Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137372e32312e33322e302f32302d3234203d3e20323632373631.roa
File:                     3137372e32312e33322e302f32302d3234203d3e20323632373631.roa (raw, json)
Hash identifier:          VUrNw9FFG3qEg1jFwv9/ZWT2QiPnHSJHcV4MMYGlPDo=
Subject key identifier:   CE:57:7B:47:1A:16:E0:6C:5A:E6:EA:00:07:8B:6C:6D:22:66:E4:19
Certificate issuer:       /CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
Certificate serial:       1E530E22A5CB4C0C99A07845516373FA0C3DB74A
Authority key identifier: 50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137372e32312e33322e302f32302d3234203d3e20323632373631.roa
Signing time:             Mon 27 Nov 2023 17:50:00 +0000
ROA not before:           Mon 27 Nov 2023 17:45:00 +0000
ROA not after:            Mon 25 Nov 2024 17:50:00 +0000
asID:                     262761
IP address blocks:        177.21.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:0e:22:a5:cb:4c:0c:99:a0:78:45:51:63:73:fa:0c:3d:b7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
        Validity
            Not Before: Nov 27 17:45:00 2023 GMT
            Not After : Nov 25 17:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:b9:52:f2:89:fe:b0:a1:2b:86:4f:db:53:
                    4b:ad:31:98:16:12:59:3a:ee:db:7f:a0:cf:2e:93:
                    2a:e4:0b:2f:f0:0c:db:ab:85:2e:fb:85:7e:cd:81:
                    ea:1b:0b:13:06:e6:26:2a:02:e3:a2:34:47:24:2d:
                    fa:1d:5c:53:8a:5f:ad:7d:f4:f8:f3:7a:04:7a:5b:
                    18:d2:81:6a:35:0f:26:e1:68:b2:73:ae:43:90:54:
                    44:72:52:83:68:21:66:eb:52:23:ab:4e:b2:ea:59:
                    a6:72:a6:32:69:08:24:05:a0:4c:c2:e8:6b:ec:bb:
                    e6:f8:89:9b:bb:ad:a0:fe:53:8d:0b:cb:08:be:dd:
                    7b:33:4a:14:bf:75:61:16:c4:88:c7:a7:ef:7b:62:
                    38:50:55:1c:5e:56:65:49:af:fc:0e:f8:01:cb:e4:
                    bb:89:ba:07:96:45:fc:f2:60:d1:b1:37:5d:f4:6e:
                    ff:96:3c:dd:77:a8:62:88:2b:70:7d:81:de:33:66:
                    0f:27:d1:db:c2:9a:e6:50:51:bb:35:3e:9c:0a:7d:
                    e0:79:c6:17:88:0b:b8:03:a8:c2:8c:36:13:e9:c8:
                    36:ee:94:a8:48:de:06:d4:3e:80:c5:68:5a:c2:c2:
                    2c:b9:ba:ba:6a:5d:36:e6:29:e6:cb:7c:72:4e:6f:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:57:7B:47:1A:16:E0:6C:5A:E6:EA:00:07:8B:6C:6D:22:66:E4:19
            X509v3 Authority Key Identifier:
                keyid:50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3137372e32312e33322e302f32302d3234203d3e20323632373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:99:3c:a4:ae:b9:fe:e6:9e:4f:2e:33:65:81:66:72:08:
         97:36:b0:7f:85:ea:b7:3a:36:c3:c0:a9:49:cc:dc:dd:3e:9d:
         2d:99:58:f7:52:f0:d8:27:0b:27:e9:7d:fc:0a:08:df:7a:2b:
         ef:b3:59:e1:e5:f7:d3:35:a6:16:f9:ec:11:b6:ec:99:6e:7c:
         3e:16:be:ba:a4:b5:1a:ac:23:a8:d9:49:40:00:dc:4b:b3:bb:
         ab:95:45:55:6f:21:6c:ee:e9:52:5d:c1:47:b2:d9:96:90:cc:
         c7:a0:b0:ce:3d:ee:72:83:1c:9a:68:7d:08:a3:31:67:ae:dc:
         56:9f:73:37:c2:c9:0f:95:09:00:00:cd:55:04:84:5e:fe:fa:
         db:f1:04:43:0a:54:96:db:20:0b:d2:2c:89:8b:5c:6d:54:2e:
         d2:6b:ee:fb:60:2d:08:b2:4f:60:fe:59:ee:f0:4d:9b:04:77:
         c0:5f:00:a6:75:fa:98:21:76:68:dd:28:7c:7e:89:fd:7a:8c:
         28:2e:dd:44:d7:b2:fd:e3:20:bf:15:75:29:c2:2f:da:1b:75:
         e1:78:91:85:47:02:56:76:f0:f3:45:57:32:6f:d7:7a:a2:56:
         92:c8:ea:34:72:ed:7d:55:d6:29:57:e8:5b:8c:24:9f:f1:03:
         2b:df:b2:a9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHlMOIqXLTAyZoHhFUWNz+gw9t0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBERTk0NzU0MTM2QjlGRUEwQkM2RjYwQjlDMUFEMDU0
RDI1RTMzNzAeFw0yMzExMjcxNzQ1MDBaFw0yNDExMjUxNzUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTMzN0I5NTJGMjg5RkVCMEEx
MkI4NjRGREI1MzRCQUQzMTk4MTYxMjU5M0FFRURCN0ZBMENGMkU5MzJBRTQwQjJG
RjAwQ0RCQUI4NTJFRkI4NTdFQ0Q4MUVBMUIwQjEzMDZFNjI2MkEwMkUzQTIzNDQ3
MjQyREZBMUQ1QzUzOEE1RkFEN0RGNEY4RjM3QTA0N0E1QjE4RDI4MTZBMzUwRjI2
RTE2OEIyNzNBRTQzOTA1NDQ0NzI1MjgzNjgyMTY2RUI1MjIzQUI0RUIyRUE1OUE2
NzJBNjMyNjkwODI0MDVBMDRDQzJFODZCRUNCQkU2Rjg4OTlCQkJBREEwRkU1MzhE
MEJDQjA4QkVERDdCMzM0QTE0QkY3NTYxMTZDNDg4QzdBN0VGN0I2MjM4NTA1NTFD
NUU1NjY1NDlBRkZDMEVGODAxQ0JFNEJCODlCQTA3OTY0NUZDRjI2MEQxQjEzNzVE
RjQ2RUZGOTYzQ0RENzdBODYyODgyQjcwN0Q4MURFMzM2NjBGMjdEMURCQzI5QUU2
NTA1MUJCMzUzRTlDMEE3REUwNzlDNjE3ODgwQkI4MDNBOEMyOEMzNjEzRTlDODM2
RUU5NEE4NDhERTA2RDQzRTgwQzU2ODVBQzJDMjJDQjlCQUJBNkE1RDM2RTYyOUU2
Q0I3QzcyNEU2RjBDNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4ze5UvKJ/rChK4ZP21NLrTGYFhJZOu7bf6DPLpMq5Asv8Azbq4Uu
+4V+zYHqGwsTBuYmKgLjojRHJC36HVxTil+tffT483oEelsY0oFqNQ8m4Wiyc65D
kFREclKDaCFm61Ijq06y6lmmcqYyaQgkBaBMwuhr7Lvm+Imbu62g/lONC8sIvt17
M0oUv3VhFsSIx6fve2I4UFUcXlZlSa/8DvgBy+S7iboHlkX88mDRsTdd9G7/ljzd
d6hiiCtwfYHeM2YPJ9HbwprmUFG7NT6cCn3gecYXiAu4A6jCjDYT6cg27pSoSN4G
1D6AxWhawsIsubq6al025inmy3xyTm8MYQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FM5Xe0caFuBsWubqAAeLbG0iZuQZMB8GA1UdIwQYMBaAFFDelHVBNrn+oLxvYLnB
rQVNJeM3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpO
V3l0TkhjM0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzAvNTBERTk0NzU0MTM2QjlG
RUEwQkM2RjYwQjlDMUFEMDU0RDI1RTMzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MERFOTQ3NTQxMzZCOUZFQTBCQzZGNjBCOUMxQUQwNTREMjVF
MzM3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcWVYS2h4dGt1a3h6Tld5dE5I
YzNLeGl1VXk4cmhFa1prRDNuQlBnQ0dUaC8wLzMxMzczNzJlMzIzMTJlMzMzMjJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYzMjM3MzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLEV
IDANBgkqhkiG9w0BAQsFAAOCAQEAMcyZPKSuuf7mnk8uM2WBZnIIlzawf4Xqtzo2
w8CpSczc3T6dLZlY91Lw2CcLJ+l9/AoI33or77NZ4eX30zWmFvnsEbbsmW58Pha+
uqS1GqwjqNlJQADcS7O7q5VFVW8hbO7pUl3BR7LZlpDMx6Cwzj3ucoMcmmh9CKMx
Z67cVp9zN8LJD5UJAADNVQSEXv762/EEQwpUltsgC9IsiYtcbVQu0mvu+2AtCLJP
YP5Z7vBNmwR3wF8ApnX6mCF2aN0ofH6J/XqMKC7dRNey/eMgvxV1KcIv2ht14XiR
hUcCVnbw80VXMm/XeqJWksjqNHLtfVXWKVfoW4wkn/EDK9+yqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org