Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139322e302f32312d3234203d3e20323632373239.roa
File:                     3137372e39322e3139322e302f32312d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          ibP6e7bKuL6pRLT+7AJmpxv8quL4G/EEn6Jv00EHMqI=
Subject key identifier:   94:17:B9:0E:3C:36:06:64:1E:2F:77:05:6E:79:00:6A:DE:1B:11:3D
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       580C9E89CB10B5894A837488CD56518ABD3029A4
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139322e302f32312d3234203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 15:00:00 +0000
ROA not before:           Tue 25 Jul 2023 14:55:00 +0000
ROA not after:            Tue 23 Jul 2024 15:00:00 +0000
asID:                     262729
IP address blocks:        177.92.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:9e:89:cb:10:b5:89:4a:83:74:88:cd:56:51:8a:bd:30:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 14:55:00 2023 GMT
            Not After : Jul 23 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100FE31E94D5CAABB86268D3C93C7603A572791C8A7327DDBB4E52A0F8399AFD9A62F9E25114B6951906D8713E43AE50D8C5D7B0C6CCCC57A2787A0486B7F0B8A25B6B32C083AEA1EB778541A5D8C0C164B312C89367D914FADCD35A6A6B61A1A1352C8F6BD8623E7AB49D23113B2E13536AD83014A090AA49FDEDB55F75D621424106B672557EC2A1FFE693314BCD7B99637EC9986171C57AF6C807E2AD44F0840EEE85F4AD9B0FF52FC8E93DF46E9D43BD8614E90E218121ED289FF1F69351983E6834FACC46552CA56AF591BFB27024099CC551BFFB1F1937AF327D17394827F21906DF24C47341B001B4FFDDD0DEE367C79CDD632C7B0939F25B2738CDC6E470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:31:e9:4d:5c:aa:bb:86:26:8d:3c:93:c7:60:
                    3a:57:27:91:c8:a7:32:7d:db:b4:e5:2a:0f:83:99:
                    af:d9:a6:2f:9e:25:11:4b:69:51:90:6d:87:13:e4:
                    3a:e5:0d:8c:5d:7b:0c:6c:cc:c5:7a:27:87:a0:48:
                    6b:7f:0b:8a:25:b6:b3:2c:08:3a:ea:1e:b7:78:54:
                    1a:5d:8c:0c:16:4b:31:2c:89:36:7d:91:4f:ad:cd:
                    35:a6:a6:b6:1a:1a:13:52:c8:f6:bd:86:23:e7:ab:
                    49:d2:31:13:b2:e1:35:36:ad:83:01:4a:09:0a:a4:
                    9f:de:db:55:f7:5d:62:14:24:10:6b:67:25:57:ec:
                    2a:1f:fe:69:33:14:bc:d7:b9:96:37:ec:99:86:17:
                    1c:57:af:6c:80:7e:2a:d4:4f:08:40:ee:e8:5f:4a:
                    d9:b0:ff:52:fc:8e:93:df:46:e9:d4:3b:d8:61:4e:
                    90:e2:18:12:1e:d2:89:ff:1f:69:35:19:83:e6:83:
                    4f:ac:c4:65:52:ca:56:af:59:1b:fb:27:02:40:99:
                    cc:55:1b:ff:b1:f1:93:7a:f3:27:d1:73:94:82:7f:
                    21:90:6d:f2:4c:47:34:1b:00:1b:4f:fd:dd:0d:ee:
                    36:7c:79:cd:d6:32:c7:b0:93:9f:25:b2:73:8c:dc:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:B9:0E:3C:36:06:64:1E:2F:77:05:6E:79:00:6A:DE:1B:11:3D
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139322e302f32312d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:eb:4b:fd:0e:75:2c:49:56:a2:8f:5e:5d:36:2c:89:dd:
         21:3f:3b:af:e2:5b:9a:5b:e5:d0:67:23:f8:62:9c:7f:6c:a6:
         50:fc:57:06:28:95:d1:d4:13:b4:ca:db:e2:88:12:41:2c:f9:
         46:1f:65:81:59:fe:ee:17:9e:18:3c:44:a0:7a:a0:a9:03:cb:
         ed:25:ac:8b:b7:af:6c:75:fc:f7:f3:c7:9b:bc:a1:24:b8:14:
         86:d7:ba:a1:4a:21:68:d9:0a:1b:e1:43:a8:a2:2a:6e:fe:06:
         34:e3:9c:61:44:c7:ee:3a:dc:50:cf:2d:1b:64:25:d6:8d:d7:
         0f:03:b6:51:89:aa:a8:2f:51:4c:6d:a6:94:66:3d:4f:ba:7b:
         e6:cd:c1:bb:69:8e:68:d6:8c:69:eb:6d:cf:02:12:b6:17:0e:
         93:f5:96:5f:e5:98:82:55:0f:2f:51:64:e7:be:a4:f0:c9:08:
         47:f0:5d:8c:b7:6b:6b:36:d3:07:e5:5f:91:5e:97:bc:42:db:
         99:61:48:eb:e9:55:d1:ce:2b:25:fb:00:7a:13:3a:93:fd:36:
         fe:db:7b:a8:d3:5c:82:00:53:e6:c3:10:d6:83:58:67:19:10:
         21:91:29:35:a9:d4:bd:6f:de:c5:af:df:b0:7b:7b:28:ca:56:
         41:09:a3:23
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUWAyeicsQtYlKg3SIzVZRir0wKaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg4RUUwMDkxMEZBMzAzMTg1QjJENjBFMjk3QzRDNzZE
OTkzQThFMTAeFw0yMzA3MjUxNDU1MDBaFw0yNDA3MjMxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkUzMUU5NEQ1Q0FBQkI4NjI2
OEQzQzkzQzc2MDNBNTcyNzkxQzhBNzMyN0REQkI0RTUyQTBGODM5OUFGRDlBNjJG
OUUyNTExNEI2OTUxOTA2RDg3MTNFNDNBRTUwRDhDNUQ3QjBDNkNDQ0M1N0EyNzg3
QTA0ODZCN0YwQjhBMjVCNkIzMkMwODNBRUExRUI3Nzg1NDFBNUQ4QzBDMTY0QjMx
MkM4OTM2N0Q5MTRGQURDRDM1QTZBNkI2MUExQTEzNTJDOEY2QkQ4NjIzRTdBQjQ5
RDIzMTEzQjJFMTM1MzZBRDgzMDE0QTA5MEFBNDlGREVEQjU1Rjc1RDYyMTQyNDEw
NkI2NzI1NTdFQzJBMUZGRTY5MzMxNEJDRDdCOTk2MzdFQzk5ODYxNzFDNTdBRjZD
ODA3RTJBRDQ0RjA4NDBFRUU4NUY0QUQ5QjBGRjUyRkM4RTkzREY0NkU5RDQzQkQ4
NjE0RTkwRTIxODEyMUVEMjg5RkYxRjY5MzUxOTgzRTY4MzRGQUNDNDY1NTJDQTU2
QUY1OTFCRkIyNzAyNDA5OUNDNTUxQkZGQjFGMTkzN0FGMzI3RDE3Mzk0ODI3RjIx
OTA2REYyNEM0NzM0MUIwMDFCNEZGREREMERFRTM2N0M3OUNERDYzMkM3QjA5MzlG
MjVCMjczOENEQzZFNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/jHpTVyqu4YmjTyTx2A6VyeRyKcyfdu05SoPg5mv2aYvniURS2lR
kG2HE+Q65Q2MXXsMbMzFeieHoEhrfwuKJbazLAg66h63eFQaXYwMFksxLIk2fZFP
rc01pqa2GhoTUsj2vYYj56tJ0jETsuE1Nq2DAUoJCqSf3ttV911iFCQQa2clV+wq
H/5pMxS817mWN+yZhhccV69sgH4q1E8IQO7oX0rZsP9S/I6T30bp1DvYYU6Q4hgS
HtKJ/x9pNRmD5oNPrMRlUspWr1kb+ycCQJnMVRv/sfGTevMn0XOUgn8hkG3yTEc0
GwAbT/3dDe42fHnN1jLHsJOfJbJzjNxuRwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJQXuQ48NgZkHi93BW55AGreGxE9MB8GA1UdIwQYMBaAFFiO4AkQ+jAxhbLWDil8
THbZk6jhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q1ZlBFVXJjYTNtUVVv
YTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAvNTg4RUUwMDkxMEZBMzAz
MTg1QjJENjBFMjk3QzRDNzZEOTkzQThFMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81ODhFRTAwOTEwRkEzMDMxODVCMkQ2MEUyOTdDNEM3NkQ5OTNB
OEUxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ENWZQRVVyY2EzbVFVb2E1VUxL
ekY1UHpZN1lkTFVKR1dtNGJHMXRlRmc5ay8wLzMxMzczNzJlMzkzMjJlMzEzOTMy
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzczMjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sVzAMA0GCSqGSIb3DQEBCwUAA4IBAQBgTutL/Q51LElWoo9eXTYsid0hPzuv4lua
W+XQZyP4Ypx/bKZQ/FcGKJXR1BO0ytviiBJBLPlGH2WBWf7uF54YPESgeqCpA8vt
JayLt69sdfz388ebvKEkuBSG17qhSiFo2Qob4UOooipu/gY045xhRMfuOtxQzy0b
ZCXWjdcPA7ZRiaqoL1FMbaaUZj1PunvmzcG7aY5o1oxp623PAhK2Fw6T9ZZf5ZiC
VQ8vUWTnvqTwyQhH8F2Mt2trNtMH5V+RXpe8QtuZYUjr6VXRzisl+wB6EzqT/Tb+
23uo01yCAFPmwxDWg1hnGRAhkSk1qdS9b97Fr9+we3soylZBCaMj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org