Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa
File:                     3230312e37372e3136302e302f32302d3332203d3e203238363536.roa (raw, json)
Hash identifier:          RuXNhSu3OEN23lIU4U28QBDpH9OtdZEA4+RdRdHKbO0=
Subject key identifier:   0B:D1:81:C3:97:89:5C:8A:8E:E9:8D:C0:C8:88:AE:AA:3C:E8:27:21
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       5F3C0F72E2D142EE6BDBB1F182B6476B1D86456C
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa
Signing time:             Sun 26 Mar 2023 22:08:26 +0000
ROA not before:           Sun 26 Mar 2023 22:03:26 +0000
ROA not after:            Sun 24 Mar 2024 22:08:26 +0000
asID:                     28656
IP address blocks:        201.77.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:0f:72:e2:d1:42:ee:6b:db:b1:f1:82:b6:47:6b:1d:86:45:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:03:26 2023 GMT
            Not After : Mar 24 22:08:26 2024 GMT
        Subject: CN=0BD181C397895C8A8EE98DC0C888AEAA3CE82721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:1c:7c:72:85:fa:c0:4d:12:d4:d2:23:2a:
                    57:4e:c4:b3:13:04:46:df:9d:a7:55:81:62:a7:63:
                    16:a1:e9:71:1e:57:0e:80:30:32:57:4a:b2:a7:d0:
                    91:e1:ce:56:96:bf:a4:c8:ec:e2:6b:8b:c7:97:4c:
                    30:b4:f3:45:09:0c:28:34:90:2f:ac:2b:e4:0b:d8:
                    d1:f1:34:a5:1b:44:37:2f:b2:f4:05:fe:bc:e5:8a:
                    9e:c1:07:be:c9:46:84:54:64:f8:90:af:89:1a:7b:
                    5b:d8:9a:09:9e:48:7c:a6:ad:17:99:c5:57:a2:f5:
                    18:a3:01:aa:7a:e0:cf:a4:36:48:96:ee:82:16:f1:
                    b1:0b:68:0c:12:d2:46:b2:06:dd:21:61:9c:2b:54:
                    23:fb:80:5e:df:4b:99:7e:f4:91:0f:23:97:66:b5:
                    25:3f:8e:b5:a7:88:00:51:b4:1b:b2:b9:c6:bd:cb:
                    10:85:3c:a3:82:83:2f:ee:98:ed:20:5c:cb:42:67:
                    31:15:ba:e1:a1:0f:6b:55:41:5e:cc:6d:a6:7d:78:
                    e1:c8:29:b7:d1:6e:bb:09:dc:1b:78:fd:d8:5f:ab:
                    84:7a:3c:f5:52:90:a3:13:aa:5b:51:18:08:fa:01:
                    b0:19:cf:0e:4a:64:a6:4a:ef:48:a7:a7:ba:8d:30:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:81:C3:97:89:5C:8A:8E:E9:8D:C0:C8:88:AE:AA:3C:E8:27:21
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3230312e37372e3136302e302f32302d3332203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:37:86:a4:73:3a:3c:7f:a0:a2:1a:6b:8c:73:1e:d5:bb:67:
         79:d3:04:72:c2:66:9f:37:08:af:3f:84:3f:a2:7f:b5:e9:2c:
         98:9c:f8:d5:06:fa:44:27:87:d1:62:9f:01:8a:f5:5f:4a:34:
         51:46:b0:9a:ab:d8:cd:63:ab:15:a1:64:bc:75:78:20:4b:00:
         2f:72:4d:d8:37:5a:ca:0a:70:d2:ff:d7:0f:3d:1b:24:db:68:
         db:8a:7d:79:47:f9:d0:d2:9d:f1:0c:7e:c3:1c:43:98:ec:d0:
         60:d3:c0:a8:51:2f:82:15:0a:b2:c2:89:e5:4b:8c:a3:aa:89:
         51:f9:bd:b8:ca:b9:1f:94:2d:c2:94:c5:d0:ea:12:2b:a0:b6:
         9c:ad:d0:01:7f:90:24:aa:0f:50:6d:85:a8:dc:3b:fd:e8:e4:
         c5:43:ca:2a:24:26:9d:f3:fa:59:70:b9:6b:9d:87:c0:4c:ca:
         96:0f:6a:5c:44:4b:20:87:92:d5:7e:c4:86:c3:81:55:ff:b2:
         f9:a2:c5:cb:29:ef:12:21:00:a0:99:79:9c:6b:2d:cb:c4:2d:
         74:ec:e8:9b:37:dd:40:75:c5:3b:d4:c8:ee:d9:eb:31:e1:71:
         e9:95:22:22:37:a8:60:0f:a9:4f:84:8d:fc:32:03:d5:e6:80:
         ac:08:7d:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXzwPcuLRQu5r27HxgrZHax2GRWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUU3Q0YzOUEzMTZBOTBGQkE1OTAyNTUyMjBDQkNF
QjVCQkVBQTAeFw0yMzAzMjYyMjAzMjZaFw0yNDAzMjQyMjA4MjZaMDMxMTAvBgNV
BAMTKDBCRDE4MUMzOTc4OTVDOEE4RUU5OERDMEM4ODhBRUFBM0NFODI3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0Bx8coX6wE0S1NIjKldOxLMT
BEbfnadVgWKnYxah6XEeVw6AMDJXSrKn0JHhzlaWv6TI7OJri8eXTDC080UJDCg0
kC+sK+QL2NHxNKUbRDcvsvQF/rzlip7BB77JRoRUZPiQr4kae1vYmgmeSHymrReZ
xVei9RijAap64M+kNkiW7oIW8bELaAwS0kayBt0hYZwrVCP7gF7fS5l+9JEPI5dm
tSU/jrWniABRtBuyuca9yxCFPKOCgy/umO0gXMtCZzEVuuGhD2tVQV7MbaZ9eOHI
KbfRbrsJ3Bt4/dhfq4R6PPVSkKMTqltRGAj6AbAZzw5KZKZK70inp7qNMJz3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC9GBw5eJXIqO6Y3AyIiuqjzoJyEwHwYDVR0j
BBgwFoAUPP7nzzmjFqkPulkCVSIMvOtbvqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMS8zQ0ZFRTdDRjM5QTMxNkE5MEZCQTU5MDI1NTIyMENCQ0VCNUJCRUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRkVFN0NGMzlBMzE2QTkw
RkJBNTkwMjU1MjIwQ0JDRUI1QkJFQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzEv
MzIzMDMxMmUzNzM3MmUzMTM2MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyU2gMA0GCSqGSIb3DQEBCwUAA4IBAQASN4akczo8
f6CiGmuMcx7Vu2d50wRywmafNwivP4Q/on+16SyYnPjVBvpEJ4fRYp8BivVfSjRR
RrCaq9jNY6sVoWS8dXggSwAvck3YN1rKCnDS/9cPPRsk22jbin15R/nQ0p3xDH7D
HEOY7NBg08CoUS+CFQqywonlS4yjqolR+b24yrkflC3ClMXQ6hIroLacrdABf5Ak
qg9QbYWo3Dv96OTFQ8oqJCad8/pZcLlrnYfATMqWD2pcREsgh5LVfsSGw4FV/7L5
osXLKe8SIQCgmXmcay3LxC107OibN91AdcU71Mju2esx4XHplSIiN6hgD6lPhI38
MgPV5oCsCH1v
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org