Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35322e302f32342d3234203d3e20323632353838.roa
File:                     3137372e37352e35322e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          tyHLK945hEb8IbkAx7oohvfg1AVmwhLIxRn9nQyXqqA=
Subject key identifier:   4D:04:A1:2D:ED:2E:A2:A7:2C:E6:15:40:40:0B:33:BE:5E:4D:31:44
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       174C6CDA4E648F60E80DA4682EF83FFA73637199
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35322e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:19:23 +0000
ROA not before:           Sat 09 Apr 2022 14:14:23 +0000
ROA not after:            Sat 08 Apr 2023 14:19:23 +0000
asID:                     262588
IP address blocks:        177.75.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4c:6c:da:4e:64:8f:60:e8:0d:a4:68:2e:f8:3f:fa:73:63:71:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:14:23 2022 GMT
            Not After : Apr  8 14:19:23 2023 GMT
        Subject: CN=4D04A12DED2EA2A72CE61540400B33BE5E4D3144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:83:04:d9:ae:08:41:f5:aa:45:5d:ef:06:
                    18:52:67:ba:f0:ec:9b:9a:47:c4:d7:80:8c:6a:31:
                    c8:4e:15:ca:a2:13:14:01:bc:a2:ce:65:ba:9f:64:
                    ae:e6:34:0f:9c:bc:ed:07:d8:9e:b9:10:36:37:56:
                    0e:f4:ea:9e:79:73:04:6b:db:f2:46:14:e9:2d:3b:
                    5a:82:ed:9e:03:db:94:d0:b5:54:00:82:a0:a3:92:
                    ea:1c:23:dd:dc:3c:b5:7b:0b:95:9e:e7:98:3f:8c:
                    e9:25:8a:57:bd:f6:41:41:19:dd:c8:e3:24:db:da:
                    dd:78:bd:bf:9b:7e:5e:42:73:09:73:e3:f1:d8:22:
                    2a:e3:91:7a:5d:b6:9a:20:30:4b:17:8e:11:0b:7b:
                    86:77:e7:87:2d:32:d2:fd:c7:8d:79:0e:60:3f:28:
                    0f:0f:a9:20:8c:bd:cb:94:63:94:7c:e7:47:dd:04:
                    ee:97:5c:af:d5:53:4e:d4:4f:f3:b5:c9:30:3c:56:
                    47:fb:11:3d:ab:41:81:43:78:e7:c7:dd:fc:e4:c6:
                    97:9e:f3:99:56:4a:2d:a3:ab:28:18:68:f2:55:16:
                    76:93:db:68:f1:73:dc:13:5d:63:bd:2e:a3:d3:cb:
                    c0:25:f4:35:39:21:ed:a0:4b:a8:ba:58:4f:24:d2:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:04:A1:2D:ED:2E:A2:A7:2C:E6:15:40:40:0B:33:BE:5E:4D:31:44
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35322e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:eb:87:3d:3d:76:9a:27:61:13:87:ff:9d:4c:06:3d:c9:
         02:1f:be:b4:2c:a4:10:46:14:92:1d:2c:d5:4c:0c:c0:83:42:
         a5:5f:53:8e:ad:2d:33:ec:fa:ac:ff:b9:62:33:04:3c:2c:b1:
         03:6b:a9:30:9f:fb:a9:f0:01:ec:70:3b:91:60:1f:3e:be:54:
         7e:3f:ce:23:d6:20:2b:07:24:95:54:25:ad:ce:ba:bf:de:16:
         5e:ce:d5:bf:91:9f:16:49:00:c0:87:0f:57:8a:fa:8b:b7:08:
         a4:7a:f5:a7:e0:3c:ee:49:f5:9f:12:94:f0:f4:68:ca:10:de:
         cc:a5:55:59:8c:1c:2e:82:32:06:89:1a:65:c3:a3:c3:7d:5d:
         30:cc:57:be:c6:e1:d7:b9:da:e6:23:93:0c:45:29:cc:7c:4f:
         8d:3a:18:99:09:3a:4b:27:8e:e6:ad:4a:8a:a0:ab:c6:b7:cf:
         cd:db:45:d8:bc:df:43:5b:89:c0:7a:1b:f9:5b:b7:78:79:41:
         c3:4d:da:df:d6:0f:c0:6a:6f:7a:66:b7:9e:e1:aa:63:80:68:
         d8:49:f0:a8:77:08:d8:a8:4f:0d:16:45:45:d1:0a:dc:2c:e4:
         70:1e:24:a8:64:ce:cf:7c:55:47:b5:96:e7:60:5a:da:22:cc:
         1c:f9:35:e3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUF0xs2k5kj2DoDaRoLvg/+nNjcZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMjA0MDkxNDE0MjNaFw0yMzA0MDgxNDE5MjNaMDMxMTAvBgNV
BAMTKDREMDRBMTJERUQyRUEyQTcyQ0U2MTU0MDQwMEIzM0JFNUU0RDMxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpYME2a4IQfWqRV3vBhhSZ7rw
7JuaR8TXgIxqMchOFcqiExQBvKLOZbqfZK7mNA+cvO0H2J65EDY3Vg706p55cwRr
2/JGFOktO1qC7Z4D25TQtVQAgqCjkuocI93cPLV7C5We55g/jOklile99kFBGd3I
4yTb2t14vb+bfl5Ccwlz4/HYIirjkXpdtpogMEsXjhELe4Z354ctMtL9x415DmA/
KA8PqSCMvcuUY5R850fdBO6XXK/VU07UT/O1yTA8Vkf7ET2rQYFDeOfH3fzkxpee
85lWSi2jqygYaPJVFnaT22jxc9wTXWO9LqPTy8Al9DU5Ie2gS6i6WE8k0gEFAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUTQShLe0uoqcs5hVAQAszvl5NMUQwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz
NzM3MmUzNzM1MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsUs0MA0GCSqGSIb3DQEBCwUAA4IBAQAvyeuHPT12midh
E4f/nUwGPckCH760LKQQRhSSHSzVTAzAg0KlX1OOrS0z7Pqs/7liMwQ8LLEDa6kw
n/up8AHscDuRYB8+vlR+P84j1iArBySVVCWtzrq/3hZeztW/kZ8WSQDAhw9XivqL
twikevWn4DzuSfWfEpTw9GjKEN7MpVVZjBwugjIGiRplw6PDfV0wzFe+xuHXudrm
I5MMRSnMfE+NOhiZCTpLJ47mrUqKoKvGt8/N20XYvN9DW4nAehv5W7d4eUHDTdrf
1g/Aam96Zree4apjgGjYSfCodwjYqE8NFkVF0QrcLORwHiSoZM7PfFVHtZbnYFra
Iswc+TXj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org