Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa
File:                     3138372e37332e39362e302f32302d3234203d3e203533303438.roa (raw, json)
Hash identifier:          Z/m4Pi6fXNaBjMTcxdr+YGGqQ6DYhNiIOtGTRl4FNCo=
Subject key identifier:   AF:20:CC:64:13:3D:16:6C:4E:78:81:64:A5:C8:EE:D2:69:F7:47:18
Certificate issuer:       /CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
Certificate serial:       628AD85C7C81C5A65E0BA52DF7A1CBB96E1912B1
Authority key identifier: E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa
Signing time:             Thu 22 Feb 2024 15:29:54 +0000
ROA not before:           Thu 22 Feb 2024 15:24:54 +0000
ROA not after:            Thu 20 Feb 2025 15:29:54 +0000
asID:                     53048
IP address blocks:        187.73.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:d8:5c:7c:81:c5:a6:5e:0b:a5:2d:f7:a1:cb:b9:6e:19:12:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E70D2018024CE6AFCA39C3D63C91946107DC165C
        Validity
            Not Before: Feb 22 15:24:54 2024 GMT
            Not After : Feb 20 15:29:54 2025 GMT
        Subject: CN=AF20CC64133D166C4E788164A5C8EED269F74718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:6e:43:b6:7e:72:84:6a:95:bf:ec:94:30:
                    9e:0c:03:ad:f5:4c:93:de:ed:f3:6f:09:37:34:5e:
                    da:5e:a1:d2:2d:10:a5:64:78:df:d4:42:da:a6:be:
                    5a:6e:1b:ee:4f:86:8d:fb:2f:d9:f5:c4:77:7d:96:
                    8e:7b:ed:42:28:ac:ff:c5:fe:74:49:0c:c3:50:69:
                    3f:06:d7:87:7c:ed:e1:5f:82:f3:8b:b5:0c:41:d6:
                    71:63:de:78:c8:ed:7b:40:7e:c3:c3:40:b0:15:19:
                    1c:ec:6f:9b:96:cc:f8:7d:ed:fb:09:ff:ff:b9:e8:
                    31:3f:f7:57:bc:60:e2:29:72:5a:64:10:69:30:ec:
                    1d:bd:a9:e3:42:a3:a9:48:f4:48:aa:44:3a:ed:d7:
                    d6:da:d8:a8:dd:98:a2:97:51:95:6d:90:df:2e:63:
                    6c:d3:ea:fa:c1:c3:a5:07:45:98:e3:37:b4:25:de:
                    50:29:d5:03:fb:19:7e:2a:cb:50:52:01:5d:f8:ae:
                    36:58:2e:26:ed:01:7b:0d:e9:85:50:c7:36:a6:b6:
                    0e:4f:5d:fa:29:e4:88:fa:d9:ed:ad:a0:c9:1f:c9:
                    5b:79:e9:8a:3f:fa:23:59:a9:97:fe:66:7b:39:9c:
                    ce:c2:bc:a2:b2:9a:58:e8:4a:fe:79:64:a7:ff:45:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:CC:64:13:3D:16:6C:4E:78:81:64:A5:C8:EE:D2:69:F7:47:18
            X509v3 Authority Key Identifier:
                keyid:E7:0D:20:18:02:4C:E6:AF:CA:39:C3:D6:3C:91:94:61:07:DC:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E70D2018024CE6AFCA39C3D63C91946107DC165C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39362e302f32302d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:ae:69:de:81:93:f8:d9:cd:af:e2:13:eb:74:55:6e:fa:
         56:84:3c:f5:12:74:1c:ff:f6:36:54:9d:17:3f:1c:35:b6:9c:
         5c:60:a9:1f:b4:09:18:95:d3:4e:cc:b1:aa:7e:af:8a:93:2d:
         78:3d:41:fa:3d:f1:34:92:39:57:13:8a:a8:51:53:36:88:21:
         75:f5:d2:5a:73:9c:c8:19:b4:85:6d:2b:bd:c2:a5:dc:aa:f7:
         b1:12:b8:1e:86:af:fb:b8:11:bc:cc:19:10:9b:c7:ce:48:76:
         33:a3:2a:ac:45:2d:c6:ef:7a:72:7f:5c:98:27:a6:f3:da:51:
         98:42:7c:55:25:c8:0a:ef:cd:35:d6:e0:36:a1:bd:f2:ea:9e:
         f7:cb:29:d0:fe:4e:5b:5b:01:75:4c:8e:c0:9a:1e:fe:1a:23:
         6d:1c:9e:bf:9f:e5:06:4a:94:c0:3a:4f:a4:c8:21:04:f3:25:
         5a:2c:b6:c5:57:44:7c:0c:f8:15:75:15:a2:0a:a4:72:d5:e7:
         fa:4b:5c:c1:50:07:ac:73:76:40:99:c8:89:f9:b2:ab:1d:72:
         29:21:77:1b:a4:8e:14:df:2c:93:59:7a:84:82:41:82:37:42:
         2f:28:ab:b5:eb:00:63:20:b7:e6:6e:e5:7a:eb:fe:1d:3c:5d:
         f9:7a:5f:a3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYorYXHyBxaZeC6Ut96HLuW4ZErEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcwRDIwMTgwMjRDRTZBRkNBMzlDM0Q2M0M5MTk0NjEw
N0RDMTY1QzAeFw0yNDAyMjIxNTI0NTRaFw0yNTAyMjAxNTI5NTRaMDMxMTAvBgNV
BAMTKEFGMjBDQzY0MTMzRDE2NkM0RTc4ODE2NEE1QzhFRUQyNjlGNzQ3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5m5Dtn5yhGqVv+yUMJ4MA631
TJPe7fNvCTc0XtpeodItEKVkeN/UQtqmvlpuG+5Pho37L9n1xHd9lo577UIorP/F
/nRJDMNQaT8G14d87eFfgvOLtQxB1nFj3njI7XtAfsPDQLAVGRzsb5uWzPh97fsJ
//+56DE/91e8YOIpclpkEGkw7B29qeNCo6lI9EiqRDrt19ba2KjdmKKXUZVtkN8u
Y2zT6vrBw6UHRZjjN7Ql3lAp1QP7GX4qy1BSAV34rjZYLibtAXsN6YVQxzamtg5P
Xfop5Ij62e2toMkfyVt56Yo/+iNZqZf+Zns5nM7CvKKymljoSv55ZKf/RT55AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUryDMZBM9FmxOeIFkpcju0mn3RxgwHwYDVR0j
BBgwFoAU5w0gGAJM5q/KOcPWPJGUYQfcFlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC9FNzBEMjAxODAyNENFNkFGQ0EzOUMzRDYzQzkxOTQ2MTA3REMxNjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U3MEQyMDE4MDI0Q0U2QUZD
QTM5QzNENjNDOTE5NDYxMDdEQzE2NUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzEzODM3MmUzNzMzMmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLtJYDANBgkqhkiG9w0BAQsFAAOCAQEAndKuad6Bk/jZ
za/iE+t0VW76VoQ89RJ0HP/2NlSdFz8cNbacXGCpH7QJGJXTTsyxqn6vipMteD1B
+j3xNJI5VxOKqFFTNoghdfXSWnOcyBm0hW0rvcKl3Kr3sRK4Hoav+7gRvMwZEJvH
zkh2M6MqrEUtxu96cn9cmCem89pRmEJ8VSXICu/NNdbgNqG98uqe98sp0P5OW1sB
dUyOwJoe/hojbRyev5/lBkqUwDpPpMghBPMlWiy2xVdEfAz4FXUVogqkctXn+ktc
wVAHrHN2QJnIifmyqx1yKSF3G6SOFN8sk1l6hIJBgjdCLyirtesAYyC35m7leuv+
HTxd+Xpfow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org