Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          WxIDJQh68DS5hVWsQATXdQFd5preu8QpHKzI6nQrr7A=
Subject key identifier:   65:91:B5:78:2A:9E:85:B2:BF:B5:84:C7:D0:E7:D7:EE:2B:25:B8:20
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       3E8913005A67B63D8D05055584EFA55A02B403D1
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:02 +0000
ROA not before:           Wed 06 Mar 2024 14:47:02 +0000
ROA not after:            Wed 05 Mar 2025 14:52:02 +0000
asID:                     52613
IP address blocks:        177.125.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:13:00:5a:67:b6:3d:8d:05:05:55:84:ef:a5:5a:02:b4:03:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:02 2024 GMT
            Not After : Mar  5 14:52:02 2025 GMT
        Subject: CN=6591B5782A9E85B2BFB584C7D0E7D7EE2B25B820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:5f:77:e8:b5:3f:1c:6d:d1:cc:fb:22:ce:
                    6e:2c:79:7c:dd:d0:3d:d2:81:9b:84:a1:a4:1a:f6:
                    c2:c1:85:71:d4:d9:a7:58:97:71:78:1f:26:29:68:
                    29:c4:2a:1d:2e:89:d2:6e:9b:24:91:72:ac:67:6f:
                    0f:7c:00:80:87:98:9b:48:9e:b4:19:43:55:75:87:
                    73:b5:b3:a0:9f:2c:2a:6c:fc:60:24:26:3c:1d:71:
                    67:85:41:6a:1d:8d:2a:30:de:3d:fe:c8:ab:c1:42:
                    c7:3f:2f:fc:db:45:bf:e2:c5:ae:aa:a4:51:1c:3d:
                    ee:c9:4b:f6:77:d6:57:48:c5:a6:94:ce:ae:2d:be:
                    f9:6a:58:d8:91:0d:03:59:20:44:4c:ee:4a:78:25:
                    81:bf:88:32:31:88:9d:36:cd:08:3c:61:d5:34:d4:
                    a0:b7:70:b9:32:df:c9:be:fa:a2:5e:32:cd:78:20:
                    fd:b5:dc:bd:54:bf:82:32:e6:a2:66:c9:44:77:c1:
                    79:41:9b:b5:3b:3b:c4:4c:b5:33:46:bd:12:0b:4a:
                    ff:19:df:b1:0e:66:96:59:6e:bf:f9:33:00:7b:32:
                    c6:91:4c:38:93:4b:8b:da:72:dd:97:b0:88:f4:ad:
                    44:82:3f:21:99:49:0c:21:08:a3:db:d9:cf:93:37:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:B5:78:2A:9E:85:B2:BF:B5:84:C7:D0:E7:D7:EE:2B:25:B8:20
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:4d:ac:7a:6e:5f:6a:29:fe:d7:ef:a2:73:c7:43:b0:83:
         60:58:69:47:bd:bf:85:93:ed:ac:d6:1b:e0:17:10:2b:03:df:
         ed:93:41:3c:5a:88:30:a2:3c:b2:a1:bc:08:85:0b:3b:7b:f8:
         82:64:7e:c2:46:1d:43:69:05:4c:3a:9c:14:ab:4b:18:d5:ee:
         66:99:e1:98:ab:bc:a6:e5:42:30:2f:83:91:ba:b0:45:e5:dc:
         f5:1f:34:ba:2e:3f:58:08:36:f9:07:b9:af:cb:60:0e:a0:c8:
         da:12:01:50:08:e3:c3:3f:1c:3b:f6:09:cf:8f:59:86:1e:fd:
         87:1f:e2:09:17:5c:ec:69:01:48:c3:fb:d3:7e:47:7e:91:7d:
         be:ed:e1:f6:5c:f7:83:00:62:58:9e:0e:c2:bb:1f:9b:d2:ea:
         42:73:27:06:16:ab:e6:d6:75:9a:76:f5:4b:95:26:4d:18:06:
         3f:c8:15:5a:c6:c4:86:cc:04:36:28:b8:df:a6:28:71:44:ce:
         ab:77:01:61:75:a8:b6:f3:30:47:14:d4:97:60:47:a9:eb:0a:
         d2:f0:ed:95:d8:71:31:79:e6:d3:4a:fd:51:fb:53:2a:b1:6a:
         f8:2f:76:c9:9e:06:49:81:fd:35:3a:71:fe:2a:2c:0f:c2:1f:
         4c:66:34:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPokTAFpntj2NBQVVhO+lWgK0A9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU0MTk5NjExMUEwNzBFNUQxODVCMjhFQzc0MUUwQTYw
OEIyNEVEQzAeFw0yNDAzMDYxNDQ3MDJaFw0yNTAzMDUxNDUyMDJaMDMxMTAvBgNV
BAMTKDY1OTFCNTc4MkE5RTg1QjJCRkI1ODRDN0QwRTdEN0VFMkIyNUI4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwV936LU/HG3RzPsizm4seXzd
0D3SgZuEoaQa9sLBhXHU2adYl3F4HyYpaCnEKh0uidJumySRcqxnbw98AICHmJtI
nrQZQ1V1h3O1s6CfLCps/GAkJjwdcWeFQWodjSow3j3+yKvBQsc/L/zbRb/ixa6q
pFEcPe7JS/Z31ldIxaaUzq4tvvlqWNiRDQNZIERM7kp4JYG/iDIxiJ02zQg8YdU0
1KC3cLky38m++qJeMs14IP213L1Uv4Iy5qJmyUR3wXlBm7U7O8RMtTNGvRILSv8Z
37EOZpZZbr/5MwB7MsaRTDiTS4vact2XsIj0rUSCPyGZSQwhCKPb2c+TN7GvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZZG1eCqehbK/tYTH0OfX7isluCAwHwYDVR0j
BBgwFoAU7kGZYRGgcOXRhbKOx0HgpgiyTtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMC9FRTQxOTk2MTExQTA3MEU1RDE4NUIyOEVDNzQxRTBBNjA4QjI0RURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNDE5OTYxMTFBMDcwRTVE
MTg1QjI4RUM3NDFFMEE2MDhCMjRFREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzAv
MzEzNzM3MmUzMTMyMzUyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfawwDQYJKoZIhvcNAQELBQADggEBAE8fTax6
bl9qKf7X76Jzx0Owg2BYaUe9v4WT7azWG+AXECsD3+2TQTxaiDCiPLKhvAiFCzt7
+IJkfsJGHUNpBUw6nBSrSxjV7maZ4ZirvKblQjAvg5G6sEXl3PUfNLouP1gINvkH
ua/LYA6gyNoSAVAI48M/HDv2Cc+PWYYe/Ycf4gkXXOxpAUjD+9N+R36Rfb7t4fZc
94MAYlieDsK7H5vS6kJzJwYWq+bWdZp29UuVJk0YBj/IFVrGxIbMBDYouN+mKHFE
zqt3AWF1qLbzMEcU1JdgR6nrCtLw7ZXYcTF55tNK/VH7UyqxavgvdsmeBkmB/TU6
cf4qLA/CH0xmNBI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org