Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
File:                     3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (raw, json)
Hash identifier:          CEiM5YiFgmh7ut0cB3HzdRoczcHsLNWlZkldBvg3UzM=
Subject key identifier:   38:CB:8C:95:D0:61:DD:F0:DF:59:7C:83:D2:3A:01:9A:03:B8:C6:85
Certificate issuer:       /CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Certificate serial:       7806E8CDB711E177AA206DEA7F9A9EE49F76948A
Authority key identifier: 2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa
Signing time:             Fri 08 Mar 2024 10:04:09 +0000
ROA not before:           Fri 08 Mar 2024 09:59:09 +0000
ROA not after:            Fri 07 Mar 2025 10:04:09 +0000
asID:                     52570
IP address blocks:        179.96.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:06:e8:cd:b7:11:e1:77:aa:20:6d:ea:7f:9a:9e:e4:9f:76:94:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
        Validity
            Not Before: Mar  8 09:59:09 2024 GMT
            Not After : Mar  7 10:04:09 2025 GMT
        Subject: CN=38CB8C95D061DDF0DF597C83D23A019A03B8C685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:d1:44:dd:01:be:3b:1a:03:4b:ae:3f:53:
                    cf:c8:a6:31:be:24:57:88:db:37:35:17:d9:a3:3a:
                    0d:68:f7:79:6a:bf:53:32:b9:92:75:6d:5a:d2:c2:
                    46:47:26:53:d6:1d:7f:49:8b:65:c5:cb:bc:93:0f:
                    3b:72:16:93:7d:9b:e5:d2:bd:c0:81:ee:b2:7f:e9:
                    9b:8a:91:e0:54:5b:16:7f:68:50:df:73:8f:d5:82:
                    78:e5:98:a0:0e:bb:0b:d0:c4:15:d8:d8:4b:f2:88:
                    3c:26:84:94:f6:55:f2:cd:68:50:f4:cf:47:83:36:
                    6b:4f:3f:5c:c4:d0:b1:9d:7c:d1:19:82:a4:0c:e3:
                    ed:e9:a5:de:9b:40:06:9f:74:37:a8:7b:a7:89:a0:
                    fb:58:55:0d:e3:30:f9:0c:17:f4:f1:9e:be:e8:fb:
                    28:a6:d0:ea:3a:78:3d:30:25:64:04:07:7e:02:6a:
                    86:74:5e:33:93:5b:62:8f:43:65:84:2c:5a:14:a3:
                    07:61:ed:fe:04:99:a0:62:90:43:7c:98:3d:33:32:
                    b6:84:75:b0:f2:80:87:91:ab:8c:11:2b:65:b9:0a:
                    e3:bd:91:a9:51:d3:a6:de:29:69:a7:5a:17:0e:c0:
                    e0:de:fe:d3:d3:26:69:6d:71:5c:3a:b9:a4:5e:88:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:8C:95:D0:61:DD:F0:DF:59:7C:83:D2:3A:01:9A:03:B8:C6:85
            X509v3 Authority Key Identifier:
                keyid:2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137392e39362e3230302e302f32312d3234203d3e203532353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:df:63:a9:a2:50:04:ee:27:2c:49:48:a4:57:1f:da:26:3c:
         00:18:8b:ad:71:58:f1:72:ef:bf:15:69:09:ea:58:8a:6f:2d:
         bc:71:60:bf:2f:d5:5d:1d:af:f7:ea:52:9e:aa:66:1c:18:89:
         e1:49:b3:08:9d:90:a0:59:a1:57:ad:22:79:5e:a3:46:6c:ef:
         6b:2d:81:51:72:16:fb:93:8f:07:1b:b1:cf:fa:a8:62:9f:bb:
         5f:99:cc:2b:1e:02:87:5b:f5:26:e3:77:ef:a6:7f:38:1c:ff:
         8e:f2:25:27:bb:9a:27:79:97:e8:50:11:38:39:52:cf:fc:e7:
         94:6d:2d:bc:bd:e3:72:14:a9:06:a9:5d:e9:89:2c:d2:b3:a9:
         e7:81:b0:0d:24:98:ef:c4:48:68:97:0a:3c:ae:8b:52:5c:37:
         d0:06:80:36:d1:5b:cd:a2:6f:9d:1b:cc:44:eb:7f:48:19:5f:
         e9:c3:c9:a0:18:e8:c9:7e:1f:bb:88:c8:fa:b0:bf:9c:23:47:
         6a:66:6a:3f:31:19:a2:3e:57:1c:62:ee:f3:72:8f:e2:e4:9d:
         a7:97:a2:d7:a4:0c:3d:34:b8:88:d8:13:77:94:dc:63:a1:58:
         18:4f:7a:39:f9:3d:f1:4e:5b:e2:1b:03:07:54:39:e2:50:b1:
         6c:7f:f7:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeAbozbcR4XeqIG3qf5qe5J92lIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1QzZDQUNEMzExMzIxQjJFOTExNTlERDlBNUNENzJG
Q0JERDk2NjAeFw0yNDAzMDgwOTU5MDlaFw0yNTAzMDcxMDA0MDlaMDMxMTAvBgNV
BAMTKDM4Q0I4Qzk1RDA2MURERjBERjU5N0M4M0QyM0EwMTlBMDNCOEM2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrktFE3QG+OxoDS64/U8/IpjG+
JFeI2zc1F9mjOg1o93lqv1MyuZJ1bVrSwkZHJlPWHX9Ji2XFy7yTDztyFpN9m+XS
vcCB7rJ/6ZuKkeBUWxZ/aFDfc4/VgnjlmKAOuwvQxBXY2EvyiDwmhJT2VfLNaFD0
z0eDNmtPP1zE0LGdfNEZgqQM4+3ppd6bQAafdDeoe6eJoPtYVQ3jMPkMF/Txnr7o
+yim0Oo6eD0wJWQEB34CaoZ0XjOTW2KPQ2WELFoUowdh7f4EmaBikEN8mD0zMraE
dbDygIeRq4wRK2W5CuO9kalR06beKWmnWhcOwODe/tPTJmltcVw6uaReiEVrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOMuMldBh3fDfWXyD0joBmgO4xoUwHwYDVR0j
BBgwFoAULVxsrNMRMhsukRWd2aXNcvy92WYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5
ZDIvMC8yRDVDNkNBQ0QzMTEzMjFCMkU5MTE1OUREOUE1Q0Q3MkZDQkREOTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENUM2Q0FDRDMxMTMyMUIy
RTkxMTU5REQ5QTVDRDcyRkNCREQ5NjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSdVJMTGF1YXp6cVFkNzVHaVpMaXROYVFaeG1kVXE2TERKWmo4ZnFleWQyLzAv
MzEzNzM5MmUzOTM2MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2DIMA0GCSqGSIb3DQEBCwUAA4IBAQBQ32OpolAE
7icsSUikVx/aJjwAGIutcVjxcu+/FWkJ6liKby28cWC/L9VdHa/36lKeqmYcGInh
SbMInZCgWaFXrSJ5XqNGbO9rLYFRchb7k48HG7HP+qhin7tfmcwrHgKHW/Um43fv
pn84HP+O8iUnu5oneZfoUBE4OVLP/OeUbS28veNyFKkGqV3piSzSs6nngbANJJjv
xEholwo8rotSXDfQBoA20VvNom+dG8xE639IGV/pw8mgGOjJfh+7iMj6sL+cI0dq
Zmo/MRmiPlccYu7zco/i5J2nl6LXpAw9NLiI2BN3lNxjoVgYT3o5+T3xTlviGwMH
VDniULFsf/eu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org