Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/3137372e37322e33322e302f32312d3234203d3e20323632353430.roa
File:                     3137372e37322e33322e302f32312d3234203d3e20323632353430.roa (raw, json)
Hash identifier:          kqwI7xMuZn5SqGMy5yT1jH7ICAQtm8Fp/6E8GB+9Mxg=
Subject key identifier:   90:F3:C9:13:3E:94:57:EB:AF:04:55:EA:2E:BC:10:91:A9:43:1E:38
Certificate issuer:       /CN=E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB
Certificate serial:       4AC3756CF3878AC0A3C58D4A42F6888EA77C3C76
Authority key identifier: E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/3137372e37322e33322e302f32312d3234203d3e20323632353430.roa
Signing time:             Fri 01 Mar 2024 20:01:04 +0000
ROA not before:           Fri 01 Mar 2024 19:56:04 +0000
ROA not after:            Fri 28 Feb 2025 20:01:04 +0000
asID:                     262540
IP address blocks:        177.72.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c3:75:6c:f3:87:8a:c0:a3:c5:8d:4a:42:f6:88:8e:a7:7c:3c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB
        Validity
            Not Before: Mar  1 19:56:04 2024 GMT
            Not After : Feb 28 20:01:04 2025 GMT
        Subject: CN=90F3C9133E9457EBAF0455EA2EBC1091A9431E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:e0:ff:95:1f:18:d9:31:38:49:19:f2:ac:
                    b2:ae:d3:87:a7:ef:08:05:6e:3d:8e:69:9f:5b:87:
                    1e:72:aa:e7:40:bc:e5:8e:9b:66:99:b3:9c:f9:92:
                    ca:21:a0:49:93:9e:7c:b7:bc:6f:da:63:cc:b1:de:
                    de:23:d9:a6:81:cd:27:70:eb:8d:02:12:82:ea:08:
                    72:60:0a:6a:db:34:7d:25:d4:10:4d:69:f1:4b:e3:
                    31:a7:29:34:a9:70:3d:3f:4c:2c:98:d9:d2:9d:c6:
                    4d:cc:1c:55:9c:15:0c:26:7c:7e:a2:b9:2b:e6:f8:
                    7b:5e:0c:d9:2b:a0:e1:04:8f:52:83:c2:ca:98:11:
                    34:db:e5:5a:f7:67:13:c5:b0:6c:49:99:55:61:83:
                    31:4f:83:35:a1:53:49:44:88:b6:25:c6:57:1b:8e:
                    7a:cc:08:3f:79:e3:4c:6d:b7:1d:c9:5c:c6:27:88:
                    11:89:9b:df:14:d7:0d:0b:fa:a9:ae:b6:8e:ba:6d:
                    18:58:6a:38:02:1d:9e:52:d1:97:d2:96:f8:2a:db:
                    cc:92:fb:7b:89:46:99:df:28:a0:11:20:b9:d8:8c:
                    df:e3:9d:05:ab:2a:65:2a:7c:3b:80:14:68:1a:12:
                    90:00:73:43:a8:87:5b:65:12:d6:c4:5f:4f:ec:db:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:C9:13:3E:94:57:EB:AF:04:55:EA:2E:BC:10:91:A9:43:1E:38
            X509v3 Authority Key Identifier:
                keyid:E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/3137372e37322e33322e302f32312d3234203d3e20323632353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:25:67:fb:3f:ec:14:27:63:81:e4:1c:d1:34:14:46:48:b8:
