4F768C7B4988933724
Authority key identifier: BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133322e302f32322d3232203d3e203631393137.roa
Signing time:             Wed 22 Nov 2023 20:23:36 +0000
ROA not before:           Wed 22 Nov 2023 20:18:36 +0000
ROA not after:            Wed 20 Nov 2024 20:23:36 +0000
asID:                     61917
IP address blocks:        179.124.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e1:42:97:a2:bd:b8:89:9e:5c:aa:4f:76:8c:7b:49:88:93:37:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA58EA98FCDCC73FCA332747FF11D3A152683827
        Validity
            Not Before: Nov 22 20:18:36 2023 GMT
            Not After : Nov 20 20:23:36 2024 GMT
        Subject: CN=6C6E0C1AA0BE0CAE858234D23CB1DFD5BF6939BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:45:1f:9d:3d:0e:36:7f:d0:9c:db:1b:f4:
                    12:fc:c9:e8:3f:5d:01:1d:4f:6f:2f:f7:6e:f9:32:
                    ba:37:62:6d:e0:f7:32:d2:b0:ae:90:1e:19:f5:e9:
                    1f:87:7d:c1:79:6f:7f:5d:31:00:a0:78:d1:50:12:
                    2d:44:6e:af:d0:67:64:26:fa:d5:cf:ab:8a:3a:78:
                    38:64:9d:a8:b5:af:4f:b1:f1:03:ca:03:91:46:c2:
                    3b:36:5c:75:8d:38:57:47:9b:02:da:1c:de:d6:06:
                    10:24:39:3a:75:95:c4:76:48:2f:a1:4b:7a:ca:0f:
                    94:73:b8:d0:2d:9c:47:3a:df:1b:42:c9:0f:08:2f:
                    23:10:90:d5:3a:ec:c0:ce:54:8f:aa:a1:42:0a:83:
                    e2:46:e3:c7:12:30:be:72:10:77:b0:95:a3:6f:df:
                    72:e7:0e:24:e9:fc:7c:f6:c9:ee:d1:3e:aa:2b:ab:
                    8e:e2:92:aa:68:15:4d:fa:98:86:d0:c3:ec:45:0f:
                    ef:be:26:7d:fc:9b:d7:56:13:e0:c8:e1:ef:53:bc:
                    5b:ab:1d:33:f5:65:e2:d5:fd:e3:90:9c:b6:f7:42:
                    8a:14:18:59:51:04:64:3b:e4:fb:45:56:1d:d5:5d:
                    da:a1:2d:d0:2f:83:25:bb:0f:5b:d0:17:a6:79:ab:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:0C:1A:A0:BE:0C:AE:85:82:34:D2:3C:B1:DF:D5:BF:69:39:BC
            X509v3 Authority Key Identifier:
                keyid:BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133322e302f32322d3232203d3e203631393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:60:4f:fc:0a:0e:2a:af:8b:33:24:b4:c0:82:78:cf:de:e1:
         01:fa:81:f1:93:6d:b9:fd:05:58:79:39:00:c8:84:f8:a1:1d:
         fe:9d:c5:88:32:90:90:3a:9b:9b:9f:a3:8e:42:8b:b4:20:9b:
         8f:50:b0:bd:02:5d:f2:4c:de:cd:86:bf:eb:02:bf:f1:87:1a:
         16:22:e5:a4:3c:62:29:8c:9a:84:e3:b3:46:21:cf:dd:6f:74:
         02:e8:28:db:2f:3a:6d:35:e7:bd:37:8f:c6:0e:6b:8f:8f:94:
         fe:00:b4:df:25:32:3e:b5:52:57:ba:a6:b7:9d:4e:23:9f:1a:
         4d:37:5f:2f:23:32:ba:5e:3a:56:cf:11:82:39:c2:dc:df:14:
         3b:54:ee:0e:82:96:3d:11:06:b8:96:6b:92:70:05:33:7a:60:
         1e:4a:50:94:6a:cb:65:59:0d:96:1d:17:78:ca:ee:4b:14:94:
         ec:c7:7f:25:52:12:ee:6a:62:49:e7:ee:77:9a:16:f6:62:88:
         dc:b7:91:6e:7f:d1:55:5b:57:80:d2:f3:10:e0:bd:c1:14:8a:
         ef:78:ad:ff:9e:12:2f:68:c0:65:7f:3f:03:a0:e2:f6:21:3b:
         af:50:cd:8a:90:6c:70:d3:82:c5:99:e9:91:de:8f:47:66:d2:
         74:4c:58:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE+FCl6K9uImeXKpPdox7SYiTNyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE1OEVBOThGQ0RDQzczRkNBMzMyNzQ3RkYxMUQzQTE1
MjY4MzgyNzAeFw0yMzExMjIyMDE4MzZaFw0yNDExMjAyMDIzMzZaMDMxMTAvBgNV
BAMTKDZDNkUwQzFBQTBCRTBDQUU4NTgyMzREMjNDQjFERkQ1QkY2OTM5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fUUfnT0ONn/QnNsb9BL8yeg/
XQEdT28v9275Mro3Ym3g9zLSsK6QHhn16R+HfcF5b39dMQCgeNFQEi1Ebq/QZ2Qm
+tXPq4o6eDhknai1r0+x8QPKA5FGwjs2XHWNOFdHmwLaHN7WBhAkOTp1lcR2SC+h
S3rKD5RzuNAtnEc63xtCyQ8ILyMQkNU67MDOVI+qoUIKg+JG48cSML5yEHewlaNv
33LnDiTp/Hz2ye7RPqorq47ikqpoFU36mIbQw+xFD+++Jn38m9dWE+DI4e9TvFur
HTP1ZeLV/eOQnLb3QooUGFlRBGQ75PtFVh3VXdqhLdAvgyW7D1vQF6Z5q+MHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbG4MGqC+DK6FgjTSPLHf1b9pObwwHwYDVR0j
BBgwFoAUuljqmPzcxz/KMydH/xHToVJoOCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2VnZHlxYzg5eVNkOTRhUjg2ZlJONVpKRkdMbnJVOEVFTHc1bUhzdmtt
QjkvMC9CQTU4RUE5OEZDRENDNzNGQ0EzMzI3NDdGRjExRDNBMTUyNjgzODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBNThFQTk4RkNEQ0M3M0ZD
QTMzMjc0N0ZGMTFEM0ExNTI2ODM4MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlZ2R5cWM4OXlTZDk0YVI4NmZSTjVaSkZHTG5yVThFRUx3NW1Ic3ZrbUI5LzAv
MzEzNzM5MmUzMTMyMzQyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzOTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzfIQwDQYJKoZIhvcNAQELBQADggEBAGhgT/wK
DiqvizMktMCCeM/e4QH6gfGTbbn9BVh5OQDIhPihHf6dxYgykJA6m5ufo45Ci7Qg
m49QsL0CXfJM3s2Gv+sCv/GHGhYi5aQ8YimMmoTjs0Yhz91vdALoKNsvOm015703
j8YOa4+PlP4AtN8lMj61Ule6predTiOfGk03Xy8jMrpeOlbPEYI5wtzfFDtU7g6C
lj0RBriWa5JwBTN6YB5KUJRqy2VZDZYdF3jK7ksUlOzHfyVSEu5qYknn7neaFvZi
iNy3kW5/0VVbV4DS8xDgvcEUiu94rf+eEi9owGV/PwOg4vYhO69QzYqQbHDTgsWZ
6ZHej0dm0nRMWBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org