Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
File:                     3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (raw, json)
Hash identifier:          pWnU9rBy5lUnRkh8RDJWZSXneZ0u5PYxfJ8r0Lly1us=
Subject key identifier:   90:A1:23:2A:49:51:A1:3D:1E:AF:BD:BA:D8:56:EE:F8:24:5A:2C:F7
Certificate issuer:       /CN=9E96C92DBC20890AA8793363A4DA0020FABEA2B4
Certificate serial:       5C055F2D773B2A5DE6D2B0ACB3BF7BF844AA8D58
Authority key identifier: 9E:96:C9:2D:BC:20:89:0A:A8:79:33:63:A4:DA:00:20:FA:BE:A2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
Signing time:             Sat 24 Feb 2024 04:04:45 +0000
ROA not before:           Sat 24 Feb 2024 03:59:45 +0000
ROA not after:            Sat 22 Feb 2025 04:04:45 +0000
asID:                     271192
IP address blocks:        179.42.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:05:5f:2d:77:3b:2a:5d:e6:d2:b0:ac:b3:bf:7b:f8:44:aa:8d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E96C92DBC20890AA8793363A4DA0020FABEA2B4
        Validity
            Not Before: Feb 24 03:59:45 2024 GMT
            Not After : Feb 22 04:04:45 2025 GMT
        Subject: CN=90A1232A4951A13D1EAFBDBAD856EEF8245A2CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:7c:9e:a1:c2:75:ce:cb:07:aa:27:fb:c1:
                    ff:40:3d:ab:86:d3:eb:b2:e3:cc:e0:92:0a:20:02:
                    72:9e:7a:2a:25:c0:5e:c2:b7:0a:fc:dc:d6:fa:e7:
                    69:a5:6f:66:ec:1b:10:94:fa:52:81:b7:41:c0:cd:
                    3b:9d:7a:21:68:d2:1e:36:40:3f:72:a7:c6:5d:24:
                    10:4b:27:64:d0:41:d5:77:0d:57:4d:ac:39:37:50:
                    64:76:39:a5:2d:64:0a:a2:74:8c:72:fd:1c:62:1e:
                    9a:d9:dd:69:0a:d0:fe:e5:f1:99:e9:f0:f5:95:9a:
                    a1:ed:9b:00:4b:36:d5:4a:97:e0:b6:2e:9b:5c:e0:
                    35:3d:13:e5:0d:e2:db:d3:ba:45:4e:56:57:56:f2:
                    14:2f:bb:83:d7:93:6b:0a:9b:42:a0:d2:a9:6b:25:
                    f4:52:0c:85:d5:b9:b8:4b:04:fa:2f:7e:8c:3c:b6:
                    cf:8a:5b:66:e0:9f:db:83:f5:0b:85:3d:ee:b0:a4:
                    2a:b3:d9:79:43:21:cc:4f:83:2e:86:0e:11:0d:a0:
                    c6:a8:9a:2a:aa:38:ae:c1:42:4e:c9:59:36:3e:4b:
                    eb:8e:a9:b3:fe:51:e8:31:ba:b4:7d:40:ad:82:61:
                    1b:80:18:4f:a8:3f:60:9f:a5:32:ac:fd:20:be:4c:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A1:23:2A:49:51:A1:3D:1E:AF:BD:BA:D8:56:EE:F8:24:5A:2C:F7
            X509v3 Authority Key Identifier:
                keyid:9E:96:C9:2D:BC:20:89:0A:A8:79:33:63:A4:DA:00:20:FA:BE:A2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96C92DBC20890AA8793363A4DA0020FABEA2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:36:5c:09:f7:4e:d7:c4:ff:0b:23:58:2e:79:ee:13:34:2a:
