Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          Od4oPjY//BFVXY5U6S1OovxvPX2mPYJtnci6RABtZng=
Subject key identifier:   EB:86:DB:BA:F1:90:91:AD:97:22:7F:FE:EF:60:28:27:0A:B1:A0:56
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       2829C9334113E392A000B33549E93254ACDECEFD
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 22 Nov 2023 22:00:00 +0000
ROA not before:           Wed 22 Nov 2023 21:55:00 +0000
ROA not after:            Wed 20 Nov 2024 22:00:00 +0000
asID:                     52604
IP address blocks:        177.124.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:c9:33:41:13:e3:92:a0:00:b3:35:49:e9:32:54:ac:de:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Nov 22 21:55:00 2023 GMT
            Not After : Nov 20 22:00:00 2024 GMT
        Subject: CN=EB86DBBAF19091AD97227FFEEF6028270AB1A056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:92:11:a4:aa:e3:f6:35:74:30:07:13:4c:
                    6a:fd:cd:25:7e:ab:2c:58:5b:07:7a:9d:d3:6e:17:
                    0d:20:69:e7:73:a1:2d:b3:73:fb:13:6f:6e:88:bd:
                    76:cd:fd:6c:6f:d1:6b:29:20:b4:1d:59:3a:9f:34:
                    76:53:cd:88:fa:46:1c:61:ac:a9:6a:2a:9b:f7:20:
                    61:32:f1:80:14:31:2c:5c:e6:ba:9e:f3:8a:b5:7c:
                    3f:ee:fd:95:48:0e:13:89:26:6a:28:4e:24:bd:9d:
                    e1:6d:20:a4:f3:f5:0c:7f:de:2c:24:56:82:8c:9c:
                    ba:ea:53:5c:34:26:08:68:05:8f:cc:bd:b9:1c:f8:
                    27:b1:2b:6a:e8:68:16:07:02:92:cc:b6:d2:48:45:
                    82:08:a6:34:0c:23:5a:94:11:1a:51:31:47:4c:a5:
                    31:de:c3:89:f2:96:74:77:0c:26:f4:cc:3a:19:28:
                    e1:96:9c:40:ff:15:65:ce:70:5c:82:20:91:48:80:
                    a6:80:98:12:fe:09:5e:b6:c9:03:22:5d:3a:af:7e:
                    a8:9a:68:79:a5:d4:95:00:db:73:68:c2:84:6c:e2:
                    73:d4:14:02:7d:19:10:fb:99:b0:79:db:1c:eb:f6:
                    29:4b:46:33:e1:17:aa:92:ff:9e:62:a6:de:94:a7:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:DB:BA:F1:90:91:AD:97:22:7F:FE:EF:60:28:27:0A:B1:A0:56
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:64:73:22:88:74:00:fb:8f:2f:2c:8b:c4:47:6e:0e:79:
         b5:10:19:04:7d:a5:75:e4:c5:14:b0:ae:d6:c8:da:b1:5b:81:
         52:4f:56:6d:6a:3b:57:9c:85:89:73:ab:53:2a:da:29:52:19:
         cc:ca:0f:5e:55:57:ef:ed:64:42:71:51:d0:f5:a9:1b:f2:8d:
         fd:16:5f:33:78:97:26:69:bb:82:c1:95:e9:34:02:8f:f4:e2:
         70:29:e3:79:24:f0:3d:e5:a6:c2:86:f7:ba:8b:a0:48:94:ef:
         7d:52:13:7c:80:69:cc:e9:8a:7e:ed:c1:df:4c:c4:1a:bf:8c:
         9e:03:8d:55:c0:6a:da:12:a0:43:8c:b4:50:b1:1e:f3:b6:ee:
         2e:f1:07:1b:34:a0:a4:bc:75:0a:1e:06:5c:ff:01:a4:f6:bc:
         f6:fa:f3:8e:93:4e:ee:6c:7b:df:c5:9b:5a:d0:dd:c6:04:85:
         48:59:36:b9:ee:5a:28:d0:39:86:93:6f:4c:64:bd:ff:30:37:
         47:24:3e:3a:13:84:e6:29:ce:89:b6:e4:7e:4c:4c:54:45:5c:
         bf:77:e7:aa:51:7c:b0:2f:2b:7b:fc:77:62:7e:8b:9f:63:ff:
         2e:64:88:b1:7c:3c:c7:95:69:45:38:fa:39:66:36:26:db:6e:
         31:13:b0:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKCnJM0ET45KgALM1SekyVKzezv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhENkVDOENBOEQ4ODE5RThCRUU2MzUwOTE2ODYxQ0FD
OUE1MzlGNzAeFw0yMzExMjIyMTU1MDBaFw0yNDExMjAyMjAwMDBaMDMxMTAvBgNV
BAMTKEVCODZEQkJBRjE5MDkxQUQ5NzIyN0ZGRUVGNjAyODI3MEFCMUEwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvpIRpKrj9jV0MAcTTGr9zSV+
qyxYWwd6ndNuFw0gaedzoS2zc/sTb26IvXbN/Wxv0WspILQdWTqfNHZTzYj6Rhxh
rKlqKpv3IGEy8YAUMSxc5rqe84q1fD/u/ZVIDhOJJmooTiS9neFtIKTz9Qx/3iwk
VoKMnLrqU1w0JghoBY/Mvbkc+CexK2roaBYHApLMttJIRYIIpjQMI1qUERpRMUdM
pTHew4nylnR3DCb0zDoZKOGWnED/FWXOcFyCIJFIgKaAmBL+CV62yQMiXTqvfqia
aHml1JUA23NowoRs4nPUFAJ9GRD7mbB52xzr9ilLRjPhF6qS/55ipt6Upx3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU64bbuvGQka2XIn/+72AoJwqxoFYwHwYDVR0j
BBgwFoAUaNbsjKjYgZ6L7mNQkWhhysmlOfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtEWVRFNk5UWnFKVFhFWGVkaXZMc0ZmZnVRa2g4M1luNWR0Ynh5bUto
SjgvMC82OEQ2RUM4Q0E4RDg4MTlFOEJFRTYzNTA5MTY4NjFDQUM5QTUzOUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4RDZFQzhDQThEODgxOUU4
QkVFNjM1MDkxNjg2MUNBQzlBNTM5RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLRFlURTZOVFpxSlRYRVhlZGl2THNGZmZ1UWtoODNZbjVkdGJ4eW1LaEo4LzAv
MzEzNzM3MmUzMTMyMzQyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfHgwDQYJKoZIhvcNAQELBQADggEBAFpXZHMi
iHQA+48vLIvER24OebUQGQR9pXXkxRSwrtbI2rFbgVJPVm1qO1echYlzq1Mq2ilS
GczKD15VV+/tZEJxUdD1qRvyjf0WXzN4lyZpu4LBlek0Ao/04nAp43kk8D3lpsKG
97qLoEiU731SE3yAaczpin7twd9MxBq/jJ4DjVXAatoSoEOMtFCxHvO27i7xBxs0
oKS8dQoeBlz/AaT2vPb6846TTu5se9/Fm1rQ3cYEhUhZNrnuWijQOYaTb0xkvf8w
N0ckPjoThOYpzom25H5MTFRFXL9356pRfLAvK3v8d2J+i59j/y5kiLF8PMeVaUU4
+jlmNibbbjETsGY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org