Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
File:                     3137372e382e3134322e302f32342d3234203d3e20323730353833.roa (raw, json)
Hash identifier:          UdELyNefVyA7tll43N3gIPzB5I3mTRl3OE4HOeNW5jI=
Subject key identifier:   BA:0D:D0:03:F0:07:99:DB:72:38:9D:DB:D3:01:BA:2E:D3:95:08:B4
Certificate issuer:       /CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
Certificate serial:       18CE1ECE35D7D80C5C1964C28C60B754AFA23274
Authority key identifier: B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
Signing time:             Wed 12 Oct 2022 12:00:01 +0000
ROA not before:           Wed 12 Oct 2022 11:55:01 +0000
ROA not after:            Wed 11 Oct 2023 12:00:01 +0000
asID:                     270583
IP address blocks:        177.8.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:1e:ce:35:d7:d8:0c:5c:19:64:c2:8c:60:b7:54:af:a2:32:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
        Validity
            Not Before: Oct 12 11:55:01 2022 GMT
            Not After : Oct 11 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:8f:33:02:ac:55:d2:6f:f1:b5:78:6a:be:
                    9e:1a:31:eb:01:80:81:c7:bb:ae:5f:4e:a4:27:f3:
                    a7:a8:4b:85:9f:fb:2b:20:e2:9c:5b:e0:63:ea:dc:
                    ff:f4:a4:34:de:2a:e8:06:64:00:3c:c1:32:88:d1:
                    b3:0f:fa:2e:86:a5:2a:46:35:f7:fd:61:95:ef:9d:
                    34:42:15:bd:28:4a:ff:3e:35:22:3e:9b:3e:ab:04:
                    7a:f8:9e:76:e2:0c:5e:84:e3:1b:0f:ef:de:3f:62:
                    44:31:91:a3:8b:ac:ec:7b:7a:c7:6a:24:59:59:01:
                    43:15:a7:10:2b:e1:58:79:a3:8e:30:19:2b:7d:b2:
                    62:bf:88:8f:94:b8:d6:1a:01:69:e5:5c:ca:f6:29:
                    69:83:1a:ad:af:91:91:96:e3:2d:d9:1d:6e:2f:88:
                    0c:ca:b9:b2:01:81:74:53:ae:6b:86:15:f7:07:51:
                    0f:8d:b4:e1:c1:66:3c:ad:ca:7b:08:39:1b:21:30:
                    d8:a2:6c:af:fa:32:e1:30:3b:86:08:d4:73:46:fd:
                    f6:61:ea:4e:9b:fe:18:9f:d3:1e:25:c1:0b:48:b8:
                    3d:61:e6:f0:01:a1:e1:5b:4c:72:27:c3:fb:6f:6b:
                    0b:86:6d:49:2c:de:fb:2d:e1:99:37:61:0f:ea:aa:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:D0:03:F0:07:99:DB:72:38:9D:DB:D3:01:BA:2E:D3:95:08:B4
            X509v3 Authority Key Identifier:
                keyid:B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:73:17:ef:8b:7f:62:60:a0:15:38:5e:61:89:f5:ed:e8:
         62:ff:8f:5f:f4:07:6e:3d:d1:3a:00:07:d6:8b:36:84:36:12:
         33:ea:c7:e3:a1:5c:99:25:b9:20:e6:98:c9:07:03:20:8f:4c:
         13:61:b0:19:9a:63:c5:c8:89:22:5c:cb:ca:6c:65:38:58:c2:
         6b:ae:d0:a6:8e:38:e3:ef:aa:85:dc:45:d6:88:2b:10:77:00:
         a0:34:a6:5e:22:76:fb:44:63:d1:4d:01:92:2b:f9:ea:fc:4c:
         0f:be:e9:22:f7:43:f5:dc:94:4c:ae:57:78:4c:9e:be:ea:27:
