Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32332d3233203d3e203238313335.roa
File:                     3137372e34362e3131322e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          Jkzh15ihOlOLq9l4U3vtdhkrOzrXFpe0bomhqMBvLPw=
Subject key identifier:   3F:F4:7D:F6:22:12:BD:D3:AD:8A:5F:D6:CD:1E:18:27:A5:70:17:CC
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       28069F77D50AF8279E3846A272FC966075327B39
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32332d3233203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:12:29 +0000
ROA not before:           Wed 12 Apr 2023 11:07:29 +0000
ROA not after:            Wed 10 Apr 2024 11:12:29 +0000
asID:                     28135
IP address blocks:        177.46.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:06:9f:77:d5:0a:f8:27:9e:38:46:a2:72:fc:96:60:75:32:7b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:07:29 2023 GMT
            Not After : Apr 10 11:12:29 2024 GMT
        Subject: CN=3FF47DF62212BDD3AD8A5FD6CD1E1827A57017CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:c6:c1:8d:bb:dc:f1:36:16:5c:31:80:bf:
                    ac:b5:17:8c:be:e9:f4:16:a7:d7:86:d1:6a:aa:26:
                    3c:c3:e0:8e:02:84:bf:ba:68:c0:97:6b:49:8d:69:
                    93:4a:8e:ee:7c:0d:97:b1:4c:54:9a:0a:2e:2b:d3:
                    f4:a2:96:87:15:64:03:39:d6:83:23:06:8b:44:76:
                    b0:11:60:49:7d:4d:dd:95:4d:fc:c2:df:e0:23:ef:
                    ac:58:79:40:56:4c:15:39:42:52:bb:76:0b:a0:b9:
                    16:08:e7:f7:cb:fd:73:46:d4:7e:20:d3:e3:4f:03:
                    04:9f:bd:0f:d2:ba:50:8b:f3:18:03:b9:b2:f7:78:
                    0f:70:7a:13:7e:26:56:02:df:c9:b3:1b:96:20:9c:
                    d9:30:aa:42:79:a0:1b:5b:df:72:ba:c0:f5:08:4c:
                    66:e7:56:d0:86:dc:28:c6:39:66:86:e0:ce:d4:09:
                    0a:a0:b8:dd:09:57:e4:cf:03:e4:71:bd:be:c9:71:
                    9c:87:11:3b:de:d1:92:81:cb:42:f4:d6:73:4d:8f:
                    dc:be:5b:b3:7e:69:fa:fb:a6:72:89:3d:a0:39:f7:
                    9a:c6:27:e0:48:c9:d8:38:c9:98:3a:a2:8e:52:df:
                    11:e8:8f:12:82:f9:36:b7:c9:9a:d5:4f:cd:3f:a0:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F4:7D:F6:22:12:BD:D3:AD:8A:5F:D6:CD:1E:18:27:A5:70:17:CC
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:34:93:2b:8f:bf:1b:41:2a:b4:21:6d:7c:60:ee:9a:3c:f3:
         0b:fd:2a:9d:fa:2d:e9:be:bf:48:47:b0:2c:99:34:d3:14:67:
         d4:3c:cb:a8:7a:bd:1e:9c:1b:51:cc:27:ee:c2:06:33:6c:72:
         34:63:fe:a7:f7:51:a8:be:74:f0:a2:a4:52:e3:3d:db:06:62:
         2a:22:a5:cb:d8:05:79:37:38:04:b1:1c:8e:43:ab:d8:e1:d4:
         cc:d3:6d:e4:9a:e9:e7:37:56:ab:24:ac:75:32:3f:2a:a3:61:
         cc:aa:6b:dd:da:a7:af:c9:79:d7:0a:05:f7:8f:69:0f:2b:5d:
         52:51:ab:31:20:ae:6d:43:1f:43:df:5b:23:db:ab:4f:f3:68:
         96:f3:e4:17:8e:14:e3:ef:c8:8a:46:b3:8a:49:e4:f2:85:bc:
         ea:f9:63:e6:fa:58:77:3b:df:d5:9b:c8:d0:5c:8f:ac:de:ff:
         2d:24:15:5a:c0:3b:00:5e:bd:ec:0f:c8:fc:b9:9d:17:96:c9:
         f0:f4:42:84:a0:1d:89:14:5e:cb:1b:36:1e:b4:92:cc:c2:26:
         64:52:ae:68:c8:80:cd:e1:07:50:e0:fd:ff:da:71:83:6f:bc:
         87:37:1e:1b:86:d4:58:66:87:8f:0f:e8:c2:9a:40:c2:3f:ba:
         bc:2a:97:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKAafd9UK+CeeOEaicvyWYHUyezkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2QzAwMThFQUVDOTdCMjI2MDM2RTlGNDJFM0Q0Nzk1
RkNCQzcxNDAeFw0yMzA0MTIxMTA3MjlaFw0yNDA0MTAxMTEyMjlaMDMxMTAvBgNV
BAMTKDNGRjQ3REY2MjIxMkJERDNBRDhBNUZENkNEMUUxODI3QTU3MDE3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI8bBjbvc8TYWXDGAv6y1F4y+
6fQWp9eG0WqqJjzD4I4ChL+6aMCXa0mNaZNKju58DZexTFSaCi4r0/SilocVZAM5
1oMjBotEdrARYEl9Td2VTfzC3+Aj76xYeUBWTBU5QlK7dguguRYI5/fL/XNG1H4g
0+NPAwSfvQ/SulCL8xgDubL3eA9wehN+JlYC38mzG5YgnNkwqkJ5oBtb33K6wPUI
TGbnVtCG3CjGOWaG4M7UCQqguN0JV+TPA+Rxvb7JcZyHETve0ZKBy0L01nNNj9y+
W7N+afr7pnKJPaA595rGJ+BIydg4yZg6oo5S3xHojxKC+Ta3yZrVT80/oCpDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUP/R99iISvdOtil/WzR4YJ6VwF8wwHwYDVR0j
BBgwFoAUEGwAGOrsl7ImA26fQuPUeV/LxxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMC8xMDZDMDAxOEVBRUM5N0IyMjYwMzZFOUY0MkUzRDQ3OTVGQ0JDNzE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwNkMwMDE4RUFFQzk3QjIy
NjAzNkU5RjQyRTNENDc5NUZDQkM3MTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzAv
MzEzNzM3MmUzNDM2MmUzMTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsS5wMA0GCSqGSIb3DQEBCwUAA4IBAQBFNJMrj78b
QSq0IW18YO6aPPML/Sqd+i3pvr9IR7AsmTTTFGfUPMuoer0enBtRzCfuwgYzbHI0
Y/6n91GovnTwoqRS4z3bBmIqIqXL2AV5NzgEsRyOQ6vY4dTM023kmunnN1arJKx1
Mj8qo2HMqmvd2qevyXnXCgX3j2kPK11SUasxIK5tQx9D31sj26tP82iW8+QXjhTj
78iKRrOKSeTyhbzq+WPm+lh3O9/Vm8jQXI+s3v8tJBVawDsAXr3sD8j8uZ0Xlsnw
9EKEoB2JFF7LGzYetJLMwiZkUq5oyIDN4QdQ4P3/2nGDb7yHNx4bhtRYZoePD+jC
mkDCP7q8Kpeh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org