         73:32:0d:54:33:58:ad:6e:15:7f:07:d6:d1:f4:58:31:83:60:
         a5:75:0c:0d:10:f2:b4:c2:77:dd:d6:dc:17:7b:ba:c1:e1:67:
         6b:91:a9:6a:61:93:00:81:3a:c5:c1:7a:f1:ef:4f:b4:11:43:
         c6:28:8e:7c:2f:84:51:66:dc:0b:be:ec:6b:c0:89:79:4b:3f:
         38:91:fc:93:e2:ba:a7:f2:03:76:31:13:55:dd:d9:d8:ee:4d:
         5e:73:63:a5:71:5e:9a:8b:d8:78:3b:ee:4a:87:64:2d:ba:36:
         26:9f:8e:06:38:05:cb:0a:ac:06:19:1d:dc:22:13:80:6f:9f:
         5f:1d:2c:ba:f1:d5:2b:db:a3:3d:10:44:13:ac:dc:93:cc:ee:
         67:6c:04:6d:02:23:eb:e0:2e:5b:f6:b8:b7:aa:c8:82:f6:05:
         7d:f9:e3:2c:ce:bd:84:1e:65:0b:1a:b3:8c:1a:d7:ee:ac:56:
         0e:c6:54:ec:a6:16:18:e8:a1:0e:82:c8:24:a6:6d:3c:3c:3d:
         1a:9b:4f:cd:49:5d:1b:df:ac:14:40:11:59:f2:e6:3a:3b:bf:
         b9:22:8a:cf:57:b3:50:ba:17:0a:14:b6:8d:a6:70:df:cd:ea:
         8c:62:e0:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSsN1bPOHisCjxY1KQvaIjqd8PHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBRkZFMkM5RTVERDc5RjM5OUI0RDhCNjc5MzlCQ0FB
Q0VBNjFDQjAeFw0yNDAzMDExOTU2MDRaFw0yNTAyMjgyMDAxMDRaMDMxMTAvBgNV
BAMTKDkwRjNDOTEzM0U5NDU3RUJBRjA0NTVFQTJFQkMxMDkxQTk0MzFFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/eD/lR8Y2TE4SRnyrLKu04en
7wgFbj2OaZ9bhx5yqudAvOWOm2aZs5z5ksohoEmTnny3vG/aY8yx3t4j2aaBzSdw
640CEoLqCHJgCmrbNH0l1BBNafFL4zGnKTSpcD0/TCyY2dKdxk3MHFWcFQwmfH6i
uSvm+HteDNkroOEEj1KDwsqYETTb5Vr3ZxPFsGxJmVVhgzFPgzWhU0lEiLYlxlcb
jnrMCD9540xttx3JXMYniBGJm98U1w0L+qmuto66bRhYajgCHZ5S0ZfSlvgq28yS
+3uJRpnfKKARILnYjN/jnQWrKmUqfDuAFGgaEpAAc0Ooh1tlEtbEX0/s2+qzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkPPJEz6UV+uvBFXqLrwQkalDHjgwHwYDVR0j
BBgwFoAU4q/+LJ5d1585m02LZ5ObyqzqYcswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThjYVRmNkF6TnRuamZBVmZGR1lnNVRBcDZiUW5rUXZDazJaOEVQWXlV
VGovMC9FMkFGRkUyQzlFNURENzlGMzk5QjREOEI2NzkzOUJDQUFDRUE2MUNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyQUZGRTJDOUU1REQ3OUYz
OTlCNEQ4QjY3OTM5QkNBQUNFQTYxQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U4Y2FUZjZBek50bmpmQVZmRkdZZzVUQXA2YlFua1F2Q2syWjhFUFl5VVRqLzAv
MzEzNzM3MmUzNzMyMmUzMzMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUggMA0GCSqGSIb3DQEBCwUAA4IBAQCyJWf7P+wU
J2OB5BzRNBRGSLhzMg1UM1itbhV/B9bR9Fgxg2CldQwNEPK0wnfd1twXe7rB4Wdr
kalqYZMAgTrFwXrx70+0EUPGKI58L4RRZtwLvuxrwIl5Sz84kfyT4rqn8gN2MRNV
3dnY7k1ec2OlcV6ai9h4O+5Kh2QtujYmn44GOAXLCqwGGR3cIhOAb59fHSy68dUr
26M9EEQTrNyTzO5nbARtAiPr4C5b9ri3qsiC9gV9+eMszr2EHmULGrOMGtfurFYO
xlTsphYY6KEOgsgkpm08PD0am0/NSV0b36wUQBFZ8uY6O7+5IorPV7NQuhcKFLaN
pnDfzeqMYuBh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org