         b2:44:81:e7:66:94:b8:6c:c3:73:6e:d7:e1:3e:8c:d3:19:e4:
         ca:ba:76:5f:99:9f:3e:ba:3e:7e:2d:e6:5d:6c:5b:e7:7f:61:
         76:8f:d1:5b:ca:50:69:68:aa:01:e0:07:18:19:38:d0:2b:25:
         68:7b:9b:09:31:cd:05:a7:8a:11:84:48:d5:d3:6b:b1:14:b1:
         ff:e6:97:e2:8d:3b:93:61:83:3b:4e:0a:64:54:1c:f3:b1:27:
         78:71:a7:a1:8c:9a:f8:ac:51:0b:ea:c4:2d:f0:87:50:af:89:
         db:ec:ec:21:f1:ab:64:2e:c0:fb:71:73:ca:00:ab:b3:5c:39:
         71:54:8a:18
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUGM4ezjXX2AxcGWTCjGC3VK+iMnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAyNzAxRkRFN0RBNTJGRjBFMzIwNUZDMTQ0QzlGQzdB
NDRGNkM0QzAeFw0yMjEwMTIxMTU1MDFaFw0yMzEwMTExMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhGNjhGMzMwMkFDNTVEMjZG
RjFCNTc4NkFCRTlFMUEzMUVCMDE4MDgxQzdCQkFFNUY0RUE0MjdGM0E3QTg0Qjg1
OUZGQjJCMjBFMjlDNUJFMDYzRUFEQ0ZGRjRBNDM0REUyQUU4MDY2NDAwM0NDMTMy
ODhEMUIzMEZGQTJFODZBNTJBNDYzNUY3RkQ2MTk1RUY5RDM0NDIxNUJEMjg0QUZG
M0UzNTIyM0U5QjNFQUIwNDdBRjg5RTc2RTIwQzVFODRFMzFCMEZFRkRFM0Y2MjQ0
MzE5MUEzOEJBQ0VDN0I3QUM3NkEyNDU5NTkwMTQzMTVBNzEwMkJFMTU4NzlBMzhF
MzAxOTJCN0RCMjYyQkY4ODhGOTRCOEQ2MUEwMTY5RTU1Q0NBRjYyOTY5ODMxQUFE
QUY5MTkxOTZFMzJERDkxRDZFMkY4ODBDQ0FCOUIyMDE4MTc0NTNBRTZCODYxNUY3
MDc1MTBGOERCNEUxQzE2NjNDQURDQTdCMDgzOTFCMjEzMEQ4QTI2Q0FGRkEzMkUx
MzAzQjg2MDhENDczNDZGREY2NjFFQTRFOUJGRTE4OUZEMzFFMjVDMTBCNDhCODNE
NjFFNkYwMDFBMUUxNUI0QzcyMjdDM0ZCNkY2QjBCODY2RDQ5MkNERUZCMkRFMTk5
Mzc2MTBGRUFBQTAyNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuPaPMwKsVdJv8bV4ar6eGjHrAYCBx7uuX06kJ/OnqEuFn/srIOKc
W+Bj6tz/9KQ03iroBmQAPMEyiNGzD/ouhqUqRjX3/WGV7500QhW9KEr/PjUiPps+
qwR6+J524gxehOMbD+/eP2JEMZGji6zse3rHaiRZWQFDFacQK+FYeaOOMBkrfbJi
v4iPlLjWGgFp5VzK9ilpgxqtr5GRluMt2R1uL4gMyrmyAYF0U65rhhX3B1EPjbTh
wWY8rcp7CDkbITDYomyv+jLhMDuGCNRzRv32YepOm/4Yn9MeJcELSLg9YebwAaHh
W0xyJ8P7b2sLhm1JLN77LeGZN2EP6qoCXwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLoN0APwB5nbcjid29MBui7TlQi0MB8GA1UdIwQYMBaAFLAnAf3n2lL/DjIF/BRM
n8ekT2xMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2MUZxa3M1VVM0Y041
djJROTdjWlJFNjlMdnFnNHYzNXpubzFYNnlRSnl4LzAvQjAyNzAxRkRFN0RBNTJG
RjBFMzIwNUZDMTQ0QzlGQzdBNDRGNkM0Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CMDI3MDFGREU3REE1MkZGMEUzMjA1RkMxNDRDOUZDN0E0NEY2
QzRDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yNjFGcWtzNVVTNGNONXYyUTk3
Y1pSRTY5THZxZzR2MzV6bm8xWDZ5UUp5eC8wLzMxMzczNzJlMzgyZTMxMzQzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALEI
jjANBgkqhkiG9w0BAQsFAAOCAQEAHPJzF++Lf2JgoBU4XmGJ9e3oYv+PX/QHbj3R
OgAH1os2hDYSM+rH46FcmSW5IOaYyQcDII9ME2GwGZpjxciJIlzLymxlOFjCa67Q
po444++qhdxF1ogrEHcAoDSmXiJ2+0Rj0U0Bkiv56vxMD77pIvdD9dyUTK5XeEye
vuonskSB52aUuGzDc27X4T6M0xnkyrp2X5mfPro+fi3mXWxb539hdo/RW8pQaWiq
AeAHGBk40CslaHubCTHNBaeKEYRI1dNrsRSx/+aX4o07k2GDO04KZFQc87EneHGn
oYya+KxRC+rELfCHUK+J2+zsIfGrZC7A+3FzygCrs1w5cVSKGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org