Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa
File:                     3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          y3KsabSEIw38rnw33fh2ffK7rZy11tFsy835IYer6E4=
Subject key identifier:   EC:4A:DA:9B:EE:A3:53:BF:98:BD:4F:DB:40:05:86:15:A5:80:5E:88
Certificate issuer:       /CN=D604A99795373CD44426948F8ED861D20BA3D348
Certificate serial:       4CD6AB654BCE7E74D6682A06449006F763BDE58D
Authority key identifier: D6:04:A9:97:95:37:3C:D4:44:26:94:8F:8E:D8:61:D2:0B:A3:D3:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D604A99795373CD44426948F8ED861D20BA3D348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa
Signing time:             Tue 05 Sep 2023 16:01:29 +0000
ROA not before:           Tue 05 Sep 2023 15:56:29 +0000
ROA not after:            Tue 03 Sep 2024 16:01:29 +0000
asID:                     262769
IP address blocks:        177.155.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d6:ab:65:4b:ce:7e:74:d6:68:2a:06:44:90:06:f7:63:bd:e5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D604A99795373CD44426948F8ED861D20BA3D348
        Validity
            Not Before: Sep  5 15:56:29 2023 GMT
            Not After : Sep  3 16:01:29 2024 GMT
        Subject: CN=EC4ADA9BEEA353BF98BD4FDB40058615A5805E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:5e:e7:17:3b:50:2f:cb:45:10:9c:14:08:
                    89:c8:e6:e1:ee:f3:73:4f:24:c9:b7:7e:eb:35:ff:
                    20:b8:48:98:3b:20:41:44:91:8f:1e:4b:71:58:55:
                    20:ff:b0:b5:47:e2:14:16:9e:a1:9f:40:54:de:98:
                    6a:2c:94:cd:bf:35:18:48:1b:a9:64:c0:ff:4b:05:
                    bf:51:81:e5:b8:62:7d:73:c6:68:fe:6b:af:a4:50:
                    3f:de:89:72:de:39:24:40:11:a1:66:78:2a:6d:db:
                    c7:d1:b0:f7:af:d2:85:0a:66:8e:95:bc:a8:f3:80:
                    bc:27:f9:10:1b:31:39:ae:63:fc:cd:5b:06:29:0b:
                    c5:42:0b:ff:34:f3:df:e6:1e:36:3b:f1:7c:11:1c:
                    89:ae:d2:c1:3b:25:5e:98:80:74:7b:8f:db:15:76:
                    93:1f:93:96:7d:bc:3d:1e:bb:bd:67:59:ec:32:9b:
                    53:38:f6:3e:e2:39:d1:83:2b:bf:bc:d5:b6:08:b2:
                    26:97:db:9c:ff:77:37:39:fd:66:3a:32:18:9d:8b:
                    9a:dc:eb:eb:cb:41:ac:68:1c:17:52:ac:bc:1b:06:
                    01:53:28:e0:5a:2f:57:56:18:6a:88:76:af:85:9e:
                    a2:53:0b:ce:e1:22:5c:14:cf:a5:89:12:b6:6f:f3:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:DA:9B:EE:A3:53:BF:98:BD:4F:DB:40:05:86:15:A5:80:5E:88
            X509v3 Authority Key Identifier:
