Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa
File:                     3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (raw, json)
Hash identifier:          9j3A4FjsqQkVhBLrT94dtujWWrZgKGg1COJSs+dQehk=
Subject key identifier:   EB:8A:BD:73:93:13:4D:52:F7:19:E6:D2:45:B5:CD:F8:B0:3E:B3:F8
Certificate issuer:       /CN=5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857
Certificate serial:       2AA8F2EE42AD35A54B06EB139C159CC3B7D741B2
Authority key identifier: 5E:F9:05:51:4C:20:03:F3:AB:A7:8D:4A:A9:AF:FB:95:F8:BC:E8:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa
Signing time:             Wed 06 Mar 2024 14:53:13 +0000
ROA not before:           Wed 06 Mar 2024 14:48:13 +0000
ROA not after:            Wed 05 Mar 2025 14:53:13 +0000
asID:                     262449
IP address blocks:        177.52.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a8:f2:ee:42:ad:35:a5:4b:06:eb:13:9c:15:9c:c3:b7:d7:41:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857
        Validity
            Not Before: Mar  6 14:48:13 2024 GMT
            Not After : Mar  5 14:53:13 2025 GMT
        Subject: CN=EB8ABD7393134D52F719E6D245B5CDF8B03EB3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:21:e5:32:70:2c:e0:8a:4d:c3:be:cc:06:
                    9b:9a:cf:df:2c:89:54:71:ad:bc:88:47:11:6a:5e:
                    06:55:92:0f:7e:3c:66:0e:85:14:d1:b0:1c:02:e6:
                    bb:9a:1d:37:80:3d:c4:ca:5d:67:26:f5:a0:4f:4e:
                    6c:c1:40:6d:0f:3b:62:57:5b:30:fb:d5:8b:c9:35:
                    1a:e9:95:42:f3:67:87:1f:7d:b6:7d:7f:e2:23:76:
                    29:7c:91:92:94:be:5e:78:f9:4b:46:63:07:13:31:
                    8c:13:a4:90:97:b4:32:c2:d0:e4:27:32:ef:2d:97:
                    9b:98:5f:1e:fa:6e:6d:21:dc:6c:f1:28:8a:b5:24:
                    f1:83:9e:d7:39:16:b3:3b:4e:8a:e2:6c:a3:86:5a:
                    f5:6c:46:43:13:a6:e1:6b:b7:7f:e5:96:59:0a:7e:
                    44:f2:77:ca:c4:9f:fb:54:e2:48:f4:1b:58:e6:d3:
                    2f:70:d7:09:53:91:47:95:9b:7c:62:e2:68:e6:10:
                    c8:91:67:30:b1:8a:33:37:71:96:39:d9:a2:3c:26:
                    22:fa:be:79:ec:30:61:72:fc:58:a8:21:fa:61:12:
                    28:f6:f0:f1:d3:f8:87:b8:9f:55:18:8e:c6:b4:d9:
                    cc:57:05:79:65:99:97:44:92:d2:3d:a1:e4:15:8b:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8A:BD:73:93:13:4D:52:F7:19:E6:D2:45:B5:CD:F8:B0:3E:B3:F8
            X509v3 Authority Key Identifier:
                keyid:5E:F9:05:51:4C:20:03:F3:AB:A7:8D:4A:A9:AF:FB:95:F8:BC:E8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:07:57:92:f8:6f:c3:f2:84:71:0e:28:3c:64:e6:d6:44:0d:
