Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32332e302f32342d3234203d3e203532393136.roa
File:                     3137372e31302e32332e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          OdnRcdKrphG+MHj+VJjXhqIL3l0veeX0a6khfCk4tgg=
Subject key identifier:   CA:24:AD:80:A3:66:61:9B:BE:C4:C4:6B:7E:13:03:9C:3B:41:29:10
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       5A7F21E57F3BEF062C273A755DCBD13957100274
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32332e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 07 Jun 2023 03:33:57 +0000
ROA not before:           Wed 07 Jun 2023 03:28:57 +0000
ROA not after:            Wed 05 Jun 2024 03:33:57 +0000
asID:                     52916
IP address blocks:        177.10.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7f:21:e5:7f:3b:ef:06:2c:27:3a:75:5d:cb:d1:39:57:10:02:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Jun  7 03:28:57 2023 GMT
            Not After : Jun  5 03:33:57 2024 GMT
        Subject: CN=CA24AD80A366619BBEC4C46B7E13039C3B412910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:98:81:68:77:4b:9e:ac:a3:59:be:42:e1:
                    b7:05:01:75:4e:43:fa:1f:50:4b:be:e3:9e:4d:80:
                    3c:22:7b:5e:26:ee:32:bf:9c:11:f9:49:09:da:50:
                    79:79:68:71:ef:50:be:25:f3:10:b5:2c:3c:89:e7:
                    8a:f5:fd:a3:6d:1d:9a:9a:99:51:8e:f4:31:2c:53:
                    99:82:ae:e5:cc:d3:04:bd:dd:94:78:6c:ed:ac:79:
                    ba:76:ce:aa:fb:1a:93:62:de:6e:a3:fb:88:04:18:
                    a0:dc:f1:11:f4:15:7f:4f:ea:ed:a5:c9:a8:cb:92:
                    04:ca:16:b5:66:cb:da:9f:90:d1:41:b2:8e:0a:c9:
                    31:d8:d9:a4:f4:99:e1:89:c5:e6:be:51:36:fe:8a:
                    57:82:6e:39:6f:d0:01:66:cb:70:e4:a7:f9:7c:f9:
                    5c:d4:4b:fa:55:64:e7:1e:c5:b3:ea:79:48:32:83:
                    d3:aa:de:93:1b:e4:f2:a8:fc:57:89:d1:87:f5:93:
                    7b:b8:e7:a8:6d:39:cb:53:73:4b:4b:6b:2d:62:39:
                    89:a4:27:61:4a:7e:70:8a:1f:ad:04:c9:b7:0f:42:
                    c8:0a:53:a0:12:8d:f2:f6:78:24:1c:7e:22:a9:89:
                    59:0d:87:08:de:3e:fa:b2:51:00:40:9f:f4:75:76:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:AD:80:A3:66:61:9B:BE:C4:C4:6B:7E:13:03:9C:3B:41:29:10
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32332e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:6b:ac:20:1a:dd:6d:dc:eb:dc:9e:35:ea:33:c1:77:ae:
         ea:f5:8d:e1:aa:7e:40:da:bb:95:54:0c:48:3f:4c:66:6d:8e:
         08:af:c9:bd:78:cd:82:84:18:a5:88:e0:41:80:29:9b:76:b2:
         a8:18:3e:0a:5c:28:1b:0d:9c:92:e2:bf:57:4d:ab:4e:8a:3f:
         c8:dd:1a:2c:d3:f6:89:f8:73:82:6d:01:c1:5d:5c:72:32:e1:
         bb:1c:e8:38:99:60:1e:ee:50:f9:3f:02:37:54:30:b1:c1:8e:
         04:69:e6:83:e1:f7:a4:7c:48:70:b9:5e:e7:42:05:1c:f0:df:
         a0:bb:1d:7f:b3:8a:ab:81:48:86:6a:2b:54:2b:a9:e6:56:e9:
         55:2f:bf:53:43:6a:a8:a8:37:39:0b:29:96:18:80:52:a8:26:
         e4:13:b4:22:f2:94:26:09:40:10:76:cd:73:60:b2:40:8c:52:
         9e:ad:7d:2c:b6:90:18:b4:79:6d:d0:08:e3:8f:9c:dd:31:50:
         75:78:b3:cc:cc:88:44:b1:e8:6f:5a:b4:2c:e2:98:db:81:23:
         8e:94:fb:d3:00:63:d5:d8:8f:2c:bf:77:55:95:3e:ef:09:fc:
         84:06:05:73:76:7c:c6:af:ad:20:0b:ac:ad:fc:f3:f5:4e:99:
         e9:b9:91:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWn8h5X877wYsJzp1XcvROVcQAnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwMzRDNEI3MUM4RkQ1Q0YzQ0M3RTNDMDJFQ0Y4MjJB
MUEyMTczRDAeFw0yMzA2MDcwMzI4NTdaFw0yNDA2MDUwMzMzNTdaMDMxMTAvBgNV
BAMTKENBMjRBRDgwQTM2NjYxOUJCRUM0QzQ2QjdFMTMwMzlDM0I0MTI5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvJiBaHdLnqyjWb5C4bcFAXVO
Q/ofUEu+455NgDwie14m7jK/nBH5SQnaUHl5aHHvUL4l8xC1LDyJ54r1/aNtHZqa
mVGO9DEsU5mCruXM0wS93ZR4bO2sebp2zqr7GpNi3m6j+4gEGKDc8RH0FX9P6u2l
yajLkgTKFrVmy9qfkNFBso4KyTHY2aT0meGJxea+UTb+ileCbjlv0AFmy3Dkp/l8
+VzUS/pVZOcexbPqeUgyg9Oq3pMb5PKo/FeJ0Yf1k3u456htOctTc0tLay1iOYmk
J2FKfnCKH60EybcPQsgKU6ASjfL2eCQcfiKpiVkNhwjePvqyUQBAn/R1dvLtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyiStgKNmYZu+xMRrfhMDnDtBKRAwHwYDVR0j
BBgwFoAU0QNMS3HI/VzzzH48Auz4IqGiFz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMC9EMTAzNEM0QjcxQzhGRDVDRjNDQzdFM0MwMkVDRjgyMkExQTIxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxMDM0QzRCNzFDOEZENUNG
M0NDN0UzQzAyRUNGODIyQTFBMjE3M0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzAv
MzEzNzM3MmUzMTMwMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEKFzANBgkqhkiG9w0BAQsFAAOCAQEAVwprrCAa3W3c
69yeNeozwXeu6vWN4ap+QNq7lVQMSD9MZm2OCK/JvXjNgoQYpYjgQYApm3ayqBg+
ClwoGw2ckuK/V02rToo/yN0aLNP2ifhzgm0BwV1ccjLhuxzoOJlgHu5Q+T8CN1Qw
scGOBGnmg+H3pHxIcLle50IFHPDfoLsdf7OKq4FIhmorVCup5lbpVS+/U0NqqKg3
OQsplhiAUqgm5BO0IvKUJglAEHbNc2CyQIxSnq19LLaQGLR5bdAI44+c3TFQdXiz
zMyIRLHob1q0LOKY24EjjpT70wBj1diPLL93VZU+7wn8hAYFc3Z8xq+tIAusrfzz
9U6Z6bmRQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org