Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa
File:                     3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa (raw, json)
Hash identifier:          hFqMhmG+YTWwu3buo1bMvRotxXdeKpvs9hn/0CsGSGs=
Subject key identifier:   3C:12:33:94:63:1E:5F:BF:F5:D0:F8:18:96:F2:53:64:03:A6:70:C9
Certificate issuer:       /CN=34377E5CB3D1D279C7704E0C7C11B2B287EB3067
Certificate serial:       08484BF6F645927F210ACEC7F25AF35C20235CA4
Authority key identifier: 34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa
Signing time:             Sun 25 Feb 2024 03:00:01 +0000
ROA not before:           Sun 25 Feb 2024 02:55:01 +0000
ROA not after:            Tue 25 Feb 2025 03:00:01 +0000
asID:                     29802
IP address blocks:        131.196.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:4b:f6:f6:45:92:7f:21:0a:ce:c7:f2:5a:f3:5c:20:23:5c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34377E5CB3D1D279C7704E0C7C11B2B287EB3067
        Validity
            Not Before: Feb 25 02:55:01 2024 GMT
            Not After : Feb 25 03:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:48:43:0f:81:fd:dc:b3:26:b0:ab:cb:95:
                    61:02:63:c5:7f:6b:dc:d3:83:5c:3d:6a:6c:79:c1:
                    3c:97:a4:a6:2d:28:bc:a9:df:a0:a1:db:be:dd:da:
                    43:00:bc:06:7d:19:e4:5d:18:02:4d:75:71:42:71:
                    c0:89:5c:d8:3f:b5:a3:11:d1:7d:7f:d8:41:26:83:
                    93:b3:f7:a2:85:83:7e:dc:4a:cc:48:06:ee:c2:b8:
                    c5:38:ec:d7:7d:1f:c9:c3:bf:ef:ac:fa:dd:87:84:
                    24:26:17:e4:5e:76:41:9d:3c:a2:61:bb:56:39:92:
                    b6:d4:10:f8:d6:16:c8:c2:59:1e:5a:0d:c8:df:6d:
                    65:61:eb:15:8b:57:bf:8d:f4:53:f7:9e:4c:c8:e3:
                    6f:cc:73:fd:65:f2:f8:93:01:71:d4:44:1f:32:3d:
                    6d:b3:f3:9c:06:c0:2b:69:e4:8b:bc:72:c7:d3:6b:
                    d9:4a:c8:ec:37:9c:ca:5d:ad:08:ea:30:4d:c9:b3:
                    48:1f:17:b8:bf:2e:74:63:9a:c7:50:a1:f1:25:a5:
                    45:70:ee:c0:12:25:35:ae:ae:6d:ec:2c:cb:11:8e:
                    78:4a:d9:47:2b:12:4d:ed:4f:ce:ec:d4:7c:22:b8:
                    eb:df:fe:17:15:74:8c:18:69:6d:0d:8c:1f:aa:91:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:12:33:94:63:1E:5F:BF:F5:D0:F8:18:96:F2:53:64:03:A6:70:C9
            X509v3 Authority Key Identifier:
                keyid:34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:9d:54:43:f0:45:92:03:97:60:32:c0:f9:be:1b:25:35:
         5e:c4:cd:81:1a:bd:b9:45:b0:55:fc:f4:b9:1e:49:51:db:04:
         c1:2b:0e:23:04:b4:77:09:a2:88:74:b7:29:cc:9a:f1:f0:99:
         40:a8:0f:d9:99:14:26:a8:6a:84:5a:6a:d9:1b:a8:62:b8:57:
         f5:97:85:da:6a:65:dd:80:c1:36:c9:9c:dd:12:ac:96:03:d4:
         5b:48:63:5b:25:5c:eb:33:c3:07:a2:f8:ae:5c:74:d0:30:e3:
         3d:ea:e0:fb:80:a4:68:2f:c5:6b:8d:de:ce:db:f9:6f:b3:b6:
         7a:60:02:33:0e:67:90:65:9f:92:a2:10:3b:d7:e1:24:d0:00:
         6c:37:7a:2b:26:36:d1:23:36:9a:df:c6:25:4d:8e:98:99:73:
         38:53:6f:05:5c:27:5a:6f:63:8f:51:20:41:15:cb:15:c4:3e:
         fb:b7:e7:22:af:bb:64:de:8c:fd:5a:2f:32:d6:06:00:a7:d2:
         36:29:9b:c5:10:3b:ec:d3:1c:51:e4:bc:03:6a:f6:37:e5:5a:
         71:d0:37:a0:5a:af:c5:74:26:6c:89:df:56:6d:fe:02:e1:49:
         00:c7:62:20:d1:ab:78:63:61:e1:b5:fa:d6:e4:72:07:48:5b:
         d6:d3:2c:1e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCEhL9vZFkn8hCs7H8lrzXCAjXKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQzNzdFNUNCM0QxRDI3OUM3NzA0RTBDN0MxMUIyQjI4
N0VCMzA2NzAeFw0yNDAyMjUwMjU1MDFaFw0yNTAyMjUwMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDk0ODQ4NDMwRjgxRkREQ0Iz
MjZCMEFCQ0I5NTYxMDI2M0M1N0Y2QkRDRDM4MzVDM0Q2QTZDNzlDMTNDOTdBNEE2
MkQyOEJDQTlERkEwQTFEQkJFREREQTQzMDBCQzA2N0QxOUU0NUQxODAyNEQ3NTcx
NDI3MUMwODk1Q0Q4M0ZCNUEzMTFEMTdEN0ZEODQxMjY4MzkzQjNGN0EyODU4MzdF
REM0QUNDNDgwNkVFQzJCOEM1MzhFQ0Q3N0QxRkM5QzNCRkVGQUNGQUREODc4NDI0
MjYxN0U0NUU3NjQxOUQzQ0EyNjFCQjU2Mzk5MkI2RDQxMEY4RDYxNkM4QzI1OTFF
NUEwREM4REY2RDY1NjFFQjE1OEI1N0JGOERGNDUzRjc5RTRDQzhFMzZGQ0M3M0ZE
NjVGMkY4OTMwMTcxRDQ0NDFGMzIzRDZEQjNGMzlDMDZDMDJCNjlFNDhCQkM3MkM3
RDM2QkQ5NEFDOEVDMzc5Q0NBNURBRDA4RUEzMDREQzlCMzQ4MUYxN0I4QkYyRTc0
NjM5QUM3NTBBMUYxMjVBNTQ1NzBFRUMwMTIyNTM1QUVBRTZERUMyQ0NCMTE4RTc4
NEFEOTQ3MkIxMjRERUQ0RkNFRUNENDdDMjJCOEVCREZGRTE3MTU3NDhDMTg2OTZE
MEQ4QzFGQUE5MUQ2NkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2UhIQw+B/dyzJrCry5VhAmPFf2vc04NcPWpsecE8l6SmLSi8qd+g
odu+3dpDALwGfRnkXRgCTXVxQnHAiVzYP7WjEdF9f9hBJoOTs/eihYN+3ErMSAbu
wrjFOOzXfR/Jw7/vrPrdh4QkJhfkXnZBnTyiYbtWOZK21BD41hbIwlkeWg3I321l
YesVi1e/jfRT955MyONvzHP9ZfL4kwFx1EQfMj1ts/OcBsAraeSLvHLH02vZSsjs
N5zKXa0I6jBNybNIHxe4vy50Y5rHUKHxJaVFcO7AEiU1rq5t7CzLEY54StlHKxJN
7U/O7NR8Irjr3/4XFXSMGGltDYwfqpHWbwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDwSM5RjHl+/9dD4GJbyU2QDpnDJMB8GA1UdIwQYMBaAFDQ3flyz0dJ5x3BODHwR
srKH6zBnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI
RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzAvMzQzNzdFNUNCM0QxRDI3
OUM3NzA0RTBDN0MxMUIyQjI4N0VCMzA2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zNDM3N0U1Q0IzRDFEMjc5Qzc3MDRFMEM3QzExQjJCMjg3RUIz
MDY3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bTNRYnRvdlpmVURYSEUydUJ0
QktCNHZIY20zaEdCbVNoam13UkRyZ3FlUi8wLzMxMzMzMTJlMzEzOTM2MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
g8SsMA0GCSqGSIb3DQEBCwUAA4IBAQCUnZ1UQ/BFkgOXYDLA+b4bJTVexM2BGr25
RbBV/PS5HklR2wTBKw4jBLR3CaKIdLcpzJrx8JlAqA/ZmRQmqGqEWmrZG6hiuFf1
l4XaamXdgME2yZzdEqyWA9RbSGNbJVzrM8MHoviuXHTQMOM96uD7gKRoL8Vrjd7O
2/lvs7Z6YAIzDmeQZZ+SohA71+Ek0ABsN3orJjbRIzaa38YlTY6YmXM4U28FXCda
b2OPUSBBFcsVxD77t+cir7tk3oz9Wi8y1gYAp9I2KZvFEDvs0xxR5LwDavY35Vpx
0DegWq/FdCZsid9Wbf4C4UkAx2Ig0at4Y2HhtfrW5HIHSFvW0ywe
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org