Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa
File:                     3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa (raw, json)
Hash identifier:          UhULLgshFsHr+Dl1tXD3ksnXqRebjhJnBKhDneMIIpY=
Subject key identifier:   45:EA:75:4B:ED:0C:65:C9:5C:6C:7F:49:E0:2A:FD:F2:05:40:4C:27
Certificate issuer:       /CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
Certificate serial:       4329D1FADDCA05B74501B3BA1B36A232DC90A212
Authority key identifier: F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa
Signing time:             Tue 09 Apr 2024 13:48:24 +0000
ROA not before:           Tue 09 Apr 2024 13:43:24 +0000
ROA not after:            Tue 08 Apr 2025 13:48:24 +0000
asID:                     263388
IP address blocks:        177.222.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:29:d1:fa:dd:ca:05:b7:45:01:b3:ba:1b:36:a2:32:dc:90:a2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F50ED26E841BEB4852CE6D2BE1F4380385810C46
        Validity
            Not Before: Apr  9 13:43:24 2024 GMT
            Not After : Apr  8 13:48:24 2025 GMT
        Subject: CN=45EA754BED0C65C95C6C7F49E02AFDF205404C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:64:e1:fb:d3:f5:44:80:63:2a:d6:6f:d2:
                    de:0d:55:57:64:73:f6:36:79:c8:ea:3e:19:f2:66:
                    2e:5e:ce:04:f6:5f:33:57:4c:ac:d5:d3:6f:3a:65:
                    6a:25:f6:bf:32:9f:3f:8d:39:08:e3:e8:68:ec:9b:
                    27:70:97:c8:ea:85:a5:e0:34:83:85:04:57:02:42:
                    77:22:f0:de:85:b3:ac:66:ec:a2:59:df:87:3e:a2:
                    67:9d:81:51:58:78:fe:15:69:54:3a:6b:fa:ba:ed:
                    59:ad:94:19:34:be:d4:c5:e5:f1:7d:51:39:9a:16:
                    00:07:6c:95:90:00:9e:4e:52:9e:d0:37:2f:af:7d:
                    d7:cf:e3:27:99:f7:08:c0:75:43:b6:21:ef:92:44:
                    2b:e2:ab:c9:e2:2a:ec:33:f5:56:f5:eb:3e:4a:a0:
                    41:33:87:11:b8:a0:ee:ec:e6:e8:cd:39:a6:f3:ce:
                    3c:3d:5d:00:61:23:15:03:db:7b:49:4a:a8:f1:cc:
                    c4:3f:91:ae:00:be:f1:4e:9a:cd:29:89:f2:ef:cf:
                    c7:a0:b4:6d:38:95:1e:6b:a4:ad:5c:d9:b3:93:64:
                    64:22:47:49:e0:64:90:84:bd:3d:a3:43:ee:7b:64:
                    c2:93:10:47:de:8f:3d:66:5d:ce:b3:98:c9:a6:07:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:75:4B:ED:0C:65:C9:5C:6C:7F:49:E0:2A:FD:F2:05:40:4C:27
            X509v3 Authority Key Identifier:
                keyid:F5:0E:D2:6E:84:1B:EB:48:52:CE:6D:2B:E1:F4:38:03:85:81:0C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/F50ED26E841BEB4852CE6D2BE1F4380385810C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F50ED26E841BEB4852CE6D2BE1F4380385810C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/1/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:c0:dd:72:07:75:a8:f0:a5:1a:7f:4d:72:be:0d:5c:eb:
