Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          3VsZRX6/vGEysa9ctz0ilwcrJ4Xx9CQG0yeAkWx428o=
Subject key identifier:   22:B4:A5:5D:C0:36:5B:80:6F:4A:49:B6:0C:FB:B8:E3:B8:C1:36:F5
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       0F878187B4781E7390C85A3B612D5CDA094B48B5
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:12 +0000
ROA not before:           Wed 13 Sep 2023 20:19:12 +0000
ROA not after:            Wed 11 Sep 2024 20:24:12 +0000
asID:                     263604
IP address blocks:        177.71.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:81:87:b4:78:1e:73:90:c8:5a:3b:61:2d:5c:da:09:4b:48:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:12 2023 GMT
            Not After : Sep 11 20:24:12 2024 GMT
        Subject: CN=22B4A55DC0365B806F4A49B60CFBB8E3B8C136F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:24:fc:d2:9c:2b:9b:61:18:fc:cd:ef:2c:
                    2a:29:d9:60:fa:78:7e:6a:66:07:e1:6a:c8:d4:a1:
                    64:09:26:fc:fa:ba:b2:1d:57:f1:f3:f1:09:d4:b8:
                    76:2c:d0:d4:1e:5a:69:7d:b8:79:33:f2:77:d7:d2:
                    33:23:47:11:b1:e4:a5:f2:53:28:4d:c8:19:ca:1b:
                    20:76:d6:d1:d6:ab:56:71:b2:c1:d6:ae:d3:23:e1:
                    34:f9:8c:eb:49:e6:05:56:6a:67:91:bb:a0:a5:57:
                    07:02:14:a3:35:36:66:94:d4:d1:e0:72:1f:de:d2:
                    4c:40:6d:f4:e2:8f:4b:2d:80:7c:24:63:57:6a:69:
                    3f:ed:69:b6:c5:4d:8e:6e:88:1c:8a:39:c2:d0:73:
                    50:1c:05:28:f2:1a:a0:05:60:53:fe:b5:f2:7d:47:
                    ea:c6:53:57:2c:62:a1:a2:c8:e4:12:fd:9d:01:ab:
                    c3:94:83:33:eb:c1:97:ff:c6:aa:0b:1f:ba:41:3a:
                    3f:d4:c9:0a:16:55:64:71:f6:29:5c:c9:ff:44:60:
                    7c:b1:82:47:d8:9b:1f:e4:39:e9:c4:3c:3e:93:13:
                    c0:f8:3c:95:3c:0e:6a:e6:d3:64:67:55:a9:5f:ec:
                    33:3d:26:a5:37:ad:4e:b5:49:65:db:43:88:70:d4:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:A5:5D:C0:36:5B:80:6F:4A:49:B6:0C:FB:B8:E3:B8:C1:36:F5
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39302e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:15:6d:cf:53:b5:5d:76:97:8d:23:10:ab:c5:09:a4:fa:
         e7:0d:33:37:6b:90:b9:cd:9c:c6:e0:6b:a5:e1:28:5a:84:1f:
         ea:0b:55:40:58:8e:bd:bb:53:20:a8:7f:3a:f2:e5:b5:1b:6c:
         10:6c:77:8c:4e:4f:d4:48:ac:18:f1:1a:47:37:e3:d0:54:7a:
         48:38:5b:ef:b5:99:4b:61:b7:7f:74:0b:4e:d5:d7:d0:b0:40:
         50:6a:65:bc:55:83:1a:57:a8:cf:4d:f0:ae:87:b9:07:16:16:
         ea:b8:03:c1:e3:ea:dd:24:8d:20:b6:a9:24:b4:55:4c:49:67:
         98:f7:58:2b:88:b1:8c:fa:70:ad:7b:3c:84:30:0c:0d:fa:42:
         b9:de:9b:57:8e:12:38:77:04:af:87:81:f6:6c:a1:4c:d0:23:
         3a:44:e3:f1:73:61:1d:d6:7f:5b:ae:b3:00:8c:78:df:28:ec:
         33:7f:57:1d:d5:4e:cf:8e:c5:8f:1f:db:79:50:94:95:00:f2:
         a9:70:67:ef:73:f3:0e:b4:a4:fe:64:9f:17:4d:c8:30:29:83:
         a5:18:04:56:96:67:fe:c1:a0:9d:e8:e8:a6:49:5f:60:aa:e5:
         13:f5:62:68:d7:dc:45:86:53:7c:21:1b:12:73:3d:35:92:69:
         1d:76:cc:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD4eBh7R4HnOQyFo7YS1c2glLSLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3OTI5MTMxNTk2RUI2NUFGMDQ2NTI0NjE1MTA0QkRG
MEVEQzc0RDAeFw0yMzA5MTMyMDE5MTJaFw0yNDA5MTEyMDI0MTJaMDMxMTAvBgNV
BAMTKDIyQjRBNTVEQzAzNjVCODA2RjRBNDlCNjBDRkJCOEUzQjhDMTM2RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RyT80pwrm2EY/M3vLCop2WD6
eH5qZgfhasjUoWQJJvz6urIdV/Hz8QnUuHYs0NQeWml9uHkz8nfX0jMjRxGx5KXy
UyhNyBnKGyB21tHWq1ZxssHWrtMj4TT5jOtJ5gVWameRu6ClVwcCFKM1NmaU1NHg
ch/e0kxAbfTij0stgHwkY1dqaT/tabbFTY5uiByKOcLQc1AcBSjyGqAFYFP+tfJ9
R+rGU1csYqGiyOQS/Z0Bq8OUgzPrwZf/xqoLH7pBOj/UyQoWVWRx9ilcyf9EYHyx
gkfYmx/kOenEPD6TE8D4PJU8Dmrm02RnValf7DM9JqU3rU61SWXbQ4hw1NW3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIrSlXcA2W4BvSkm2DPu447jBNvUwHwYDVR0j
BBgwFoAUxnkpExWW62WvBGUkYVEEvfDtx00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMS9DNjc5MjkxMzE1OTZFQjY1QUYwNDY1MjQ2MTUxMDRCREYwRURDNzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2NzkyOTEzMTU5NkVCNjVB
RjA0NjUyNDYxNTEwNEJERjBFREM3NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzEv
MzEzNzM3MmUzNzMxMmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUdaMA0GCSqGSIb3DQEBCwUAA4IBAQCMNRVtz1O1
XXaXjSMQq8UJpPrnDTM3a5C5zZzG4Gul4ShahB/qC1VAWI69u1MgqH868uW1G2wQ
bHeMTk/USKwY8RpHN+PQVHpIOFvvtZlLYbd/dAtO1dfQsEBQamW8VYMaV6jPTfCu
h7kHFhbquAPB4+rdJI0gtqkktFVMSWeY91griLGM+nCtezyEMAwN+kK53ptXjhI4
dwSvh4H2bKFM0CM6ROPxc2Ed1n9brrMAjHjfKOwzf1cd1U7PjsWPH9t5UJSVAPKp
cGfvc/MOtKT+ZJ8XTcgwKYOlGARWlmf+waCd6OimSV9gquUT9WJo19xFhlN8IRsS
cz01kmkddsxo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org