Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
File:                     3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          m+KqnZ1fslNl7X3M1/gmdY8jHhOskQ4emWQpeLU/tpU=
Subject key identifier:   6B:C6:34:CF:20:16:C1:26:16:29:4F:66:75:28:ED:EF:C6:D5:E2:1A
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       0D700AEB86CE79239A96433912D7BB8FB82FF563
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa
Signing time:             Tue 19 Mar 2024 13:01:15 +0000
ROA not before:           Tue 19 Mar 2024 12:56:15 +0000
ROA not after:            Tue 18 Mar 2025 13:01:15 +0000
asID:                     268323
IP address blocks:        177.53.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:70:0a:eb:86:ce:79:23:9a:96:43:39:12:d7:bb:8f:b8:2f:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Mar 19 12:56:15 2024 GMT
            Not After : Mar 18 13:01:15 2025 GMT
        Subject: CN=6BC634CF2016C12616294F667528EDEFC6D5E21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:be:3c:5e:1f:fe:7a:19:0b:72:b6:15:97:
                    a2:75:18:77:67:1b:e2:d7:e1:f4:c9:6d:1f:4b:ba:
                    98:5e:72:67:e8:80:03:f0:22:ae:9f:1a:c5:b4:a0:
                    8f:e8:a5:e6:d1:16:77:a3:e3:b2:65:08:9c:65:0e:
                    33:15:71:08:89:98:99:6d:8a:b1:d6:b4:8a:9a:b0:
                    b1:25:3d:80:07:4d:0e:2b:70:91:c1:00:a1:40:f8:
                    fa:4f:ad:9e:35:38:4c:fb:83:d6:c1:0d:c8:fb:5d:
                    1a:32:68:37:47:89:99:11:42:d7:7c:3d:36:4c:df:
                    62:47:47:f3:d6:7d:30:03:99:de:70:a4:68:dd:23:
                    a5:15:39:96:97:02:c3:0e:07:42:ed:9f:4f:c0:42:
                    ed:3f:79:eb:8c:34:41:33:f2:70:ce:35:6c:01:88:
                    cd:59:8d:76:d6:51:de:25:c4:76:83:91:88:89:94:
                    ac:81:7c:16:67:fd:5b:71:57:45:52:57:be:dc:6e:
                    93:94:6f:34:06:4b:be:61:9b:64:df:c9:d5:04:7b:
                    e4:be:65:de:5a:e4:98:de:e4:39:e6:49:ed:d2:b0:
                    a7:0a:3d:fa:59:ea:c1:63:53:be:13:b8:f7:1e:35:
                    83:5b:1e:95:a7:e8:d1:4a:8b:3d:9c:cc:b5:3e:81:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:34:CF:20:16:C1:26:16:29:4F:66:75:28:ED:EF:C6:D5:E2:1A
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:84:a4:97:bb:54:c7:77:c7:79:34:b3:52:e4:27:33:5b:4d:
         b8:83:f8:63:d2:51:67:50:e2:93:23:8a:79:e8:db:0d:ed:1d:
         30:30:53:39:8a:01:ba:38:e5:6c:f5:ef:c8:b6:56:af:65:fc:
         b8:8f:5f:06:e0:6a:3a:79:fe:56:a7:03:83:04:bd:9b:5c:2b:
         bb:28:ee:5b:96:2e:ff:9b:4d:5f:0a:cb:a3:49:bd:2a:fc:bf:
         83:2a:00:ea:7f:17:78:26:a3:57:2b:bc:da:f2:31:60:2f:34:
         0c:57:4a:87:a1:3b:e3:c7:9e:6e:be:a4:9f:1f:4f:0b:85:c6:
         98:50:a8:36:2d:9a:8f:3c:75:7e:ae:54:df:6f:6d:97:3c:d7:
         4d:b1:9a:18:d3:70:be:90:b5:dd:bd:4e:cb:e5:a8:13:39:3f:
         08:64:0c:f8:0d:91:57:25:8b:1d:05:09:10:1e:a5:83:af:88:
         f4:55:4c:da:c2:21:2b:9b:b1:b4:21:16:9c:71:8d:d5:12:14:
         82:ab:c4:4c:62:a1:19:0c:28:03:1e:3a:73:24:18:b9:03:53:
         5d:b3:58:3e:9f:59:26:f4:fb:5c:5f:b1:4b:73:26:24:c4:92:
         24:d9:69:75:55:cf:14:f4:01:9a:cb:b7:f3:90:ca:09:96:15:
         99:ef:27:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDXAK64bOeSOalkM5Ete7j7gv9WMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBREFBODY2MTRGNkU0QzNCMTBGNDhEOUFCRDUwMzc4
OTYyRDI5NTAeFw0yNDAzMTkxMjU2MTVaFw0yNTAzMTgxMzAxMTVaMDMxMTAvBgNV
BAMTKDZCQzYzNENGMjAxNkMxMjYxNjI5NEY2Njc1MjhFREVGQzZENUUyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp3r48Xh/+ehkLcrYVl6J1GHdn
G+LX4fTJbR9LuphecmfogAPwIq6fGsW0oI/opebRFnej47JlCJxlDjMVcQiJmJlt
irHWtIqasLElPYAHTQ4rcJHBAKFA+PpPrZ41OEz7g9bBDcj7XRoyaDdHiZkRQtd8
PTZM32JHR/PWfTADmd5wpGjdI6UVOZaXAsMOB0Ltn0/AQu0/eeuMNEEz8nDONWwB
iM1ZjXbWUd4lxHaDkYiJlKyBfBZn/VtxV0VSV77cbpOUbzQGS75hm2TfydUEe+S+
Zd5a5Jje5DnmSe3SsKcKPfpZ6sFjU74TuPceNYNbHpWn6NFKiz2czLU+gYALAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa8Y0zyAWwSYWKU9mdSjt78bV4howHwYDVR0j
BBgwFoAUTa2qhmFPbkw7EPSNmr1QN4li0pUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndBWlZGcHVuOERSY2Y3MjdNb3JLYnRXdnZ0em5BU2V6Mkh1WHBIODFo
bmYvMC80REFEQUE4NjYxNEY2RTRDM0IxMEY0OEQ5QUJENTAzNzg5NjJEMjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREQURBQTg2NjE0RjZFNEMz
QjEwRjQ4RDlBQkQ1MDM3ODk2MkQyOTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3QVpWRnB1bjhEUmNmNzI3TW9yS2J0V3Z2dHpuQVNlejJIdVhwSDgxaG5mLzAv
MzEzNzM3MmUzNTMzMmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxNYAwDQYJKoZIhvcNAQELBQADggEBADKEpJe7
VMd3x3k0s1LkJzNbTbiD+GPSUWdQ4pMjinno2w3tHTAwUzmKAbo45Wz178i2Vq9l
/LiPXwbgajp5/lanA4MEvZtcK7so7luWLv+bTV8Ky6NJvSr8v4MqAOp/F3gmo1cr
vNryMWAvNAxXSoehO+PHnm6+pJ8fTwuFxphQqDYtmo88dX6uVN9vbZc8102xmhjT
cL6Qtd29TsvlqBM5PwhkDPgNkVclix0FCRAepYOviPRVTNrCISubsbQhFpxxjdUS
FIKrxExioRkMKAMeOnMkGLkDU12zWD6fWSb0+1xfsUtzJiTEkiTZaXVVzxT0AZrL
t/OQygmWFZnvJ9Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org