Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134342e302f32342d3234203d3e20323632343638.roa
File:                     3137372e35332e3134342e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          pnaPe3/XGgq9g7w00PkGW+aG4zuzV6plRbzc+MzVPIA=
Subject key identifier:   C4:C5:0C:BC:8E:A0:A8:2F:47:EF:76:AF:C8:97:FD:E6:E7:E0:0E:1D
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       31795862363A5A7C32FEAB8302AEFB0A6BFDECDC
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134342e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:53 +0000
ROA not before:           Tue 20 Dec 2022 15:04:53 +0000
ROA not after:            Tue 19 Dec 2023 15:09:53 +0000
asID:                     262468
IP address blocks:        177.53.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:79:58:62:36:3a:5a:7c:32:fe:ab:83:02:ae:fb:0a:6b:fd:ec:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:53 2022 GMT
            Not After : Dec 19 15:09:53 2023 GMT
        Subject: CN=C4C50CBC8EA0A82F47EF76AFC897FDE6E7E00E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:ae:f2:95:f1:31:bc:84:9d:d4:d7:68:01:
                    5e:da:ac:ed:5d:ed:75:ff:50:ed:bd:d9:d7:29:82:
                    7c:3d:3a:1f:cf:52:a6:a6:a9:9b:45:26:3b:c2:54:
                    b1:ac:61:a0:4f:94:43:ee:7c:3b:b1:7b:47:22:c9:
                    cf:69:19:24:f2:12:ab:69:eb:c8:70:d4:b5:bf:ec:
                    f7:f7:b4:7e:5c:f8:fa:40:0b:bd:f4:b7:c3:68:ea:
                    68:70:8b:bd:54:de:c4:a8:9a:cf:bb:33:75:e2:f5:
                    72:ef:25:b4:07:5a:db:43:21:00:74:6f:a4:55:2a:
                    72:b4:91:d2:80:9a:63:9e:6f:d8:bf:98:04:11:ff:
                    e0:69:e8:77:b5:07:0f:61:c3:0c:ea:95:e6:73:a4:
                    24:39:ba:06:53:1f:b2:b5:c7:8d:46:08:58:c5:93:
                    e7:9b:16:5b:17:b3:24:c3:eb:31:59:38:89:67:54:
                    7c:cf:e0:49:3e:02:30:70:62:bd:c6:ac:d7:37:b7:
                    18:53:5e:87:88:cb:89:1d:dd:87:a2:26:55:77:8b:
                    f2:b9:37:ca:8d:62:63:ef:4f:c4:8e:b3:37:31:da:
                    5d:28:49:2f:f2:81:db:d1:a5:5b:a4:65:57:9a:46:
                    5d:a8:f3:d0:a1:9a:3f:9b:98:03:0b:d5:9a:93:83:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:0C:BC:8E:A0:A8:2F:47:EF:76:AF:C8:97:FD:E6:E7:E0:0E:1D
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134342e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:52:d6:94:18:0f:84:17:b3:6b:48:37:67:f6:11:19:1e:
         03:31:5b:4f:74:02:39:b9:13:6a:ae:c5:af:12:29:68:c0:78:
         8d:df:e3:8e:db:48:99:a4:ec:36:6e:80:7b:68:95:c9:8e:23:
         67:58:f6:6d:4a:7a:7d:28:d3:2b:4c:46:dd:58:24:6e:1c:f4:
         11:ea:ac:0c:16:47:5f:8c:6a:2c:cd:65:f9:63:79:47:4e:fb:
         5a:14:6c:23:51:fe:ad:4b:a3:f4:12:bf:12:29:82:a4:0e:b6:
         1e:b4:9a:a7:10:11:9a:d9:d0:3e:81:18:64:f5:c0:5e:74:b1:
         39:c5:65:7e:29:aa:8e:42:f1:a7:ed:fb:59:56:cc:18:ad:e8:
         82:98:43:71:4f:4f:4f:c3:ff:f6:14:00:be:7a:11:c8:58:09:
         07:9f:f1:52:95:d3:09:c0:15:f4:e1:f9:37:0a:30:e9:86:fd:
         05:67:f4:7f:39:8f:49:f2:bb:06:d9:6d:d3:98:76:c6:17:ce:
         f9:b4:9a:19:5c:35:54:21:09:7b:8f:c3:0c:61:ae:45:2e:9c:
         53:35:6e:d6:cc:0b:f1:29:b4:47:c9:7f:6a:66:c6:9d:3d:bf:
         1e:09:32:13:8a:1c:90:44:ec:e3:0a:a5:83:6f:da:df:6d:05:
         76:f4:fe:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMXlYYjY6Wnwy/quDAq77Cmv97NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NTNaFw0yMzEyMTkxNTA5NTNaMDMxMTAvBgNV
BAMTKEM0QzUwQ0JDOEVBMEE4MkY0N0VGNzZBRkM4OTdGREU2RTdFMDBFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsa7ylfExvISd1NdoAV7arO1d
7XX/UO292dcpgnw9Oh/PUqamqZtFJjvCVLGsYaBPlEPufDuxe0ciyc9pGSTyEqtp
68hw1LW/7Pf3tH5c+PpAC730t8No6mhwi71U3sSoms+7M3Xi9XLvJbQHWttDIQB0
b6RVKnK0kdKAmmOeb9i/mAQR/+Bp6He1Bw9hwwzqleZzpCQ5ugZTH7K1x41GCFjF
k+ebFlsXsyTD6zFZOIlnVHzP4Ek+AjBwYr3GrNc3txhTXoeIy4kd3YeiJlV3i/K5
N8qNYmPvT8SOszcx2l0oSS/ygdvRpVukZVeaRl2o89Chmj+bmAML1ZqTg6ldAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxMUMvI6gqC9H73avyJf95ufgDh0wHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNzM3MmUzNTMzMmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxNZAwDQYJKoZIhvcNAQELBQADggEBABHpUtaU
GA+EF7NrSDdn9hEZHgMxW090Ajm5E2quxa8SKWjAeI3f447bSJmk7DZugHtolcmO
I2dY9m1Ken0o0ytMRt1YJG4c9BHqrAwWR1+MaizNZfljeUdO+1oUbCNR/q1Lo/QS
vxIpgqQOth60mqcQEZrZ0D6BGGT1wF50sTnFZX4pqo5C8aft+1lWzBit6IKYQ3FP
T0/D//YUAL56EchYCQef8VKV0wnAFfTh+TcKMOmG/QVn9H85j0nyuwbZbdOYdsYX
zvm0mhlcNVQhCXuPwwxhrkUunFM1btbMC/EptEfJf2pmxp09vx4JMhOKHJBE7OMK
pYNv2t9tBXb0/iw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org