Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa
File:                     3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          ynZfi5lh6gNWJ/RblINPmnvjA/sunrb3DZlahQIQGgM=
Subject key identifier:   4A:97:2C:65:B3:B2:31:01:EB:3B:9A:D7:B4:58:15:71:08:51:AD:1A
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       0ED6BD6597FF09FEDEAB6C9C71A72F3F8377C463
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        177.128.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:bd:65:97:ff:09:fe:de:ab:6c:9c:71:a7:2f:3f:83:77:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=4A972C65B3B23101EB3B9AD7B45815710851AD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:4f:f7:0d:e9:9c:29:fc:57:71:aa:07:ea:
                    e3:4b:b5:86:82:f3:4a:05:bf:d1:4a:ed:69:3a:5c:
                    9f:99:8c:dc:a7:08:d5:c6:11:26:33:c8:77:89:db:
                    62:28:dc:a9:8a:59:96:5a:a8:7c:2f:58:f3:93:d3:
                    83:81:c8:1d:ba:a4:44:6c:b7:b5:48:ff:d2:ea:55:
                    01:06:4a:bd:02:1b:a3:a5:be:78:95:99:ef:05:88:
                    04:6f:9a:1e:e9:91:6d:f8:ec:c2:41:0e:e0:b9:cd:
                    56:12:d6:d4:3d:be:48:02:fd:14:a8:26:b3:b4:29:
                    b6:5e:7e:b5:84:27:c2:1e:26:82:b0:b3:c5:6a:1d:
                    4a:fe:a8:7a:28:45:f1:10:f8:be:6f:f4:07:7a:8a:
                    43:af:f4:d0:0e:7b:bf:e2:da:25:e3:88:cb:af:9e:
                    6c:5c:c8:f6:00:a5:5c:d3:8b:ce:95:46:d3:33:7b:
                    c9:20:b5:44:f4:f2:bf:f9:b1:6d:65:b8:fd:e3:34:
                    8d:be:d7:19:47:c3:a2:69:99:60:ee:10:ab:bf:73:
                    b2:7a:cd:00:9b:6b:7a:33:05:71:0a:99:05:fe:d8:
                    60:98:1d:39:7c:58:4f:83:6c:58:ba:b6:53:fd:9b:
                    16:c4:ea:46:74:43:55:33:5f:6a:79:bd:14:ef:db:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:2C:65:B3:B2:31:01:EB:3B:9A:D7:B4:58:15:71:08:51:AD:1A
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:21:44:92:a1:aa:24:49:7d:3b:d5:9d:ef:33:d7:15:82:
         3b:4d:34:e1:01:21:6f:95:fa:74:4d:f4:94:2f:fa:15:6e:3e:
         0e:72:65:82:66:5c:25:a5:e9:00:f0:28:74:0d:d5:73:17:aa:
         f9:d6:63:4b:57:5e:b7:9b:5b:03:ad:d9:73:fd:e7:3f:4b:5f:
         ab:d3:a2:a5:20:b2:52:54:6b:79:f3:fb:59:7f:3f:0f:5a:54:
         79:8d:5b:fa:1b:89:af:8e:27:24:79:53:49:2a:29:73:78:08:
         ac:79:86:42:e7:8c:d2:b4:20:1f:da:d4:4a:20:e9:ca:36:60:
         4d:76:d7:c6:32:19:06:aa:73:21:24:69:57:88:f7:94:e2:5a:
         c7:b7:a2:49:58:e8:36:64:e0:af:96:fd:64:e2:e8:52:46:06:
         e8:3c:44:92:9d:31:44:77:29:6c:2c:fe:e7:2c:65:91:90:70:
         34:5f:46:33:6c:b1:cf:05:c2:e8:ed:3d:b5:68:0b:ed:7f:c8:
         5e:b0:99:f5:df:79:ad:a1:4a:03:49:76:74:9e:df:d2:9b:d4:
         3f:24:f6:9f:dd:8f:57:63:d6:fb:b4:4f:69:20:95:dc:54:5a:
         0c:80:63:1d:31:f2:d4:88:1c:50:b3:ab:23:2c:0b:16:46:69:
         c0:96:db:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDta9ZZf/Cf7eq2yccacvP4N3xGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjcyMzA1NDJaFw0yNTAxMjUyMzEwNDJaMDMxMTAvBgNV
BAMTKDRBOTcyQzY1QjNCMjMxMDFFQjNCOUFEN0I0NTgxNTcxMDg1MUFEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4E/3DemcKfxXcaoH6uNLtYaC
80oFv9FK7Wk6XJ+ZjNynCNXGESYzyHeJ22Io3KmKWZZaqHwvWPOT04OByB26pERs
t7VI/9LqVQEGSr0CG6OlvniVme8FiARvmh7pkW347MJBDuC5zVYS1tQ9vkgC/RSo
JrO0KbZefrWEJ8IeJoKws8VqHUr+qHooRfEQ+L5v9Ad6ikOv9NAOe7/i2iXjiMuv
nmxcyPYApVzTi86VRtMze8kgtUT08r/5sW1luP3jNI2+1xlHw6JpmWDuEKu/c7J6
zQCba3ozBXEKmQX+2GCYHTl8WE+DbFi6tlP9mxbE6kZ0Q1UzX2p5vRTv2zzfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSpcsZbOyMQHrO5rXtFgVcQhRrRowHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxgNIwDQYJKoZIhvcNAQELBQADggEBAH4iIUSS
oaokSX071Z3vM9cVgjtNNOEBIW+V+nRN9JQv+hVuPg5yZYJmXCWl6QDwKHQN1XMX
qvnWY0tXXrebWwOt2XP95z9LX6vToqUgslJUa3nz+1l/Pw9aVHmNW/obia+OJyR5
U0kqKXN4CKx5hkLnjNK0IB/a1Eog6co2YE1218YyGQaqcyEkaVeI95TiWse3oklY
6DZk4K+W/WTi6FJGBug8RJKdMUR3KWws/ucsZZGQcDRfRjNssc8FwujtPbVoC+1/
yF6wmfXfea2hSgNJdnSe39Kb1D8k9p/dj1dj1vu0T2kgldxUWgyAYx0x8tSIHFCz
qyMsCxZGacCW26o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org