Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e38382e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          O82bCBewZ3GDzP20cgBFwEvnunmmycEII2Y0KQZFvXI=
Subject key identifier:   BE:BF:39:28:09:FB:6C:44:E4:42:9C:91:42:EE:DB:99:3C:DB:88:F5
Certificate issuer:       /CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
Certificate serial:       51A437518C8E1ADA14AA0E415BE962FF590F53
Authority key identifier: 12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 03 Apr 2024 19:51:45 +0000
ROA not before:           Wed 03 Apr 2024 19:46:45 +0000
ROA not after:            Wed 02 Apr 2025 19:51:45 +0000
asID:                     262292
IP address blocks:        177.54.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a4:37:51:8c:8e:1a:da:14:aa:0e:41:5b:e9:62:ff:59:0f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
        Validity
            Not Before: Apr  3 19:46:45 2024 GMT
            Not After : Apr  2 19:51:45 2025 GMT
        Subject: CN=BEBF392809FB6C44E4429C9142EEDB993CDB88F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:36:99:10:a2:4e:c1:63:04:4d:0e:91:7c:
                    b8:01:d1:0c:1d:2f:e3:b1:6a:8e:02:4e:9e:aa:1d:
                    dc:7b:96:6d:b7:f4:49:5e:6f:d6:85:7d:79:d6:5f:
                    13:97:a5:82:a5:e7:9f:5d:9e:ca:d9:cc:1e:05:41:
                    74:4e:ee:27:4a:7a:6f:ed:2a:9a:99:a9:53:40:fa:
                    84:64:7b:db:3c:da:fd:f9:3f:98:45:87:2e:b1:66:
                    4a:17:30:7d:41:28:40:7d:7b:58:e6:8b:c8:2c:69:
                    53:b7:20:a4:4b:07:f6:2c:70:d5:55:1a:bc:f2:8c:
                    09:5b:c3:c2:de:12:a8:0f:ea:93:26:ac:21:42:c5:
                    c7:97:94:87:bb:29:16:05:e6:7d:1b:f2:1e:45:8a:
                    80:87:d2:a9:81:58:8a:a3:2b:55:f1:f3:b9:dd:2c:
                    c3:78:a4:e5:7d:ca:1b:04:f9:e2:19:48:27:34:c6:
                    6a:34:70:49:27:ba:32:c8:b4:59:64:61:2c:36:34:
                    14:0a:62:40:43:89:42:bf:cb:9b:b8:03:4f:3c:de:
                    77:cc:a1:fd:c5:1e:b3:a3:e8:34:33:0a:27:08:81:
                    7f:33:66:d4:d0:ad:59:8f:d9:08:2a:aa:39:e9:4d:
                    49:a7:06:2e:e6:75:33:7c:d9:51:28:db:61:c2:8c:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BF:39:28:09:FB:6C:44:E4:42:9C:91:42:EE:DB:99:3C:DB:88:F5
            X509v3 Authority Key Identifier:
                keyid:12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:fc:e1:0a:8a:1d:2c:d5:80:84:e3:9d:b7:76:4b:12:55:
         07:ab:01:4e:cb:41:d3:29:cc:2a:3f:2e:75:2d:7f:6d:78:c4:
