Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323032.roa
File:                     3138372e36312e39362e302f32302d3234203d3e20323032.roa (raw, json)
Hash identifier:          /2jwPw6E4kvit5t/gbUFH3TUJ1xBBjZolqsUuZqFsy8=
Subject key identifier:   E2:3E:6D:8D:62:90:E7:EE:E7:85:BC:B8:D0:6E:9A:83:5B:D8:5A:77
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       5B8A9A321B757618829EA39861FAB595C4DBA6EF
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323032.roa
Signing time:             Thu 23 Feb 2023 16:50:55 +0000
ROA not before:           Thu 23 Feb 2023 16:45:55 +0000
ROA not after:            Thu 22 Feb 2024 16:50:55 +0000
asID:                     202
IP address blocks:        187.61.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8a:9a:32:1b:75:76:18:82:9e:a3:98:61:fa:b5:95:c4:db:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb 23 16:45:55 2023 GMT
            Not After : Feb 22 16:50:55 2024 GMT
        Subject: CN=E23E6D8D6290E7EEE785BCB8D06E9A835BD85A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:8e:c8:5b:3d:c5:1b:c2:69:c8:d4:5b:e3:
                    03:44:63:7f:91:83:42:5e:fb:f4:06:39:ec:91:88:
                    e7:7a:82:a7:69:c5:41:ab:7d:5a:80:e3:d7:8f:ca:
                    d6:36:e1:e0:99:23:b8:33:d6:c9:de:d8:9b:eb:2a:
                    40:d3:f0:77:21:78:60:8b:48:d1:27:8a:c1:ac:ca:
                    7e:ea:7e:56:54:af:13:3d:94:59:50:52:c8:4b:27:
                    47:01:bd:08:dd:a1:1f:aa:e9:3f:9f:05:07:18:de:
                    34:67:e8:77:98:db:3a:41:2e:4b:04:53:84:ac:5a:
                    88:f6:92:00:cf:4f:f0:07:35:a1:60:82:b7:62:1d:
                    03:ff:1a:59:3a:96:1a:00:d1:33:40:c0:79:c4:88:
                    06:39:d6:6b:d2:2a:0f:fc:a8:43:71:f3:57:b7:58:
                    78:85:07:80:9a:60:47:5e:ef:ee:75:47:85:ed:7f:
                    34:ec:2b:17:df:61:51:0f:8b:1c:4b:2f:f5:c2:8e:
                    56:4c:f9:97:3b:df:ae:c7:f7:6f:16:51:4e:03:ff:
                    df:30:74:81:3f:1e:78:c0:ed:ee:b9:1b:a0:2f:1f:
                    ed:59:1d:f6:14:43:f0:ca:fb:15:11:42:a9:f2:3a:
                    b1:95:1b:ee:73:ee:a6:4a:b2:67:8c:c7:ad:d9:7f:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:6D:8D:62:90:E7:EE:E7:85:BC:B8:D0:6E:9A:83:5B:D8:5A:77
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:ed:5c:a3:ba:d3:85:4d:2d:71:aa:ce:ea:6f:3b:4a:a2:
         2b:6e:de:91:ae:26:13:e3:3c:11:a6:74:80:bc:d5:df:d7:46:
         63:37:46:76:70:63:c5:7e:69:7e:cb:60:ce:66:8b:94:4f:1c:
         42:12:b8:18:39:3e:dd:14:42:cf:68:0f:d2:2f:b0:b3:04:f3:
         34:9a:7c:eb:5c:26:33:2a:aa:30:eb:a0:01:3b:4f:89:8b:58:
         6a:5b:c4:84:76:1e:94:c5:f0:30:87:ee:87:0d:95:f3:eb:af:
         56:1f:92:b5:ba:8c:f8:ee:35:e3:28:71:2d:0c:60:f2:4d:f6:
         11:78:95:c1:e8:44:74:34:ec:a6:ef:08:23:79:ee:c7:08:df:
         44:a5:d3:7c:62:ed:57:e8:53:31:b9:eb:c9:b3:79:3c:b4:47:
         06:27:cc:56:aa:48:62:9b:f9:8f:da:34:4d:e7:d1:e8:11:6e:
         59:fd:09:7a:ee:9b:69:47:48:10:02:05:8c:ba:8e:e2:64:7f:
         91:ae:f3:d0:c7:b4:0f:ba:a7:69:0a:ae:db:7d:09:e3:47:0c:
         87:70:ab:8c:a0:f9:58:7e:71:2d:99:13:9b:89:83:cf:49:74:
         f5:ff:2e:d5:50:36:c0:2e:e9:ff:2a:79:d7:5f:c6:4f:26:90:
         fc:3b:4a:fe
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUW4qaMht1dhiCnqOYYfq1lcTbpu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2QzEwODdCQjFBNTI2MENCMzJFNDVGQkFCMDVCRkM2
MTE3N0RERTAeFw0yMzAyMjMxNjQ1NTVaFw0yNDAyMjIxNjUwNTVaMDMxMTAvBgNV
BAMTKEUyM0U2RDhENjI5MEU3RUVFNzg1QkNCOEQwNkU5QTgzNUJEODVBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UY7IWz3FG8JpyNRb4wNEY3+R
g0Je+/QGOeyRiOd6gqdpxUGrfVqA49ePytY24eCZI7gz1sne2JvrKkDT8HcheGCL
SNEnisGsyn7qflZUrxM9lFlQUshLJ0cBvQjdoR+q6T+fBQcY3jRn6HeY2zpBLksE
U4SsWoj2kgDPT/AHNaFggrdiHQP/Glk6lhoA0TNAwHnEiAY51mvSKg/8qENx81e3
WHiFB4CaYEde7+51R4XtfzTsKxffYVEPixxLL/XCjlZM+Zc7367H928WUU4D/98w
dIE/HnjA7e65G6AvH+1ZHfYUQ/DK+xURQqnyOrGVG+5z7qZKsmeMx63Zf/fdAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU4j5tjWKQ5+7nhby40G6ag1vYWncwHwYDVR0j
BBgwFoAU8WwQh7saUmDLMuRfurBb/GEXfd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9GMTZDMTA4N0JCMUE1MjYwQ0IzMkU0NUZCQUIwNUJGQzYxMTc3RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxNkMxMDg3QkIxQTUyNjBD
QjMyRTQ1RkJBQjA1QkZDNjExNzdEREUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMDMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQEuz1gMA0GCSqGSIb3DQEBCwUAA4IBAQCOUu1co7rThU0tcarO
6m87SqIrbt6RriYT4zwRpnSAvNXf10ZjN0Z2cGPFfml+y2DOZouUTxxCErgYOT7d
FELPaA/SL7CzBPM0mnzrXCYzKqow66ABO0+Ji1hqW8SEdh6UxfAwh+6HDZXz669W
H5K1uoz47jXjKHEtDGDyTfYReJXB6ER0NOym7wgjee7HCN9EpdN8Yu1X6FMxuevJ
s3k8tEcGJ8xWqkhim/mP2jRN59HoEW5Z/Ql67ptpR0gQAgWMuo7iZH+RrvPQx7QP
uqdpCq7bfQnjRwyHcKuMoPlYfnEtmRObiYPPSXT1/y7VUDbALun/KnnXX8ZPJpD8
O0r+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org