Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (raw, json)
Hash identifier:          9TfWlUvHGcpjzmro2mWE9EsSzfFSYMq2qwVGk6bMRO0=
Subject key identifier:   20:73:3F:C5:28:A0:9C:68:87:9E:07:29:64:DC:D9:37:C1:33:C1:9C
Certificate issuer:       /CN=D2BF9E80DF73E948339BCB21CA261EC445C64E1C
Certificate serial:       04C3FDEC4E03009D56CA30B60A801C4814A2A1C5
Authority key identifier: D2:BF:9E:80:DF:73:E9:48:33:9B:CB:21:CA:26:1E:C4:45:C6:4E:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
Signing time:             Tue 30 Jan 2024 00:34:44 +0000
ROA not before:           Tue 30 Jan 2024 00:29:44 +0000
ROA not after:            Tue 28 Jan 2025 00:34:44 +0000
asID:                     52932
IP address blocks:        177.185.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:fd:ec:4e:03:00:9d:56:ca:30:b6:0a:80:1c:48:14:a2:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BF9E80DF73E948339BCB21CA261EC445C64E1C
        Validity
            Not Before: Jan 30 00:29:44 2024 GMT
            Not After : Jan 28 00:34:44 2025 GMT
        Subject: CN=20733FC528A09C68879E072964DCD937C133C19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:a0:66:8d:13:a7:21:ec:71:df:9a:05:ef:
                    5f:5b:76:2f:90:ed:4d:9c:e9:a1:a3:dd:d5:87:93:
                    28:59:bf:38:68:a0:db:bc:03:fd:b4:04:22:d6:76:
                    af:9b:57:34:57:04:94:f8:8e:ad:39:36:6d:d7:1a:
                    d1:7b:b4:c1:34:c8:33:35:2c:72:36:65:a0:c2:ff:
                    4f:8a:ce:44:8a:e7:3c:88:10:b3:a4:8e:fb:aa:1d:
                    d2:e1:e8:84:eb:f6:0f:ec:2b:9d:e0:73:8b:51:6b:
                    ac:bc:21:ec:32:0c:4e:86:a0:c7:6e:1d:f8:e3:f7:
                    64:4c:6b:e7:eb:77:64:a6:0d:97:d7:c1:a7:85:f7:
                    bd:b4:16:ab:84:0f:54:8e:c6:60:03:ec:69:07:5a:
                    6d:86:26:dd:36:09:eb:39:2b:11:72:f3:e6:7f:78:
                    4a:fb:0a:7f:f6:01:cf:04:d3:a5:49:ca:05:fb:d9:
                    58:08:40:aa:86:51:ed:9b:b2:e9:3e:a2:07:24:3f:
                    2e:95:fc:c2:da:66:e5:9d:de:47:0a:2f:8d:7d:bd:
                    09:90:ec:06:d1:36:9b:f6:17:f6:e5:94:8e:98:ae:
                    a6:b2:8d:31:5c:cf:72:a3:38:1c:a2:b5:cc:30:9d:
                    d5:94:a4:b7:c5:c1:11:2c:65:2d:7a:9d:6e:d1:05:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:73:3F:C5:28:A0:9C:68:87:9E:07:29:64:DC:D9:37:C1:33:C1:9C
            X509v3 Authority Key Identifier:
                keyid:D2:BF:9E:80:DF:73:E9:48:33:9B:CB:21:CA:26:1E:C4:45:C6:4E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2BF9E80DF73E948339BCB21CA261EC445C64E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:79:3d:32:5b:ea:a9:b6:e4:02:97:be:b6:6b:81:38:6e:
