Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36312e302f32342d3234203d3e20323632343638.roa
File:                     3137392e3130382e36312e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          JAXoW+/ryJ/FcoCcvrH0z7YoOPqilbr3GKWQr/ieSUw=
Subject key identifier:   7E:A6:48:B2:FF:F7:C1:26:38:49:AA:5A:31:B0:EE:07:DA:64:EF:03
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       0AF7405C3C41E695EF2C2D51DE883C5AD2A08BDB
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36312e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:58 +0000
ROA not before:           Tue 20 Dec 2022 15:04:58 +0000
ROA not after:            Tue 19 Dec 2023 15:09:58 +0000
asID:                     262468
IP address blocks:        179.108.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f7:40:5c:3c:41:e6:95:ef:2c:2d:51:de:88:3c:5a:d2:a0:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:58 2022 GMT
            Not After : Dec 19 15:09:58 2023 GMT
        Subject: CN=7EA648B2FFF7C1263849AA5A31B0EE07DA64EF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:67:f7:76:63:3c:d9:c4:30:37:df:3c:28:
                    d1:8d:61:a0:a9:69:9a:b0:79:dc:1a:80:e6:55:9d:
                    34:5c:a7:01:06:b1:e3:60:b8:80:68:83:c6:e0:0b:
                    49:03:c1:d8:c3:3a:e6:21:51:be:4f:2c:8c:d9:77:
                    bc:fd:2f:e5:68:d6:ae:2a:36:94:e4:7d:06:61:a7:
                    b0:10:b6:0a:2a:9c:4f:23:95:e3:e2:8b:75:4e:60:
                    9f:85:0b:ad:a6:73:5e:51:3b:2a:d0:66:44:5a:6f:
                    62:c0:7d:66:e1:4e:6e:b3:ba:67:f3:42:3c:50:ab:
                    28:1e:d2:6e:b3:88:cb:62:7a:b6:ba:e7:83:13:dd:
                    84:25:1b:5a:02:f8:10:46:5a:a8:fb:79:cf:a5:0c:
                    2e:7d:45:01:f8:15:71:1e:ae:35:34:a9:8b:94:88:
                    7f:a4:cb:ba:47:f3:4a:5f:81:da:0d:07:24:c0:e6:
                    56:86:8e:33:13:3e:93:dc:3e:9c:b2:9b:d8:89:d7:
                    97:6f:89:65:f3:3c:81:97:69:bc:23:82:66:54:26:
                    7a:65:ee:3b:d2:35:fd:a3:1e:32:82:e0:74:8b:b7:
                    d2:83:ed:9c:12:94:51:b4:80:be:0c:15:b5:32:44:
                    b0:89:c1:80:ff:5e:45:db:00:d4:94:82:69:5c:56:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:48:B2:FF:F7:C1:26:38:49:AA:5A:31:B0:EE:07:DA:64:EF:03
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e36312e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:21:4b:cb:d6:39:71:83:a9:96:05:fe:67:08:24:1d:d6:fb:
         f3:f9:2e:93:11:ae:a1:85:95:f9:3a:01:ef:73:7b:54:a4:f2:
         a3:44:c2:e0:18:2d:f4:6f:14:59:3f:51:21:91:73:49:5e:7d:
         3f:04:20:0a:da:da:90:27:fa:ee:9a:3c:72:c4:e6:ca:ac:9e:
         f8:a1:2f:c6:b1:81:3b:f4:31:3d:54:45:50:81:f1:cb:22:a8:
         95:cd:a5:75:38:0e:f0:9a:62:f4:3c:85:dd:1f:76:0c:7a:3d:
         1f:63:e8:67:09:91:0a:5a:91:97:59:91:4b:84:04:2e:98:75:
         55:28:80:b7:fc:54:0b:e1:93:5c:d8:07:0f:50:0d:fd:32:05:
         e0:c3:be:c9:8e:6c:10:4f:ff:61:84:86:b5:f8:5b:50:b4:67:
         67:0d:4d:1e:9e:5f:d7:53:bd:c5:d5:7b:a3:71:bd:1d:3a:b1:
         61:e9:c6:ec:63:80:1b:d1:bc:05:29:1d:2b:55:cc:f6:ed:48:
         23:7b:34:ac:09:cc:f2:b8:34:66:c3:07:f4:95:41:7e:4c:f9:
         77:4a:9f:8a:d0:48:a9:a9:5c:32:4d:d8:f9:19:32:74:c3:0e:
         10:19:8b:a0:af:f9:d5:83:3b:01:ae:5c:2e:2c:5d:ad:5c:d8:
         ec:96:e7:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCvdAXDxB5pXvLC1R3og8WtKgi9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NThaFw0yMzEyMTkxNTA5NThaMDMxMTAvBgNV
BAMTKDdFQTY0OEIyRkZGN0MxMjYzODQ5QUE1QTMxQjBFRTA3REE2NEVGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvWf3dmM82cQwN988KNGNYaCp
aZqwedwagOZVnTRcpwEGseNguIBog8bgC0kDwdjDOuYhUb5PLIzZd7z9L+Vo1q4q
NpTkfQZhp7AQtgoqnE8jlePii3VOYJ+FC62mc15ROyrQZkRab2LAfWbhTm6zumfz
QjxQqyge0m6ziMtiera654MT3YQlG1oC+BBGWqj7ec+lDC59RQH4FXEerjU0qYuU
iH+ky7pH80pfgdoNByTA5laGjjMTPpPcPpyym9iJ15dviWXzPIGXabwjgmZUJnpl
7jvSNf2jHjKC4HSLt9KD7ZwSlFG0gL4MFbUyRLCJwYD/XkXbANSUgmlcVty7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfqZIsv/3wSY4SapaMbDuB9pk7wMwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNzM5MmUzMTMwMzgyZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzbD0wDQYJKoZIhvcNAQELBQADggEBAFghS8vW
OXGDqZYF/mcIJB3W+/P5LpMRrqGFlfk6Ae9ze1Sk8qNEwuAYLfRvFFk/USGRc0le
fT8EIAra2pAn+u6aPHLE5sqsnvihL8axgTv0MT1URVCB8csiqJXNpXU4DvCaYvQ8
hd0fdgx6PR9j6GcJkQpakZdZkUuEBC6YdVUogLf8VAvhk1zYBw9QDf0yBeDDvsmO
bBBP/2GEhrX4W1C0Z2cNTR6eX9dTvcXVe6NxvR06sWHpxuxjgBvRvAUpHStVzPbt
SCN7NKwJzPK4NGbDB/SVQX5M+XdKn4rQSKmpXDJN2PkZMnTDDhAZi6Cv+dWDOwGu
XC4sXa1c2OyW51I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org