Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39392e302f32342d3234203d3e20323731303437.roa
File:                     3137392e34382e39392e302f32342d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          Zo2CudXbUnYo5QZA4W/BmIBwmmM257rd+bNYUcKQxZ8=
Subject key identifier:   31:76:27:56:28:CF:42:20:F2:D5:47:4B:53:91:E7:7A:9D:F8:42:66
Certificate issuer:       /CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
Certificate serial:       090B212331FCF7278E6F8C21782E64141FFFE0B2
Authority key identifier: AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39392e302f32342d3234203d3e20323731303437.roa
Signing time:             Wed 19 Jul 2023 13:00:00 +0000
ROA not before:           Wed 19 Jul 2023 12:55:00 +0000
ROA not after:            Wed 17 Jul 2024 13:00:00 +0000
asID:                     271047
IP address blocks:        179.48.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0b:21:23:31:fc:f7:27:8e:6f:8c:21:78:2e:64:14:1f:ff:e0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
        Validity
            Not Before: Jul 19 12:55:00 2023 GMT
            Not After : Jul 17 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100BE31CE8A59C9B2B49F2203EDB7890935D6867118BE6AE34EE9DAA0170DE18BFA4B8CEAA3584ECA5C592DDA5A5DE99EF2E983A1456E9997BCF341815EEFE91548A16AF895E5A5B6226F475E95451B7711A11FA042C6D40F1E856DC722E2860B75657CDD066EC95DA0C51CA558FBA608D43D938C7826DC52D42EC9E0B724E0FE5611E9683071A2F107CC3D259A30FD37057CA43E019EC8F91BA3EFA4D720EF23BDECDE4D78A9B0432FC5DBCA5C107885396D736877CF86A1FCF906E59B8560887B4ADE9F55F086848A4EEB86BC871E93A2BBB0EB08E05F5B952DFA70BFC1AB02CDB5045CFF429BEADFEB5D934584324D7DC49780BC9E1DC5835391284608679D7D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:ce:8a:59:c9:b2:b4:9f:22:03:ed:b7:89:
                    09:35:d6:86:71:18:be:6a:e3:4e:e9:da:a0:17:0d:
                    e1:8b:fa:4b:8c:ea:a3:58:4e:ca:5c:59:2d:da:5a:
                    5d:e9:9e:f2:e9:83:a1:45:6e:99:97:bc:f3:41:81:
                    5e:ef:e9:15:48:a1:6a:f8:95:e5:a5:b6:22:6f:47:
                    5e:95:45:1b:77:11:a1:1f:a0:42:c6:d4:0f:1e:85:
                    6d:c7:22:e2:86:0b:75:65:7c:dd:06:6e:c9:5d:a0:
                    c5:1c:a5:58:fb:a6:08:d4:3d:93:8c:78:26:dc:52:
                    d4:2e:c9:e0:b7:24:e0:fe:56:11:e9:68:30:71:a2:
                    f1:07:cc:3d:25:9a:30:fd:37:05:7c:a4:3e:01:9e:
                    c8:f9:1b:a3:ef:a4:d7:20:ef:23:bd:ec:de:4d:78:
                    a9:b0:43:2f:c5:db:ca:5c:10:78:85:39:6d:73:68:
                    77:cf:86:a1:fc:f9:06:e5:9b:85:60:88:7b:4a:de:
                    9f:55:f0:86:84:8a:4e:eb:86:bc:87:1e:93:a2:bb:
                    b0:eb:08:e0:5f:5b:95:2d:fa:70:bf:c1:ab:02:cd:
                    b5:04:5c:ff:42:9b:ea:df:eb:5d:93:45:84:32:4d:
                    7d:c4:97:80:bc:9e:1d:c5:83:53:91:28:46:08:67:
                    9d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:76:27:56:28:CF:42:20:F2:D5:47:4B:53:91:E7:7A:9D:F8:42:66
            X509v3 Authority Key Identifier:
                keyid:AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39392e302f32342d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:9d:7f:81:f1:3c:6e:95:38:a4:8f:ce:67:4c:87:e2:ef:
         61:18:de:0d:44:12:93:61:32:78:4e:45:bf:4d:62:16:70:77:
