Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa
File:                     3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (raw, json)
Hash identifier:          DetCjkiPI26AzBG/8jac4nuCi2CIfS5dPC9H9spRPj8=
Subject key identifier:   EA:06:D6:2C:33:06:FE:70:09:20:A5:66:BE:A8:68:31:75:5C:04:EA
Certificate issuer:       /CN=3C2271C03325023D009AB674AF80F6446990E2E7
Certificate serial:       2ED4421D53995463329CE7130626801CA0078FEE
Authority key identifier: 3C:22:71:C0:33:25:02:3D:00:9A:B6:74:AF:80:F6:44:69:90:E2:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C2271C03325023D009AB674AF80F6446990E2E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa
Signing time:             Thu 15 Feb 2024 05:06:15 +0000
ROA not before:           Thu 15 Feb 2024 05:01:15 +0000
ROA not after:            Thu 13 Feb 2025 05:06:15 +0000
asID:                     262436
IP address blocks:        177.52.32.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d4:42:1d:53:99:54:63:32:9c:e7:13:06:26:80:1c:a0:07:8f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2271C03325023D009AB674AF80F6446990E2E7
        Validity
            Not Before: Feb 15 05:01:15 2024 GMT
            Not After : Feb 13 05:06:15 2025 GMT
        Subject: CN=EA06D62C3306FE700920A566BEA86831755C04EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:88:96:d1:df:01:e1:4a:2f:2b:75:82:12:
                    8a:56:b7:fe:35:0b:7d:2c:08:a7:ad:ea:b7:e9:d8:
                    01:b2:71:f5:20:91:4a:d9:78:53:bb:10:a7:39:7b:
                    8f:01:07:a5:26:5a:70:ea:ff:ad:f9:a2:70:65:e2:
                    d4:9f:64:98:fd:c6:55:eb:fc:96:cb:d9:ad:f7:f1:
                    a8:68:62:6d:fa:54:68:79:22:c6:68:78:7e:c2:be:
                    7d:8e:37:d2:b4:1c:1b:91:bc:7f:6f:23:16:71:ff:
                    c5:0a:04:d5:8c:13:41:b8:98:aa:ad:1d:ff:27:67:
                    a2:e0:5c:8b:c5:02:bf:78:b9:7d:03:99:e2:c6:a2:
                    c3:c8:12:76:bf:5f:9c:78:37:03:08:aa:22:32:c5:
                    8b:76:45:8b:a1:2b:3b:42:9d:5e:60:53:53:7c:54:
                    cc:22:a9:c7:62:12:f0:00:aa:90:49:37:31:98:65:
                    05:57:2a:c8:12:90:0f:ee:7c:81:e1:b3:d0:3e:2d:
                    52:be:d8:50:a1:a6:2b:4c:06:a0:a3:69:7b:65:e8:
                    1b:bc:33:68:b2:c5:22:5f:7f:02:88:bd:e2:01:39:
                    22:65:4f:37:de:64:e0:73:a0:38:ca:ba:b9:f1:5a:
                    ff:04:88:e4:a9:88:dd:6e:d7:c4:82:e3:b5:62:43:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:06:D6:2C:33:06:FE:70:09:20:A5:66:BE:A8:68:31:75:5C:04:EA
            X509v3 Authority Key Identifier:
