Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32322d3232203d3e203532373036.roa
File:                     3137372e3132362e32342e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          2Voffp/InWhtZzVauV1Ou8Z7Vu4cXpfoQiFrlx5DF00=
Subject key identifier:   F6:8B:5B:EE:6E:27:D6:42:FF:97:99:C1:AF:B2:96:7F:32:25:B5:CE
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       51F437C926B3BC64AE4A0CAB41B41521933FA483
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32322d3232203d3e203532373036.roa
Signing time:             Tue 18 Apr 2023 12:25:36 +0000
ROA not before:           Tue 18 Apr 2023 12:20:36 +0000
ROA not after:            Tue 16 Apr 2024 12:25:36 +0000
asID:                     52706
IP address blocks:        177.126.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f4:37:c9:26:b3:bc:64:ae:4a:0c:ab:41:b4:15:21:93:3f:a4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Apr 18 12:20:36 2023 GMT
            Not After : Apr 16 12:25:36 2024 GMT
        Subject: CN=F68B5BEE6E27D642FF9799C1AFB2967F3225B5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:e2:7a:1b:e0:38:3f:b5:fd:0e:71:2c:79:
                    fa:0e:be:6e:27:a4:63:c4:7c:81:f4:0a:45:d2:a7:
                    24:cf:ef:12:7b:fa:2b:4d:cd:2c:9b:c8:d3:05:10:
                    6b:39:62:a5:45:37:eb:d1:47:8d:40:0a:8a:1d:07:
                    1c:eb:ba:0e:4b:bb:87:18:f9:99:2b:4b:2f:4a:a3:
                    fa:ce:1f:3a:7f:8b:92:50:81:1d:1e:f2:0e:3f:08:
                    c1:78:42:6b:a5:68:e1:10:c8:8c:80:ba:53:1e:2d:
                    d7:80:8e:99:dd:5e:ee:d6:ee:c9:7f:48:25:19:bb:
                    43:90:09:22:7e:b0:a5:39:e2:09:ce:35:54:a8:eb:
                    df:6f:97:25:16:4f:5b:97:5c:39:07:11:19:92:20:
                    04:5b:94:6b:74:3b:8d:b1:7c:38:40:82:3e:1d:3f:
                    47:c3:fe:1f:6a:4f:35:27:64:2c:80:24:e2:1e:9d:
                    c0:a0:56:04:d0:92:04:56:53:44:5f:30:23:7d:a4:
                    8b:06:d5:ad:62:92:d4:30:3b:7c:14:0c:35:07:19:
                    ed:64:96:ed:66:2f:19:d9:b2:f0:90:30:09:b6:d4:
                    bb:bb:27:83:2f:04:0f:87:9f:11:c1:7a:57:ca:cc:
                    70:21:40:0f:37:00:c2:1b:fd:9d:69:cf:0d:16:b7:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:5B:EE:6E:27:D6:42:FF:97:99:C1:AF:B2:96:7F:32:25:B5:CE
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:d0:b9:53:34:3d:01:a0:9a:5b:58:3b:9c:d3:88:eb:fa:88:
         29:4f:28:95:67:f3:aa:67:1e:a2:d5:51:71:09:e7:1d:1d:5a:
         f9:43:a0:bf:98:55:a2:19:4a:ac:15:d2:b0:07:70:1c:43:c7:
         77:49:ce:c2:a5:e9:20:da:1e:99:64:35:f8:c3:fb:1d:41:41:
         63:ea:dd:b3:67:2a:60:a9:fc:bb:4c:60:27:24:c6:c6:7c:e1:
         a7:3f:7d:90:3f:2e:15:97:84:3f:7f:dd:d0:1e:90:ab:f8:44:
         f1:04:5f:ac:f7:88:b0:c9:ae:f3:f7:2a:a3:df:41:8a:b6:5b:
         df:24:3a:3a:ab:8c:42:6d:7b:e6:51:2e:c4:e1:df:4f:ab:c6:
         ed:77:a3:01:41:88:ce:fb:66:bc:35:ec:32:07:88:4d:1f:07:
         6c:8c:25:6d:f7:fb:3e:16:eb:9d:94:0e:8e:c7:99:33:cd:34:
         02:cc:aa:7c:7e:51:6c:88:70:14:b1:0d:8a:30:c0:3a:a5:59:
         3b:fd:88:aa:22:59:08:85:f6:36:93:d7:c4:44:5f:94:82:3b:
         96:eb:86:86:58:7e:5e:96:3f:cd:ed:c9:cc:75:2f:59:55:ce:
         36:9d:6a:2e:ea:9c:45:fa:ba:64:97:2d:29:fc:60:82:95:dd:
         c1:2f:ab:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUfQ3ySazvGSuSgyrQbQVIZM/pIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk2MUFCMTU1MjhFRDlFRkZDRjBGMEREQTJGRTBDN0Qw
Q0I5OTM0QjAeFw0yMzA0MTgxMjIwMzZaFw0yNDA0MTYxMjI1MzZaMDMxMTAvBgNV
BAMTKEY2OEI1QkVFNkUyN0Q2NDJGRjk3OTlDMUFGQjI5NjdGMzIyNUI1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDa+J6G+A4P7X9DnEsefoOvm4n
pGPEfIH0CkXSpyTP7xJ7+itNzSybyNMFEGs5YqVFN+vRR41ACoodBxzrug5Lu4cY
+ZkrSy9Ko/rOHzp/i5JQgR0e8g4/CMF4QmulaOEQyIyAulMeLdeAjpndXu7W7sl/
SCUZu0OQCSJ+sKU54gnONVSo699vlyUWT1uXXDkHERmSIARblGt0O42xfDhAgj4d
P0fD/h9qTzUnZCyAJOIencCgVgTQkgRWU0RfMCN9pIsG1a1iktQwO3wUDDUHGe1k
lu1mLxnZsvCQMAm21Lu7J4MvBA+HnxHBelfKzHAhQA83AMIb/Z1pzw0Wt5EhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9otb7m4n1kL/l5nBr7KWfzIltc4wHwYDVR0j
BBgwFoAU2WGrFVKO2e/88PDdov4MfQy5k0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC9EOTYxQUIxNTUyOEVEOUVGRkNGMEYwRERBMkZFMEM3RDBDQjk5MzRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NjFBQjE1NTI4RUQ5RUZG
Q0YwRjBEREEyRkUwQzdEMENCOTkzNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsX4YMA0GCSqGSIb3DQEBCwUAA4IBAQC50LlTND0B
oJpbWDuc04jr+ogpTyiVZ/OqZx6i1VFxCecdHVr5Q6C/mFWiGUqsFdKwB3AcQ8d3
Sc7Cpekg2h6ZZDX4w/sdQUFj6t2zZypgqfy7TGAnJMbGfOGnP32QPy4Vl4Q/f93Q
HpCr+ETxBF+s94iwya7z9yqj30GKtlvfJDo6q4xCbXvmUS7E4d9Pq8btd6MBQYjO
+2a8NewyB4hNHwdsjCVt9/s+FuudlA6Ox5kzzTQCzKp8flFsiHAUsQ2KMMA6pVk7
/YiqIlkIhfY2k9fERF+UgjuW64aGWH5elj/N7cnMdS9ZVc42nWou6pxF+rpkly0p
/GCCld3BL6tg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org