Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32312d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier:          IJnzlJvn2TRXIagIjvqOGmfXZxuO2yVaBhsv/XVLpVA=
Subject key identifier:   F1:92:93:5F:2A:45:41:41:7A:CB:91:25:7C:35:0F:99:C2:26:EA:C4
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       01E5969F58C45DAC4C92FE8E9474368E41CC6605
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32312d3234203d3e203532383731.roa
Signing time:             Fri 27 Oct 2023 10:13:20 +0000
ROA not before:           Fri 27 Oct 2023 10:08:20 +0000
ROA not after:            Fri 25 Oct 2024 10:13:20 +0000
asID:                     52871
IP address blocks:        177.136.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e5:96:9f:58:c4:5d:ac:4c:92:fe:8e:94:74:36:8e:41:cc:66:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 27 10:08:20 2023 GMT
            Not After : Oct 25 10:13:20 2024 GMT
        Subject: CN=F192935F2A4541417ACB91257C350F99C226EAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:1b:59:ea:e9:a3:14:d2:0c:da:a9:cc:92:
                    2b:bb:6f:a9:9c:0b:13:be:54:d6:f2:a9:e7:12:12:
                    a2:f2:aa:22:94:47:ad:77:f3:85:b9:6b:b0:c6:7d:
                    a3:8f:45:37:3b:b3:e6:cd:a3:18:a9:43:66:54:a2:
                    de:2e:2c:20:c9:47:09:27:85:13:a5:ec:d0:8b:07:
                    f8:02:c9:70:5b:ed:30:58:05:2d:70:4f:25:fc:01:
                    a0:86:6a:85:b4:3d:de:43:9d:69:5d:9b:d6:7c:35:
                    73:4d:2a:ff:f4:5c:08:9f:3a:02:13:a6:8c:e4:5c:
                    7e:66:64:83:1a:15:2e:67:56:06:cc:11:22:e4:b7:
                    5d:42:f2:6a:ec:02:45:d2:25:55:72:dc:4e:2d:e0:
                    c1:71:ed:5f:aa:9e:62:a2:6f:76:ec:be:33:e3:34:
                    7c:91:82:b2:56:de:60:40:74:36:04:3e:f9:4d:b3:
                    53:f0:eb:a6:9f:34:f0:42:17:be:af:a8:35:d9:d5:
                    3b:7e:31:b8:40:7c:f6:0a:04:33:ff:87:9f:5c:f7:
                    3f:a8:2a:28:d6:b0:1d:b7:66:c4:98:5c:32:5e:eb:
                    61:9f:59:89:69:1a:06:23:97:3a:39:ac:de:d0:26:
                    34:38:53:f2:b6:4b:85:d2:1d:85:0e:8a:02:56:c9:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:92:93:5F:2A:45:41:41:7A:CB:91:25:7C:35:0F:99:C2:26:EA:C4
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32312d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:1d:5a:24:ce:c3:dd:41:16:70:aa:6a:cc:8b:29:aa:02:
         15:5b:fb:44:28:13:91:fd:b5:33:61:0b:73:3c:eb:17:c9:30:
         0a:d3:48:91:31:a5:ae:0e:ff:80:20:89:d4:4b:06:f4:c3:9a:
         22:1c:dd:e4:34:b2:8b:f8:9c:56:2f:32:ba:51:b9:a0:ff:f0:
         c8:7b:44:70:e6:82:e1:b6:c0:7b:69:16:37:3f:29:7d:f8:fc:
         43:c4:86:3f:d3:48:c5:27:11:e4:17:45:4d:88:bf:dd:12:f3:
         5d:31:b2:fa:76:02:95:16:74:78:d8:9d:52:41:b0:eb:d5:5d:
         17:b8:a6:d3:27:cc:60:31:51:a2:9c:01:da:8a:9e:db:20:42:
         ef:0b:e2:4a:a6:56:37:35:50:31:d7:2b:f1:55:b3:3f:7c:b7:
         bd:f1:b0:15:a5:35:f1:f1:7e:e9:92:9b:95:cb:85:27:83:8b:
         44:36:1d:f6:5b:b0:27:e7:e7:00:ba:f8:52:ab:c1:f8:61:e6:
         43:16:23:a6:bc:61:91:86:93:8c:ef:88:86:02:81:eb:6e:0a:
         11:c6:6f:28:11:92:ec:13:37:b0:9c:1a:d5:96:64:71:ef:a1:
         12:24:3a:e2:37:7b:16:8a:50:30:39:92:6e:78:bc:da:7d:4d:
         09:d5:29:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAeWWn1jEXaxMkv6OlHQ2jkHMZgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJCNzY2QUY0RDcxQjZBNEM3MzA2QzMxNzlFNDA3RjQy
MDQ3RTRCODAeFw0yMzEwMjcxMDA4MjBaFw0yNDEwMjUxMDEzMjBaMDMxMTAvBgNV
BAMTKEYxOTI5MzVGMkE0NTQxNDE3QUNCOTEyNTdDMzUwRjk5QzIyNkVBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjExtZ6umjFNIM2qnMkiu7b6mc
CxO+VNbyqecSEqLyqiKUR61384W5a7DGfaOPRTc7s+bNoxipQ2ZUot4uLCDJRwkn
hROl7NCLB/gCyXBb7TBYBS1wTyX8AaCGaoW0Pd5DnWldm9Z8NXNNKv/0XAifOgIT
pozkXH5mZIMaFS5nVgbMESLkt11C8mrsAkXSJVVy3E4t4MFx7V+qnmKib3bsvjPj
NHyRgrJW3mBAdDYEPvlNs1Pw66afNPBCF76vqDXZ1Tt+MbhAfPYKBDP/h59c9z+o
KijWsB23ZsSYXDJe62GfWYlpGgYjlzo5rN7QJjQ4U/K2S4XSHYUOigJWyXX7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8ZKTXypFQUF6y5ElfDUPmcIm6sQwHwYDVR0j
BBgwFoAUgrdmr01xtqTHMGwxeeQH9CBH5LgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMC84MkI3NjZBRjRENzFCNkE0QzczMDZDMzE3OUU0MDdGNDIwNDdFNEI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgyQjc2NkFGNEQ3MUI2QTRD
NzMwNkMzMTc5RTQwN0Y0MjA0N0U0QjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzAv
MzEzNzM3MmUzMTMzMzYyZTMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM4
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7GIADANBgkqhkiG9w0BAQsFAAOCAQEAhy0dWiTOw91B
FnCqasyLKaoCFVv7RCgTkf21M2ELczzrF8kwCtNIkTGlrg7/gCCJ1EsG9MOaIhzd
5DSyi/icVi8yulG5oP/wyHtEcOaC4bbAe2kWNz8pffj8Q8SGP9NIxScR5BdFTYi/
3RLzXTGy+nYClRZ0eNidUkGw69VdF7im0yfMYDFRopwB2oqe2yBC7wviSqZWNzVQ
Mdcr8VWzP3y3vfGwFaU18fF+6ZKblcuFJ4OLRDYd9luwJ+fnALr4UqvB+GHmQxYj
prxhkYaTjO+IhgKB624KEcZvKBGS7BM3sJwa1ZZkce+hEiQ64jd7FopQMDmSbni8
2n1NCdUpKA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org