Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3233203d3e203532373438.roa
File:                     3137372e3135352e36382e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          8I4E6ZVI3DQWGL3Ruc8gF6GJ8ZxhCV3YrNfOQ7I22SU=
Subject key identifier:   2E:A3:CA:12:17:45:8B:BC:4C:E9:D4:11:41:68:30:B4:C1:40:AA:D7
Certificate issuer:       /CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
Certificate serial:       4BE39ADE3216564BED62DAD23B619FD801CDE9A6
Authority key identifier: 1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3233203d3e203532373438.roa
Signing time:             Fri 19 May 2023 16:41:59 +0000
ROA not before:           Fri 19 May 2023 16:36:59 +0000
ROA not after:            Fri 17 May 2024 16:41:59 +0000
asID:                     52748
IP address blocks:        177.155.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:9a:de:32:16:56:4b:ed:62:da:d2:3b:61:9f:d8:01:cd:e9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
        Validity
            Not Before: May 19 16:36:59 2023 GMT
            Not After : May 17 16:41:59 2024 GMT
        Subject: CN=2EA3CA1217458BBC4CE9D411416830B4C140AAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:39:6b:04:ad:77:81:67:76:ab:95:7d:24:1e:
                    62:66:fb:09:9e:82:6d:1a:fb:d4:65:bd:8a:52:52:
                    77:0d:b0:8c:9e:9a:e1:85:b4:69:5b:88:7b:87:01:
                    4a:1a:11:56:c0:b6:14:75:e4:2f:8a:22:4d:6d:6d:
                    3f:77:7a:2f:2c:f0:47:3b:ef:08:98:0b:9c:e9:7e:
                    b7:b0:f5:0a:14:04:17:9b:85:af:ff:d7:c8:83:89:
                    5e:d9:ff:b2:6b:be:0f:b5:4b:19:9b:4e:85:ac:64:
                    0f:d2:b5:e0:b6:c8:5b:54:8b:64:4a:f4:f6:63:05:
                    4e:48:ee:7d:b4:e5:ac:80:36:b3:58:91:1e:8b:06:
                    ad:f5:c6:e4:2e:be:3d:ae:09:c1:64:d5:47:bc:9a:
                    c6:72:74:c8:50:bc:92:c6:f8:b6:a7:bf:00:5c:d2:
                    d7:1f:10:7b:fd:f1:9a:06:c0:67:3e:e2:93:ba:ad:
                    c6:2d:e1:ca:19:da:b0:5e:24:af:d8:3c:59:bf:b0:
                    3d:c4:16:ee:9f:98:f8:28:e4:6a:db:bf:19:47:8a:
                    32:46:4d:de:3a:11:94:d0:56:5c:3d:99:09:17:52:
                    1b:88:b5:ee:3f:d2:59:6e:44:3c:3b:12:45:02:06:
                    b9:18:bd:62:5c:e4:82:6d:0c:20:bb:aa:c0:b0:62:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:CA:12:17:45:8B:BC:4C:E9:D4:11:41:68:30:B4:C1:40:AA:D7
            X509v3 Authority Key Identifier:
                keyid:1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:fb:78:17:a7:62:55:be:82:19:76:3a:0e:8a:6f:d4:69:
         2a:d9:f7:e7:35:ad:42:b6:84:78:37:9d:cd:a6:34:41:8d:2e:
         02:9d:7f:d2:34:f3:96:36:82:b4:87:53:17:f9:49:a4:f2:72:
         16:b4:b8:1d:c8:e3:2f:36:9b:e4:20:f6:c7:38:18:f4:d9:37:
         38:0f:2f:99:6a:47:d2:ce:3d:2e:ca:37:01:5b:77:d5:d9:88:
         d3:a8:b0:8c:38:bd:f2:39:ee:b4:74:98:23:a1:85:27:66:5d:
         1b:ea:b9:0d:ec:9e:b5:3a:a9:c8:e6:a5:50:2a:69:ae:fb:e1:
         6e:1c:36:5f:f4:52:2a:3f:b5:2f:11:e1:21:52:44:99:f6:28:
         0b:6a:a8:0e:3e:66:10:1f:13:b8:d1:f6:4c:b4:9d:36:f7:a1:
         68:6b:38:85:fd:88:12:af:8d:34:d3:a0:35:2e:db:67:b8:50:
         8f:fb:c0:c6:32:68:93:f9:2a:05:6f:c1:2d:ae:12:fc:05:ad:
         a7:9d:5e:47:da:9f:5c:bd:e6:40:ac:30:df:fe:01:55:11:0b:
         be:ed:2d:00:8c:84:02:3f:b9:2f:8f:9a:8d:cd:d0:d8:72:5a:
         4c:79:a5:99:17:5b:81:21:8b:81:30:ca:e1:f6:c2:0a:8f:8f:
         41:b2:4f:d0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUS+Oa3jIWVkvtYtrSO2Gf2AHN6aYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZCMjkxQkE3RDVBOEYwODc0N0NCNTNDQjUyRDM5MjBG
NUZCOTU3NzAeFw0yMzA1MTkxNjM2NTlaFw0yNDA1MTcxNjQxNTlaMDMxMTAvBgNV
BAMTKDJFQTNDQTEyMTc0NThCQkM0Q0U5RDQxMTQxNjgzMEI0QzE0MEFBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOWsErXeBZ3arlX0kHmJm+wme
gm0a+9RlvYpSUncNsIyemuGFtGlbiHuHAUoaEVbAthR15C+KIk1tbT93ei8s8Ec7
7wiYC5zpfrew9QoUBBebha//18iDiV7Z/7Jrvg+1SxmbToWsZA/SteC2yFtUi2RK
9PZjBU5I7n205ayANrNYkR6LBq31xuQuvj2uCcFk1Ue8msZydMhQvJLG+LanvwBc
0tcfEHv98ZoGwGc+4pO6rcYt4coZ2rBeJK/YPFm/sD3EFu6fmPgo5GrbvxlHijJG
Td46EZTQVlw9mQkXUhuIte4/0lluRDw7EkUCBrkYvWJc5IJtDCC7qsCwYssbAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQULqPKEhdFi7xM6dQRQWgwtMFAqtcwHwYDVR0j
BBgwFoAUH7KRun1ajwh0fLU8tS05IPX7lXcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ydkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMx
LzEvMUZCMjkxQkE3RDVBOEYwODc0N0NCNTNDQjUyRDM5MjBGNUZCOTU3Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xRkIyOTFCQTdENUE4RjA4NzQ3
Q0I1M0NCNTJEMzkyMEY1RkI5NTc3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
dkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMxLzEvMzEz
NzM3MmUzMTM1MzUyZTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzcz
NDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBsZtEMA0GCSqGSIb3DQEBCwUAA4IBAQCmuft4F6diVb6C
GXY6Dopv1Gkq2ffnNa1CtoR4N53NpjRBjS4CnX/SNPOWNoK0h1MX+Umk8nIWtLgd
yOMvNpvkIPbHOBj02Tc4Dy+ZakfSzj0uyjcBW3fV2YjTqLCMOL3yOe60dJgjoYUn
Zl0b6rkN7J61OqnI5qVQKmmu++FuHDZf9FIqP7UvEeEhUkSZ9igLaqgOPmYQHxO4
0fZMtJ0296FoaziF/YgSr40006A1LttnuFCP+8DGMmiT+SoFb8EtrhL8Ba2nnV5H
2p9cveZArDDf/gFVEQu+7S0AjIQCP7kvj5qNzdDYclpMeaWZF1uBIYuBMMrh9sIK
j49Bsk/Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org