Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3230382e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          Xp524bSGvqOnTEQJHSgZjySWREoI/04I1BozxxhozyI=
Subject key identifier:   4F:B5:B9:8F:BA:BA:78:92:34:9D:98:42:C0:3E:0E:0D:68:25:CF:9F
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       4E2EA83539B8BB023CD9ACD2647C4A105C47C35E
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        177.154.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:a8:35:39:b8:bb:02:3c:d9:ac:d2:64:7c:4a:10:5c:47:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=4FB5B98FBABA7892349D9842C03E0E0D6825CF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:61:2e:e1:c7:02:5d:d5:20:7c:8c:c3:e7:
                    db:22:c0:70:f8:30:4f:a3:d8:53:1e:51:53:f4:e7:
                    b0:48:c0:86:61:40:13:b9:63:9e:fc:88:89:4f:05:
                    8d:70:01:0d:94:db:c5:0f:65:c7:a8:d0:61:22:72:
                    3c:84:c2:76:fe:f6:14:0b:9f:72:ad:bb:39:11:82:
                    07:2c:56:38:eb:e7:ed:35:bb:47:67:6e:74:a4:f1:
                    6a:64:76:5d:e8:c9:c1:98:02:85:bd:88:a2:7e:48:
                    44:01:f9:2e:a7:b4:0b:cd:b8:a2:20:32:7a:23:bd:
                    cc:be:76:92:23:d5:93:be:ba:4a:5c:a4:21:a3:40:
                    0e:25:48:13:43:6c:c5:0c:52:1f:ff:89:97:bd:e4:
                    88:0e:3d:9e:40:d7:07:6c:4c:02:c7:e6:bc:91:93:
                    4d:b1:83:52:73:e4:22:1e:f3:f1:a7:64:63:bc:5e:
                    5f:48:86:0d:b5:80:d5:a7:fe:96:98:cd:51:0c:29:
                    a4:37:99:10:2f:f7:84:10:e3:89:6d:ed:e6:ec:3d:
                    e3:e7:05:27:80:dc:08:8c:f7:25:1e:c6:d4:94:6c:
                    a5:b2:2f:05:8e:a3:c6:bc:de:bd:37:d3:35:d6:7c:
                    e2:58:83:0f:e9:8c:54:c4:5a:b6:85:49:83:b9:3a:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:B9:8F:BA:BA:78:92:34:9D:98:42:C0:3E:0E:0D:68:25:CF:9F
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:8a:e5:fe:58:50:58:b7:7b:80:d4:8a:69:d2:20:90:c3:
         d5:8a:13:bb:f7:62:97:c2:ff:9c:f1:29:16:3e:16:44:41:32:
         1c:db:9e:84:db:cc:56:cf:74:ea:9d:77:9c:1a:a4:a8:1e:2c:
         33:ab:17:7c:48:6c:6b:5e:45:86:52:01:cb:f3:30:62:73:a5:
         a9:4d:f4:31:01:51:67:bc:d8:1a:48:ad:0f:28:45:87:03:4b:
         44:12:45:3c:96:3f:f6:fe:84:0c:1b:3b:0e:f1:92:05:1d:f9:
         43:03:d7:d4:f9:4d:4a:27:d1:87:e0:d7:91:43:c3:b6:64:ad:
         ce:93:95:a1:5b:8c:4c:34:5a:94:e8:a1:da:0d:13:b9:49:65:
         1b:72:ae:f9:96:ee:c3:36:82:7d:9f:44:2f:c2:44:47:85:ee:
         50:3f:88:a3:62:f5:cd:21:fa:20:95:27:3d:77:cd:30:c9:53:
         65:0d:e2:c8:12:7c:1c:f6:8e:ae:f5:a1:09:6f:cb:c1:fa:15:
         c3:4d:1a:6f:f2:43:c1:74:65:2c:c6:22:d5:2b:9e:b2:8f:61:
         9a:42:48:55:84:86:74:ea:46:10:cb:31:8f:92:9f:80:cc:d1:
         6c:00:95:33:49:aa:96:d2:49:43:1d:10:e4:33:07:0d:cf:f5:
         5b:55:61:0c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTi6oNTm4uwI82azSZHxKEFxHw14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzdaFw0yNDEyMzEyMTE2MzdaMDMxMTAvBgNV
BAMTKDRGQjVCOThGQkFCQTc4OTIzNDlEOTg0MkMwM0UwRTBENjgyNUNGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOWEu4ccCXdUgfIzD59siwHD4
ME+j2FMeUVP057BIwIZhQBO5Y578iIlPBY1wAQ2U28UPZceo0GEicjyEwnb+9hQL
n3KtuzkRggcsVjjr5+01u0dnbnSk8Wpkdl3oycGYAoW9iKJ+SEQB+S6ntAvNuKIg
Mnojvcy+dpIj1ZO+ukpcpCGjQA4lSBNDbMUMUh//iZe95IgOPZ5A1wdsTALH5ryR
k02xg1Jz5CIe8/GnZGO8Xl9Ihg21gNWn/paYzVEMKaQ3mRAv94QQ44lt7ebsPePn
BSeA3AiM9yUextSUbKWyLwWOo8a83r030zXWfOJYgw/pjFTEWraFSYO5On/FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUT7W5j7q6eJI0nZhCwD4ODWglz58wHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGa0DANBgkqhkiG9w0BAQsFAAOCAQEAHLGK
5f5YUFi3e4DUimnSIJDD1YoTu/dil8L/nPEpFj4WREEyHNuehNvMVs906p13nBqk
qB4sM6sXfEhsa15FhlIBy/MwYnOlqU30MQFRZ7zYGkitDyhFhwNLRBJFPJY/9v6E
DBs7DvGSBR35QwPX1PlNSifRh+DXkUPDtmStzpOVoVuMTDRalOih2g0TuUllG3Ku
+ZbuwzaCfZ9EL8JER4XuUD+Io2L1zSH6IJUnPXfNMMlTZQ3iyBJ8HPaOrvWhCW/L
wfoVw00ab/JDwXRlLMYi1Sueso9hmkJIVYSGdOpGEMsxj5KfgMzRbACVM0mqltJJ
Qx0Q5DMHDc/1W1VhDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org