         b5:6e:e8:83:b4:49:e3:88:d2:00:8e:56:33:92:a2:68:2f:d0:
         ff:85:7c:6c:50:c0:e6:ae:43:3d:04:a0:01:dd:22:80:04:41:
         9e:85:da:76:fa:81:06:15:f2:26:b1:f0:28:59:a2:ed:ed:ed:
         0d:a6:79:53:dd:de:1d:e2:1c:29:df:e7:74:f6:76:ac:00:b4:
         c5:3c:94:5a:58:e5:2d:62:1d:55:d0:d3:1b:c6:d5:c9:2e:db:
         63:59:49:9f:03:c9:52:f9:71:e0:c8:f3:2c:83:00:4b:42:94:
         d5:ff:84:47:4c:62:f8:44:90:f6:6e:e2:38:02:80:db:34:13:
         a1:4a:a6:f1:94:68:eb:03:51:1d:3e:9a:55:63:4f:42:91:c1:
         e8:e1:7a:5b:73:34:7b:3a:c4:66:fa:57:7e:4f:e8:bf:35:00:
         9d:0b:fa:04:1b:a1:63:76:61:80:a6:28:25:2f:02:dc:b6:39:
         a0:f1:c1:39:49:53:5b:f9:9d:c5:8b:a5:c5:63:d9:1b:a4:d0:
         16:1e:07:ba:36:25:a3:b5:52:77:fa:c5:93:cf:9b:e7:b8:06:
         ed:a5:fe:6c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITUaQ3UYyOGtoUqg5BW+li/1kPUzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxMjJBMDkwNkE4NUJCQzI5OEY4MDk4RDBGNTUzRDExRDVE
QTM3NEQ1MB4XDTI0MDQwMzE5NDY0NVoXDTI1MDQwMjE5NTE0NVowMzExMC8GA1UE
AxMoQkVCRjM5MjgwOUZCNkM0NEU0NDI5QzkxNDJFRURCOTkzQ0RCODhGNTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOm+NpkQok7BYwRNDpF8uAHRDB0v
47FqjgJOnqod3HuWbbf0SV5v1oV9edZfE5elgqXnn12eytnMHgVBdE7uJ0p6b+0q
mpmpU0D6hGR72zza/fk/mEWHLrFmShcwfUEoQH17WOaLyCxpU7cgpEsH9ixw1VUa
vPKMCVvDwt4SqA/qkyasIULFx5eUh7spFgXmfRvyHkWKgIfSqYFYiqMrVfHzud0s
w3ik5X3KGwT54hlIJzTGajRwSSe6Msi0WWRhLDY0FApiQEOJQr/Lm7gDTzzed8yh
/cUes6PoNDMKJwiBfzNm1NCtWY/ZCCqqOelNSacGLuZ1M3zZUSjbYcKM1AcCAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBS+vzkoCftsRORCnJFC7tuZPNuI9TAfBgNVHSME
GDAWgBQSKgkGqFu8KY+AmND1U9EdXaN01TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DWHA2QVlybTlMYnJZTm5DV2FMMUFNMTVEdVI5QkREWEw0cWJiVTZYUXRH
Sy8xLzEyMkEwOTA2QTg1QkJDMjk4RjgwOThEMEY1NTNEMTFENURBMzc0RDUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMTIyQTA5MDZBODVCQkMyOThG
ODA5OEQwRjU1M0QxMUQ1REEzNzRENS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1hwNkFZcm05TGJyWU5uQ1dhTDFBTTE1RHVSOUJERFhMNHFiYlU2WFF0R0svMS8z
MTM3MzcyZTM1MzQyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIz
MjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKxNlgwDQYJKoZIhvcNAQELBQADggEBAGG8/OEKih0s
1YCE4523dksSVQerAU7LQdMpzCo/LnUtf214xLVu6IO0SeOI0gCOVjOSomgv0P+F
fGxQwOauQz0EoAHdIoAEQZ6F2nb6gQYV8iax8ChZou3t7Q2meVPd3h3iHCnf53T2
dqwAtMU8lFpY5S1iHVXQ0xvG1cku22NZSZ8DyVL5ceDI8yyDAEtClNX/hEdMYvhE
kPZu4jgCgNs0E6FKpvGUaOsDUR0+mlVjT0KRwejheltzNHs6xGb6V35P6L81AJ0L
+gQboWN2YYCmKCUvAty2OaDxwTlJU1v5ncWLpcVj2Ruk0BYeB7o2JaO1Unf6xZPP
m+e4Bu2l/mw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org