Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa
File:                     3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa (raw, json)
Hash identifier:          eUJl2WfVfqZvIgFzVBzWArVA3dTkU0zrdWimq8b0qOY=
Subject key identifier:   2C:87:DF:C9:2C:8D:9D:AF:B0:F5:7E:8C:10:B8:F3:C2:8D:2C:92:5E
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       207C55C2C50BECE5916D9D66EA29FC09F7D9A557
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa
Signing time:             Tue 26 Mar 2024 14:24:30 +0000
ROA not before:           Tue 26 Mar 2024 14:19:30 +0000
ROA not after:            Tue 25 Mar 2025 14:24:30 +0000
asID:                     28642
IP address blocks:        179.108.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7c:55:c2:c5:0b:ec:e5:91:6d:9d:66:ea:29:fc:09:f7:d9:a5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Mar 26 14:19:30 2024 GMT
            Not After : Mar 25 14:24:30 2025 GMT
        Subject: CN=2C87DFC92C8D9DAFB0F57E8C10B8F3C28D2C925E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:d4:a4:0f:d4:d1:4b:5b:72:60:e2:a2:7d:
                    97:e1:d6:82:e1:99:2d:67:2c:fe:98:fa:6d:7d:99:
                    6b:52:f1:ed:ee:c0:e1:5e:fd:5a:7c:ee:80:af:a5:
                    69:d7:05:4b:88:11:a6:ae:79:11:78:ea:2a:7d:93:
                    3e:c6:bb:19:54:af:08:fa:d9:7a:9a:28:75:0d:2e:
                    e1:e6:98:86:07:26:bc:c4:3e:1e:7e:3e:7b:ff:e2:
                    ad:93:90:f8:e1:34:10:9a:a6:3c:68:04:1e:98:59:
                    c0:7d:f9:d2:e3:b1:4b:e8:8e:ed:f9:92:93:6e:c7:
                    f2:0e:d7:60:07:de:5e:fd:2b:b1:b6:84:3f:ca:5e:
                    e1:2c:a0:9d:9f:5c:e3:9b:02:27:47:0c:7a:43:94:
                    53:d6:6c:8d:37:b4:e7:36:bf:f8:8c:34:d3:38:e2:
                    7e:98:19:bb:a3:22:75:c9:0b:88:67:2e:cd:f0:2e:
                    f5:c6:ed:b6:54:c4:17:cc:5f:c4:80:8f:81:50:63:
                    dc:5f:a6:b4:69:01:f6:c4:02:e5:91:7e:c6:ce:60:
                    de:bb:a1:e0:9d:4f:d1:16:a1:44:ac:4f:f2:12:40:
                    7b:62:9c:df:29:24:53:f4:76:db:c1:16:cf:8e:2b:
                    09:ed:ea:3c:6d:4b:3d:83:9c:21:db:12:25:4a:99:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:87:DF:C9:2C:8D:9D:AF:B0:F5:7E:8C:10:B8:F3:C2:8D:2C:92:5E
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:28:f0:83:a9:23:7c:64:cb:ea:1f:cb:f7:95:16:a7:d5:
         d3:6c:56:39:6e:60:7f:f4:ed:fd:75:2e:16:61:23:8d:5d:df:
         80:15:eb:ac:4c:ad:b2:a5:13:89:db:d9:c6:6b:5e:b8:12:0c:
         0d:0d:9c:ab:f5:d8:eb:35:cb:bb:f0:31:2a:b1:49:4f:2b:2c:
         56:76:f0:ec:ab:33:61:16:f2:de:49:ea:9c:79:fa:f1:15:16:
         fc:08:7b:99:08:72:90:ab:b0:74:44:4d:40:52:36:be:0f:f5:
         bb:02:7d:51:de:63:90:bb:cc:2b:d7:e4:18:c2:3a:ca:e8:0a:
         f3:58:54:f1:17:e9:fd:41:26:18:1e:a5:34:9f:cc:e8:6b:5f:
         05:c2:61:e8:df:fc:aa:1e:79:f6:a8:50:ec:2a:dc:98:11:42:
         d2:2a:8e:fe:1c:da:24:18:2e:ca:e3:7d:42:24:ec:c9:de:10:
         b4:5a:3b:99:1e:02:14:f3:f2:65:0e:64:b1:2b:b6:8d:8e:06:
         a6:05:fa:24:82:bc:0a:fb:1b:f5:2b:bf:ee:2d:ce:0a:53:80:
         e8:59:c8:b0:41:f5:2e:ed:cf:a9:38:0d:4b:c2:2f:9a:f2:7d:
         ce:8f:bf:33:98:66:e0:e3:89:38:b5:68:51:20:d7:d5:f4:b9:
         c0:f6:2e:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIHxVwsUL7OWRbZ1m6in8CffZpVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMzRUM3M0Y4NzM1NTJCN0MxQzJFN0FBNjFEMzAxNEUz
M0ZCNzkzRTAeFw0yNDAzMjYxNDE5MzBaFw0yNTAzMjUxNDI0MzBaMDMxMTAvBgNV
BAMTKDJDODdERkM5MkM4RDlEQUZCMEY1N0U4QzEwQjhGM0MyOEQyQzkyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpNSkD9TRS1tyYOKifZfh1oLh
mS1nLP6Y+m19mWtS8e3uwOFe/Vp87oCvpWnXBUuIEaaueRF46ip9kz7GuxlUrwj6
2XqaKHUNLuHmmIYHJrzEPh5+Pnv/4q2TkPjhNBCapjxoBB6YWcB9+dLjsUvoju35
kpNux/IO12AH3l79K7G2hD/KXuEsoJ2fXOObAidHDHpDlFPWbI03tOc2v/iMNNM4
4n6YGbujInXJC4hnLs3wLvXG7bZUxBfMX8SAj4FQY9xfprRpAfbEAuWRfsbOYN67
oeCdT9EWoUSsT/ISQHtinN8pJFP0dtvBFs+OKwnt6jxtSz2DnCHbEiVKmcJRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULIffySyNna+w9X6MELjzwo0skl4wHwYDVR0j
BBgwFoAUEz7HP4c1UrfBwueqYdMBTjP7eT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlF
QWQvMC8xMzNFQzczRjg3MzU1MkI3QzFDMkU3QUE2MUQzMDE0RTMzRkI3OTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzM0VDNzNGODczNTUyQjdD
MUMyRTdBQTYxRDMwMTRFMzNGQjc5M0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYUXZHTjJYWm1XdG9HeGtuM3NSc25YWENTNlN4WkhGUXJ4M2hHYTY5RUFkLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzbKAwDQYJKoZIhvcNAQELBQADggEBAC2NKPCD
qSN8ZMvqH8v3lRan1dNsVjluYH/07f11LhZhI41d34AV66xMrbKlE4nb2cZrXrgS
DA0NnKv12Os1y7vwMSqxSU8rLFZ28OyrM2EW8t5J6px5+vEVFvwIe5kIcpCrsHRE
TUBSNr4P9bsCfVHeY5C7zCvX5BjCOsroCvNYVPEX6f1BJhgepTSfzOhrXwXCYejf
/KoeefaoUOwq3JgRQtIqjv4c2iQYLsrjfUIk7MneELRaO5keAhTz8mUOZLErto2O
BqYF+iSCvAr7G/Urv+4tzgpTgOhZyLBB9S7tz6k4DUvCL5ryfc6PvzOYZuDjiTi1
aFEg19X0ucD2LhE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org