Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa
File:                     3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa (raw, json)
Hash identifier:          8qeXSuGGYmLq1KfzSJ7PVf3kjTBmssYaacP4uNdEx48=
Subject key identifier:   76:58:2A:A4:1B:09:7E:16:1A:8E:C9:8E:9F:63:21:65:74:96:8D:23
Certificate issuer:       /CN=08DE034B9C48C28A3FE65ED192908212FFC402A7
Certificate serial:       403B5A69210A081636B94E9F5472F723E6A85F70
Authority key identifier: 08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa
Signing time:             Thu 10 Aug 2023 20:40:00 +0000
ROA not before:           Thu 10 Aug 2023 20:35:00 +0000
ROA not after:            Thu 08 Aug 2024 20:40:00 +0000
asID:                     271195
IP address blocks:        179.49.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3b:5a:69:21:0a:08:16:36:b9:4e:9f:54:72:f7:23:e6:a8:5f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DE034B9C48C28A3FE65ED192908212FFC402A7
        Validity
            Not Before: Aug 10 20:35:00 2023 GMT
            Not After : Aug  8 20:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:46:4a:f2:af:29:d6:b7:3c:46:ca:b5:ec:
                    3c:9a:a6:c8:09:a9:8e:1c:21:95:58:0a:b5:ce:57:
                    8c:2b:9d:28:9b:81:4d:7c:fe:0d:a2:36:f6:90:49:
                    b6:80:26:e5:1d:bf:66:1f:59:9d:3d:1d:0f:a1:97:
                    0d:f4:11:5d:59:43:fd:f1:2a:42:47:d4:3f:e9:bd:
                    3b:f5:9f:9d:04:0b:2f:54:5a:4a:96:26:32:3e:1e:
                    e0:61:a1:c6:1d:66:20:c4:b6:dc:74:27:27:0e:f5:
                    e2:db:e8:df:04:6b:93:78:9d:31:7e:03:a9:e6:cc:
                    1f:cb:33:16:28:41:56:e0:01:b4:56:ce:63:b8:d2:
                    b4:1d:3d:92:33:bf:11:f3:5d:9a:4a:52:52:5e:69:
                    6b:a8:0d:21:e6:ae:c8:ba:40:0a:45:8a:be:f5:47:
                    45:9f:33:0e:c5:5e:f2:67:51:08:02:fa:1e:26:1a:
                    91:d9:63:3d:7a:d1:ff:35:e3:67:8c:39:22:d8:e1:
                    18:ee:dd:cb:37:9e:cf:2d:42:a0:d2:1a:a9:6a:03:
                    91:ab:e8:21:a1:fb:b9:a5:3f:98:ab:43:18:43:33:
                    8d:f8:b1:c6:71:f1:75:75:81:91:72:da:34:d9:8a:
                    32:10:13:fd:26:96:75:74:7a:66:f3:fe:80:66:a1:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:2A:A4:1B:09:7E:16:1A:8E:C9:8E:9F:63:21:65:74:96:8D:23
            X509v3 Authority Key Identifier:
                keyid:08:DE:03:4B:9C:48:C2:8A:3F:E6:5E:D1:92:90:82:12:FF:C4:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DE034B9C48C28A3FE65ED192908212FFC402A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3N4fYrG9tE9XrQPzpKmsyw8wLqdgzq4nY7vsoDKzcEwE/0/3137392e34392e3135322e302f32322d3234203d3e20323731313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:a7:8b:81:74:16:3b:93:26:9e:c2:60:cb:45:a3:e7:4a:
         15:49:75:10:4d:ca:0a:51:77:b2:69:39:8f:d1:58:28:44:d2:
         5b:c5:77:2f:7a:3e:65:26:73:63:66:c2:eb:b7:1f:17:5f:4e:
         6e:9d:03:1b:cf:23:e9:7f:87:f8:f8:66:2c:a5:58:17:2c:87:
         71:54:c8:2d:ba:e0:5b:ae:87:43:eb:79:9b:0c:b0:28:3c:78:
         22:05:39:31:0c:10:37:77:7b:06:53:56:71:1c:03:f2:00:be:
         53:05:92:37:2a:a4:78:f2:c9:06:8d:9f:32:0f:8c:65:e7:b9:
         ef:f0:62:85:b4:7c:76:a4:24:cb:a0:ca:d3:8c:78:28:1f:f3:
         b0:15:3c:4e:8a:cd:93:19:a1:a5:19:ef:2d:f3:ea:eb:e3:5b:
         31:2e:c5:2f:a3:bc:98:3c:0c:7c:27:89:42:44:2f:49:ae:8a:
         36:6c:e2:07:eb:2b:c8:dd:93:b3:fd:4c:3a:27:4c:ff:56:37:
         56:d2:6c:25:6f:2d:d2:e6:f9:29:ad:65:aa:67:10:8c:0c:b3:
         d5:8e:51:22:98:5a:ea:ab:34:21:93:e1:81:5b:9e:4c:23:b5:
         43:31:d2:4a:0c:1c:ff:cf:ee:f3:ff:a9:00:20:ff:f8:4c:a9:
         29:c8:34:e0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQDtaaSEKCBY2uU6fVHL3I+aoX3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhERTAzNEI5QzQ4QzI4QTNGRTY1RUQxOTI5MDgyMTJG
RkM0MDJBNzAeFw0yMzA4MTAyMDM1MDBaFw0yNDA4MDgyMDQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJBMTQ2NEFGMkFGMjlENkI3
M0M0NkNBQjVFQzNDOUFBNkM4MDlBOThFMUMyMTk1NTgwQUI1Q0U1NzhDMkI5RDI4
OUI4MTREN0NGRTBEQTIzNkY2OTA0OUI2ODAyNkU1MURCRjY2MUY1OTlEM0QxRDBG
QTE5NzBERjQxMTVENTk0M0ZERjEyQTQyNDdENDNGRTlCRDNCRjU5RjlEMDQwQjJG
NTQ1QTRBOTYyNjMyM0UxRUUwNjFBMUM2MUQ2NjIwQzRCNkRDNzQyNzI3MEVGNUUy
REJFOERGMDQ2QjkzNzg5RDMxN0UwM0E5RTZDQzFGQ0IzMzE2Mjg0MTU2RTAwMUI0
NTZDRTYzQjhEMkI0MUQzRDkyMzNCRjExRjM1RDlBNEE1MjUyNUU2OTZCQTgwRDIx
RTZBRUM4QkE0MDBBNDU4QUJFRjU0NzQ1OUYzMzBFQzU1RUYyNjc1MTA4MDJGQTFF
MjYxQTkxRDk2MzNEN0FEMUZGMzVFMzY3OEMzOTIyRDhFMTE4RUVERENCMzc5RUNG
MkQ0MkEwRDIxQUE5NkEwMzkxQUJFODIxQTFGQkI5QTUzRjk4QUI0MzE4NDMzMzhE
RjhCMUM2NzFGMTc1NzU4MTkxNzJEQTM0RDk4QTMyMTAxM0ZEMjY5Njc1NzQ3QTY2
RjNGRTgwNjZBMTlGQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwqFGSvKvKda3PEbKtew8mqbICamOHCGVWAq1zleMK50om4FNfP4N
ojb2kEm2gCblHb9mH1mdPR0PoZcN9BFdWUP98SpCR9Q/6b079Z+dBAsvVFpKliYy
Ph7gYaHGHWYgxLbcdCcnDvXi2+jfBGuTeJ0xfgOp5swfyzMWKEFW4AG0Vs5juNK0
HT2SM78R812aSlJSXmlrqA0h5q7IukAKRYq+9UdFnzMOxV7yZ1EIAvoeJhqR2WM9
etH/NeNnjDki2OEY7t3LN57PLUKg0hqpagORq+ghofu5pT+Yq0MYQzON+LHGcfF1
dYGRcto02YoyEBP9JpZ1dHpm8/6AZqGfvwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHZYKqQbCX4WGo7Jjp9jIWV0lo0jMB8GA1UdIwQYMBaAFAjeA0ucSMKKP+Ze0ZKQ
ghL/xAKnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNONGZZckc5dEU5WHJR
UHpwS21zeXc4d0xxZGd6cTRuWTd2c29ES3pjRXdFLzAvMDhERTAzNEI5QzQ4QzI4
QTNGRTY1RUQxOTI5MDgyMTJGRkM0MDJBNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wOERFMDM0QjlDNDhDMjhBM0ZFNjVFRDE5MjkwODIxMkZGQzQw
MkE3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zTjRmWXJHOXRFOVhyUVB6cEtt
c3l3OHdMcWRnenE0blk3dnNvREt6Y0V3RS8wLzMxMzczOTJlMzQzOTJlMzEzNTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzEzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
szGYMA0GCSqGSIb3DQEBCwUAA4IBAQAJoKeLgXQWO5MmnsJgy0Wj50oVSXUQTcoK
UXeyaTmP0VgoRNJbxXcvej5lJnNjZsLrtx8XX05unQMbzyPpf4f4+GYspVgXLIdx
VMgtuuBbrodD63mbDLAoPHgiBTkxDBA3d3sGU1ZxHAPyAL5TBZI3KqR48skGjZ8y
D4xl57nv8GKFtHx2pCTLoMrTjHgoH/OwFTxOis2TGaGlGe8t8+rr41sxLsUvo7yY
PAx8J4lCRC9Jroo2bOIH6yvI3ZOz/Uw6J0z/VjdW0mwlby3S5vkprWWqZxCMDLPV
jlEimFrqqzQhk+GBW55MI7VDMdJKDBz/z+7z/6kAIP/4TKkpyDTg
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org