         e6:a7:40:bd:10:9f:ac:e6:63:96:08:eb:fb:a3:c2:76:38:94:
         4f:53:0c:ca:cb:99:56:65:39:75:6d:f0:76:34:94:3e:93:09:
         e4:55:27:ad:11:91:db:49:37:e8:0f:12:2f:fd:37:26:e5:f4:
         c1:13:d7:59:57:cf:eb:00:87:29:56:c8:9d:c7:ac:18:df:e8:
         f9:55:57:53:f6:3b:bb:4d:78:2c:2f:d5:1a:68:30:b3:de:ec:
         99:d3:50:86:05:b8:00:d3:dd:4d:eb:af:06:12:10:1b:89:57:
         2d:08:5b:84:9a:e6:b9:38:9a:fa:52:69:1f:0f:2c:b9:dd:ac:
         9c:13:33:e1:b5:e3:da:46:24:26:f3:ee:3f:8e:8e:b9:62:e1:
         15:87:b4:5c:b2:d3:6c:cb:cb:2b:ec:1a:dd:f2:be:be:07:cb:
         c1:bb:f8:c7:fa:e4:5b:79:b9:5b:6b:1d:49:8f:59:26:e4:79:
         36:7a:5f:2d:ae:66:a4:af:f2:23:93:e0:9a:07:28:c4:d2:10:
         87:7b:aa:65:a3:8c:85:b6:88:2f:52:d4:ee:62:74:97:5e:41:
         04:94:2f:ee:fa:a1:14:eb:cc:3e:31:37:a0:32:37:46:7b:95:
         96:78:6e:f4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQynR+t3KBbdFAbO6GzaiMtyQohIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwRUQyNkU4NDFCRUI0ODUyQ0U2RDJCRTFGNDM4MDM4
NTgxMEM0NjAeFw0yNDA0MDkxMzQzMjRaFw0yNTA0MDgxMzQ4MjRaMDMxMTAvBgNV
BAMTKDQ1RUE3NTRCRUQwQzY1Qzk1QzZDN0Y0OUUwMkFGREYyMDU0MDRDMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLmTh+9P1RIBjKtZv0t4NVVdk
c/Y2ecjqPhnyZi5ezgT2XzNXTKzV0286ZWol9r8ynz+NOQjj6Gjsmydwl8jqhaXg
NIOFBFcCQnci8N6Fs6xm7KJZ34c+omedgVFYeP4VaVQ6a/q67VmtlBk0vtTF5fF9
UTmaFgAHbJWQAJ5OUp7QNy+vfdfP4yeZ9wjAdUO2Ie+SRCviq8niKuwz9Vb16z5K
oEEzhxG4oO7s5ujNOabzzjw9XQBhIxUD23tJSqjxzMQ/ka4AvvFOms0pifLvz8eg
tG04lR5rpK1c2bOTZGQiR0ngZJCEvT2jQ+57ZMKTEEfejz1mXc6zmMmmB4WJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURep1S+0MZclcbH9J4Cr98gVATCcwHwYDVR0j
BBgwFoAU9Q7SboQb60hSzm0r4fQ4A4WBDEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJvTnNWMVBiZVZGQTJaNjg1WG1IdTJkSkVDTkJEWmVBenc3R3Fwa0hO
OGovMS9GNTBFRDI2RTg0MUJFQjQ4NTJDRTZEMkJFMUY0MzgwMzg1ODEwQzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1MEVEMjZFODQxQkVCNDg1
MkNFNkQyQkUxRjQzODAzODU4MTBDNDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCb05zVjFQYmVWRkEyWjY4NVhtSHUyZEpFQ05CRFplQXp3N0dxcGtITjhqLzEv
MzEzNzM3MmUzMjMyMzIyZTMxMzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7HeoDANBgkqhkiG9w0BAQsFAAOCAQEAEB/A
3XIHdajwpRp/TXK+DVzr5qdAvRCfrOZjlgjr+6PCdjiUT1MMysuZVmU5dW3wdjSU
PpMJ5FUnrRGR20k36A8SL/03JuX0wRPXWVfP6wCHKVbIncesGN/o+VVXU/Y7u014
LC/VGmgws97smdNQhgW4ANPdTeuvBhIQG4lXLQhbhJrmuTia+lJpHw8sud2snBMz
4bXj2kYkJvPuP46OuWLhFYe0XLLTbMvLK+wa3fK+vgfLwbv4x/rkW3m5W2sdSY9Z
JuR5NnpfLa5mpK/yI5PgmgcoxNIQh3uqZaOMhbaIL1LU7mJ0l15BBJQv7vqhFOvM
PjE3oDI3RnuVlnhu9A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org