Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35382e302f32332d3233203d3e203532373337.roa
File:                     3137372e38352e35382e302f32332d3233203d3e203532373337.roa (raw, json)
Hash identifier:          55vnIzfLUPFEib8VH8adEVwCxrYgIMWOeeR6jp2i7tY=
Subject key identifier:   F1:22:DC:21:45:3F:F5:71:7C:7F:31:1F:A1:16:39:64:3E:D6:B7:57
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       2429794E7D23B0EB251F7D14B07E37EEC2849459
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35382e302f32332d3233203d3e203532373337.roa
Signing time:             Tue 31 Oct 2023 16:59:45 +0000
ROA not before:           Tue 31 Oct 2023 16:54:45 +0000
ROA not after:            Tue 29 Oct 2024 16:59:45 +0000
asID:                     52737
IP address blocks:        177.85.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:79:4e:7d:23:b0:eb:25:1f:7d:14:b0:7e:37:ee:c2:84:94:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Oct 31 16:54:45 2023 GMT
            Not After : Oct 29 16:59:45 2024 GMT
        Subject: CN=F122DC21453FF5717C7F311FA11639643ED6B757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:20:cc:3d:ba:08:b2:fe:60:38:bd:a1:7a:
                    49:41:d9:ff:82:49:94:8b:04:c0:74:06:7c:30:c7:
                    40:99:f0:72:26:5a:39:23:0d:eb:0a:9e:0c:24:7f:
                    6b:30:a6:72:19:68:db:b6:f3:39:f6:53:cf:01:a7:
                    c7:65:e9:a0:3e:8c:68:df:18:22:ee:bc:ce:b7:ce:
                    38:43:62:1a:95:dc:38:6b:9a:82:bb:ca:6b:d9:98:
                    39:8a:ef:90:f2:cd:90:c9:d0:b8:42:95:9c:b6:1d:
                    a9:04:9d:d4:0f:0f:00:32:90:be:75:9b:56:75:a5:
                    af:ce:31:26:a0:69:b0:46:db:3e:20:5b:53:4d:6c:
                    0a:f5:5e:55:74:ff:43:a0:56:93:4e:90:e2:bc:68:
                    c8:1d:1e:33:56:70:65:16:d5:e0:8d:e9:27:c7:28:
                    14:8f:f0:2f:0f:1e:e5:68:d0:32:c9:ed:32:75:4a:
                    38:bd:50:d3:dd:f5:c7:96:29:15:68:f9:0c:7f:ba:
                    82:e4:99:74:33:35:51:c3:1c:3f:af:41:4e:f2:34:
                    d5:ca:92:82:5f:8f:33:2a:c2:b4:e7:13:12:ab:e6:
                    fb:c5:04:a5:4d:03:7f:17:ee:9e:bc:f5:4d:07:43:
                    fc:bc:d8:6e:1d:15:4d:7d:ab:b1:25:df:02:a8:18:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:DC:21:45:3F:F5:71:7C:7F:31:1F:A1:16:39:64:3E:D6:B7:57
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35382e302f32332d3233203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:44:1d:91:5e:62:ed:73:70:ac:39:68:6a:5d:60:14:63:
         f5:b8:07:84:f7:a6:bc:66:8f:d8:d3:f1:4a:18:c5:51:a7:4c:
         bd:97:12:ef:39:a2:0e:71:1e:05:0a:c5:56:e1:78:64:62:83:
         eb:8e:97:79:97:16:f4:1b:91:5a:fb:2a:53:cb:e2:be:b6:e3:
         3c:12:f1:a6:e6:35:bf:75:6b:14:ac:00:46:34:02:45:b9:7b:
         96:b9:96:5b:dc:8c:30:4b:f8:da:a6:a4:16:e4:3c:88:81:08:
         2b:84:9d:58:31:3f:ab:9b:8d:2e:fe:52:8b:fa:2e:82:b3:37:
         ca:71:c8:74:ea:a3:b9:7a:3c:e0:3d:c1:49:e7:ee:fe:2c:da:
         0b:bc:c8:27:45:ca:ff:09:83:be:67:b8:b1:e2:c3:0e:98:73:
         1d:e5:42:c8:c5:5f:2f:f4:04:17:8e:f1:0b:b2:3f:4e:f3:c7:
         27:59:82:ef:dc:b7:f0:75:31:bb:5a:a9:a3:d3:a0:c4:11:26:
         a3:26:c6:f3:8b:ff:97:00:77:2e:f7:4b:81:16:95:64:9d:30:
         16:d8:f8:4b:e7:c5:ea:c3:a0:c0:0c:49:12:34:8d:8d:06:81:
         f3:2e:ee:1c:23:a4:ce:5d:37:92:8b:2f:a0:bc:b6:e3:65:77:
         6e:e8:8f:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJCl5Tn0jsOslH30UsH437sKElFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4MTg1MzVDODFERTJGM0QxNDcwNTUxRTM1QkFBNUYw
ODlEOTcyMDAeFw0yMzEwMzExNjU0NDVaFw0yNDEwMjkxNjU5NDVaMDMxMTAvBgNV
BAMTKEYxMjJEQzIxNDUzRkY1NzE3QzdGMzExRkExMTYzOTY0M0VENkI3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0iDMPboIsv5gOL2heklB2f+C
SZSLBMB0Bnwwx0CZ8HImWjkjDesKngwkf2swpnIZaNu28zn2U88Bp8dl6aA+jGjf
GCLuvM63zjhDYhqV3DhrmoK7ymvZmDmK75DyzZDJ0LhClZy2HakEndQPDwAykL51
m1Z1pa/OMSagabBG2z4gW1NNbAr1XlV0/0OgVpNOkOK8aMgdHjNWcGUW1eCN6SfH
KBSP8C8PHuVo0DLJ7TJ1Sji9UNPd9ceWKRVo+Qx/uoLkmXQzNVHDHD+vQU7yNNXK
koJfjzMqwrTnExKr5vvFBKVNA38X7p689U0HQ/y82G4dFU19q7El3wKoGP6jAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8SLcIUU/9XF8fzEfoRY5ZD7Wt1cwHwYDVR0j
BBgwFoAUWoGFNcgd4vPRRwVR41uqXwidlyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dHM2dqTHZia3dRQWE3YVpKcmFCU05NV1JYb0JqdjN3WkN0YUdkb202
b2YvMC81QTgxODUzNUM4MURFMkYzRDE0NzA1NTFFMzVCQUE1RjA4OUQ5NzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBODE4NTM1QzgxREUyRjNE
MTQ3MDU1MUUzNUJBQTVGMDg5RDk3MjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3RzNnakx2Ymt3UUFhN2FaSnJhQlNOTVdSWG9CanYzd1pDdGFHZG9tNm9mLzAv
MzEzNzM3MmUzODM1MmUzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM3
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFVOjANBgkqhkiG9w0BAQsFAAOCAQEALVZEHZFeYu1z
cKw5aGpdYBRj9bgHhPemvGaP2NPxShjFUadMvZcS7zmiDnEeBQrFVuF4ZGKD646X
eZcW9BuRWvsqU8vivrbjPBLxpuY1v3VrFKwARjQCRbl7lrmWW9yMMEv42qakFuQ8
iIEIK4SdWDE/q5uNLv5Si/ougrM3ynHIdOqjuXo84D3BSefu/izaC7zIJ0XK/wmD
vme4seLDDphzHeVCyMVfL/QEF47xC7I/TvPHJ1mC79y38HUxu1qpo9OgxBEmoybG
84v/lwB3LvdLgRaVZJ0wFtj4S+fF6sOgwAxJEjSNjQaB8y7uHCOkzl03kosvoLy2
42V3buiPRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org