Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32342d3234203d3e203532373337.roa
File:                     3137372e38352e36302e302f32342d3234203d3e203532373337.roa (raw, json)
Hash identifier:          5AeEV0+RBuWnMX/Xv4PxaI6S90SNzpjRJMoUxgJCCkE=
Subject key identifier:   4D:F3:B3:E5:D1:8F:57:25:99:9C:32:2B:A1:54:7A:5A:31:B5:FC:7C
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       6D8BF35F43C9F6E580D9801761C8C6B02363492F
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32342d3234203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:03 +0000
ROA not before:           Tue 27 Jun 2023 14:03:03 +0000
ROA not after:            Tue 25 Jun 2024 14:08:03 +0000
asID:                     52737
IP address blocks:        177.85.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8b:f3:5f:43:c9:f6:e5:80:d9:80:17:61:c8:c6:b0:23:63:49:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:03 2023 GMT
            Not After : Jun 25 14:08:03 2024 GMT
        Subject: CN=4DF3B3E5D18F5725999C322BA1547A5A31B5FC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:98:c8:48:4c:f9:7b:f6:48:2d:68:66:c4:
                    9b:6d:9a:1b:cf:c9:08:ce:bc:18:9c:da:b6:cf:1b:
                    af:83:4d:b3:27:fe:af:b8:2f:86:b8:9e:82:84:72:
                    ca:fc:eb:d2:7c:2c:74:d8:88:0a:ba:27:b3:f3:10:
                    44:6b:bc:1b:0d:7b:c5:7c:17:29:ce:df:34:b1:97:
                    74:b4:3e:49:3c:ad:ba:ed:06:29:62:1e:7e:4b:33:
                    28:42:df:d9:6c:ff:69:5e:a0:53:a2:58:fb:bb:de:
                    c4:65:7f:d4:56:4f:ad:87:63:0a:69:7a:09:47:52:
                    95:9e:77:fe:4c:8a:b7:07:e4:e1:5c:8a:b8:cc:04:
                    5e:8c:ae:39:d4:1a:47:aa:7e:b2:11:fc:ba:c8:ff:
                    7f:63:a7:10:06:46:03:d6:c1:94:e0:2d:af:d5:52:
                    7c:f6:cc:af:ec:70:0a:08:64:3c:f1:02:3c:be:f0:
                    3f:90:0f:c2:60:ab:d8:fe:ae:96:92:0c:c5:d8:d4:
                    18:9f:fd:74:d7:39:c2:fe:88:1f:10:46:c7:dc:95:
                    5b:f6:64:87:95:05:bc:65:bc:87:24:eb:df:12:e6:
                    d2:23:9f:70:31:a8:b5:4d:16:29:fc:cf:90:df:7c:
                    a0:ae:68:88:c3:88:23:81:ee:0e:d7:06:f7:1f:fa:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:B3:E5:D1:8F:57:25:99:9C:32:2B:A1:54:7A:5A:31:B5:FC:7C
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32342d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:3b:e1:e3:63:c0:08:cb:d6:ab:60:1a:26:8e:98:7f:cf:
         c3:df:d0:a5:ac:6c:86:f1:6f:b5:2e:43:9b:11:ea:46:59:5e:
         21:75:5b:49:d0:91:d5:f6:79:7f:a7:8c:19:4a:d8:70:83:49:
         44:09:f6:39:1d:2b:e4:a0:2c:f1:84:1f:99:81:96:a1:5c:ac:
         c4:d6:cc:74:7f:3c:00:dc:d5:21:0c:fa:d9:24:32:41:c8:ec:
         3b:8a:41:63:4f:a4:04:d7:3a:3c:9e:3b:0b:d0:80:5f:57:d3:
         81:b9:54:45:5c:33:ff:0b:bf:4f:e1:b9:97:57:06:10:c8:10:
         91:3d:19:73:db:6e:f4:d3:00:a0:d4:63:30:8d:3f:46:3a:0b:
         ed:e1:68:c3:c8:7f:05:c6:6b:39:0f:f4:d8:43:28:8c:21:c2:
         d8:c7:a5:42:c1:e3:20:ff:06:e6:99:8c:9d:3e:a3:a5:4d:9b:
         6c:81:3c:c9:ae:46:11:1c:22:6e:88:d0:0d:0b:d5:d9:56:43:
         2a:4d:1a:c7:19:6f:98:65:8a:d0:18:0a:41:96:08:87:61:85:
         71:f9:24:5a:66:a0:38:b2:3b:e6:41:ae:44:5b:e1:76:8e:dc:
         f1:27:bb:85:15:59:e0:b7:96:8d:a6:19:35:27:33:a3:38:00:
         4f:e3:26:00
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbYvzX0PJ9uWA2YAXYcjGsCNjSS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4MTg1MzVDODFERTJGM0QxNDcwNTUxRTM1QkFBNUYw
ODlEOTcyMDAeFw0yMzA2MjcxNDAzMDNaFw0yNDA2MjUxNDA4MDNaMDMxMTAvBgNV
BAMTKDRERjNCM0U1RDE4RjU3MjU5OTlDMzIyQkExNTQ3QTVBMzFCNUZDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MJjISEz5e/ZILWhmxJttmhvP
yQjOvBic2rbPG6+DTbMn/q+4L4a4noKEcsr869J8LHTYiAq6J7PzEERrvBsNe8V8
FynO3zSxl3S0Pkk8rbrtBiliHn5LMyhC39ls/2leoFOiWPu73sRlf9RWT62HYwpp
eglHUpWed/5MircH5OFcirjMBF6MrjnUGkeqfrIR/LrI/39jpxAGRgPWwZTgLa/V
Unz2zK/scAoIZDzxAjy+8D+QD8Jgq9j+rpaSDMXY1Bif/XTXOcL+iB8QRsfclVv2
ZIeVBbxlvIck698S5tIjn3AxqLVNFin8z5DffKCuaIjDiCOB7g7XBvcf+gjpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTfOz5dGPVyWZnDIroVR6WjG1/HwwHwYDVR0j
BBgwFoAUWoGFNcgd4vPRRwVR41uqXwidlyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dHM2dqTHZia3dRQWE3YVpKcmFCU05NV1JYb0JqdjN3WkN0YUdkb202
b2YvMC81QTgxODUzNUM4MURFMkYzRDE0NzA1NTFFMzVCQUE1RjA4OUQ5NzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBODE4NTM1QzgxREUyRjNE
MTQ3MDU1MUUzNUJBQTVGMDg5RDk3MjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3RzNnakx2Ymt3UUFhN2FaSnJhQlNOTVdSWG9CanYzd1pDdGFHZG9tNm9mLzAv
MzEzNzM3MmUzODM1MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM3
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFVPDANBgkqhkiG9w0BAQsFAAOCAQEAXjk74eNjwAjL
1qtgGiaOmH/Pw9/QpaxshvFvtS5DmxHqRlleIXVbSdCR1fZ5f6eMGUrYcINJRAn2
OR0r5KAs8YQfmYGWoVysxNbMdH88ANzVIQz62SQyQcjsO4pBY0+kBNc6PJ47C9CA
X1fTgblURVwz/wu/T+G5l1cGEMgQkT0Zc9tu9NMAoNRjMI0/RjoL7eFow8h/BcZr
OQ/02EMojCHC2MelQsHjIP8G5pmMnT6jpU2bbIE8ya5GERwibojQDQvV2VZDKk0a
xxlvmGWK0BgKQZYIh2GFcfkkWmagOLI75kGuRFvhdo7c8Se7hRVZ4LeWjaYZNScz
ozgAT+MmAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org