Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
File:                     3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          Sb9MtERerbMGLOj/BtUj8NyvRoofZYXCrpj40yWEAhk=
Subject key identifier:   B1:BC:75:E6:8A:5D:16:01:DF:1C:05:15:22:F8:38:7A:A9:E1:F3:0D
Certificate issuer:       /CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
Certificate serial:       6475E4497C306BD6A5FDA83413674549A1AB4119
Authority key identifier: 85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
Signing time:             Thu 21 Jul 2022 20:07:39 +0000
ROA not before:           Thu 21 Jul 2022 20:02:39 +0000
ROA not after:            Thu 20 Jul 2023 20:07:39 +0000
asID:                     271110
IP address blocks:        160.20.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:e4:49:7c:30:6b:d6:a5:fd:a8:34:13:67:45:49:a1:ab:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
        Validity
            Not Before: Jul 21 20:02:39 2022 GMT
            Not After : Jul 20 20:07:39 2023 GMT
        Subject: CN=B1BC75E68A5D1601DF1C051522F8387AA9E1F30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:fb:21:05:6e:4b:27:0a:fa:9c:2b:2d:86:
                    2c:ed:c4:64:e3:6d:d0:1d:57:30:7f:f4:b8:b2:0a:
                    c8:d7:1a:01:db:8c:e3:0a:0b:16:9a:55:cc:1e:5e:
                    bf:55:47:ac:f0:6a:28:9e:08:da:9f:e0:98:19:34:
                    92:1f:f5:81:67:04:ad:f2:d9:5a:4c:0b:3a:32:34:
                    6b:6f:f2:fa:53:ec:d8:77:73:89:e0:5f:70:2f:0a:
                    39:ba:b1:1c:b6:b7:e2:d6:c2:4f:9e:57:80:d4:9a:
                    c5:60:da:2a:16:7e:9a:b4:21:24:57:0f:24:de:bc:
                    8d:1b:0f:87:25:07:25:57:2f:ad:89:97:2f:cd:ba:
                    fc:36:d7:93:0a:67:48:7a:ca:d8:7f:db:b4:32:8b:
                    36:7e:59:53:a8:36:78:11:e1:73:63:d0:fe:64:41:
                    cd:22:87:ae:d2:fc:fa:bb:2c:f8:10:65:3e:bb:8e:
                    74:6b:a6:a1:6a:11:f5:83:21:ae:e6:e3:27:bf:10:
                    a5:09:85:c6:c6:09:64:55:1c:da:1d:47:aa:68:4c:
                    95:81:63:ca:3b:44:3c:25:59:45:2b:5a:f0:b9:42:
                    05:62:4d:8c:73:6f:a4:e3:d3:09:62:c0:b7:4a:41:
                    54:f6:14:ca:8c:b2:b1:5e:af:f2:eb:76:50:0e:a5:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:75:E6:8A:5D:16:01:DF:1C:05:15:22:F8:38:7A:A9:E1:F3:0D
            X509v3 Authority Key Identifier:
                keyid:85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:de:a9:2e:ae:77:38:22:f1:14:d8:77:c2:c1:12:9e:df:2d:
