Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32342d3234203d3e20323637343234.roa
File:                     3138312e3139312e3133342e302f32342d3234203d3e20323637343234.roa (raw, json)
Hash identifier:          LyT9BeVbNy9Mu3o1/2tjHLoqq0titMt0iuzbVpZ5Gu0=
Subject key identifier:   C0:66:7A:74:17:A1:23:70:E8:FC:04:B2:73:80:04:28:B3:D7:10:CD
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       56B197A81E071AFDF5FDD0F8E0DB4849B51112E6
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32342d3234203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:44:00 +0000
ROA not before:           Mon 25 Sep 2023 21:39:00 +0000
ROA not after:            Mon 23 Sep 2024 21:44:00 +0000
asID:                     267424
IP address blocks:        181.191.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b1:97:a8:1e:07:1a:fd:f5:fd:d0:f8:e0:db:48:49:b5:11:12:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:39:00 2023 GMT
            Not After : Sep 23 21:44:00 2024 GMT
        Subject: CN=3082010A0282010100B0BD988E710ECFFAF6DDB3C7DF0A674B48B9C1A3C1344E189837EAA913A7909509EB80F224A7AED46F73DF85C3B97F13C6AFA5C8C934840DB21B1F12AB00F8DA11BB3C73FF07AD0C6A21904CAD80C675CC1EEDBCA860C5C710FEA3F978BA8EACF03C71C4A973DCB8A82457A343BE716728BD36B4834B88FA497E8FC4D247905A551721260D5A76B57BF78044A999FEFEADA67FF194A92C9829CE08B665D775D87D5D9A2E4944354C0E86554D9FF817BA26433F96CEE96502F515C8C6AE78F1350043896D8933D20F3FDC3161E9A4436CF017B86A622F102E342BE21C1CB64F0C7F88F48ED8FFA9BB3D552FA20D69A4355A47F457C92C28A1312EF344706CED710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:98:8e:71:0e:cf:fa:f6:dd:b3:c7:df:0a:
                    67:4b:48:b9:c1:a3:c1:34:4e:18:98:37:ea:a9:13:
                    a7:90:95:09:eb:80:f2:24:a7:ae:d4:6f:73:df:85:
                    c3:b9:7f:13:c6:af:a5:c8:c9:34:84:0d:b2:1b:1f:
                    12:ab:00:f8:da:11:bb:3c:73:ff:07:ad:0c:6a:21:
                    90:4c:ad:80:c6:75:cc:1e:ed:bc:a8:60:c5:c7:10:
                    fe:a3:f9:78:ba:8e:ac:f0:3c:71:c4:a9:73:dc:b8:
                    a8:24:57:a3:43:be:71:67:28:bd:36:b4:83:4b:88:
                    fa:49:7e:8f:c4:d2:47:90:5a:55:17:21:26:0d:5a:
                    76:b5:7b:f7:80:44:a9:99:fe:fe:ad:a6:7f:f1:94:
                    a9:2c:98:29:ce:08:b6:65:d7:75:d8:7d:5d:9a:2e:
                    49:44:35:4c:0e:86:55:4d:9f:f8:17:ba:26:43:3f:
                    96:ce:e9:65:02:f5:15:c8:c6:ae:78:f1:35:00:43:
                    89:6d:89:33:d2:0f:3f:dc:31:61:e9:a4:43:6c:f0:
                    17:b8:6a:62:2f:10:2e:34:2b:e2:1c:1c:b6:4f:0c:
                    7f:88:f4:8e:d8:ff:a9:bb:3d:55:2f:a2:0d:69:a4:
                    35:5a:47:f4:57:c9:2c:28:a1:31:2e:f3:44:70:6c:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:7A:74:17:A1:23:70:E8:FC:04:B2:73:80:04:28:B3:D7:10:CD
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32342d3234203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:44:23:10:21:cd:e7:d9:e8:7b:aa:95:5d:1b:6c:26:22:fc:
         84:1e:dc:63:39:dd:ad:e6:d8:0c:f5:63:93:53:ef:b1:88:82:
         6d:69:60:c0:c6:90:ed:bc:82:88:6b:fd:46:00:09:60:60:89:
         87:db:c0:43:48:05:b5:7d:32:b3:c4:df:e7:20:5f:91:52:94:
         2e:0a:bc:f2:ad:9f:ac:12:71:2f:9c:29:b3:5e:85:bf:6a:7a:
         78:ab:f3:d6:b2:74:ad:7f:6d:18:6b:1f:30:c9:71:ca:e7:fa:
         74:d7:47:0b:67:b7:c7:db:20:02:04:23:20:36:07:1f:2c:c4:
         bd:20:a1:05:f1:b7:64:c0:da:9a:12:d7:70:4d:e3:c7:14:98:
         42:b2:76:0b:11:9c:97:af:13:37:b1:95:60:ce:74:be:c5:fc:
         89:f8:a8:0a:00:4d:74:d2:31:e6:1b:b5:5c:f7:c3:11:d6:af:
         21:23:6b:26:a8:1a:0d:73:93:05:aa:76:6b:aa:fb:94:fa:96:
         6d:41:87:ed:3d:70:6d:7b:16:f0:6e:43:1e:47:2d:34:b1:34:
         42:dd:92:59:97:b2:2d:60:c1:76:fb:6b:7d:2f:d8:1e:f3:6c:
         91:b2:74:d9:c6:45:28:b8:bd:e0:f9:ce:f2:9b:da:c3:64:6d:
         91:f5:f5:29
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUVrGXqB4HGv31/dD44NtISbUREuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEMUU2OUY1NzgwN0MxRUQwMkNBNDU5NzFBRDE0RURB
MzkzMUYyRTAeFw0yMzA5MjUyMTM5MDBaFw0yNDA5MjMyMTQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBCRDk4OEU3MTBFQ0ZGQUY2
RERCM0M3REYwQTY3NEI0OEI5QzFBM0MxMzQ0RTE4OTgzN0VBQTkxM0E3OTA5NTA5
RUI4MEYyMjRBN0FFRDQ2RjczREY4NUMzQjk3RjEzQzZBRkE1QzhDOTM0ODQwREIy
MUIxRjEyQUIwMEY4REExMUJCM0M3M0ZGMDdBRDBDNkEyMTkwNENBRDgwQzY3NUND
MUVFREJDQTg2MEM1QzcxMEZFQTNGOTc4QkE4RUFDRjAzQzcxQzRBOTczRENCOEE4
MjQ1N0EzNDNCRTcxNjcyOEJEMzZCNDgzNEI4OEZBNDk3RThGQzREMjQ3OTA1QTU1
MTcyMTI2MEQ1QTc2QjU3QkY3ODA0NEE5OTlGRUZFQURBNjdGRjE5NEE5MkM5ODI5
Q0UwOEI2NjVENzc1RDg3RDVEOUEyRTQ5NDQzNTRDMEU4NjU1NEQ5RkY4MTdCQTI2
NDMzRjk2Q0VFOTY1MDJGNTE1QzhDNkFFNzhGMTM1MDA0Mzg5NkQ4OTMzRDIwRjNG
REMzMTYxRTlBNDQzNkNGMDE3Qjg2QTYyMkYxMDJFMzQyQkUyMUMxQ0I2NEYwQzdG
ODhGNDhFRDhGRkE5QkIzRDU1MkZBMjBENjlBNDM1NUE0N0Y0NTdDOTJDMjhBMTMx
MkVGMzQ0NzA2Q0VENzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsL2YjnEOz/r23bPH3wpnS0i5waPBNE4YmDfqqROnkJUJ64DyJKeu
1G9z34XDuX8Txq+lyMk0hA2yGx8SqwD42hG7PHP/B60MaiGQTK2AxnXMHu28qGDF
xxD+o/l4uo6s8DxxxKlz3LioJFejQ75xZyi9NrSDS4j6SX6PxNJHkFpVFyEmDVp2
tXv3gESpmf7+raZ/8ZSpLJgpzgi2Zdd12H1dmi5JRDVMDoZVTZ/4F7omQz+Wzull
AvUVyMauePE1AEOJbYkz0g8/3DFh6aRDbPAXuGpiLxAuNCviHBy2Twx/iPSO2P+p
uz1VL6INaaQ1Wkf0V8ksKKExLvNEcGztcQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FMBmenQXoSNw6PwEsnOABCiz1xDNMB8GA1UdIwQYMBaAFKfR5p9XgHwe0CykWXGt
FO2jkx8uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUyUmdqamc4eGp6TlFq
eG10dERMZDlDSGE4Z0ZQMTNxSFY0WjExb05YWVFLLzAvQTdEMUU2OUY1NzgwN0Mx
RUQwMkNBNDU5NzFBRDE0RURBMzkzMUYyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BN0QxRTY5RjU3ODA3QzFFRDAyQ0E0NTk3MUFEMTRFREEzOTMx
RjJFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81MlJnampnOHhqek5RanhtdHRE
TGQ5Q0hhOGdGUDEzcUhWNFoxMW9OWFlRSy8wLzMxMzgzMTJlMzEzOTMxMmUzMTMz
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczNDMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC1v4YwDQYJKoZIhvcNAQELBQADggEBACJEIxAhzefZ6HuqlV0bbCYi/IQe3GM5
3a3m2Az1Y5NT77GIgm1pYMDGkO28gohr/UYACWBgiYfbwENIBbV9MrPE3+cgX5FS
lC4KvPKtn6wScS+cKbNehb9qenir89aydK1/bRhrHzDJccrn+nTXRwtnt8fbIAIE
IyA2Bx8sxL0goQXxt2TA2poS13BN48cUmEKydgsRnJevEzexlWDOdL7F/In4qAoA
TXTSMeYbtVz3wxHWryEjayaoGg1zkwWqdmuq+5T6lm1Bh+09cG17FvBuQx5HLTSx
NELdklmXsi1gwXb7a30v2B7zbJGydNnGRSi4veD5zvKb2sNkbZH19Sk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org