Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3234203d3e20323731313438.roa
File:                     3137392e34322e3130302e302f32322d3234203d3e20323731313438.roa (raw, json)
Hash identifier:          G0ugXo/xJdETUlW2czfatOUaI7o2jd5V/XUSS9f1p9A=
Subject key identifier:   56:38:A7:DA:23:D3:51:80:AD:35:AF:3A:4C:51:68:9D:BB:4B:31:FF
Certificate issuer:       /CN=5E2DE28336937C11E6CA930D175452349F8B19BB
Certificate serial:       576BCDA6F50EE4BF4B5FE24F88B562D9DDAA1DF2
Authority key identifier: 5E:2D:E2:83:36:93:7C:11:E6:CA:93:0D:17:54:52:34:9F:8B:19:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E2DE28336937C11E6CA930D175452349F8B19BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3234203d3e20323731313438.roa
Signing time:             Sat 11 Sep 2021 13:28:00 +0000
ROA not before:           Sat 11 Sep 2021 13:23:00 +0000
ROA not after:            Sat 10 Sep 2022 13:28:00 +0000
asID:                     271148
IP address blocks:        179.42.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6b:cd:a6:f5:0e:e4:bf:4b:5f:e2:4f:88:b5:62:d9:dd:aa:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2DE28336937C11E6CA930D175452349F8B19BB
        Validity
            Not Before: Sep 11 13:23:00 2021 GMT
            Not After : Sep 10 13:28:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:e5:00:55:9a:79:7d:02:f4:2f:cf:d4:ee:
                    c5:38:61:bf:6a:a7:33:79:9c:59:05:d2:62:a1:66:
                    78:3d:34:44:c5:7c:52:cc:12:65:a0:fe:38:b5:9b:
                    ef:2f:77:67:29:ae:e6:30:e4:ef:3d:57:55:82:66:
                    23:19:62:f7:fa:bf:8b:7b:cc:14:7c:6b:da:85:1e:
                    2f:9c:36:52:33:e7:12:c0:fe:34:58:37:ae:8b:99:
                    e0:d5:7a:b9:63:ab:9e:ca:2b:be:ca:16:9d:a8:fb:
                    0d:7e:66:7f:29:9f:08:8b:f0:4a:a6:04:3d:f4:95:
                    9e:e2:49:43:32:a3:a4:9c:7d:89:60:35:92:d8:68:
                    0f:0c:e1:dc:3b:51:98:f0:d3:7d:f1:c6:42:6e:26:
                    34:8f:cd:9b:5c:2b:b0:41:7c:50:ea:97:b0:8b:ad:
                    34:3a:12:0a:59:69:84:cc:89:67:a1:6b:e4:44:3c:
                    18:46:22:7e:02:62:d7:36:f5:77:b8:d9:4c:5e:d7:
                    c9:84:e6:b6:ab:45:11:60:f3:59:d0:97:65:40:ab:
                    8e:b0:aa:89:53:22:a4:87:c9:79:fd:a7:e8:17:ec:
                    00:ef:6b:e0:b4:5d:80:be:ce:97:0f:03:6c:ff:59:
                    eb:8c:16:ba:e7:21:c3:bb:e4:80:ce:58:a1:53:10:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:A7:DA:23:D3:51:80:AD:35:AF:3A:4C:51:68:9D:BB:4B:31:FF
            X509v3 Authority Key Identifier:
                keyid:5E:2D:E2:83:36:93:7C:11:E6:CA:93:0D:17:54:52:34:9F:8B:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/5E2DE28336937C11E6CA930D175452349F8B19BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E2DE28336937C11E6CA930D175452349F8B19BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3234203d3e20323731313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:0c:39:3e:f2:64:d5:00:7a:a4:30:78:ef:39:72:76:af:
         b2:a6:30:3d:be:2f:b4:93:ae:05:e6:2e:ca:13:c2:56:1a:06:
         cf:2b:15:05:2c:1c:e6:50:0d:23:6f:ac:69:da:8f:c3:a7:d2:
         ef:fc:79:5d:32:e9:7d:b4:27:fc:22:f1:07:dc:07:c2:c6:8b:
         89:5c:c5:f9:bf:b8:10:4e:74:a6:bd:a7:76:1d:9c:73:77:1d:
         69:a2:f2:1c:33:8f:5b:8f:09:da:75:44:a7:d3:c9:95:ca:4b:
         52:1f:2f:95:1b:0a:d1:30:41:45:91:6d:b4:c1:6c:17:d3:c6:
         30:e5:0d:c5:97:b1:f3:6c:5c:3a:68:e0:03:be:d7:06:b3:79:
         a7:07:8e:7c:40:f8:2d:21:7a:9f:1a:cc:ec:7e:46:1b:a1:42:
         7e:96:9b:cf:92:f6:b2:2a:bd:c8:b3:60:d9:74:e4:c2:39:ac:
         57:1d:9b:3b:4e:35:40:ef:e8:09:fe:da:52:71:11:4f:51:27:
         a5:be:a8:d4:a7:52:01:58:af:39:8d:5a:11:9b:01:c4:e7:ce:
         79:12:c0:3e:76:ac:56:22:83:26:bd:ab:ac:e2:0c:4d:55:b4:
         37:6c:ef:b6:c8:09:d5:6c:30:96:7b:5f:3c:a9:fe:45:07:9f:
         f0:32:57:79
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUV2vNpvUO5L9LX+JPiLVi2d2qHfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUyREUyODMzNjkzN0MxMUU2Q0E5MzBEMTc1NDUyMzQ5
RjhCMTlCQjAeFw0yMTA5MTExMzIzMDBaFw0yMjA5MTAxMzI4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdBNEU1MDA1NTlBNzk3RDAy
RjQyRkNGRDRFRUM1Mzg2MUJGNkFBNzMzNzk5QzU5MDVEMjYyQTE2Njc4M0QzNDQ0
QzU3QzUyQ0MxMjY1QTBGRTM4QjU5QkVGMkY3NzY3MjlBRUU2MzBFNEVGM0Q1NzU1
ODI2NjIzMTk2MkY3RkFCRjhCN0JDQzE0N0M2QkRBODUxRTJGOUMzNjUyMzNFNzEy
QzBGRTM0NTgzN0FFOEI5OUUwRDU3QUI5NjNBQjlFQ0EyQkJFQ0ExNjlEQThGQjBE
N0U2NjdGMjk5RjA4OEJGMDRBQTYwNDNERjQ5NTlFRTI0OTQzMzJBM0E0OUM3RDg5
NjAzNTkyRDg2ODBGMENFMURDM0I1MTk4RjBEMzdERjFDNjQyNkUyNjM0OEZDRDlC
NUMyQkIwNDE3QzUwRUE5N0IwOEJBRDM0M0ExMjBBNTk2OTg0Q0M4OTY3QTE2QkU0
NDQzQzE4NDYyMjdFMDI2MkQ3MzZGNTc3QjhEOTRDNUVEN0M5ODRFNkI2QUI0NTEx
NjBGMzU5RDA5NzY1NDBBQjhFQjBBQTg5NTMyMkE0ODdDOTc5RkRBN0U4MTdFQzAw
RUY2QkUwQjQ1RDgwQkVDRTk3MEYwMzZDRkY1OUVCOEMxNkJBRTcyMUMzQkJFNDgw
Q0U1OEExNTMxMDg1REYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx6TlAFWaeX0C9C/P1O7FOGG/aqczeZxZBdJioWZ4PTRExXxSzBJl
oP44tZvvL3dnKa7mMOTvPVdVgmYjGWL3+r+Le8wUfGvahR4vnDZSM+cSwP40WDeu
i5ng1Xq5Y6ueyiu+yhadqPsNfmZ/KZ8Ii/BKpgQ99JWe4klDMqOknH2JYDWS2GgP
DOHcO1GY8NN98cZCbiY0j82bXCuwQXxQ6pewi600OhIKWWmEzIlnoWvkRDwYRiJ+
AmLXNvV3uNlMXtfJhOa2q0URYPNZ0JdlQKuOsKqJUyKkh8l5/afoF+wA72vgtF2A
vs6XDwNs/1nrjBa65yHDu+SAzlihUxCF3wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFY4p9oj01GArTWvOkxRaJ27SzH/MB8GA1UdIwQYMBaAFF4t4oM2k3wR5sqTDRdU
UjSfixm7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzduTU5NS25hckJDbWdN
ak10NjhBaWJ4TmR0MWJkcG50NDZhZWd5dDJvekZGLzAvNUUyREUyODMzNjkzN0Mx
MUU2Q0E5MzBEMTc1NDUyMzQ5RjhCMTlCQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81RTJERTI4MzM2OTM3QzExRTZDQTkzMEQxNzU0NTIzNDlGOEIx
OUJCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83bk1OTUtuYXJCQ21nTWpNdDY4
QWlieE5kdDFiZHBudDQ2YWVneXQyb3pGRi8wLzMxMzczOTJlMzQzMjJlMzEzMDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzEzNDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sypkMA0GCSqGSIb3DQEBCwUAA4IBAQBU4Qw5PvJk1QB6pDB47zlydq+ypjA9vi+0
k64F5i7KE8JWGgbPKxUFLBzmUA0jb6xp2o/Dp9Lv/HldMul9tCf8IvEH3AfCxouJ
XMX5v7gQTnSmvad2HZxzdx1povIcM49bjwnadUSn08mVyktSHy+VGwrRMEFFkW20
wWwX08Yw5Q3Fl7HzbFw6aOADvtcGs3mnB458QPgtIXqfGszsfkYboUJ+lpvPkvay
Kr3Is2DZdOTCOaxXHZs7TjVA7+gJ/tpScRFPUSelvqjUp1IBWK85jVoRmwHE5855
EsA+dqxWIoMmvaus4gxNVbQ3bO+2yAnVbDCWe188qf5FB5/wMld5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org