Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/3137372e3130312e36342e302f32302d3234203d3e20323632363130.roa
File:                     3137372e3130312e36342e302f32302d3234203d3e20323632363130.roa (raw, json)
Hash identifier:          X2ewnAtp8DtvhcRXVyEbsH3C9Pgmcs4uw1CHOdeHNf8=
Subject key identifier:   A7:D6:CD:DA:00:FE:EC:5B:05:D4:8A:34:72:A2:77:6E:AF:2D:82:09
Certificate issuer:       /CN=53591DD5E351B945FCF842C06D244EE12F738570
Certificate serial:       5C340E25A7DFBD60DAA3C535E26E01C2381FA78B
Authority key identifier: 53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53591DD5E351B945FCF842C06D244EE12F738570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/3137372e3130312e36342e302f32302d3234203d3e20323632363130.roa
Signing time:             Sun 22 Oct 2023 20:00:00 +0000
ROA not before:           Sun 22 Oct 2023 19:55:00 +0000
ROA not after:            Tue 22 Oct 2024 20:00:00 +0000
asID:                     262610
IP address blocks:        177.101.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:34:0e:25:a7:df:bd:60:da:a3:c5:35:e2:6e:01:c2:38:1f:a7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53591DD5E351B945FCF842C06D244EE12F738570
        Validity
            Not Before: Oct 22 19:55:00 2023 GMT
            Not After : Oct 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:72:bf:58:31:7e:54:7d:6f:cb:2c:fd:18:
                    df:3c:8a:a5:42:d5:09:36:3e:05:23:3c:12:dc:ee:
                    76:78:8c:f8:10:5d:7e:73:1e:5a:85:cb:ea:db:07:
                    58:a1:b9:2a:0a:a9:49:29:4b:9e:ff:6f:d0:51:99:
                    86:e1:1f:fa:22:5e:64:fc:df:a0:92:5e:2c:a9:23:
                    de:e1:ed:2e:91:0c:7b:de:c2:b2:09:91:64:6a:28:
                    e5:7f:53:8d:a9:c3:a7:a0:54:67:0f:82:0d:7b:86:
                    6a:84:6c:ee:20:99:2a:fe:a5:c8:5f:72:24:50:66:
                    11:02:ab:f5:25:6e:12:a2:6c:00:8e:e6:62:df:fd:
                    a8:77:4f:14:28:f5:06:b4:55:bd:08:36:f6:40:9e:
                    8c:06:f9:1b:ae:42:bd:95:fa:4f:1b:79:c8:a3:fa:
                    99:2b:05:0a:a7:4a:02:29:e6:2a:61:83:70:09:13:
                    56:c1:d6:8c:bc:1e:08:0e:05:3c:8a:00:13:d4:43:
                    75:43:f7:4f:27:73:27:6d:9b:de:34:03:40:11:61:
                    87:c1:dd:f4:fd:6a:d7:7e:63:fa:44:e2:ca:46:81:
                    a6:59:db:f0:b3:76:91:e8:1d:57:10:15:77:1e:5e:
                    a8:20:be:5c:9d:16:51:8c:02:25:1e:44:12:f2:ec:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:CD:DA:00:FE:EC:5B:05:D4:8A:34:72:A2:77:6E:AF:2D:82:09
            X509v3 Authority Key Identifier:
                keyid:53:59:1D:D5:E3:51:B9:45:FC:F8:42:C0:6D:24:4E:E1:2F:73:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/53591DD5E351B945FCF842C06D244EE12F738570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53591DD5E351B945FCF842C06D244EE12F738570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9EeU4iYKeEeQogRRLR8kWUcjCe3dCPT6aTrgDvheEVF6/0/3137372e3130312e36342e302f32302d3234203d3e20323632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:23:81:43:ac:41:f6:84:12:99:35:ca:54:b3:9e:d9:77:
         37:d3:fb:54:d9:c3:f5:e5:19:80:73:d9:cb:b7:a2:e6:09:49:
         3c:af:6f:87:2c:06:89:76:25:14:a9:a4:5b:d2:e6:d3:4b:d5:
         6f:96:67:02:98:f2:a9:8d:e2:d9:6f:45:8c:e0:30:07:52:a2:
         2d:fa:4b:0e:0b:4e:df:ec:30:4f:20:8c:e6:f3:e2:d4:67:66:
         8b:02:a9:6c:a4:bb:b4:b9:58:1b:94:7e:47:04:de:c5:ef:1a:
         79:a3:21:19:b3:87:12:0d:0c:df:a8:53:e5:7a:6b:4a:79:9a:
         5a:00:1c:43:53:07:0b:78:66:02:43:3e:90:d0:17:df:9e:4a:
         07:f0:97:b1:bd:bf:af:b9:86:b2:5a:a1:ec:ac:ed:76:df:8e:
         c1:25:d1:d3:86:40:95:7b:de:5f:94:b8:a5:84:d1:e2:12:10:
         0b:23:ae:35:73:6b:9f:bf:f0:9c:ce:71:d3:db:4b:e4:26:83:
         48:44:56:bc:2d:f0:3c:e2:3c:b3:e8:24:4e:e7:6b:f8:41:30:
         a3:b9:e0:ee:fb:95:e9:f5:fe:ee:3d:e4:3d:e9:c8:1d:4a:d6:
         77:86:b7:51:90:b7:95:10:ea:46:cf:ef:20:ca:23:21:0b:84:
         10:e6:a4:23
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXDQOJaffvWDao8U14m4Bwjgfp4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM1OTFERDVFMzUxQjk0NUZDRjg0MkMwNkQyNDRFRTEy
RjczODU3MDAeFw0yMzEwMjIxOTU1MDBaFw0yNDEwMjIyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTc2QTcyQkY1ODMxN0U1NDdE
NkZDQjJDRkQxOERGM0M4QUE1NDJENTA5MzYzRTA1MjMzQzEyRENFRTc2Nzg4Q0Y4
MTA1RDdFNzMxRTVBODVDQkVBREIwNzU4QTFCOTJBMEFBOTQ5Mjk0QjlFRkY2RkQw
NTE5OTg2RTExRkZBMjI1RTY0RkNERkEwOTI1RTJDQTkyM0RFRTFFRDJFOTEwQzdC
REVDMkIyMDk5MTY0NkEyOEU1N0Y1MzhEQTlDM0E3QTA1NDY3MEY4MjBEN0I4NjZB
ODQ2Q0VFMjA5OTJBRkVBNUM4NUY3MjI0NTA2NjExMDJBQkY1MjU2RTEyQTI2QzAw
OEVFNjYyREZGREE4Nzc0RjE0MjhGNTA2QjQ1NUJEMDgzNkY2NDA5RThDMDZGOTFC
QUU0MkJEOTVGQTRGMUI3OUM4QTNGQTk5MkIwNTBBQTc0QTAyMjlFNjJBNjE4Mzcw
MDkxMzU2QzFENjhDQkMxRTA4MEUwNTNDOEEwMDEzRDQ0Mzc1NDNGNzRGMjc3MzI3
NkQ5QkRFMzQwMzQwMTE2MTg3QzFEREY0RkQ2QUQ3N0U2M0ZBNDRFMkNBNDY4MUE2
NTlEQkYwQjM3NjkxRTgxRDU3MTAxNTc3MUU1RUE4MjBCRTVDOUQxNjUxOEMwMjI1
MUU0NDEyRjJFQzBBQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA52pyv1gxflR9b8ss/RjfPIqlQtUJNj4FIzwS3O52eIz4EF1+cx5a
hcvq2wdYobkqCqlJKUue/2/QUZmG4R/6Il5k/N+gkl4sqSPe4e0ukQx73sKyCZFk
aijlf1ONqcOnoFRnD4INe4ZqhGzuIJkq/qXIX3IkUGYRAqv1JW4SomwAjuZi3/2o
d08UKPUGtFW9CDb2QJ6MBvkbrkK9lfpPG3nIo/qZKwUKp0oCKeYqYYNwCRNWwdaM
vB4IDgU8igAT1EN1Q/dPJ3MnbZveNANAEWGHwd30/WrXfmP6ROLKRoGmWdvws3aR
6B1XEBV3Hl6oIL5cnRZRjAIlHkQS8uwKuQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKfWzdoA/uxbBdSKNHKid26vLYIJMB8GA1UdIwQYMBaAFFNZHdXjUblF/PhCwG0k
TuEvc4VwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlFZVU0aVlLZUVlUW9n
UlJMUjhrV1VjakNlM2RDUFQ2YVRyZ0R2aGVFVkY2LzAvNTM1OTFERDVFMzUxQjk0
NUZDRjg0MkMwNkQyNDRFRTEyRjczODU3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MzU5MURENUUzNTFCOTQ1RkNGODQyQzA2RDI0NEVFMTJGNzM4
NTcwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85RWVVNGlZS2VFZVFvZ1JSTFI4
a1dVY2pDZTNkQ1BUNmFUcmdEdmhlRVZGNi8wLzMxMzczNzJlMzEzMDMxMmUzNjM0
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzYzMTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
sWVAMA0GCSqGSIb3DQEBCwUAA4IBAQCfbCOBQ6xB9oQSmTXKVLOe2Xc30/tU2cP1
5RmAc9nLt6LmCUk8r2+HLAaJdiUUqaRb0ubTS9VvlmcCmPKpjeLZb0WM4DAHUqIt
+ksOC07f7DBPIIzm8+LUZ2aLAqlspLu0uVgblH5HBN7F7xp5oyEZs4cSDQzfqFPl
emtKeZpaABxDUwcLeGYCQz6Q0BffnkoH8Jexvb+vuYayWqHsrO12347BJdHThkCV
e95flLilhNHiEhALI641c2ufv/CcznHT20vkJoNIRFa8LfA84jyz6CRO52v4QTCj
ueDu+5Xp9f7uPeQ96cgdStZ3hrdRkLeVEOpGz+8gyiMhC4QQ5qQj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org