Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/3137392e35312e3135392e302f32342d3234203d3e20323731313832.roa
File:                     3137392e35312e3135392e302f32342d3234203d3e20323731313832.roa (raw, json)
Hash identifier:          zOwVrGTe7+iKyFddBlb6/iYkqdye8XZbMpI0+KwtCnQ=
Subject key identifier:   E5:65:05:6B:FF:CA:ED:95:46:18:60:40:37:79:1C:72:7E:9B:77:99
Certificate issuer:       /CN=58353A9A735B265FA73E3FF6ECB7C6D1EF66C536
Certificate serial:       0DBC3CD4840252A150C6A6F03D23B9ED7DDE5D6C
Authority key identifier: 58:35:3A:9A:73:5B:26:5F:A7:3E:3F:F6:EC:B7:C6:D1:EF:66:C5:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58353A9A735B265FA73E3FF6ECB7C6D1EF66C536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/3137392e35312e3135392e302f32342d3234203d3e20323731313832.roa
Signing time:             Mon 18 Dec 2023 17:37:37 +0000
ROA not before:           Mon 18 Dec 2023 17:32:37 +0000
ROA not after:            Mon 16 Dec 2024 17:37:37 +0000
asID:                     271182
IP address blocks:        179.51.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bc:3c:d4:84:02:52:a1:50:c6:a6:f0:3d:23:b9:ed:7d:de:5d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58353A9A735B265FA73E3FF6ECB7C6D1EF66C536
        Validity
            Not Before: Dec 18 17:32:37 2023 GMT
            Not After : Dec 16 17:37:37 2024 GMT
        Subject: CN=E565056BFFCAED954618604037791C727E9B7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:ea:66:09:fb:45:9a:b9:80:64:1f:a2:54:
                    86:ad:49:2c:53:d5:84:6f:98:09:fa:cc:fa:ed:70:
                    ab:68:32:bc:5e:f9:7d:71:2a:aa:17:dc:5d:02:ba:
                    87:29:5a:9f:94:c2:03:6a:e8:d8:57:4c:1f:c8:35:
                    d3:4c:6f:e6:51:30:13:07:4c:d0:b8:93:fd:38:ea:
                    1b:25:70:0a:d6:fd:b9:f8:c0:37:c3:18:e6:43:27:
                    98:bd:12:86:3b:62:d9:09:ef:7a:1c:88:d3:02:d9:
                    d0:83:31:2c:4e:4e:ea:3a:ea:36:49:e6:10:bf:9e:
                    c8:85:2d:a8:b4:05:85:36:41:d0:8e:e3:57:16:3d:
                    d3:f6:da:28:8b:dd:36:99:ea:4b:9d:c4:80:a2:6b:
                    b2:b8:28:96:bf:0b:13:27:b4:4f:a9:0f:34:20:81:
                    5c:42:34:cf:fd:59:06:f0:3e:df:e3:05:98:36:30:
                    3c:d6:c0:06:2e:97:0a:b1:eb:df:1f:c2:8b:b8:b2:
                    fe:72:7a:42:36:0d:5c:46:36:ab:1f:9f:99:9d:c9:
                    98:c9:b4:ba:ff:91:c0:97:d7:f6:2b:d4:2a:9e:5c:
                    d5:b9:54:94:0b:f0:80:cc:b9:13:46:b7:9f:60:9f:
                    d6:fd:37:6f:30:55:1e:ce:1d:7b:fc:03:c9:e0:60:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:65:05:6B:FF:CA:ED:95:46:18:60:40:37:79:1C:72:7E:9B:77:99
            X509v3 Authority Key Identifier:
