Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e34392e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e34392e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          PeHzOCH2GJSvLC9EL8BFD2HkCcIjPCCoLK+e57YgyOA=
Subject key identifier:   68:89:27:FF:5E:87:E9:B7:B0:45:15:9F:B0:26:E9:8D:57:69:D2:2B
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       271AB9F05AD0CD83B9121FA134D9B31227500602
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e34392e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:26:47 +0000
ROA not before:           Sat 06 Apr 2024 17:21:47 +0000
ROA not after:            Sat 05 Apr 2025 17:26:47 +0000
asID:                     52930
IP address blocks:        177.185.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1a:b9:f0:5a:d0:cd:83:b9:12:1f:a1:34:d9:b3:12:27:50:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:21:47 2024 GMT
            Not After : Apr  5 17:26:47 2025 GMT
        Subject: CN=688927FF5E87E9B7B045159FB026E98D5769D22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:84:fa:2c:5c:87:1f:ee:c3:f0:ac:50:a0:
                    7b:18:6e:06:e0:85:f5:59:a6:c1:10:2e:de:04:40:
                    e7:28:5c:a6:63:15:e5:b9:bd:68:98:e1:7a:cb:2d:
                    39:97:e0:f2:09:f0:21:36:e5:03:b0:cf:94:32:25:
                    ac:43:33:68:df:6a:5c:03:7e:09:b6:95:60:ae:d8:
                    51:40:19:27:73:a4:a5:58:11:f9:01:37:0b:77:c5:
                    c9:cd:b8:3a:fb:c3:2a:42:32:9d:bd:ee:08:28:e4:
                    59:22:05:b5:db:a7:e7:79:1d:6f:73:db:ce:61:a0:
                    10:27:be:6b:4c:65:2a:f0:ed:0e:e9:bd:46:00:d7:
                    35:f6:21:27:df:04:8e:c2:e7:45:d4:bf:76:df:16:
                    ad:f9:e4:66:de:6e:46:e8:f9:e6:4d:af:e0:2b:cf:
                    c5:5e:ab:91:27:16:df:d1:aa:b5:df:3d:ca:ff:7b:
                    fd:5e:92:2a:c7:7e:b1:96:2d:e0:a0:99:f6:5c:5b:
                    70:c4:da:9a:e2:ce:cd:9d:85:ce:2a:8d:38:5a:b5:
                    7f:51:78:59:5b:d7:3d:3e:48:9a:a8:46:f8:1a:21:
                    77:72:85:46:f8:90:e6:dc:34:84:10:81:8b:28:96:
                    6d:63:35:6f:1e:7a:d2:f6:7c:8f:82:15:b3:17:95:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:89:27:FF:5E:87:E9:B7:B0:45:15:9F:B0:26:E9:8D:57:69:D2:2B
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e34392e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:57:d5:b7:6b:f5:e2:97:44:e4:4c:43:b1:74:f9:bb:dc:29:
         67:19:8b:80:85:83:34:d1:8d:95:16:bb:7e:6b:80:e6:80:47:
         69:8c:59:e1:e3:d3:fd:2d:3e:09:9f:dd:ab:12:b7:b2:2a:f4:
         f2:e1:61:49:75:75:31:88:d8:45:f6:98:8c:cd:3a:92:fe:03:
         4f:83:e8:36:3f:06:e2:86:50:d8:e3:75:b5:c7:2d:41:62:f8:
         6e:07:8e:03:e0:9e:0e:ca:ed:12:66:41:ea:3e:47:a9:c0:82:
         16:d5:6e:8a:34:26:2b:8f:8c:d3:8a:3e:d1:75:94:ad:0a:27:
         df:ba:a8:0a:19:92:69:28:a1:4b:e2:f1:b2:d8:19:78:31:0c:
         33:46:df:56:19:10:b7:66:61:1c:5d:c5:96:9d:1c:42:9d:97:
         5a:47:b7:72:c3:bd:bd:98:2d:ce:18:dc:2f:60:b1:35:57:51:
         0b:cb:06:c9:d3:86:54:9a:d9:e8:14:f1:e9:6f:d3:a5:a2:ed:
         96:36:21:8a:9f:ef:27:f1:51:5b:3e:ea:6c:e8:4c:88:07:8a:
         b2:2b:fd:bb:8c:fc:f8:d6:3a:9d:c2:c1:ce:f0:48:ce:61:6c:
         fe:f1:7d:0b:81:cf:98:f9:4e:41:7b:b1:b2:fd:25:d8:c1:d3:
         01:a0:f6:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJxq58FrQzYO5Eh+hNNmzEidQBgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU1ODQ5M0QzNjJBQkNEOThDMjc1MkY2QkM1RjQzMzVB
MTdGNzIxRDAeFw0yNDA0MDYxNzIxNDdaFw0yNTA0MDUxNzI2NDdaMDMxMTAvBgNV
BAMTKDY4ODkyN0ZGNUU4N0U5QjdCMDQ1MTU5RkIwMjZFOThENTc2OUQyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZoT6LFyHH+7D8KxQoHsYbgbg
hfVZpsEQLt4EQOcoXKZjFeW5vWiY4XrLLTmX4PIJ8CE25QOwz5QyJaxDM2jfalwD
fgm2lWCu2FFAGSdzpKVYEfkBNwt3xcnNuDr7wypCMp297ggo5FkiBbXbp+d5HW9z
285hoBAnvmtMZSrw7Q7pvUYA1zX2ISffBI7C50XUv3bfFq355Gbebkbo+eZNr+Ar
z8Veq5EnFt/RqrXfPcr/e/1ekirHfrGWLeCgmfZcW3DE2prizs2dhc4qjThatX9R
eFlb1z0+SJqoRvgaIXdyhUb4kObcNIQQgYsolm1jNW8eetL2fI+CFbMXlRw/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaIkn/16H6bewRRWfsCbpjVdp0iswHwYDVR0j
BBgwFoAUrlhJPTYqvNmMJ1L2vF9DNaF/ch0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMS9BRTU4NDkzRDM2MkFCQ0Q5OEMyNzUyRjZCQzVGNDMzNUExN0Y3MjFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFNTg0OTNEMzYyQUJDRDk4
QzI3NTJGNkJDNUY0MzM1QTE3RjcyMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzEv
MzEzNzM3MmUzMTM4MzUyZTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsbkxMA0GCSqGSIb3DQEBCwUAA4IBAQATV9W3a/Xi
l0TkTEOxdPm73ClnGYuAhYM00Y2VFrt+a4DmgEdpjFnh49P9LT4Jn92rEreyKvTy
4WFJdXUxiNhF9piMzTqS/gNPg+g2PwbihlDY43W1xy1BYvhuB44D4J4Oyu0SZkHq
PkepwIIW1W6KNCYrj4zTij7RdZStCiffuqgKGZJpKKFL4vGy2Bl4MQwzRt9WGRC3
ZmEcXcWWnRxCnZdaR7dyw729mC3OGNwvYLE1V1ELywbJ04ZUmtnoFPHpb9Olou2W
NiGKn+8n8VFbPups6EyIB4qyK/27jPz41jqdwsHO8EjOYWz+8X0Lgc+Y+U5Be7Gy
/SXYwdMBoPbm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org