                keyid:D6:04:A9:97:95:37:3C:D4:44:26:94:8F:8E:D8:61:D2:0B:A3:D3:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/D604A99795373CD44426948F8ED861D20BA3D348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D604A99795373CD44426948F8ED861D20BA3D348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:f6:19:1a:1a:de:89:c3:81:0b:d4:8c:4a:35:f1:db:51:
         58:60:76:a8:5d:e7:36:22:4c:ef:26:6c:20:df:ea:e6:75:f1:
         91:47:87:0e:97:89:85:61:9f:08:4e:23:be:c7:d2:7a:64:11:
         df:23:a9:7c:ad:82:b8:f1:66:b6:1d:3a:18:e1:eb:22:6d:42:
         30:3f:82:c8:05:fa:9f:57:1c:1e:56:b7:8f:60:23:3b:fb:50:
         1b:01:5b:de:d4:c4:f7:8d:e7:d2:1f:6d:fc:87:54:85:ff:61:
         bf:d4:8b:03:82:bf:ec:2c:fa:28:7a:20:f7:c5:b9:d3:8f:3f:
         08:3d:78:d0:a0:ce:36:dd:eb:b4:ee:02:78:7e:9d:cd:ec:f4:
         e7:f4:7b:20:a2:00:d3:8a:cf:e2:b6:97:7e:fd:0f:0c:0e:37:
         e0:45:0b:c4:df:5f:2a:2c:7f:ed:59:88:c8:df:46:25:85:1b:
         2a:34:b8:fd:70:22:d1:7a:9a:d9:b7:b4:18:36:e3:e5:62:b1:
         7e:2e:be:c4:0b:a8:59:8d:94:61:ba:52:40:ae:1e:ac:cd:8e:
         75:38:ab:43:25:cf:42:d3:44:e7:49:32:66:16:ba:18:83:fd:
         bc:23:84:05:29:02:21:fc:d2:c7:d2:84:53:2a:8b:29:d3:33:
         48:dc:36:22
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTNarZUvOfnTWaCoGRJAG92O95Y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwNEE5OTc5NTM3M0NENDQ0MjY5NDhGOEVEODYxRDIw
QkEzRDM0ODAeFw0yMzA5MDUxNTU2MjlaFw0yNDA5MDMxNjAxMjlaMDMxMTAvBgNV
BAMTKEVDNEFEQTlCRUVBMzUzQkY5OEJENEZEQjQwMDU4NjE1QTU4MDVFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWN17nFztQL8tFEJwUCInI5uHu
83NPJMm3fus1/yC4SJg7IEFEkY8eS3FYVSD/sLVH4hQWnqGfQFTemGoslM2/NRhI
G6lkwP9LBb9RgeW4Yn1zxmj+a6+kUD/eiXLeOSRAEaFmeCpt28fRsPev0oUKZo6V
vKjzgLwn+RAbMTmuY/zNWwYpC8VCC/8089/mHjY78XwRHImu0sE7JV6YgHR7j9sV
dpMfk5Z9vD0eu71nWewym1M49j7iOdGDK7+81bYIsiaX25z/dzc5/WY6Mhidi5rc
6+vLQaxoHBdSrLwbBgFTKOBaL1dWGGqIdq+FnqJTC87hIlwUz6WJErZv86qdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7Eram+6jU7+YvU/bQAWGFaWAXogwHwYDVR0j
BBgwFoAU1gSpl5U3PNREJpSPjthh0guj00gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW
S3QvMC9ENjA0QTk5Nzk1MzczQ0Q0NDQyNjk0OEY4RUQ4NjFEMjBCQTNEMzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2MDRBOTk3OTUzNzNDRDQ0
NDI2OTQ4RjhFRDg2MUQyMEJBM0QzNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRcnlYcVA5WHE0Q1RScTRTMnZHSFlmcEJhZFBCenQ4UnEyTVRDeTRkVkt0LzAv
MzEzNzM3MmUzMTM1MzUyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLGbkDANBgkqhkiG9w0BAQsFAAOCAQEAapr2
GRoa3onDgQvUjEo18dtRWGB2qF3nNiJM7yZsIN/q5nXxkUeHDpeJhWGfCE4jvsfS
emQR3yOpfK2CuPFmth06GOHrIm1CMD+CyAX6n1ccHla3j2AjO/tQGwFb3tTE943n
0h9t/IdUhf9hv9SLA4K/7Cz6KHog98W5048/CD140KDONt3rtO4CeH6dzez05/R7
IKIA04rP4raXfv0PDA434EULxN9fKix/7VmIyN9GJYUbKjS4/XAi0Xqa2be0GDbj
5WKxfi6+xAuoWY2UYbpSQK4erM2OdTirQyXPQtNE50kyZha6GIP9vCOEBSkCIfzS
x9KEUyqLKdMzSNw2Ig==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org