         74:4e:74:dc:6b:76:04:e0:52:a0:cf:28:08:74:b2:67:fd:b5:
         66:fd:1c:ef:eb:af:fb:11:15:74:b1:5a:b4:75:cf:06:82:22:
         db:ac:81:cc:06:4e:a7:9e:b3:8c:10:a5:61:3b:e6:32:e7:f0:
         dd:a5:07:ab:cb:94:5a:41:05:72:95:af:30:8c:0f:a7:76:52:
         81:2e:7d:43:f3:39:d2:25:f4:bf:5f:38:99:65:07:62:bf:12:
         5c:d6:c3:ba:9e:b8:f0:c8:de:bf:98:a1:be:fa:10:a2:3f:0c:
         81:20:6d:49:35:c3:de:a8:2a:b6:31:8a:0d:b6:7f:93:0a:29:
         8d:b7:0f:3d:67:69:71:a2:aa:94:88:33:70:31:d8:45:9e:92:
         25:87:bf:5a:e9:f9:99:1e:41:38:55:c6:6d:c8:88:92:fa:c3:
         ca:d6:38:14:ef:f5:5f:04:35:cb:25:1e:39:d8:6a:95:f2:08:
         78:8d:de:42:97:53:7d:57:56:e9:87:80:15:d9:1a:70:f2:a7:
         cf:73:c4:5b:68:9c:b0:a1:f0:a9:c8:94:c5:92:53:98:1c:bd:
         d6:b2:b4:3f:98:87:e8:77:cd:6e:9c:7c:3e:30:ae:d2:7d:4a:
         62:bc:fe:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXAVfLXc7Kl3m0rCss797+ESqjVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5NkM5MkRCQzIwODkwQUE4NzkzMzYzQTREQTAwMjBG
QUJFQTJCNDAeFw0yNDAyMjQwMzU5NDVaFw0yNTAyMjIwNDA0NDVaMDMxMTAvBgNV
BAMTKDkwQTEyMzJBNDk1MUExM0QxRUFGQkRCQUQ4NTZFRUY4MjQ1QTJDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC693yeocJ1zssHqif7wf9APauG
0+uy48zgkgogAnKeeiolwF7Ctwr83Nb652mlb2bsGxCU+lKBt0HAzTudeiFo0h42
QD9yp8ZdJBBLJ2TQQdV3DVdNrDk3UGR2OaUtZAqidIxy/RxiHprZ3WkK0P7l8Znp
8PWVmqHtmwBLNtVKl+C2Lptc4DU9E+UN4tvTukVOVldW8hQvu4PXk2sKm0Kg0qlr
JfRSDIXVubhLBPovfow8ts+KW2bgn9uD9QuFPe6wpCqz2XlDIcxPgy6GDhENoMao
miqqOK7BQk7JWTY+S+uOqbP+UegxurR9QK2CYRuAGE+oP2CfpTKs/SC+TJ6vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkKEjKklRoT0er7262Fbu+CRaLPcwHwYDVR0j
BBgwFoAUnpbJLbwgiQqoeTNjpNoAIPq+orQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB4Mnc5VnU2VzJ1RERKb3RpbjlDUGRMODdqU1VtTlk2dG1neDdhQ0xZ
YWsvMC85RTk2QzkyREJDMjA4OTBBQTg3OTMzNjNBNERBMDAyMEZBQkVBMkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFOTZDOTJEQkMyMDg5MEFB
ODc5MzM2M0E0REEwMDIwRkFCRUEyQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhweDJ3OVZ1NlcydURESm90aW45Q1BkTDg3alNVbU5ZNnRtZ3g3YUNMWWFrLzAv
MzEzNzM5MmUzNDMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzKpgwDQYJKoZIhvcNAQELBQADggEBAII2XAn3
TtfE/wsjWC557hM0KnROdNxrdgTgUqDPKAh0smf9tWb9HO/rr/sRFXSxWrR1zwaC
ItusgcwGTqees4wQpWE75jLn8N2lB6vLlFpBBXKVrzCMD6d2UoEufUPzOdIl9L9f
OJllB2K/ElzWw7qeuPDI3r+Yob76EKI/DIEgbUk1w96oKrYxig22f5MKKY23Dz1n
aXGiqpSIM3Ax2EWekiWHv1rp+ZkeQThVxm3IiJL6w8rWOBTv9V8ENcslHjnYapXy
CHiN3kKXU31XVumHgBXZGnDyp89zxFtonLCh8KnIlMWSU5gcvdaytD+Yh+h3zW6c
fD4wrtJ9SmK8/mM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:10 2024 by rpki-client on console-ams.rpki-client.org