                keyid:3C:22:71:C0:33:25:02:3D:00:9A:B6:74:AF:80:F6:44:69:90:E2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3C2271C03325023D009AB674AF80F6446990E2E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C2271C03325023D009AB674AF80F6446990E2E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e33322e302f32322d3332203d3e20323632343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:33:08:31:f9:b1:45:64:61:93:d1:35:a8:e5:6a:46:34:
         a1:1f:cc:e9:d7:7d:3d:43:cc:11:6a:8b:e5:78:10:e2:a6:d9:
         10:41:d7:61:01:f6:f6:4b:47:79:c6:52:4a:10:c1:5c:d8:86:
         02:b5:ed:39:98:b0:c0:4f:f7:73:d5:2b:c3:e9:fd:9f:90:fe:
         c8:fb:9a:8b:76:4e:33:fd:32:b8:9b:55:9e:71:1c:4e:c0:34:
         cf:9d:d7:fa:73:12:b7:3d:84:80:8f:45:82:cc:47:f1:30:b4:
         d5:2d:ce:cc:4b:8c:77:71:ef:b6:0f:31:29:2b:ec:4b:39:e0:
         3b:61:97:3e:fc:4c:e7:18:e2:4e:8b:8b:a1:31:07:65:10:15:
         bd:d3:4c:58:74:39:4d:92:ef:d8:47:22:0a:bd:6c:cf:37:6f:
         9f:9f:12:06:3f:55:47:12:cd:64:c0:9a:89:44:a1:94:c5:4e:
         eb:03:8f:07:be:2e:9d:55:41:bb:63:0e:db:0d:27:d3:44:83:
         1c:fa:20:17:08:be:7f:3e:3e:22:dd:ce:34:3a:02:88:10:7b:
         28:6e:b9:21:a2:1b:f4:a6:93:b0:13:75:c0:cb:e0:cc:83:ae:
         75:e2:bc:9e:bf:5b:11:e5:9a:3d:c5:e8:bf:6d:f3:d1:59:87:
         55:8f:97:0c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULtRCHVOZVGMynOcTBiaAHKAHj+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMjcxQzAzMzI1MDIzRDAwOUFCNjc0QUY4MEY2NDQ2
OTkwRTJFNzAeFw0yNDAyMTUwNTAxMTVaFw0yNTAyMTMwNTA2MTVaMDMxMTAvBgNV
BAMTKEVBMDZENjJDMzMwNkZFNzAwOTIwQTU2NkJFQTg2ODMxNzU1QzA0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhYiW0d8B4UovK3WCEopWt/41
C30sCKet6rfp2AGycfUgkUrZeFO7EKc5e48BB6UmWnDq/635onBl4tSfZJj9xlXr
/JbL2a338ahoYm36VGh5IsZoeH7Cvn2ON9K0HBuRvH9vIxZx/8UKBNWME0G4mKqt
Hf8nZ6LgXIvFAr94uX0DmeLGosPIEna/X5x4NwMIqiIyxYt2RYuhKztCnV5gU1N8
VMwiqcdiEvAAqpBJNzGYZQVXKsgSkA/ufIHhs9A+LVK+2FChpitMBqCjaXtl6Bu8
M2iyxSJffwKIveIBOSJlTzfeZOBzoDjKurnxWv8EiOSpiN1u18SC47ViQyqxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6gbWLDMG/nAJIKVmvqhoMXVcBOowHwYDVR0j
BBgwFoAUPCJxwDMlAj0AmrZ0r4D2RGmQ4ucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhF
dWMvMC8zQzIyNzFDMDMzMjUwMjNEMDA5QUI2NzRBRjgwRjY0NDY5OTBFMkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDMjI3MUMwMzMyNTAyM0Qw
MDlBQjY3NEFGODBGNjQ0Njk5MEUyRTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F4bXVFMmp6MkNLR1ZLTld6OG5mOTNETlo4UWdBTjhyVERnckZkVVY4RXVjLzAv
MzEzNzM3MmUzNTMyMmUzMzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTQgMA0GCSqGSIb3DQEBCwUAA4IBAQBW+DMIMfmx
RWRhk9E1qOVqRjShH8zp1309Q8wRaovleBDiptkQQddhAfb2S0d5xlJKEMFc2IYC
te05mLDAT/dz1SvD6f2fkP7I+5qLdk4z/TK4m1WecRxOwDTPndf6cxK3PYSAj0WC
zEfxMLTVLc7MS4x3ce+2DzEpK+xLOeA7YZc+/EznGOJOi4uhMQdlEBW900xYdDlN
ku/YRyIKvWzPN2+fnxIGP1VHEs1kwJqJRKGUxU7rA48Hvi6dVUG7Yw7bDSfTRIMc
+iAXCL5/Pj4i3c40OgKIEHsobrkhohv0ppOwE3XAy+DMg6514ryev1sR5Zo9xei/
bfPRWYdVj5cM
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org