Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa
File:                     3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa (raw, json)
Hash identifier:          hTzkCFEKMfNCsgDyyAf1xPBfMGxqeTtW8hn8yKxTQ8s=
Subject key identifier:   36:F0:A9:05:AA:A7:0F:13:57:4B:DC:20:29:01:54:3A:6D:DA:E2:F9
Certificate issuer:       /CN=E6A09958EF9734F0A5F161CEF634AA636C3946BF
Certificate serial:       06101BB234B42C9B9D19A3294132B3E57B9B1E56
Authority key identifier: E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa
Signing time:             Tue 10 Oct 2023 22:00:00 +0000
ROA not before:           Tue 10 Oct 2023 21:55:00 +0000
ROA not after:            Tue 08 Oct 2024 22:00:00 +0000
asID:                     270753
IP address blocks:        179.109.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:10:1b:b2:34:b4:2c:9b:9d:19:a3:29:41:32:b3:e5:7b:9b:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A09958EF9734F0A5F161CEF634AA636C3946BF
        Validity
            Not Before: Oct 10 21:55:00 2023 GMT
            Not After : Oct  8 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100E53719CA6DFF4D8172BB42B9E7105E308DD79973419AADA8B16F44CF8843DBE60307F6315F7A304146CC113337ED18884D1810B4E78487D357536D878D35975C98C9BF572C254161C78B3206D1DD337EABD0C6E894652562E2EEB90F4B66641D75A137D2442E6B42076FE64BDE703919F771ABD4CB6A43DD89AFE21CE0CB071943E6A87DDC2BF82119BD737A2EF1D1AD53BC53452E694067B50D3C552ACAF4A0C498F929B1F17DF42AF195FA8265833741CA3BE97591DEDB24BD1F8E1458C48B7EBD2B8E0D17610426C524077E9905E41259FD8E5FA639C0FC2C56787AB4FE028AC29FA56302B18701E650F1C0261E6905A195136ADC4D0E561D31D658BF4DB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:19:ca:6d:ff:4d:81:72:bb:42:b9:e7:10:
                    5e:30:8d:d7:99:73:41:9a:ad:a8:b1:6f:44:cf:88:
                    43:db:e6:03:07:f6:31:5f:7a:30:41:46:cc:11:33:
                    37:ed:18:88:4d:18:10:b4:e7:84:87:d3:57:53:6d:
                    87:8d:35:97:5c:98:c9:bf:57:2c:25:41:61:c7:8b:
                    32:06:d1:dd:33:7e:ab:d0:c6:e8:94:65:25:62:e2:
                    ee:b9:0f:4b:66:64:1d:75:a1:37:d2:44:2e:6b:42:
                    07:6f:e6:4b:de:70:39:19:f7:71:ab:d4:cb:6a:43:
                    dd:89:af:e2:1c:e0:cb:07:19:43:e6:a8:7d:dc:2b:
                    f8:21:19:bd:73:7a:2e:f1:d1:ad:53:bc:53:45:2e:
                    69:40:67:b5:0d:3c:55:2a:ca:f4:a0:c4:98:f9:29:
                    b1:f1:7d:f4:2a:f1:95:fa:82:65:83:37:41:ca:3b:
                    e9:75:91:de:db:24:bd:1f:8e:14:58:c4:8b:7e:bd:
                    2b:8e:0d:17:61:04:26:c5:24:07:7e:99:05:e4:12:
                    59:fd:8e:5f:a6:39:c0:fc:2c:56:78:7a:b4:fe:02:
                    8a:c2:9f:a5:63:02:b1:87:01:e6:50:f1:c0:26:1e:
                    69:05:a1:95:13:6a:dc:4d:0e:56:1d:31:d6:58:bf:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F0:A9:05:AA:A7:0F:13:57:4B:DC:20:29:01:54:3A:6D:DA:E2:F9
            X509v3 Authority Key Identifier:
                keyid:E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:64:14:a7:da:ef:79:ad:be:d4:34:f1:98:d2:35:57:b5:a8:
         4c:e6:12:6a:36:6c:bd:54:85:fb:32:8c:fa:cf:0a:0a:35:f4:
         e1:ee:8a:ba:69:19:14:ca:73:cd:88:01:0d:90:57:33:f5:4a:
