Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa
File:                     3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          5OjWaEU7KNBJe7/Y1AZcsKaGUV6VSygHTPpxz+KaQUo=
Subject key identifier:   51:D3:AE:32:C3:35:1E:8A:F1:DD:ED:47:A2:72:58:A1:30:2E:8D:81
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       421B204D61E19EEF89FFEAB3CBE8D2211ED31897
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:36:39 +0000
ROA not before:           Mon 22 May 2023 16:31:39 +0000
ROA not after:            Mon 20 May 2024 16:36:39 +0000
asID:                     262777
IP address blocks:        177.128.248.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:20:4d:61:e1:9e:ef:89:ff:ea:b3:cb:e8:d2:21:1e:d3:18:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:31:39 2023 GMT
            Not After : May 20 16:36:39 2024 GMT
        Subject: CN=51D3AE32C3351E8AF1DDED47A27258A1302E8D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:3d:32:aa:c5:d5:de:f7:66:5f:9a:30:b0:
                    b3:2c:9d:66:81:f2:46:e8:9e:60:ea:0a:15:36:4d:
                    ff:96:42:c1:d1:1b:12:f2:8e:fd:87:2f:19:3a:63:
                    2e:8e:d0:53:eb:88:c8:b9:2b:4c:df:32:0b:c4:75:
                    85:36:b0:ed:84:9e:6f:58:5a:84:05:7a:29:6e:63:
                    fc:11:7e:96:23:d6:be:29:c6:8c:22:25:32:1e:5f:
                    8d:1e:04:37:3a:6e:c4:c2:1f:fb:4e:b6:36:91:78:
                    1d:a1:45:dd:3b:ff:c8:78:d1:99:86:17:eb:37:cf:
                    3d:82:dd:60:c5:09:7a:82:1c:6b:af:b5:f7:ee:08:
                    4f:f6:fa:5b:c1:de:06:2a:30:8f:bd:75:d8:01:27:
                    27:6c:70:9c:81:1b:3d:db:17:ca:ba:63:20:99:f4:
                    8f:55:cd:d2:bb:9f:1c:b4:07:96:b7:f1:4f:b6:8c:
                    e2:94:5b:31:0c:53:7d:86:7e:11:bf:8d:2d:91:0b:
                    00:d1:ce:a8:10:95:9e:bd:32:fc:77:07:07:e6:ae:
                    78:59:d0:c5:10:8c:14:4e:fd:c3:67:b0:2b:57:0c:
                    d5:b7:e7:2a:2b:ed:47:06:d8:ae:1f:d5:3e:76:2f:
                    12:ef:08:b4:4d:c5:96:27:2b:70:8e:32:be:21:bb:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:AE:32:C3:35:1E:8A:F1:DD:ED:47:A2:72:58:A1:30:2E:8D:81
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:ec:c8:9c:c7:7e:96:54:90:19:dd:19:8a:63:c4:2d:9c:
         22:28:04:df:f1:55:c6:f2:ea:08:65:59:e1:23:3f:9f:d5:d9:
         00:94:1e:55:6b:97:56:83:8f:a8:7d:e8:62:0b:ee:fc:80:9b:
         44:1f:28:5f:d6:d5:57:53:90:cb:a3:70:fc:2f:45:25:fa:ec:
         3d:1c:bc:01:cf:b6:86:5c:ed:a9:06:4d:1a:c0:3e:94:11:c1:
         e3:f7:78:0e:c2:60:c7:4f:28:fc:8d:27:8e:4a:fc:03:aa:a3:
         0a:3d:a6:9d:5e:1e:35:cc:ba:90:d7:44:92:88:ce:66:84:78:
         06:0a:74:77:9a:07:6a:74:b5:bd:7b:f3:09:7d:e7:6d:6a:1c:
         16:5e:1d:ec:37:7d:9b:07:ff:9b:c3:ec:8c:fb:de:8f:d2:9f:
         8d:6e:d0:5a:bd:3b:63:7f:4b:94:21:e9:21:85:be:8b:a7:66:
         dd:35:1b:03:02:0a:3e:47:ab:bf:45:69:2c:91:76:b3:ad:20:
         98:b4:91:d9:de:64:44:20:fb:5e:9c:9f:ed:fd:0a:de:3c:34:
         a8:bd:a1:c7:80:14:d1:e0:cd:a2:7f:80:3b:07:a5:5c:90:af:
         fd:81:7e:65:e3:7b:2d:d0:56:03:e4:58:fd:e7:4f:99:b6:0c:
         e7:8c:f7:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQhsgTWHhnu+J/+qzy+jSIR7TGJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNFQzg5ODg2OTRBOEFGNUNBMzBDRjExQTgxN0Q1NDhD
RjFGQTAyNDAeFw0yMzA1MjIxNjMxMzlaFw0yNDA1MjAxNjM2MzlaMDMxMTAvBgNV
BAMTKDUxRDNBRTMyQzMzNTFFOEFGMURERUQ0N0EyNzI1OEExMzAyRThEODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmez0yqsXV3vdmX5owsLMsnWaB
8kbonmDqChU2Tf+WQsHRGxLyjv2HLxk6Yy6O0FPriMi5K0zfMgvEdYU2sO2Enm9Y
WoQFeiluY/wRfpYj1r4pxowiJTIeX40eBDc6bsTCH/tOtjaReB2hRd07/8h40ZmG
F+s3zz2C3WDFCXqCHGuvtffuCE/2+lvB3gYqMI+9ddgBJydscJyBGz3bF8q6YyCZ
9I9VzdK7nxy0B5a38U+2jOKUWzEMU32GfhG/jS2RCwDRzqgQlZ69Mvx3BwfmrnhZ
0MUQjBRO/cNnsCtXDNW35yor7UcG2K4f1T52LxLvCLRNxZYnK3COMr4hu3P3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUdOuMsM1Horx3e1HonJYoTAujYEwHwYDVR0j
BBgwFoAUA+yJiGlKivXKMM8RqBfVSM8foCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMS8wM0VDODk4ODY5NEE4QUY1Q0EzMENGMTFBODE3RDU0OENGMUZBMDI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRUM4OTg4Njk0QThBRjVD
QTMwQ0YxMUE4MTdENTQ4Q0YxRkEwMjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzEv
MzEzNzM3MmUzMTMyMzgyZTMyMzQzODJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GA+DANBgkqhkiG9w0BAQsFAAOCAQEAHUzs
yJzHfpZUkBndGYpjxC2cIigE3/FVxvLqCGVZ4SM/n9XZAJQeVWuXVoOPqH3oYgvu
/ICbRB8oX9bVV1OQy6Nw/C9FJfrsPRy8Ac+2hlztqQZNGsA+lBHB4/d4DsJgx08o
/I0njkr8A6qjCj2mnV4eNcy6kNdEkojOZoR4Bgp0d5oHanS1vXvzCX3nbWocFl4d
7Dd9mwf/m8PsjPvej9KfjW7QWr07Y39LlCHpIYW+i6dm3TUbAwIKPkerv0VpLJF2
s60gmLSR2d5kRCD7Xpyf7f0K3jw0qL2hx4AU0eDNon+AOwelXJCv/YF+ZeN7LdBW
A+RY/edPmbYM54z37Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org