         d9:ff:19:f6:91:0b:f5:78:7e:48:97:12:6b:4a:e0:01:b4:74:
         a0:9b:d7:6c:7f:d3:f1:82:fc:d6:ce:d4:94:9b:56:ff:93:76:
         50:92:fe:b8:03:04:42:dc:fe:2e:a5:a7:ae:42:46:9e:8d:30:
         24:c3:f5:7d:8a:e6:86:03:87:f8:ac:75:aa:62:16:d8:53:c2:
         fb:d8:78:5a:de:f7:8b:3e:bb:64:a1:7c:e0:43:42:02:12:ef:
         39:fe:86:4b:d2:5e:b9:f4:c0:9c:32:b2:53:94:3c:71:50:04:
         30:68:a8:e8:bf:bc:bf:47:a1:be:df:d4:02:5e:99:f1:48:9b:
         26:85:9c:55:98:4b:88:0c:70:f9:6a:8a:84:14:11:54:16:dc:
         6a:86:c8:09:27:f9:90:a7:bc:6f:8e:0e:a7:54:a4:e7:e5:27:
         9b:6a:2c:14:12:fd:32:5e:c3:20:82:81:c7:21:18:12:3d:a6:
         9a:0b:a8:73:3a:9e:38:7c:87:49:82:5d:e0:5a:5f:62:93:c2:
         a2:7f:a9:46:ba:83:24:28:5b:8a:45:0f:a6:95:a1:9a:98:57:
         8c:e6:0a:06:50:db:63:c1:c2:65:d9:8f:0c:b1:d3:e0:33:da:
         a4:10:e5:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZHXkSXwwa9al/ag0E2dFSaGrQRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyNUE2QkM1NERCMkJDNEUxNDM5RUYxNzJCOTA3Q0RF
RjU5QTJGRTAeFw0yMjA3MjEyMDAyMzlaFw0yMzA3MjAyMDA3MzlaMDMxMTAvBgNV
BAMTKEIxQkM3NUU2OEE1RDE2MDFERjFDMDUxNTIyRjgzODdBQTlFMUYzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xvshBW5LJwr6nCsthiztxGTj
bdAdVzB/9LiyCsjXGgHbjOMKCxaaVcweXr9VR6zwaiieCNqf4JgZNJIf9YFnBK3y
2VpMCzoyNGtv8vpT7Nh3c4ngX3AvCjm6sRy2t+LWwk+eV4DUmsVg2ioWfpq0ISRX
DyTevI0bD4clByVXL62Jly/Nuvw215MKZ0h6yth/27QyizZ+WVOoNngR4XNj0P5k
Qc0ih67S/Pq7LPgQZT67jnRrpqFqEfWDIa7m4ye/EKUJhcbGCWRVHNodR6poTJWB
Y8o7RDwlWUUrWvC5QgViTYxzb6Tj0wliwLdKQVT2FMqMsrFer/LrdlAOpfIlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsbx15opdFgHfHAUVIvg4eqnh8w0wHwYDVR0j
BBgwFoAUhSWmvFTbK8ThQ57xcrkHze9Zov4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW9tVXRDYVVSRjNhdHVIdXhDNnNEVnNTNUVhRFVxY0daZVg4aFNvQXVx
bWkvMC84NTI1QTZCQzU0REIyQkM0RTE0MzlFRjE3MkI5MDdDREVGNTlBMkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MjVBNkJDNTREQjJCQzRF
MTQzOUVGMTcyQjkwN0NERUY1OUEyRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVvbVV0Q2FVUkYzYXR1SHV4QzZzRFZzUzVFYURVcWNHWmVYOGhTb0F1cW1pLzAv
MzEzNjMwMmUzMjMwMmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACgFLEwDQYJKoZIhvcNAQELBQADggEBAMLeqS6u
dzgi8RTYd8LBEp7fLdn/GfaRC/V4fkiXEmtK4AG0dKCb12x/0/GC/NbO1JSbVv+T
dlCS/rgDBELc/i6lp65CRp6NMCTD9X2K5oYDh/isdapiFthTwvvYeFre94s+u2Sh
fOBDQgIS7zn+hkvSXrn0wJwyslOUPHFQBDBoqOi/vL9Hob7f1AJemfFImyaFnFWY
S4gMcPlqioQUEVQW3GqGyAkn+ZCnvG+ODqdUpOflJ5tqLBQS/TJewyCCgcchGBI9
ppoLqHM6njh8h0mCXeBaX2KTwqJ/qUa6gyQoW4pFD6aVoZqYV4zmCgZQ22PBwmXZ
jwyx0+Az2qQQ5Rw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org