Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3233203d3e203238323634.roa
File:                     3137392e3132342e302e302f32312d3233203d3e203238323634.roa (raw, json)
Hash identifier:          ifbCGNIJrzuOsXHhJIRfoJwHsbFVgB27FNMfiD6jhv4=
Subject key identifier:   99:DC:B0:26:3C:A9:D6:9A:46:B2:24:30:AA:36:E6:DA:3C:BC:B1:42
Certificate issuer:       /CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Certificate serial:       35503F32DCCF64ED58DE4795EF24091A7D7C57D4
Authority key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3233203d3e203238323634.roa
Signing time:             Mon 31 Oct 2022 11:43:04 +0000
ROA not before:           Mon 31 Oct 2022 11:38:04 +0000
ROA not after:            Mon 30 Oct 2023 11:43:04 +0000
asID:                     28264
IP address blocks:        179.124.0.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:50:3f:32:dc:cf:64:ed:58:de:47:95:ef:24:09:1a:7d:7c:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Validity
            Not Before: Oct 31 11:38:04 2022 GMT
            Not After : Oct 30 11:43:04 2023 GMT
        Subject: CN=99DCB0263CA9D69A46B22430AA36E6DA3CBCB142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:60:7f:52:41:3a:ce:94:ae:fc:8f:75:55:
                    5e:38:71:e0:31:6c:09:50:0c:13:e7:a1:5b:27:da:
                    5a:90:88:ff:a5:73:d7:bf:82:92:f8:96:f8:77:e4:
                    cf:0e:2c:94:70:66:82:18:93:aa:1b:21:e5:4d:95:
                    81:47:58:f5:89:d2:0d:00:6e:51:fe:f9:b5:55:d4:
                    ee:3f:35:56:b4:f1:7b:07:55:58:a2:ba:12:9a:6c:
                    2f:40:7a:84:7b:f0:bb:6e:5d:87:56:a9:e6:72:2e:
                    45:82:96:2a:da:cc:74:cd:5b:eb:2f:3b:88:54:58:
                    ce:cf:7d:38:78:45:16:bf:07:86:d8:77:14:97:15:
                    34:79:f0:a8:78:03:12:cf:b4:c2:9f:b6:ca:c7:df:
                    3e:c4:07:42:92:c3:15:e1:e8:0f:97:bf:e8:2c:26:
                    ba:c0:96:f9:82:a9:33:61:ff:78:47:95:ff:5f:3d:
                    05:9b:bd:4e:ef:0b:48:ab:d9:2c:a3:74:df:a3:d7:
                    1c:d4:72:07:97:d1:16:82:b8:ae:41:ce:78:46:42:
                    3b:01:1f:4d:11:5c:a0:f9:6d:cf:78:f3:e0:d3:7b:
                    a9:27:08:d6:2f:ca:2a:ab:01:00:41:f2:84:52:b8:
                    89:89:00:aa:4d:f5:cb:1b:24:57:b6:d1:5a:dc:53:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DC:B0:26:3C:A9:D6:9A:46:B2:24:30:AA:36:E6:DA:3C:BC:B1:42
            X509v3 Authority Key Identifier:
                keyid:28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3233203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:62:1e:d0:e7:f5:f4:2f:97:f4:4a:d2:46:7f:a6:bb:63:b9:
         47:25:72:62:b0:60:8a:e2:5d:a2:26:a3:b2:26:0b:83:b0:9e:
         f5:1b:65:aa:90:c8:bd:43:66:50:bf:a6:ed:c4:12:5f:7a:76:
         4a:c7:8b:4a:67:08:9d:85:65:63:b3:3c:e6:ee:50:d1:d0:fb:
         ef:f0:dd:67:b4:a0:9d:5c:11:99:d6:09:c0:6e:ad:3a:2a:46:
         00:d9:d0:c7:22:c7:4b:b3:b7:40:58:58:83:95:ed:67:93:d6:
         93:48:b3:9a:9c:ae:46:2b:ce:2f:d4:a5:f0:83:91:d9:5a:7e:
         98:89:56:bc:04:1e:bb:cc:ef:29:9a:f0:ce:f4:ab:cc:8e:4e:
         43:62:04:59:93:ee:32:ed:eb:e5:73:6c:f0:6f:e4:53:d5:fb:
         4f:8e:b2:3b:69:4c:7b:d7:65:84:51:76:99:a2:03:99:d4:3a:
         35:73:53:52:e1:b6:b7:09:1a:58:dc:ae:c4:59:7c:36:1c:39:
         0f:96:4f:60:14:91:4a:0b:cb:20:9b:9e:3c:0e:d5:32:31:88:
         0a:73:65:08:e2:d0:bd:36:29:68:88:c5:73:fc:44:3d:4b:89:
         a4:3e:06:8b:a7:09:24:6f:f1:d6:1a:04:d1:a3:85:57:4d:31:
         bd:21:31:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNVA/MtzPZO1Y3keV7yQJGn18V9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGMjFGMTc0QjI5MUNFMkY3RjkyMEUyNDIyRDFEQzZB
RkZGQ0Q2QzAeFw0yMjEwMzExMTM4MDRaFw0yMzEwMzAxMTQzMDRaMDMxMTAvBgNV
BAMTKDk5RENCMDI2M0NBOUQ2OUE0NkIyMjQzMEFBMzZFNkRBM0NCQ0IxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRmB/UkE6zpSu/I91VV44ceAx
bAlQDBPnoVsn2lqQiP+lc9e/gpL4lvh35M8OLJRwZoIYk6obIeVNlYFHWPWJ0g0A
blH++bVV1O4/NVa08XsHVViiuhKabC9AeoR78LtuXYdWqeZyLkWClirazHTNW+sv
O4hUWM7PfTh4RRa/B4bYdxSXFTR58Kh4AxLPtMKftsrH3z7EB0KSwxXh6A+Xv+gs
JrrAlvmCqTNh/3hHlf9fPQWbvU7vC0ir2SyjdN+j1xzUcgeX0RaCuK5BznhGQjsB
H00RXKD5bc948+DTe6knCNYvyiqrAQBB8oRSuImJAKpN9csbJFe20VrcU6WzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmdywJjyp1ppGsiQwqjbm2jy8sUIwHwYDVR0j
BBgwFoAUKPIfF0spHOL3+SDiQi0dxq//zWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMC8yOEYyMUYxNzRCMjkxQ0UyRjdGOTIwRTI0MjJEMURDNkFGRkZDRDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RjIxRjE3NEIyOTFDRTJG
N0Y5MjBFMjQyMkQxREM2QUZGRkNENkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vkd0dOZ1E0Z1hxOHdCVE5IZmhOckc0UVUyTnpKWmdDUnZ2ejkzUVA4eVhtLzAv
MzEzNzM5MmUzMTMyMzQyZTMwMmUzMDJmMzIzMTJkMzIzMzIwM2QzZTIwMzIzODMy
MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7N8ADANBgkqhkiG9w0BAQsFAAOCAQEALmIe0Of19C+X
9ErSRn+mu2O5RyVyYrBgiuJdoiajsiYLg7Ce9RtlqpDIvUNmUL+m7cQSX3p2SseL
SmcInYVlY7M85u5Q0dD77/DdZ7SgnVwRmdYJwG6tOipGANnQxyLHS7O3QFhYg5Xt
Z5PWk0izmpyuRivOL9Sl8IOR2Vp+mIlWvAQeu8zvKZrwzvSrzI5OQ2IEWZPuMu3r
5XNs8G/kU9X7T46yO2lMe9dlhFF2maIDmdQ6NXNTUuG2twkaWNyuxFl8Nhw5D5ZP
YBSRSgvLIJuePA7VMjGICnNlCOLQvTYpaIjFc/xEPUuJpD4Gi6cJJG/x1hoE0aOF
V00xvSExDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org