                keyid:58:35:3A:9A:73:5B:26:5F:A7:3E:3F:F6:EC:B7:C6:D1:EF:66:C5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/58353A9A735B265FA73E3FF6ECB7C6D1EF66C536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58353A9A735B265FA73E3FF6ECB7C6D1EF66C536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/3137392e35312e3135392e302f32342d3234203d3e20323731313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:9d:86:5b:6a:ea:9b:84:cd:23:c6:af:10:69:e8:99:7c:
         fa:3d:f5:e5:ee:bb:dc:c1:c7:fe:e6:88:72:c0:8c:4b:28:cf:
         87:cc:2d:6b:d3:4e:66:d2:55:e7:6c:e2:74:e6:3b:d3:cb:6f:
         0f:3a:31:18:65:08:c7:dd:13:18:76:44:1a:1e:d7:06:20:b4:
         c2:3d:d6:f8:f8:b2:49:51:9f:92:ff:d4:85:12:eb:bb:75:af:
         14:69:7d:a3:ca:c9:4e:8e:94:3f:90:50:74:25:01:82:c1:6f:
         63:4a:a8:52:24:43:16:57:5e:fd:43:44:18:ba:45:bc:89:3c:
         ba:c7:de:8a:e9:a6:91:1c:94:32:2f:d1:fb:e8:b5:cd:1c:76:
         f4:a7:9f:22:b7:76:35:45:5c:c8:17:54:f9:32:f1:69:b8:68:
         15:88:98:91:e5:47:a3:f6:8c:63:91:1b:a3:ec:81:1d:77:27:
         65:29:e2:1e:cb:9a:0f:65:bd:47:eb:5d:3c:98:b3:2d:71:3a:
         55:cb:1e:0f:97:48:85:08:d1:d2:9a:1d:1e:0a:16:e2:1c:2d:
         fb:c8:8b:17:dc:b8:af:e2:8b:cb:e0:1a:e2:6c:fb:e4:ee:a4:
         87:b2:4e:47:05:8b:35:04:1a:66:35:47:a6:c0:96:60:6a:ad:
         43:17:bc:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDbw81IQCUqFQxqbwPSO57X3eXWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgzNTNBOUE3MzVCMjY1RkE3M0UzRkY2RUNCN0M2RDFF
RjY2QzUzNjAeFw0yMzEyMTgxNzMyMzdaFw0yNDEyMTYxNzM3MzdaMDMxMTAvBgNV
BAMTKEU1NjUwNTZCRkZDQUVEOTU0NjE4NjA0MDM3NzkxQzcyN0U5Qjc3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUupmCftFmrmAZB+iVIatSSxT
1YRvmAn6zPrtcKtoMrxe+X1xKqoX3F0CuocpWp+UwgNq6NhXTB/INdNMb+ZRMBMH
TNC4k/046hslcArW/bn4wDfDGOZDJ5i9EoY7YtkJ73ociNMC2dCDMSxOTuo66jZJ
5hC/nsiFLai0BYU2QdCO41cWPdP22iiL3TaZ6kudxICia7K4KJa/CxMntE+pDzQg
gVxCNM/9WQbwPt/jBZg2MDzWwAYulwqx698fwou4sv5yekI2DVxGNqsfn5mdyZjJ
tLr/kcCX1/Yr1CqeXNW5VJQL8IDMuRNGt59gn9b9N28wVR7OHXv8A8ngYLwDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5WUFa//K7ZVGGGBAN3kccn6bd5kwHwYDVR0j
BBgwFoAUWDU6mnNbJl+nPj/27LfG0e9mxTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZNTmZiTUpSZFB1Wm0zM3dyU1FQaHVhb2pNNURFRm5GUHZOYTIxaFFu
Q3EvMC81ODM1M0E5QTczNUIyNjVGQTczRTNGRjZFQ0I3QzZEMUVGNjZDNTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4MzUzQTlBNzM1QjI2NUZB
NzNFM0ZGNkVDQjdDNkQxRUY2NkM1MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWTU5mYk1KUmRQdVptMzN3clNRUGh1YW9qTTVERUZuRlB2TmEyMWhRbkNxLzAv
MzEzNzM5MmUzNTMxMmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzM58wDQYJKoZIhvcNAQELBQADggEBAFSKnYZb
auqbhM0jxq8QaeiZfPo99eXuu9zBx/7miHLAjEsoz4fMLWvTTmbSVeds4nTmO9PL
bw86MRhlCMfdExh2RBoe1wYgtMI91vj4sklRn5L/1IUS67t1rxRpfaPKyU6OlD+Q
UHQlAYLBb2NKqFIkQxZXXv1DRBi6RbyJPLrH3orpppEclDIv0fvotc0cdvSnnyK3
djVFXMgXVPky8Wm4aBWImJHlR6P2jGORG6PsgR13J2Up4h7Lmg9lvUfrXTyYsy1x
OlXLHg+XSIUI0dKaHR4KFuIcLfvIixfcuK/ii8vgGuJs++TupIeyTkcFizUEGmY1
R6bAlmBqrUMXvNE=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:44 2025 by rpki-client