         1c:c8:dd:d0:35:fc:52:55:5e:d9:c4:63:45:29:52:76:25:a4:
         8c:42:5c:02:e9:36:2e:bb:73:32:e4:d3:b6:7a:64:43:3e:1e:
         d7:e6:09:76:84:10:10:91:9d:7d:ac:30:2f:3a:71:3d:3e:a5:
         de:8e:ef:5b:14:13:25:aa:43:8e:57:ae:6d:a6:8d:f5:72:3a:
         8b:aa:ce:c0:2e:61:ea:25:8b:b7:6f:e3:92:6a:ad:95:5d:f3:
         c3:7e:35:95:41:be:9a:44:2b:4b:62:05:fa:35:ba:73:2b:27:
         22:f1:05:d9:f6:20:38:bf:6c:6c:5e:de:0c:f1:b3:99:6c:e2:
         c5:73:a2:6c:6b:0d:f4:bd:a3:5f:24:60:68:82:23:58:52:3a:
         b9:36:17:09:3c:09:03:f7:fd:4d:b6:d0:52:ed:94:fc:df:6a:
         04:74:ab:82:b6:be:c6:02:f2:2d:2e:51:de:2e:ea:2a:41:bd:
         c1:3e:5d:05:1a:0a:12:8f:01:9a:5e:51:21:2a:d1:9c:6c:e9:
         46:27:f6:77:28:b5:56:25:04:aa:f7:80:33:8f:93:dc:31:cb:
         01:59:f1:f1:c3:e1:1a:5e:91:5d:40:b4:3c:ea:53:da:6e:e3:
         5d:6c:2e:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBMP97E4DAJ1WyjC2CoAcSBSiocUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCRjlFODBERjczRTk0ODMzOUJDQjIxQ0EyNjFFQzQ0
NUM2NEUxQzAeFw0yNDAxMzAwMDI5NDRaFw0yNTAxMjgwMDM0NDRaMDMxMTAvBgNV
BAMTKDIwNzMzRkM1MjhBMDlDNjg4NzlFMDcyOTY0RENEOTM3QzEzM0MxOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrqBmjROnIexx35oF719bdi+Q
7U2c6aGj3dWHkyhZvzhooNu8A/20BCLWdq+bVzRXBJT4jq05Nm3XGtF7tME0yDM1
LHI2ZaDC/0+KzkSK5zyIELOkjvuqHdLh6ITr9g/sK53gc4tRa6y8IewyDE6GoMdu
Hfjj92RMa+frd2SmDZfXwaeF9720FquED1SOxmAD7GkHWm2GJt02Ces5KxFy8+Z/
eEr7Cn/2Ac8E06VJygX72VgIQKqGUe2bsuk+ogckPy6V/MLaZuWd3kcKL419vQmQ
7AbRNpv2F/bllI6YrqayjTFcz3KjOByitcwwndWUpLfFwREsZS16nW7RBWIBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIHM/xSignGiHngcpZNzZN8EzwZwwHwYDVR0j
BBgwFoAU0r+egN9z6Ugzm8shyiYexEXGThwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9EMkJGOUU4MERGNzNFOTQ4MzM5QkNCMjFDQTI2MUVDNDQ1QzY0RTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQkY5RTgwREY3M0U5NDgz
MzlCQ0IyMUNBMjYxRUM0NDVDNjRFMUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzEzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxuXAwDQYJKoZIhvcNAQELBQADggEBAC2VeT0y
W+qptuQCl762a4E4bhzI3dA1/FJVXtnEY0UpUnYlpIxCXALpNi67czLk07Z6ZEM+
HtfmCXaEEBCRnX2sMC86cT0+pd6O71sUEyWqQ45Xrm2mjfVyOouqzsAuYeoli7dv
45JqrZVd88N+NZVBvppEK0tiBfo1unMrJyLxBdn2IDi/bGxe3gzxs5ls4sVzomxr
DfS9o18kYGiCI1hSOrk2Fwk8CQP3/U220FLtlPzfagR0q4K2vsYC8i0uUd4u6ipB
vcE+XQUaChKPAZpeUSEq0Zxs6UYn9ncotVYlBKr3gDOPk9wxywFZ8fHD4RpekV1A
tDzqU9pu411sLhk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org