Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          WMceE2BndmFREI53tg3fdTMQRR9P45P+lv8GEt05j0I=
Subject key identifier:   A0:3E:E7:CB:A2:D1:5A:A5:CB:09:C8:CB:50:A6:90:15:14:47:29:28
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       3EC13D6FB03D3B597BCC04AEA872CA5CE72C7495
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:42:10 +0000
ROA not before:           Mon 23 Jan 2023 21:37:10 +0000
ROA not after:            Mon 22 Jan 2024 21:42:10 +0000
asID:                     262992
IP address blocks:        177.87.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c1:3d:6f:b0:3d:3b:59:7b:cc:04:ae:a8:72:ca:5c:e7:2c:74:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:37:10 2023 GMT
            Not After : Jan 22 21:42:10 2024 GMT
        Subject: CN=A03EE7CBA2D15AA5CB09C8CB50A6901514472928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:5a:97:81:7d:5d:f7:36:dc:82:0d:42:26:
                    0f:57:4c:02:7d:86:3c:77:42:ee:bd:86:93:67:fb:
                    02:fb:75:bd:de:d6:70:8e:5b:bc:f0:ce:88:fc:ab:
                    19:70:58:2e:13:9b:0b:56:d0:74:8a:84:a6:83:74:
                    04:c5:94:7a:be:f4:50:62:e3:31:18:1e:c9:2e:12:
                    d8:a5:b6:cd:20:9e:d2:fc:67:71:14:2a:5d:67:fc:
                    9a:c0:47:20:38:b1:a6:2f:13:c6:7b:7e:6a:2f:f0:
                    07:b7:22:07:da:75:c8:fb:a2:59:12:d4:f4:69:69:
                    0c:94:1d:96:b3:b7:9e:88:92:1a:f7:8a:da:a5:8f:
                    38:2d:db:bb:a2:e9:22:59:95:16:a5:93:a2:f0:bd:
                    ba:dd:1f:32:17:6b:53:12:53:80:74:cb:9f:60:6c:
                    14:c4:78:01:e9:e8:3a:59:85:85:cb:d1:53:1f:9a:
                    03:c5:aa:8a:72:5f:fb:28:72:0d:d0:e0:c9:c8:59:
                    59:02:b8:27:b7:ec:8e:79:16:df:a0:57:ce:e7:eb:
                    cf:cd:ca:17:f2:cd:b8:c1:89:e1:61:60:74:32:b9:
                    53:46:64:0d:13:b2:c7:5a:ba:82:e1:03:7e:76:0c:
                    7a:46:9e:7c:a2:f9:f1:e1:e5:3e:84:b2:1e:3a:f0:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3E:E7:CB:A2:D1:5A:A5:CB:09:C8:CB:50:A6:90:15:14:47:29:28
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3137372e38372e3134342e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:59:7b:a6:18:58:bb:e4:ec:e2:a4:4f:b6:ba:68:7c:19:
         61:a7:88:c3:55:61:b7:14:73:d2:fc:69:c4:de:83:43:28:27:
         2e:69:e5:9f:b2:40:b5:fb:16:af:0b:e1:1e:ac:39:2d:16:cf:
         ae:77:2d:a7:47:74:43:c6:bd:00:cc:3e:4f:0d:69:23:58:5d:
         e9:0b:a3:2b:2e:09:9f:2e:e9:5e:96:11:06:f6:08:50:1f:3e:
         0b:94:11:2c:d2:52:25:d7:5f:13:f7:e6:15:29:da:ed:82:48:
         d4:b0:f9:35:b5:fc:93:79:c7:a6:45:0c:a5:32:b3:6e:50:5d:
         9f:28:94:33:ce:02:de:98:da:fc:f9:1d:02:23:ab:60:5b:6b:
         20:94:5b:3f:90:f1:aa:2f:17:bf:87:31:44:61:78:75:85:b2:
         73:c9:bb:12:77:05:40:db:11:ef:86:8d:7a:c5:cc:f4:2c:52:
         d3:85:f5:a7:bb:44:56:99:06:53:ed:7e:a5:10:54:2d:f7:67:
         7e:83:b0:6d:c7:eb:5b:8d:03:0c:2d:c8:9b:dd:44:42:8e:35:
         ef:e4:2b:db:e3:d5:92:6e:e9:a6:09:94:4f:62:87:ca:35:a2:
         8a:37:26:e4:ce:36:b4:3c:6e:69:45:2b:ec:11:1e:e3:99:1e:
         0b:04:36:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPsE9b7A9O1l7zASuqHLKXOcsdJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3OUUwOUY2RjQ2QjczNTAwRjE4NzdDN0Y3QkM4RjBG
Njc3RTYwNzAeFw0yMzAxMjMyMTM3MTBaFw0yNDAxMjIyMTQyMTBaMDMxMTAvBgNV
BAMTKEEwM0VFN0NCQTJEMTVBQTVDQjA5QzhDQjUwQTY5MDE1MTQ0NzI5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQlqXgX1d9zbcgg1CJg9XTAJ9
hjx3Qu69hpNn+wL7db3e1nCOW7zwzoj8qxlwWC4TmwtW0HSKhKaDdATFlHq+9FBi
4zEYHskuEtilts0gntL8Z3EUKl1n/JrARyA4saYvE8Z7fmov8Ae3Igfadcj7olkS
1PRpaQyUHZazt56Ikhr3itqljzgt27ui6SJZlRalk6LwvbrdHzIXa1MSU4B0y59g
bBTEeAHp6DpZhYXL0VMfmgPFqopyX/socg3Q4MnIWVkCuCe37I55Ft+gV87n68/N
yhfyzbjBieFhYHQyuVNGZA0TssdauoLhA352DHpGnnyi+fHh5T6Esh468AVdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoD7ny6LRWqXLCcjLUKaQFRRHKSgwHwYDVR0j
BBgwFoAURXngn29GtzUA8Yd8f3vI8PZ35gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmJIV1N2UUZFQWpOSHIxUHBjd1JrZWRnTDZCWjllb2tHNFl2bnNGZ29Q
anUvMS80NTc5RTA5RjZGNDZCNzM1MDBGMTg3N0M3RjdCQzhGMEY2NzdFNjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ1NzlFMDlGNkY0NkI3MzUw
MEYxODc3QzdGN0JDOEYwRjY3N0U2MDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJiSFdTdlFGRUFqTkhyMVBwY3dSa2VkZ0w2Qlo5ZW9rRzRZdm5zRmdvUGp1LzEv
MzEzNzM3MmUzODM3MmUzMTM0MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzOTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxV5AwDQYJKoZIhvcNAQELBQADggEBAIj2WXum
GFi75OzipE+2umh8GWGniMNVYbcUc9L8acTeg0MoJy5p5Z+yQLX7Fq8L4R6sOS0W
z653LadHdEPGvQDMPk8NaSNYXekLoysuCZ8u6V6WEQb2CFAfPguUESzSUiXXXxP3
5hUp2u2CSNSw+TW1/JN5x6ZFDKUys25QXZ8olDPOAt6Y2vz5HQIjq2BbayCUWz+Q
8aovF7+HMURheHWFsnPJuxJ3BUDbEe+GjXrFzPQsUtOF9ae7RFaZBlPtfqUQVC33
Z36DsG3H61uNAwwtyJvdREKONe/kK9vj1ZJu6aYJlE9ih8o1ooo3JuTONrQ8bmlF
K+wRHuOZHgsENsg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org