Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e35322e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35322e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          DtK9sTvfvXCp61JGjRareHEyJWz0BNOsygEuroF7ST4=
Subject key identifier:   34:8D:81:89:AD:90:68:C2:DD:7A:53:33:66:A0:C9:E8:82:08:35:E2
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       117606D758BDB440F33AC1D760D22EF64655D876
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e35322e302f32342d3234203d3e20323632343933.roa
Signing time:             Sat 13 Apr 2024 20:02:01 +0000
ROA not before:           Sat 13 Apr 2024 19:57:01 +0000
ROA not after:            Sat 12 Apr 2025 20:02:01 +0000
asID:                     262493
IP address blocks:        177.8.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:76:06:d7:58:bd:b4:40:f3:3a:c1:d7:60:d2:2e:f6:46:55:d8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 13 19:57:01 2024 GMT
            Not After : Apr 12 20:02:01 2025 GMT
        Subject: CN=348D8189AD9068C2DD7A533366A0C9E8820835E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:2d:ae:34:79:bf:fe:12:35:2c:cd:50:95:
                    53:31:60:5d:0e:97:07:c7:41:c4:2d:ca:e3:b8:e2:
                    35:77:c8:07:1c:c6:df:bf:6e:e1:24:4c:8b:f5:87:
                    99:6b:95:c7:f4:8f:48:9a:5a:27:60:7d:08:ae:86:
                    80:73:68:99:7a:8e:91:f7:5f:37:02:0d:10:72:f1:
                    cf:c3:70:21:d6:53:80:bc:ea:e6:07:2c:6c:2a:06:
                    f2:b5:6b:27:9a:d3:78:a2:2b:11:3d:af:7b:19:e6:
                    ec:d5:de:b0:d8:7a:dc:32:56:de:b9:96:5e:f7:62:
                    76:b2:90:f4:2e:bf:e4:2f:a8:e4:bf:19:ad:f9:00:
                    90:17:0f:43:e5:26:fe:f8:f7:dd:47:f5:bb:11:9e:
                    9e:df:cb:09:83:42:a9:e3:96:a2:d2:e3:42:81:3e:
                    d5:79:6f:59:ca:9f:a2:03:e5:e4:2e:2c:b1:af:25:
                    69:09:95:11:5f:1a:55:f3:25:a5:46:c3:92:40:ef:
                    7a:ab:30:e9:2a:d4:1a:5f:e3:e7:50:76:18:7b:b0:
                    0b:7b:e6:33:cb:8a:26:69:18:94:53:e2:33:fd:f1:
                    fe:c0:25:3f:27:58:6f:66:19:1a:70:9f:86:35:10:
                    85:33:d4:e6:77:94:09:0f:f1:9b:cc:c4:9f:48:a2:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:81:89:AD:90:68:C2:DD:7A:53:33:66:A0:C9:E8:82:08:35:E2
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e35322e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:82:2a:32:30:00:18:f0:5f:65:d6:26:7b:15:f2:52:0a:
         15:f1:43:53:df:59:11:b9:de:dd:71:b7:cc:67:90:7f:54:79:
         18:76:ee:53:a1:33:54:24:29:01:af:51:59:fb:a3:ab:96:ea:
         40:e5:7d:70:dc:b5:62:7e:5c:74:6d:d8:db:84:ba:90:06:24:
         76:7f:df:7a:fd:89:d3:91:62:dd:21:cb:9e:22:8d:cd:22:89:
         d4:19:ac:22:c5:f2:5c:c5:f7:59:cf:5c:c9:83:2c:8c:a6:81:
         4e:35:9a:b2:13:ea:b2:5c:a5:e9:77:37:b1:e1:74:93:75:43:
         b0:cc:1c:c4:41:6c:ff:96:e5:88:3e:66:50:d2:c5:7b:f0:09:
         16:75:5e:26:31:57:a3:10:d0:8f:eb:9f:ee:c1:58:e3:6d:f5:
         b3:10:8b:ee:e4:60:07:63:ce:0f:40:9a:71:c2:01:d2:b5:fc:
         ac:af:b9:46:41:95:6d:bc:49:a2:55:74:39:8a:9a:66:6d:58:
         da:f5:c2:77:8e:f4:b7:59:ee:27:ee:1a:40:f9:0c:44:ba:ad:
         e2:c8:c4:80:3d:d3:da:15:4e:87:23:f1:13:5d:3c:cc:d5:d9:
         1c:81:cb:29:01:c0:f9:88:87:16:35:9f:3d:81:70:1e:f7:b5:
         d6:8d:75:8f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEXYG11i9tEDzOsHXYNIu9kZV2HYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE2M0RDQUE1QUYxMTE5Q0M4QjRDREFFNkE3MjJFMEEy
OEREQzFDRTAeFw0yNDA0MTMxOTU3MDFaFw0yNTA0MTIyMDAyMDFaMDMxMTAvBgNV
BAMTKDM0OEQ4MTg5QUQ5MDY4QzJERDdBNTMzMzY2QTBDOUU4ODIwODM1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaS2uNHm//hI1LM1QlVMxYF0O
lwfHQcQtyuO44jV3yAccxt+/buEkTIv1h5lrlcf0j0iaWidgfQiuhoBzaJl6jpH3
XzcCDRBy8c/DcCHWU4C86uYHLGwqBvK1ayea03iiKxE9r3sZ5uzV3rDYetwyVt65
ll73YnaykPQuv+QvqOS/Ga35AJAXD0PlJv74991H9bsRnp7fywmDQqnjlqLS40KB
PtV5b1nKn6ID5eQuLLGvJWkJlRFfGlXzJaVGw5JA73qrMOkq1Bpf4+dQdhh7sAt7
5jPLiiZpGJRT4jP98f7AJT8nWG9mGRpwn4Y1EIUz1OZ3lAkP8ZvMxJ9Iok09AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNI2Bia2QaMLdelMzZqDJ6IIINeIwHwYDVR0j
BBgwFoAUamPcqlrxEZzItM2uanIuCijdwc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMS82QTYzRENBQTVBRjExMTlDQzhCNENEQUU2QTcyMkUwQTI4RERDMUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBNjNEQ0FBNUFGMTExOUND
OEI0Q0RBRTZBNzIyRTBBMjhEREMxQ0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzEv
MzEzNzM3MmUzODJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEINDANBgkqhkiG9w0BAQsFAAOCAQEAptqCKjIwABjw
X2XWJnsV8lIKFfFDU99ZEbne3XG3zGeQf1R5GHbuU6EzVCQpAa9RWfujq5bqQOV9
cNy1Yn5cdG3Y24S6kAYkdn/fev2J05Fi3SHLniKNzSKJ1BmsIsXyXMX3Wc9cyYMs
jKaBTjWashPqslyl6Xc3seF0k3VDsMwcxEFs/5bliD5mUNLFe/AJFnVeJjFXoxDQ
j+uf7sFY4231sxCL7uRgB2POD0CaccIB0rX8rK+5RkGVbbxJolV0OYqaZm1Y2vXC
d470t1nuJ+4aQPkMRLqt4sjEgD3T2hVOhyPxE108zNXZHIHLKQHA+YiHFjWfPYFw
Hve11o11jw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org