Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32322d3232203d3e203238313335.roa
File:                     3137372e34362e3131322e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          JvaZk4KxAOS1xPMyluYMbRXHHW88klxsPyuPEkpvc9g=
Subject key identifier:   C4:97:0F:16:11:5A:0D:AA:EF:BE:01:39:C7:2C:9B:88:02:4B:FD:32
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       211A369691D861DBEEDE8CA477C4B685C37ACAC2
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32322d3232203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:12:23 +0000
ROA not before:           Wed 12 Apr 2023 11:07:23 +0000
ROA not after:            Wed 10 Apr 2024 11:12:23 +0000
asID:                     28135
IP address blocks:        177.46.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1a:36:96:91:d8:61:db:ee:de:8c:a4:77:c4:b6:85:c3:7a:ca:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:07:23 2023 GMT
            Not After : Apr 10 11:12:23 2024 GMT
        Subject: CN=C4970F16115A0DAAEFBE0139C72C9B88024BFD32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:93:ce:22:c3:e5:da:cb:f9:1e:d4:ed:21:
                    b4:a9:37:8f:60:92:8d:74:7a:0d:0d:b1:94:57:e1:
                    b3:4c:5b:c3:23:14:31:45:f3:52:ad:0d:c3:cd:3a:
                    07:12:3e:cf:17:4d:8c:be:7f:f7:26:20:e9:13:25:
                    42:97:a8:70:5c:33:14:7f:b8:7a:24:49:34:67:94:
                    38:1d:cd:d3:6e:c5:fb:05:11:81:13:d7:3b:35:1d:
                    b6:0f:05:5e:05:98:6a:ed:a7:1c:e2:b7:e3:25:2d:
                    3d:c0:86:e1:ac:db:b1:4e:b7:6c:b5:cb:8f:07:95:
                    bc:47:0d:ac:d6:62:87:eb:28:da:ce:de:ce:68:b4:
                    d7:45:02:5d:40:5c:26:db:c2:5b:97:2d:01:c9:32:
                    38:4c:cb:e7:3b:35:f3:16:98:a8:d6:97:c6:e8:e0:
                    43:20:51:a8:a1:6a:a8:cb:ac:ba:8f:ea:d1:79:bc:
                    86:8f:81:bb:de:6b:79:68:65:aa:f8:77:da:24:24:
                    bc:ed:48:ac:fc:f1:97:75:65:e1:c9:1d:f3:ca:98:
                    81:e8:92:26:c1:2a:62:1e:53:ed:65:70:6e:36:11:
                    82:08:31:71:a8:26:07:f5:4b:66:0e:b2:f6:05:75:
                    a3:41:59:b0:0f:0a:a4:45:15:55:43:89:1e:b2:54:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:97:0F:16:11:5A:0D:AA:EF:BE:01:39:C7:2C:9B:88:02:4B:FD:32
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:4d:d4:5c:a4:2b:ed:be:63:24:2d:d4:5f:8f:6a:c5:0b:
         e6:33:de:06:dc:a8:17:2b:b2:e0:ad:bc:e9:03:28:d1:f7:bb:
         6e:14:47:58:6e:a8:dd:17:6a:33:57:04:f8:f0:8e:bc:45:f1:
         33:7e:42:fb:34:0e:3b:32:ad:ec:64:02:ed:03:58:6d:36:85:
         7c:2d:e0:32:fe:d1:b1:39:b6:b3:11:d8:68:39:1b:5f:a2:8b:
         12:7a:61:40:4f:b8:59:3a:e5:d7:a2:4c:87:c3:cb:0c:87:25:
         40:54:75:29:1f:04:a5:86:4a:c6:0b:ee:b3:f1:14:c6:34:7e:
         3a:13:02:73:ea:65:b5:73:f7:1d:da:54:b1:0a:73:15:46:54:
         60:df:fc:52:32:b7:44:e6:3c:1a:d4:ad:7c:a5:43:f4:7d:79:
         23:64:22:79:23:eb:53:81:8e:75:4e:74:64:4e:2c:a6:7e:74:
         9d:3b:e4:c9:5e:39:98:68:64:91:f6:04:49:99:30:10:2d:6e:
         7b:ea:dd:79:33:1e:d3:f8:c2:77:ab:2f:bf:82:0d:cc:bf:91:
         c4:7e:84:e6:fe:c3:a0:ef:d4:61:13:1b:5d:b6:81:22:23:4e:
         26:a1:78:df:22:d6:2a:31:3c:1b:47:d0:8e:31:0c:7c:65:e6:
         cb:36:9d:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIRo2lpHYYdvu3oykd8S2hcN6ysIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yMzA0MTIxMTA3MjNaFw0yNDA0MTAxMTEyMjNaMDMxMTAvBgNV
BAMTKEM0OTcwRjE2MTE1QTBEQUFFRkJFMDEzOUM3MkM5Qjg4MDI0QkZEMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZZPOIsPl2sv5HtTtIbSpN49g
ko10eg0NsZRX4bNMW8MjFDFF81KtDcPNOgcSPs8XTYy+f/cmIOkTJUKXqHBcMxR/
uHokSTRnlDgdzdNuxfsFEYET1zs1HbYPBV4FmGrtpxzit+MlLT3AhuGs27FOt2y1
y48HlbxHDazWYofrKNrO3s5otNdFAl1AXCbbwluXLQHJMjhMy+c7NfMWmKjWl8bo
4EMgUaihaqjLrLqP6tF5vIaPgbvea3loZar4d9okJLztSKz88Zd1ZeHJHfPKmIHo
kibBKmIeU+1lcG42EYIIMXGoJgf1S2YOsvYFdaNBWbAPCqRFFVVDiR6yVEnrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxJcPFhFaDarvvgE5xyybiAJL/TIwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzNzM3MmUzNDM2MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsS5wMA0GCSqGSIb3DQEBCwUAA4IBAQAbUU3UXKQr
7b5jJC3UX49qxQvmM94G3KgXK7LgrbzpAyjR97tuFEdYbqjdF2ozVwT48I68RfEz
fkL7NA47Mq3sZALtA1htNoV8LeAy/tGxObazEdhoORtfoosSemFAT7hZOuXXokyH
w8sMhyVAVHUpHwSlhkrGC+6z8RTGNH46EwJz6mW1c/cd2lSxCnMVRlRg3/xSMrdE
5jwa1K18pUP0fXkjZCJ5I+tTgY51TnRkTiymfnSdO+TJXjmYaGSR9gRJmTAQLW57
6t15Mx7T+MJ3qy+/gg3Mv5HEfoTm/sOg79RhExtdtoEiI04moXjfItYqMTwbR9CO
MQx8ZebLNp3l
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org