Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa
File:                     3137372e31322e302e302f31382d3234203d3e203238363635.roa (raw, json)
Hash identifier:          gC0AGWaDHYizON7wqsOKZyRONmfFs7AWEsKY4gUCEgE=
Subject key identifier:   30:A5:0A:46:EA:7D:1C:90:DB:B1:7A:0F:75:FF:EE:58:EB:7A:BE:4C
Certificate issuer:       /CN=8BD147C947DB64C5F81687C80D51E9C754CCE613
Certificate serial:       20A7E82AFC62E44EE9DD06A566D40E342D9AA221
Authority key identifier: 8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa
Signing time:             Wed 06 Mar 2024 16:00:47 +0000
ROA not before:           Wed 06 Mar 2024 15:55:47 +0000
ROA not after:            Wed 05 Mar 2025 16:00:47 +0000
asID:                     28665
IP address blocks:        177.12.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a7:e8:2a:fc:62:e4:4e:e9:dd:06:a5:66:d4:0e:34:2d:9a:a2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD147C947DB64C5F81687C80D51E9C754CCE613
        Validity
            Not Before: Mar  6 15:55:47 2024 GMT
            Not After : Mar  5 16:00:47 2025 GMT
        Subject: CN=30A50A46EA7D1C90DBB17A0F75FFEE58EB7ABE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:d9:81:03:dc:86:6b:02:3b:22:fe:bf:ad:
                    df:44:ea:9d:64:15:17:ea:da:cf:3c:6c:7f:08:92:
                    97:fb:e5:4d:46:9c:ef:2c:ea:5e:cf:de:4f:1b:79:
                    bc:fb:d4:e5:d3:f9:9f:a9:71:11:00:b6:97:fe:1e:
                    61:28:f0:e3:93:bd:9b:f8:95:40:3a:54:09:e5:76:
                    05:be:fb:a1:44:cf:f6:bd:60:e2:9b:5c:31:fd:48:
                    c5:d4:00:f6:da:40:93:16:94:c5:d1:76:4c:a2:0b:
                    16:7b:ab:13:ab:22:7f:59:6e:31:00:1b:f0:93:0e:
                    2e:88:67:af:7d:24:49:1a:5f:69:8c:15:69:7f:51:
                    d2:5c:72:bc:3c:6e:87:50:9f:9d:00:17:9f:e0:3c:
                    33:d2:33:45:cc:36:7f:7a:d3:bb:21:d7:15:3e:bd:
                    97:23:f5:ec:81:42:a7:1b:c8:07:cc:36:52:8f:27:
                    2c:4c:77:c4:7b:0e:0d:88:e2:4d:8a:1b:8e:ca:20:
                    44:d8:f8:b4:9d:fa:40:d1:e6:66:c6:83:b8:4b:99:
                    8f:55:95:27:b3:34:12:1b:80:df:17:13:46:8f:22:
                    14:b4:62:95:16:f8:08:47:e3:d4:50:26:03:62:87:
                    f4:8f:94:53:55:f1:07:34:2e:22:6e:41:83:53:a9:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:0A:46:EA:7D:1C:90:DB:B1:7A:0F:75:FF:EE:58:EB:7A:BE:4C
            X509v3 Authority Key Identifier:
                keyid:8B:D1:47:C9:47:DB:64:C5:F8:16:87:C8:0D:51:E9:C7:54:CC:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD147C947DB64C5F81687C80D51E9C754CCE613.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e31322e302e302f31382d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:24:38:3a:d1:74:41:0c:7e:ff:ed:9c:3d:9f:a4:b0:61:
         44:90:bf:18:f3:75:b5:6b:e3:93:90:98:1c:0f:75:25:87:0f:
         3b:9a:af:33:5b:e9:b3:e5:3f:c5:87:7f:54:f6:31:45:37:61:
         9d:f1:1b:54:7b:6d:46:54:d9:23:80:c1:d1:30:cc:b2:5c:af:
         5b:60:36:32:36:39:eb:d7:e2:32:aa:f2:0b:52:18:15:6f:6f:
         dd:33:1e:48:cc:07:73:f7:6e:87:08:69:11:78:a4:db:95:6b:
         c1:d1:f0:d0:8d:46:69:76:24:f3:df:8c:0a:06:9e:d9:39:20:
         ea:33:74:90:75:d5:dd:40:ce:f6:b3:7e:83:5a:db:bf:b0:29:
         ff:84:88:38:b0:71:1a:76:8a:ac:d0:f2:07:35:61:de:fb:64:
         43:fc:be:33:f5:6b:5a:d8:6c:fb:81:e7:4c:7b:f4:a8:8a:e0:
         48:8b:34:78:7c:3b:86:97:79:ac:4f:50:32:11:49:ff:c3:3c:
         28:c7:e3:0a:2c:cc:6a:25:37:25:2c:7e:cc:04:2c:ab:bf:e5:
         fd:ff:a7:02:78:86:c3:7b:30:f2:3c:64:21:ce:e9:a2:dc:08:
         78:fb:a4:99:08:41:ba:20:a0:ec:92:2e:25:e3:14:89:5f:3d:
         2b:47:d9:89
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIKfoKvxi5E7p3QalZtQONC2aoiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJEMTQ3Qzk0N0RCNjRDNUY4MTY4N0M4MEQ1MUU5Qzc1
NENDRTYxMzAeFw0yNDAzMDYxNTU1NDdaFw0yNTAzMDUxNjAwNDdaMDMxMTAvBgNV
BAMTKDMwQTUwQTQ2RUE3RDFDOTBEQkIxN0EwRjc1RkZFRTU4RUI3QUJFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXtmBA9yGawI7Iv6/rd9E6p1k
FRfq2s88bH8Ikpf75U1GnO8s6l7P3k8bebz71OXT+Z+pcREAtpf+HmEo8OOTvZv4
lUA6VAnldgW++6FEz/a9YOKbXDH9SMXUAPbaQJMWlMXRdkyiCxZ7qxOrIn9ZbjEA
G/CTDi6IZ699JEkaX2mMFWl/UdJccrw8bodQn50AF5/gPDPSM0XMNn9607sh1xU+
vZcj9eyBQqcbyAfMNlKPJyxMd8R7Dg2I4k2KG47KIETY+LSd+kDR5mbGg7hLmY9V
lSezNBIbgN8XE0aPIhS0YpUW+AhH49RQJgNih/SPlFNV8Qc0LiJuQYNTqWE7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUMKUKRup9HJDbsXoPdf/uWOt6vkwwHwYDVR0j
BBgwFoAUi9FHyUfbZMX4FofIDVHpx1TM5hMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fk
b3YvMC84QkQxNDdDOTQ3REI2NEM1RjgxNjg3QzgwRDUxRTlDNzU0Q0NFNjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRDE0N0M5NDdEQjY0QzVG
ODE2ODdDODBENTFFOUM3NTRDQ0U2MTMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3QkZ2ZmZ0ZUxtUkZOclRkZzNQTWtwc21WMVBkckFudHd3dE1DRkdxZG92LzAv
MzEzNzM3MmUzMTMyMmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzgzNjM2
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAaxDAAwDQYJKoZIhvcNAQELBQADggEBAIidJDg60XRBDH7/
7Zw9n6SwYUSQvxjzdbVr45OQmBwPdSWHDzuarzNb6bPlP8WHf1T2MUU3YZ3xG1R7
bUZU2SOAwdEwzLJcr1tgNjI2OevX4jKq8gtSGBVvb90zHkjMB3P3bocIaRF4pNuV
a8HR8NCNRml2JPPfjAoGntk5IOozdJB11d1AzvazfoNa27+wKf+EiDiwcRp2iqzQ
8gc1Yd77ZEP8vjP1a1rYbPuB50x79KiK4EiLNHh8O4aXeaxPUDIRSf/DPCjH4wos
zGolNyUsfswELKu/5f3/pwJ4hsN7MPI8ZCHO6aLcCHj7pJkIQbogoOySLiXjFIlf
PStH2Yk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org