Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3137372e3232312e35362e302f32322d3232203d3e20323633363631.roa
File:                     3137372e3232312e35362e302f32322d3232203d3e20323633363631.roa (raw, json)
Hash identifier:          gU1Z6uPMNZ+I0VjaLsNBSv6s5cIROtpSiVX9SpF6r+c=
Subject key identifier:   3A:F7:94:B8:FB:B2:D2:83:25:A7:58:00:67:5E:AF:E0:DA:7B:7F:A4
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       6E40DFA5902045638D6A909776D8FA9E49E931C9
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3137372e3232312e35362e302f32322d3232203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:45:05 +0000
ROA not before:           Thu 28 Mar 2024 18:40:05 +0000
ROA not after:            Thu 27 Mar 2025 18:45:05 +0000
asID:                     263661
IP address blocks:        177.221.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:40:df:a5:90:20:45:63:8d:6a:90:97:76:d8:fa:9e:49:e9:31:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:40:05 2024 GMT
            Not After : Mar 27 18:45:05 2025 GMT
        Subject: CN=3AF794B8FBB2D28325A75800675EAFE0DA7B7FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:2f:f7:55:f0:80:5a:23:94:87:6b:46:f6:
                    bf:73:3a:de:93:4d:17:66:a6:96:6e:af:17:14:a0:
                    7f:1e:1f:c4:33:fd:a1:7c:7e:da:c2:a2:ac:26:2f:
                    0d:45:85:d4:52:0a:2f:85:08:51:74:ea:88:23:35:
                    a3:4b:01:d8:86:31:cd:c5:ef:ac:1d:48:9e:9b:e7:
                    55:49:6e:31:93:1b:82:2b:9b:b5:19:f2:f6:a3:a8:
                    c9:3b:8e:49:56:cb:3e:b0:e2:32:02:af:67:c5:9e:
                    14:88:be:bb:7e:5d:bd:f9:50:38:5b:7f:7a:22:83:
                    5e:47:5d:a9:09:e9:8d:81:9c:43:14:c8:f8:d1:5a:
                    9c:1f:ba:f8:a7:96:60:94:8e:f9:a8:38:55:9a:c2:
                    cd:41:d8:4a:a2:91:c1:db:b4:6d:6e:c7:30:c1:a2:
                    f7:42:8d:bf:bc:34:25:e7:87:89:c1:cb:24:c7:0b:
                    9e:53:cd:2f:27:47:a5:32:5d:d1:8e:22:c7:7f:33:
                    d7:93:5b:04:5c:49:a6:56:1a:65:ee:78:9b:78:08:
                    d1:b9:68:72:25:7a:1d:8e:c4:d3:a9:84:59:75:9b:
                    b3:1c:ae:b0:de:6b:2e:79:00:a7:a9:4b:06:bc:d3:
                    d7:24:88:71:17:fe:ee:44:44:57:ad:19:e5:37:00:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F7:94:B8:FB:B2:D2:83:25:A7:58:00:67:5E:AF:E0:DA:7B:7F:A4
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3137372e3232312e35362e302f32322d3232203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:ef:66:87:62:56:1c:ec:54:eb:8c:cf:93:5e:56:e9:a0:
         4c:43:d0:6b:f9:5e:59:12:ee:2b:36:d2:d5:32:9f:5e:f6:4b:
         4b:5f:14:e3:da:dd:bb:81:7b:86:ac:c6:59:a2:f5:50:9b:f4:
         9c:a8:fc:b8:7b:34:5c:59:65:73:75:ae:85:76:83:98:9a:3b:
         88:18:44:39:5a:f1:64:35:7e:e5:50:31:77:57:13:ab:43:db:
         77:6e:36:a3:f8:bf:fe:02:43:d4:ce:ae:88:73:c9:6b:d0:e9:
         a9:c8:ba:15:c9:49:71:65:ea:71:1b:09:3a:77:ba:6a:6e:34:
         50:aa:15:1a:be:db:5c:fb:64:f5:78:6d:33:77:0e:2f:a6:71:
         6e:22:19:06:63:37:47:a3:20:3f:94:7c:e9:07:4f:0c:31:56:
         cb:4c:78:be:31:27:8a:4e:28:d0:98:dd:90:dc:38:a1:d5:15:
         96:ee:50:f2:47:10:1a:f8:80:4c:03:0f:48:63:7e:21:91:0b:
         09:5c:2e:be:96:e9:5e:5a:8f:cb:5d:27:74:66:39:d3:cd:5e:
         93:ab:7d:30:d8:d0:dc:67:58:80:3f:bb:35:81:98:fb:55:96:
         9e:4b:13:e0:5e:53:8f:40:f0:c8:df:77:10:a0:45:a4:8e:9c:
         c3:41:b0:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbkDfpZAgRWONapCXdtj6nknpMckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0NjFFMDE2M0U4MzEwNkY4NEFERjE0MzM4NjUzMjYw
NTFCMDlGNTAeFw0yNDAzMjgxODQwMDVaFw0yNTAzMjcxODQ1MDVaMDMxMTAvBgNV
BAMTKDNBRjc5NEI4RkJCMkQyODMyNUE3NTgwMDY3NUVBRkUwREE3QjdGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQC/3VfCAWiOUh2tG9r9zOt6T
TRdmppZurxcUoH8eH8Qz/aF8ftrCoqwmLw1FhdRSCi+FCFF06ogjNaNLAdiGMc3F
76wdSJ6b51VJbjGTG4Irm7UZ8vajqMk7jklWyz6w4jICr2fFnhSIvrt+Xb35UDhb
f3oig15HXakJ6Y2BnEMUyPjRWpwfuvinlmCUjvmoOFWaws1B2EqikcHbtG1uxzDB
ovdCjb+8NCXnh4nByyTHC55TzS8nR6UyXdGOIsd/M9eTWwRcSaZWGmXueJt4CNG5
aHIleh2OxNOphFl1m7McrrDeay55AKepSwa809ckiHEX/u5ERFetGeU3AKKnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOveUuPuy0oMlp1gAZ16v4Np7f6QwHwYDVR0j
BBgwFoAUH0YeAWPoMQb4St8UM4ZTJgUbCfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMS8xRjQ2MUUwMTYzRTgzMTA2Rjg0QURGMTQzMzg2NTMyNjA1MUIwOUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNDYxRTAxNjNFODMxMDZG
ODRBREYxNDMzODY1MzI2MDUxQjA5RjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzEv
MzEzNzM3MmUzMjMyMzEyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKx3TgwDQYJKoZIhvcNAQELBQADggEBAF5g72aH
YlYc7FTrjM+TXlbpoExD0Gv5XlkS7is20tUyn172S0tfFOPa3buBe4asxlmi9VCb
9Jyo/Lh7NFxZZXN1roV2g5iaO4gYRDla8WQ1fuVQMXdXE6tD23duNqP4v/4CQ9TO
rohzyWvQ6anIuhXJSXFl6nEbCTp3umpuNFCqFRq+21z7ZPV4bTN3Di+mcW4iGQZj
N0ejID+UfOkHTwwxVstMeL4xJ4pOKNCY3ZDcOKHVFZbuUPJHEBr4gEwDD0hjfiGR
CwlcLr6W6V5aj8tdJ3RmOdPNXpOrfTDY0NxnWIA/uzWBmPtVlp5LE+BeU49A8Mjf
dxCgRaSOnMNBsAY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org