         ba:e1:d4:93:95:6a:00:80:35:7e:e1:78:87:cd:23:e8:20:c0:
         07:bb:0b:5d:0c:43:84:8f:f0:18:92:49:59:26:d5:da:1a:24:
         d6:ab:e4:44:09:80:04:f9:a8:55:d0:68:cf:17:38:cb:a0:72:
         cf:5c:08:65:16:41:6b:e4:84:ed:7b:36:20:96:1a:cb:02:60:
         a7:be:5f:5f:45:1f:2f:33:0e:f7:34:4d:d8:46:39:8c:96:74:
         e2:e9:12:e9:ea:06:c0:68:f0:d5:ea:ee:7c:f2:ab:f8:bf:2e:
         2a:65:c6:3b:36:d8:61:a0:28:df:4d:f8:24:ac:12:5c:1c:0d:
         d3:e3:d5:3a:1a:fb:2a:67:84:28:11:52:77:53:6f:95:57:0f:
         3d:d1:05:16:2a:37:44:64:8e:d2:7e:94:0e:1a:8a:c0:45:81:
         f8:c0:e8:3a:ad:3f:02:0b:d2:85:9c:f3:1a:6c:0b:3e:81:8a:
         fb:82:ad:76:06:63:3b:0c:ab:74:f2:08:09:c3:b3:32:dd:93:
         e3:1f:7f:f3:7f:7c:47:ff:4a:57:52:da:5e:63:63:88:0e:17:
         ea:46:22:30:d8:73:ce:8b:7f:24:73:31:d2:5e:7a:83:15:40:
         e2:13:b0:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKqjy7kKtNaVLBusTnBWcw7fXQbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVGOTA1NTE0QzIwMDNGM0FCQTc4RDRBQTlBRkZCOTVG
OEJDRTg1NzAeFw0yNDAzMDYxNDQ4MTNaFw0yNTAzMDUxNDUzMTNaMDMxMTAvBgNV
BAMTKEVCOEFCRDczOTMxMzRENTJGNzE5RTZEMjQ1QjVDREY4QjAzRUIzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmSHlMnAs4IpNw77MBpuaz98s
iVRxrbyIRxFqXgZVkg9+PGYOhRTRsBwC5ruaHTeAPcTKXWcm9aBPTmzBQG0PO2JX
WzD71YvJNRrplULzZ4cffbZ9f+Ijdil8kZKUvl54+UtGYwcTMYwTpJCXtDLC0OQn
Mu8tl5uYXx76bm0h3GzxKIq1JPGDntc5FrM7ToribKOGWvVsRkMTpuFrt3/lllkK
fkTyd8rEn/tU4kj0G1jm0y9w1wlTkUeVm3xi4mjmEMiRZzCxijM3cZY52aI8JiL6
vnnsMGFy/FioIfphEij28PHT+Ie4n1UYjsa02cxXBXllmZdEktI9oeQVi7vDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU64q9c5MTTVL3GebSRbXN+LA+s/gwHwYDVR0j
BBgwFoAUXvkFUUwgA/Orp41Kqa/7lfi86FcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR
NkcvMC81RUY5MDU1MTRDMjAwM0YzQUJBNzhENEFBOUFGRkI5NUY4QkNFODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFRjkwNTUxNEMyMDAzRjNB
QkE3OEQ0QUE5QUZGQjk1RjhCQ0U4NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NzVnNYbmdHcmpnWmlmNEhKN0JZUDFHdWpzMzVEWlg2U0REamVDNVliUTZHLzAv
MzEzNzM3MmUzNTMyMmUzMTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxNKgwDQYJKoZIhvcNAQELBQADggEBAGYHV5L4
b8PyhHEOKDxk5tZEDbrh1JOVagCANX7heIfNI+ggwAe7C10MQ4SP8BiSSVkm1doa
JNar5EQJgAT5qFXQaM8XOMugcs9cCGUWQWvkhO17NiCWGssCYKe+X19FHy8zDvc0
TdhGOYyWdOLpEunqBsBo8NXq7nzyq/i/Liplxjs22GGgKN9N+CSsElwcDdPj1Toa
+ypnhCgRUndTb5VXDz3RBRYqN0RkjtJ+lA4aisBFgfjA6DqtPwIL0oWc8xpsCz6B
ivuCrXYGYzsMq3TyCAnDszLdk+Mff/N/fEf/SldS2l5jY4gOF+pGIjDYc86LfyRz
MdJeeoMVQOITsB0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org