         47:8c:cc:89:f6:41:0a:94:3e:58:78:a3:ff:93:84:3f:14:74:
         03:6a:73:71:58:9d:d1:8a:b1:14:5f:fb:e7:48:b8:0b:f0:97:
         bf:e2:38:a1:3f:b5:6a:2d:cc:c6:4d:79:f5:7b:72:99:6e:d9:
         45:b4:15:52:11:32:ff:a6:f5:02:8d:6e:f6:c6:32:89:7b:e8:
         b5:01:8d:a3:5d:47:ba:a5:e0:28:fc:02:db:19:cb:05:bd:b7:
         f1:44:33:b2:c5:17:fb:a5:43:ef:6e:dc:53:7c:15:3d:d4:7e:
         10:4b:e2:e6:55:e9:44:de:eb:1a:77:54:f3:a6:75:ca:64:66:
         94:34:b6:45:de:81:ed:bb:af:f0:39:7c:24:88:0e:9d:86:bb:
         99:93:38:c8:ff:da:36:ad:63:46:f8:02:36:4f:4a:e1:91:c9:
         fe:fd:33:fc:57:3f:7c:2a:b1:35:d4:00:77:cb:1f:bf:bd:e5:
         9a:fb:f6:f7:49:b3:b6:66:10:d6:bf:18:3b:c9:a7:46:e3:5d:
         a2:24:b6:89:ca:f8:31:41:85:06:95:73:6f:8d:d4:23:f5:e2:
         da:f1:be:7b
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUCQshIzH89yeOb4wheC5kFB//4LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4OURFRUZFMDc4OTdGRTkyOUQzMzI5QjlCMDUzRjdD
NDlEQkQ0QzAeFw0yMzA3MTkxMjU1MDBaFw0yNDA3MTcxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUzMUNFOEE1OUM5QjJCNDlG
MjIwM0VEQjc4OTA5MzVENjg2NzExOEJFNkFFMzRFRTlEQUEwMTcwREUxOEJGQTRC
OENFQUEzNTg0RUNBNUM1OTJEREE1QTVERTk5RUYyRTk4M0ExNDU2RTk5OTdCQ0Yz
NDE4MTVFRUZFOTE1NDhBMTZBRjg5NUU1QTVCNjIyNkY0NzVFOTU0NTFCNzcxMUEx
MUZBMDQyQzZENDBGMUU4NTZEQzcyMkUyODYwQjc1NjU3Q0REMDY2RUM5NURBMEM1
MUNBNTU4RkJBNjA4RDQzRDkzOEM3ODI2REM1MkQ0MkVDOUUwQjcyNEUwRkU1NjEx
RTk2ODMwNzFBMkYxMDdDQzNEMjU5QTMwRkQzNzA1N0NBNDNFMDE5RUM4RjkxQkEz
RUZBNEQ3MjBFRjIzQkRFQ0RFNEQ3OEE5QjA0MzJGQzVEQkNBNUMxMDc4ODUzOTZE
NzM2ODc3Q0Y4NkExRkNGOTA2RTU5Qjg1NjA4ODdCNEFERTlGNTVGMDg2ODQ4QTRF
RUI4NkJDODcxRTkzQTJCQkIwRUIwOEUwNUY1Qjk1MkRGQTcwQkZDMUFCMDJDREI1
MDQ1Q0ZGNDI5QkVBREZFQjVEOTM0NTg0MzI0RDdEQzQ5NzgwQkM5RTFEQzU4MzUz
OTEyODQ2MDg2NzlEN0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvjHOilnJsrSfIgPtt4kJNdaGcRi+auNO6dqgFw3hi/pLjOqjWE7K
XFkt2lpd6Z7y6YOhRW6Zl7zzQYFe7+kVSKFq+JXlpbYib0delUUbdxGhH6BCxtQP
HoVtxyLihgt1ZXzdBm7JXaDFHKVY+6YI1D2TjHgm3FLULsngtyTg/lYR6WgwcaLx
B8w9JZow/TcFfKQ+AZ7I+Ruj76TXIO8jvezeTXipsEMvxdvKXBB4hTltc2h3z4ah
/PkG5ZuFYIh7St6fVfCGhIpO64a8hx6Toruw6wjgX1uVLfpwv8GrAs21BFz/Qpvq
3+tdk0WEMk19xJeAvJ4dxYNTkShGCGedfQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDF2J1Yoz0Ig8tVHS1OR53qd+EJmMB8GA1UdIwQYMBaAFKyJ3u/geJf+kp0zKbmw
U/fEnb1MMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dDMXMxWUFRTkY0M0Nj
U3RZaDhTWjF2ZXlTZmk5MXhrcUxTcmp1ZjNqWU5LLzAvQUM4OURFRUZFMDc4OTdG
RTkyOUQzMzI5QjlCMDUzRjdDNDlEQkQ0Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQzg5REVFRkUwNzg5N0ZFOTI5RDMzMjlCOUIwNTNGN0M0OURC
RDRDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HQzFzMVlBUU5GNDNDY1N0WWg4
U1oxdmV5U2ZpOTF4a3FMU3JqdWYzallOSy8wLzMxMzczOTJlMzQzODJlMzkzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMwMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMw
YzANBgkqhkiG9w0BAQsFAAOCAQEAa2ydf4HxPG6VOKSPzmdMh+LvYRjeDUQSk2Ey
eE5Fv01iFnB3R4zMifZBCpQ+WHij/5OEPxR0A2pzcVid0YqxFF/750i4C/CXv+I4
oT+1ai3Mxk159XtymW7ZRbQVUhEy/6b1Ao1u9sYyiXvotQGNo11HuqXgKPwC2xnL
Bb238UQzssUX+6VD727cU3wVPdR+EEvi5lXpRN7rGndU86Z1ymRmlDS2Rd6B7buv
8Dl8JIgOnYa7mZM4yP/aNq1jRvgCNk9K4ZHJ/v0z/Fc/fCqxNdQAd8sfv73lmvv2
90mztmYQ1r8YO8mnRuNdoiS2icr4MUGFBpVzb43UI/Xi2vG+ew==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org