Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e39362e302f32302d3234203d3e20323632393037.roa
File:                     3138372e36302e39362e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          H4aDefS4jY8qDOpjMl+F/Fa2cYUhaXKiyxT4zTeQSp0=
Subject key identifier:   02:01:A3:01:D0:C2:94:A2:28:CA:7B:4C:8F:42:19:95:48:3D:D7:60
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4CD3925E136A9361C7223D673FD8E36E7BB7EB93
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e39362e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     262907
IP address blocks:        187.60.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d3:92:5e:13:6a:93:61:c7:22:3d:67:3f:d8:e3:6e:7b:b7:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=0201A301D0C294A228CA7B4C8F421995483DD760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:3b:5f:00:4d:5c:60:6c:bc:c2:ad:51:2d:
                    8f:6a:47:69:17:7a:5a:47:80:43:52:b4:0e:87:b7:
                    4f:fa:7d:28:28:01:65:31:10:1a:f8:a3:63:28:93:
                    db:3f:63:83:d8:6c:82:7d:be:7f:d2:eb:de:bb:6f:
                    5d:85:b8:37:00:39:6e:a1:da:c4:08:78:ef:fd:75:
                    96:2a:96:44:d9:ee:b1:62:bc:14:f3:da:b7:30:d1:
                    4f:0a:95:c1:ff:31:45:ac:52:e6:c5:be:44:7f:7b:
                    bf:71:f1:ed:16:2e:c8:f1:2c:e5:90:ad:3c:12:af:
                    35:78:bf:f4:54:e5:3e:c1:df:2e:67:41:5b:36:f3:
                    d5:5b:d9:0d:7d:05:25:6b:be:5d:99:05:75:29:1a:
                    b1:20:e6:d4:68:e3:53:be:f0:16:1c:0b:df:94:22:
                    1b:0c:08:77:66:e7:a7:1f:c5:0b:cb:41:4d:e4:a5:
                    df:2e:74:21:ee:a7:89:9d:f8:52:8f:a5:2d:fd:bd:
                    e1:9d:57:6d:6e:5a:d5:52:e0:ae:64:4f:e1:08:65:
                    ea:3b:24:2b:ee:8a:c9:ba:40:d0:c5:56:78:c1:d9:
                    bb:59:e4:d9:cd:a4:5e:b9:db:6d:68:c2:37:ef:39:
                    20:d2:8e:b4:a5:ff:1b:8d:4f:07:4f:f1:39:d6:47:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:A3:01:D0:C2:94:A2:28:CA:7B:4C:8F:42:19:95:48:3D:D7:60
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e39362e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:0b:f2:a8:4e:ce:80:e3:d3:bf:3a:4c:32:0b:9e:1d:87:
         dd:b3:f3:09:30:41:43:0c:00:b0:35:75:29:b8:5a:fb:ab:f0:
         1b:5c:85:22:38:69:8b:4f:88:24:ed:18:f3:cf:bc:4f:1a:64:
         fb:3a:38:09:dc:69:ff:d3:5a:77:21:3d:81:d2:20:90:13:34:
         5c:fa:6a:6c:97:34:9f:53:ae:6c:0e:0b:06:cf:d2:f8:d9:67:
         ee:7d:a2:c3:1b:e2:4f:ba:06:28:98:ec:e6:cd:56:3a:88:a3:
         a7:56:13:6a:09:31:71:b2:17:4f:5b:2a:42:72:bf:a6:76:d8:
         22:f6:c4:fe:51:7e:9c:43:a6:d9:a8:f3:f5:a2:dd:73:63:de:
         27:9f:89:47:50:d4:1c:6f:f5:3c:d4:34:92:a6:ee:79:48:17:
         14:32:10:1e:f5:52:20:d0:38:63:65:5e:e2:06:94:75:9b:c4:
         71:7b:1e:42:08:8f:5a:97:f7:b1:4e:51:3e:f2:b1:ca:16:79:
         4a:cf:1d:93:3d:56:46:25:25:4d:ca:c6:2f:f7:6b:f1:66:4e:
         63:2f:b7:b2:21:3c:5c:44:a2:54:16:8e:a5:ee:a8:25:3b:f5:
         c0:e2:36:ff:58:71:c7:8a:4b:e9:b8:c6:88:55:f1:5a:97:e0:
         ae:fe:ce:c0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTNOSXhNqk2HHIj1nP9jjbnu365MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MTlaFw0yNTAyMDExMjUzMTlaMDMxMTAvBgNV
BAMTKDAyMDFBMzAxRDBDMjk0QTIyOENBN0I0QzhGNDIxOTk1NDgzREQ3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUDtfAE1cYGy8wq1RLY9qR2kX
elpHgENStA6Ht0/6fSgoAWUxEBr4o2Mok9s/Y4PYbIJ9vn/S6967b12FuDcAOW6h
2sQIeO/9dZYqlkTZ7rFivBTz2rcw0U8KlcH/MUWsUubFvkR/e79x8e0WLsjxLOWQ
rTwSrzV4v/RU5T7B3y5nQVs289Vb2Q19BSVrvl2ZBXUpGrEg5tRo41O+8BYcC9+U
IhsMCHdm56cfxQvLQU3kpd8udCHup4md+FKPpS39veGdV21uWtVS4K5kT+EIZeo7
JCvuism6QNDFVnjB2btZ5NnNpF65221owjfvOSDSjrSl/xuNTwdP8TnWR3zZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAgGjAdDClKIoyntMj0IZlUg912AwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzODM3MmUzNjMwMmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzxgMA0GCSqGSIb3DQEBCwUAA4IBAQAjLQvyqE7O
gOPTvzpMMgueHYfds/MJMEFDDACwNXUpuFr7q/AbXIUiOGmLT4gk7Rjzz7xPGmT7
OjgJ3Gn/01p3IT2B0iCQEzRc+mpslzSfU65sDgsGz9L42WfufaLDG+JPugYomOzm
zVY6iKOnVhNqCTFxshdPWypCcr+mdtgi9sT+UX6cQ6bZqPP1ot1zY94nn4lHUNQc
b/U81DSSpu55SBcUMhAe9VIg0DhjZV7iBpR1m8Rxex5CCI9al/exTlE+8rHKFnlK
zx2TPVZGJSVNysYv92vxZk5jL7eyITxcRKJUFo6l7qglO/XA4jb/WHHHikvpuMaI
VfFal+Cu/s7A
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org