         97:09:f1:de:ce:18:fb:3e:e9:63:44:1a:9c:db:9d:7d:c8:28:
         f4:0d:c8:4b:a1:90:ee:db:2f:35:2a:5b:47:08:4c:6d:bf:53:
         94:7d:60:13:b1:69:bb:dc:78:e9:87:76:ee:43:6b:5d:b9:53:
         cd:d4:b0:1b:b2:67:c5:19:e8:cd:a8:f6:4b:17:85:3d:83:37:
         51:c8:69:1a:cb:7a:e1:24:ec:9d:b1:20:06:56:93:45:ea:e8:
         58:32:23:69:d9:a5:8a:e3:14:f9:f5:23:3f:43:13:33:26:a1:
         37:36:86:56:09:7e:53:3d:ab:78:08:97:8a:b1:a3:8c:86:7d:
         ca:99:b1:65:c9:88:2d:83:d7:25:fa:31:7f:ba:ff:eb:86:ee:
         65:78:a3:ca:53:ba:18:ea:3e:71:56:94:dd:f7:02:9e:09:5c:
         3b:5c:03:83:0e:91:ce:47:a3:1d:68:99:f2:18:76:30:c4:26:
         bd:08:af:c3:8e:2f:99:f8:e6:c6:b6:f7:8a:dc:13:39:e5:58:
         bd:61:e2:0d
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUBhAbsjS0LJudGaMpQTKz5XubHlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBMDk5NThFRjk3MzRGMEE1RjE2MUNFRjYzNEFBNjM2
QzM5NDZCRjAeFw0yMzEwMTAyMTU1MDBaFw0yNDEwMDgyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTUzNzE5Q0E2REZGNEQ4MTcy
QkI0MkI5RTcxMDVFMzA4REQ3OTk3MzQxOUFBREE4QjE2RjQ0Q0Y4ODQzREJFNjAz
MDdGNjMxNUY3QTMwNDE0NkNDMTEzMzM3RUQxODg4NEQxODEwQjRFNzg0ODdEMzU3
NTM2RDg3OEQzNTk3NUM5OEM5QkY1NzJDMjU0MTYxQzc4QjMyMDZEMUREMzM3RUFC
RDBDNkU4OTQ2NTI1NjJFMkVFQjkwRjRCNjY2NDFENzVBMTM3RDI0NDJFNkI0MjA3
NkZFNjRCREU3MDM5MTlGNzcxQUJENENCNkE0M0REODlBRkUyMUNFMENCMDcxOTQz
RTZBODdEREMyQkY4MjExOUJENzM3QTJFRjFEMUFENTNCQzUzNDUyRTY5NDA2N0I1
MEQzQzU1MkFDQUY0QTBDNDk4RjkyOUIxRjE3REY0MkFGMTk1RkE4MjY1ODMzNzQx
Q0EzQkU5NzU5MURFREIyNEJEMUY4RTE0NThDNDhCN0VCRDJCOEUwRDE3NjEwNDI2
QzUyNDA3N0U5OTA1RTQxMjU5RkQ4RTVGQTYzOUMwRkMyQzU2Nzg3QUI0RkUwMjhB
QzI5RkE1NjMwMkIxODcwMUU2NTBGMUMwMjYxRTY5MDVBMTk1MTM2QURDNEQwRTU2
MUQzMUQ2NThCRjREQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5TcZym3/TYFyu0K55xBeMI3XmXNBmq2osW9Ez4hD2+YDB/YxX3ow
QUbMETM37RiITRgQtOeEh9NXU22HjTWXXJjJv1csJUFhx4syBtHdM36r0MbolGUl
YuLuuQ9LZmQddaE30kQua0IHb+ZL3nA5Gfdxq9TLakPdia/iHODLBxlD5qh93Cv4
IRm9c3ou8dGtU7xTRS5pQGe1DTxVKsr0oMSY+Smx8X30KvGV+oJlgzdByjvpdZHe
2yS9H44UWMSLfr0rjg0XYQQmxSQHfpkF5BJZ/Y5fpjnA/CxWeHq0/gKKwp+lYwKx
hwHmUPHAJh5pBaGVE2rcTQ5WHTHWWL9NtwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FDbwqQWqpw8TV0vcICkBVDpt2uL5MB8GA1UdIwQYMBaAFOagmVjvlzTwpfFhzvY0
qmNsOUa/MA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEtzRFJBWFloZ1c5Vzd0
QUJKdXJjOGZHclJ2bm5WNjdidDlNRll3SFJEZC8wL0U2QTA5OTU4RUY5NzM0RjBB
NUYxNjFDRUY2MzRBQTYzNkMzOTQ2QkYuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvRTZBMDk5NThFRjk3MzRGMEE1RjE2MUNFRjYzNEFBNjM2QzM5NDZC
Ri5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEtzRFJBWFloZ1c5Vzd0QUJKdXJj
OGZHclJ2bm5WNjdidDlNRll3SFJEZC8wLzMxMzczOTJlMzEzMDM5MmUzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzczNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCs21g
MA0GCSqGSIb3DQEBCwUAA4IBAQDCZBSn2u95rb7UNPGY0jVXtahM5hJqNmy9VIX7
Moz6zwoKNfTh7oq6aRkUynPNiAENkFcz9UqXCfHezhj7PuljRBqc2519yCj0DchL
oZDu2y81KltHCExtv1OUfWATsWm73Hjph3buQ2tduVPN1LAbsmfFGejNqPZLF4U9
gzdRyGkay3rhJOydsSAGVpNF6uhYMiNp2aWK4xT59SM/QxMzJqE3NoZWCX5TPat4
CJeKsaOMhn3KmbFlyYgtg9cl+jF/uv/rhu5leKPKU7oY6j5xVpTd9wKeCVw7XAOD
DpHOR6MdaJnyGHYwxCa9CK/Dji+Z+ObGtveK3BM55Vi9YeIN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org