Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32332d3233203d3e20323632343638.roa
File:                     3137392e3130382e35362e302f32332d3233203d3e20323632343638.roa (raw, json)
Hash identifier:          ksSeVoHrKj1vpQsjKRlFDxTZZNHUR34nq24eVS53eH0=
Subject key identifier:   F4:1F:8E:F6:0F:EE:DE:BB:A7:B5:9F:44:1A:9B:06:46:C5:91:B0:E2
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       029E19D31D97BBBDE0376C0204A2649A9D3C7ECB
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32332d3233203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:50 +0000
ROA not before:           Tue 20 Dec 2022 15:04:50 +0000
ROA not after:            Tue 19 Dec 2023 15:09:50 +0000
asID:                     262468
IP address blocks:        179.108.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:19:d3:1d:97:bb:bd:e0:37:6c:02:04:a2:64:9a:9d:3c:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:50 2022 GMT
            Not After : Dec 19 15:09:50 2023 GMT
        Subject: CN=F41F8EF60FEEDEBBA7B59F441A9B0646C591B0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:f8:2b:94:52:5b:a5:46:9f:f0:02:46:1e:
                    ee:b3:cb:fb:e5:99:8c:14:64:30:3c:5b:d6:13:86:
                    47:49:fb:07:52:a0:0d:1c:d7:72:d3:79:97:0c:52:
                    db:2b:2b:fe:79:00:4a:14:c8:95:c0:4a:d4:72:c2:
                    97:0b:25:33:80:12:ac:f9:db:73:57:a2:27:11:34:
                    ac:b5:16:11:b5:30:96:a9:39:b2:42:cb:c4:88:b0:
                    ff:3e:9f:5f:6e:b4:d9:56:c0:56:3a:cd:ee:7b:e3:
                    5f:88:48:13:bf:48:f7:f7:8d:01:22:1f:28:8a:95:
                    04:62:9a:63:29:1f:83:2a:f4:bc:21:ec:07:91:4e:
                    6a:0e:22:c8:e2:60:5b:d6:45:92:75:39:d5:64:7e:
                    9d:8c:a6:d8:30:f8:02:de:43:94:dc:4b:5a:f3:9c:
                    f6:3c:23:cc:16:c1:25:17:06:c4:02:86:35:bc:46:
                    30:a9:31:81:e4:f0:54:a4:ae:82:07:03:4f:6e:25:
                    26:75:bb:fb:c7:e0:4a:8d:da:f6:05:27:ed:7a:72:
                    86:8a:ad:b9:31:cb:ef:ab:23:2c:d5:10:1d:5e:43:
                    4b:6c:bf:b4:bd:51:1c:46:47:4e:d1:36:95:7d:d4:
                    54:f1:9e:c3:13:67:19:ac:97:30:72:41:f2:c4:59:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1F:8E:F6:0F:EE:DE:BB:A7:B5:9F:44:1A:9B:06:46:C5:91:B0:E2
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32332d3233203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:38:a9:21:99:24:9b:bc:10:c1:c9:3c:01:0c:72:9e:cd:
         ac:d2:c5:d6:e0:23:45:9f:61:e7:04:75:2a:05:ea:1c:76:8d:
         02:b0:32:46:f2:4b:a7:80:ba:1e:86:96:2b:20:e8:f7:f0:b5:
         b4:27:18:b0:dc:b4:87:1e:cb:72:4c:f3:ab:09:60:4a:67:98:
         0a:1a:41:e6:f3:bc:8c:60:c2:c7:9b:3a:24:a2:e7:4e:93:6c:
         88:b0:56:2f:c4:20:d2:87:01:a4:51:ec:1f:24:11:75:dd:14:
         16:0c:f6:01:73:05:49:6f:66:69:e5:31:aa:d8:72:eb:ae:18:
         f7:f4:50:8d:93:06:c3:3c:85:b7:86:ce:7e:26:76:40:a5:7b:
         90:2e:ee:2d:e2:ed:ae:28:70:61:da:87:be:50:51:4f:1c:9d:
         3f:35:64:96:e8:bd:8a:6f:5b:9f:f9:00:18:2a:0a:91:54:74:
         cb:d2:fa:96:6d:57:d2:fc:d8:ec:40:35:34:59:60:2f:fa:88:
         7e:d9:58:59:db:fc:8c:0c:96:30:d6:64:68:cc:be:18:5a:2c:
         dc:86:bd:4e:08:eb:3a:a0:cb:ce:28:a5:22:88:8a:0f:e4:ab:
         53:e5:fc:ec:00:68:a7:3a:2c:70:d2:fe:0a:f1:0e:98:32:b4:
         74:03:22:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAp4Z0x2Xu73gN2wCBKJkmp08fsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NTBaFw0yMzEyMTkxNTA5NTBaMDMxMTAvBgNV
BAMTKEY0MUY4RUY2MEZFRURFQkJBN0I1OUY0NDFBOUIwNjQ2QzU5MUIwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+PgrlFJbpUaf8AJGHu6zy/vl
mYwUZDA8W9YThkdJ+wdSoA0c13LTeZcMUtsrK/55AEoUyJXAStRywpcLJTOAEqz5
23NXoicRNKy1FhG1MJapObJCy8SIsP8+n19utNlWwFY6ze5741+ISBO/SPf3jQEi
HyiKlQRimmMpH4Mq9Lwh7AeRTmoOIsjiYFvWRZJ1OdVkfp2Mptgw+ALeQ5TcS1rz
nPY8I8wWwSUXBsQChjW8RjCpMYHk8FSkroIHA09uJSZ1u/vH4EqN2vYFJ+16coaK
rbkxy++rIyzVEB1eQ0tsv7S9URxGR07RNpV91FTxnsMTZxmslzByQfLEWTE7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9B+O9g/u3runtZ9EGpsGRsWRsOIwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNzM5MmUzMTMwMzgyZTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzbDgwDQYJKoZIhvcNAQELBQADggEBAInTOKkh
mSSbvBDByTwBDHKezazSxdbgI0WfYecEdSoF6hx2jQKwMkbyS6eAuh6Glisg6Pfw
tbQnGLDctIcey3JM86sJYEpnmAoaQebzvIxgwsebOiSi506TbIiwVi/EINKHAaRR
7B8kEXXdFBYM9gFzBUlvZmnlMarYcuuuGPf0UI2TBsM8hbeGzn4mdkCle5Au7i3i
7a4ocGHah75QUU8cnT81ZJbovYpvW5/5ABgqCpFUdMvS+pZtV9L82OxANTRZYC/6
iH7ZWFnb/IwMljDWZGjMvhhaLNyGvU4I6zqgy84opSKIig/kq1Pl/OwAaKc6LHDS
/grxDpgytHQDIqY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org