Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203533313434.roa
File:                     3137372e3232312e33322e302f32302d3234203d3e203533313434.roa (raw, json)
Hash identifier:          UMh/dD5fRsSSuYqyptA+eO3ImenxJcrnkNiLGkLtNVM=
Subject key identifier:   C0:2D:F5:26:2A:AD:68:96:5E:26:16:C1:EA:B0:25:A6:7D:01:DC:83
Certificate issuer:       /CN=7103F4194EF67E55EFBD869E564501095E338AEC
Certificate serial:       7A900EAF605DB2028F81545CCF86EED4370B1655
Authority key identifier: 71:03:F4:19:4E:F6:7E:55:EF:BD:86:9E:56:45:01:09:5E:33:8A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7103F4194EF67E55EFBD869E564501095E338AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203533313434.roa
Signing time:             Sat 14 Aug 2021 20:00:00 +0000
ROA not before:           Sat 14 Aug 2021 19:55:00 +0000
ROA not after:            Sun 14 Aug 2022 20:00:00 +0000
asID:                     53144
IP address blocks:        177.221.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:90:0e:af:60:5d:b2:02:8f:81:54:5c:cf:86:ee:d4:37:0b:16:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7103F4194EF67E55EFBD869E564501095E338AEC
        Validity
            Not Before: Aug 14 19:55:00 2021 GMT
            Not After : Aug 14 20:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:bd:03:3a:69:92:a9:d9:a1:97:54:a1:75:
                    79:64:58:c2:c2:05:32:0c:ef:b6:2d:31:83:c8:40:
                    c4:0f:9d:57:c6:b0:82:55:54:60:24:c3:d2:1c:6d:
                    de:b0:ab:4e:3d:70:a9:cc:7c:de:65:09:f9:e4:2a:
                    47:28:7c:74:7d:69:37:9d:c9:8c:95:75:d2:79:a4:
                    84:14:e5:0a:b1:1f:79:ad:db:41:f9:72:4d:78:c7:
                    3f:63:e8:eb:a1:6b:4e:fe:53:c5:a3:28:e6:19:cf:
                    6f:01:a0:50:fb:ad:58:58:92:de:ce:2b:40:b4:b0:
                    52:e9:4d:89:ba:bc:6f:d0:30:0d:a3:4f:89:42:74:
                    91:2b:49:93:e7:3b:b4:a0:5e:d0:43:1e:0b:d4:79:
                    57:92:c9:9d:f2:26:23:65:50:dd:bd:7e:79:d1:4b:
                    10:a9:02:d6:e9:76:fa:0d:4a:9c:69:e9:9d:5e:9c:
                    a8:30:58:d1:a5:22:99:7b:d1:ed:58:1c:c5:85:8b:
                    96:ed:de:8e:bf:1d:d3:4b:71:35:2c:65:4e:61:05:
                    9b:87:34:48:53:43:7a:d3:b7:f0:c4:0e:06:dd:35:
                    d5:9f:44:25:28:f2:8a:43:47:16:6d:5c:0c:7e:80:
                    c9:b0:f3:db:76:59:25:ec:79:c4:b1:a7:1c:8a:91:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:F5:26:2A:AD:68:96:5E:26:16:C1:EA:B0:25:A6:7D:01:DC:83
            X509v3 Authority Key Identifier:
                keyid:71:03:F4:19:4E:F6:7E:55:EF:BD:86:9E:56:45:01:09:5E:33:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/7103F4194EF67E55EFBD869E564501095E338AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7103F4194EF67E55EFBD869E564501095E338AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203533313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:de:b6:28:f8:cd:a4:10:92:94:8b:d2:58:2a:19:60:f3:
         05:f3:8d:14:f1:fd:55:56:98:86:d6:8e:74:ec:3d:32:0e:37:
         31:d5:3c:bf:1f:8a:ea:8c:c2:46:4f:18:09:95:43:c4:f3:2a:
         33:94:23:fb:aa:2e:b7:56:82:49:e4:3e:cf:d3:0c:fa:65:66:
         95:c0:a6:42:a4:81:f8:31:f9:01:f7:31:90:58:08:7a:e5:c8:
         9d:f6:93:8c:3d:32:18:f7:57:21:e8:b7:46:90:52:bf:a4:60:
         69:cc:56:93:c0:c6:b8:92:82:5e:51:7f:d8:39:70:af:bc:23:
         34:c1:56:74:6e:5a:5e:1e:32:5f:63:e4:44:54:b8:e6:99:95:
         02:12:d4:35:39:a1:a4:de:a7:a9:46:c9:17:c9:c6:24:3f:17:
         0a:c4:c9:95:8b:49:b7:aa:c5:e2:ae:e0:78:69:25:0b:20:74:
         40:7e:90:34:14:bb:31:ba:2a:3c:f2:72:fd:39:42:92:37:95:
         83:8c:e6:5f:93:8e:aa:51:87:b5:ad:9f:99:ae:a9:b0:0a:62:
         a4:90:d8:9d:87:be:46:1a:8a:7b:7e:34:22:bf:26:ed:d6:e1:
         ba:f4:b9:d6:17:77:56:69:10:3d:c6:85:bd:bc:37:62:b6:c4:
         76:59:8d:0c
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUepAOr2BdsgKPgVRcz4bu1DcLFlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEwM0Y0MTk0RUY2N0U1NUVGQkQ4NjlFNTY0NTAxMDk1
RTMzOEFFQzAeFw0yMTA4MTQxOTU1MDBaFw0yMjA4MTQyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTk5REJEMDMzQTY5OTJBOUQ5
QTE5NzU0QTE3NTc5NjQ1OEMyQzIwNTMyMENFRkI2MkQzMTgzQzg0MEM0MEY5RDU3
QzZCMDgyNTU1NDYwMjRDM0QyMUM2RERFQjBBQjRFM0Q3MEE5Q0M3Q0RFNjUwOUY5
RTQyQTQ3Mjg3Qzc0N0Q2OTM3OURDOThDOTU3NUQyNzlBNDg0MTRFNTBBQjExRjc5
QUREQjQxRjk3MjRENzhDNzNGNjNFOEVCQTE2QjRFRkU1M0M1QTMyOEU2MTlDRjZG
MDFBMDUwRkJBRDU4NTg5MkRFQ0UyQjQwQjRCMDUyRTk0RDg5QkFCQzZGRDAzMDBE
QTM0Rjg5NDI3NDkxMkI0OTkzRTczQkI0QTA1RUQwNDMxRTBCRDQ3OTU3OTJDOTlE
RjIyNjIzNjU1MEREQkQ3RTc5RDE0QjEwQTkwMkQ2RTk3NkZBMEQ0QTlDNjlFOTlE
NUU5Q0E4MzA1OEQxQTUyMjk5N0JEMUVENTgxQ0M1ODU4Qjk2RURERThFQkYxREQz
NEI3MTM1MkM2NTRFNjEwNTlCODczNDQ4NTM0MzdBRDNCN0YwQzQwRTA2REQzNUQ1
OUY0NDI1MjhGMjhBNDM0NzE2NkQ1QzBDN0U4MEM5QjBGM0RCNzY1OTI1RUM3OUM0
QjFBNzFDOEE5MTk5QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6Z29AzppkqnZoZdUoXV5ZFjCwgUyDO+2LTGDyEDED51XxrCCVVRg
JMPSHG3esKtOPXCpzHzeZQn55CpHKHx0fWk3ncmMlXXSeaSEFOUKsR95rdtB+XJN
eMc/Y+jroWtO/lPFoyjmGc9vAaBQ+61YWJLezitAtLBS6U2Jurxv0DANo0+JQnSR
K0mT5zu0oF7QQx4L1HlXksmd8iYjZVDdvX550UsQqQLW6Xb6DUqcaemdXpyoMFjR
pSKZe9HtWBzFhYuW7d6Ovx3TS3E1LGVOYQWbhzRIU0N607fwxA4G3TXVn0QlKPKK
Q0cWbVwMfoDJsPPbdlkl7HnEsaccipGZswIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMAt9SYqrWiWXiYWweqwJaZ9AdyDMB8GA1UdIwQYMBaAFHED9BlO9n5V772GnlZF
AQleM4rsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0duMjhzeG1QdGdFZnFw
YUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAvNzEwM0Y0MTk0RUY2N0U1
NUVGQkQ4NjlFNTY0NTAxMDk1RTMzOEFFQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MTAzRjQxOTRFRjY3RTU1RUZCRDg2OUU1NjQ1MDEwOTVFMzM4
QUVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HbjI4c3htUHRnRWZxcGFKNkV0
d0Q0cTRLd1lNZFdoNDF6YjF1WkU5YUJDWC8wLzMxMzczNzJlMzIzMjMxMmUzMzMy
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMxMzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLHd
IDANBgkqhkiG9w0BAQsFAAOCAQEAPgTetij4zaQQkpSL0lgqGWDzBfONFPH9VVaY
htaOdOw9Mg43MdU8vx+K6ozCRk8YCZVDxPMqM5Qj+6out1aCSeQ+z9MM+mVmlcCm
QqSB+DH5AfcxkFgIeuXInfaTjD0yGPdXIei3RpBSv6RgacxWk8DGuJKCXlF/2Dlw
r7wjNMFWdG5aXh4yX2PkRFS45pmVAhLUNTmhpN6nqUbJF8nGJD8XCsTJlYtJt6rF
4q7geGklCyB0QH6QNBS7MboqPPJy/TlCkjeVg4zmX5OOqlGHta2fma6psApipJDY
nYe+RhqKe340Ir8m7dbhuvS51hd3VmkQPcaFvbw3YrbEdlmNDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org