Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa
File:                     3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (raw, json)
Hash identifier:          8qiwi8J3FlA6kis8cYQyKviYSvCom3wF+OCTPLzLbhA=
Subject key identifier:   FD:95:32:DB:7C:3F:7F:61:A2:68:F4:AD:91:78:DC:14:E4:70:A8:AB
Certificate issuer:       /CN=ADC219C69DCBC4DE9907FA7984DB2D081D7BD760
Certificate serial:       544963BD050ABAE53622F6BF52BB88C211FDB3A0
Authority key identifier: AD:C2:19:C6:9D:CB:C4:DE:99:07:FA:79:84:DB:2D:08:1D:7B:D7:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa
Signing time:             Wed 24 May 2023 19:18:28 +0000
ROA not before:           Wed 24 May 2023 19:13:28 +0000
ROA not after:            Wed 22 May 2024 19:18:28 +0000
asID:                     52852
IP address blocks:        177.86.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:63:bd:05:0a:ba:e5:36:22:f6:bf:52:bb:88:c2:11:fd:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADC219C69DCBC4DE9907FA7984DB2D081D7BD760
        Validity
            Not Before: May 24 19:13:28 2023 GMT
            Not After : May 22 19:18:28 2024 GMT
        Subject: CN=FD9532DB7C3F7F61A268F4AD9178DC14E470A8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:2f:98:22:aa:13:d7:29:b6:7a:e4:5b:39:
                    7b:96:c2:8e:9f:c0:2d:84:07:83:c4:27:a8:77:62:
                    c8:2c:f5:d2:eb:c5:d8:18:09:e0:fe:d3:27:4c:3a:
                    82:9f:cf:f8:39:71:7b:45:42:ae:7a:88:3f:92:76:
                    07:15:1f:85:e9:ae:fb:94:c2:2d:bd:ec:55:9a:51:
                    15:0d:61:6f:9c:17:30:7e:ae:d0:80:98:94:4d:53:
                    95:36:8d:9e:47:70:bf:a2:15:f0:96:e1:11:0f:0f:
                    e8:6a:a9:87:57:11:71:c6:3d:72:a5:66:36:3a:7f:
                    7c:25:bf:5c:f4:56:ed:98:be:c3:cb:86:54:b9:5c:
                    60:9f:ab:a4:c2:81:78:91:a9:e7:e3:d3:46:d9:68:
                    2d:4a:f5:a7:23:f6:86:3a:c2:33:fd:a7:f0:1a:93:
                    22:06:3d:6a:4d:d9:aa:7d:3b:f0:76:de:9f:e6:bc:
                    0a:bf:8d:75:16:49:e6:0e:57:ea:a1:f1:b0:36:ad:
                    35:d1:74:e0:18:94:8c:de:88:32:eb:78:e2:d4:a6:
                    85:d1:dc:8a:b9:cb:17:02:65:44:20:13:06:5c:a4:
                    75:ff:63:6a:0a:f6:83:6c:73:a9:bf:29:90:bc:d5:
                    6f:e4:c3:5a:5f:5c:f9:12:43:d1:48:96:d1:47:aa:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:95:32:DB:7C:3F:7F:61:A2:68:F4:AD:91:78:DC:14:E4:70:A8:AB
            X509v3 Authority Key Identifier:
                keyid:AD:C2:19:C6:9D:CB:C4:DE:99:07:FA:79:84:DB:2D:08:1D:7B:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:76:48:80:95:3a:46:bf:9b:5e:11:09:b7:7b:c5:97:d2:f9:
         56:8f:d6:59:d0:50:a3:d1:4d:3f:55:ae:fc:57:e4:8c:74:8a:
         38:b5:75:57:c1:73:62:b2:53:e2:45:60:fa:bf:e7:ce:bc:18:
         f2:d6:9d:fc:ef:39:62:9f:1a:41:96:3c:26:78:cc:57:38:90:
         3d:64:ab:69:62:e7:8e:dc:9b:5d:16:be:de:e3:d3:dd:61:6c:
         9b:33:c8:c2:85:c3:5e:db:d7:b8:f9:84:be:47:24:57:36:2e:
         f1:71:c6:44:72:cc:40:9c:30:e3:2e:58:30:c1:6a:9e:a0:2c:
         5f:79:82:54:1b:be:9d:be:c8:e2:b6:3e:97:2f:3b:d7:f3:24:
         18:b8:e5:4a:97:b1:c5:f9:83:41:0d:c7:0d:e0:3d:dc:79:85:
         34:92:50:c5:f1:44:02:10:c4:63:ad:1c:2d:79:d9:f1:5a:7c:
         47:dd:f3:05:f9:b4:3f:24:6d:60:86:43:77:0a:7f:e5:c0:c5:
         e1:b3:de:ef:b3:57:a3:37:bc:8c:be:a3:3c:a5:5a:3f:e4:60:
         ea:ec:7f:b4:7a:e7:c2:72:c7:2c:15:fd:ea:09:67:81:e7:90:
         37:4e:b9:4f:3d:c7:c8:6d:98:36:d5:49:21:83:31:28:64:f3:
         98:c1:06:4b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVEljvQUKuuU2Iva/UruIwhH9s6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDMjE5QzY5RENCQzRERTk5MDdGQTc5ODREQjJEMDgx
RDdCRDc2MDAeFw0yMzA1MjQxOTEzMjhaFw0yNDA1MjIxOTE4MjhaMDMxMTAvBgNV
BAMTKEZEOTUzMkRCN0MzRjdGNjFBMjY4RjRBRDkxNzhEQzE0RTQ3MEE4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsy+YIqoT1ym2euRbOXuWwo6f
wC2EB4PEJ6h3Ysgs9dLrxdgYCeD+0ydMOoKfz/g5cXtFQq56iD+SdgcVH4XprvuU
wi297FWaURUNYW+cFzB+rtCAmJRNU5U2jZ5HcL+iFfCW4REPD+hqqYdXEXHGPXKl
ZjY6f3wlv1z0Vu2YvsPLhlS5XGCfq6TCgXiRqefj00bZaC1K9acj9oY6wjP9p/Aa
kyIGPWpN2ap9O/B23p/mvAq/jXUWSeYOV+qh8bA2rTXRdOAYlIzeiDLreOLUpoXR
3Iq5yxcCZUQgEwZcpHX/Y2oK9oNsc6m/KZC81W/kw1pfXPkSQ9FIltFHqvdxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/ZUy23w/f2GiaPStkXjcFORwqKswHwYDVR0j
BBgwFoAUrcIZxp3LxN6ZB/p5hNstCB1712AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1jTWkyR3RKaWY2SmlDVGNoczNEdzJ3ekRyUXZDY0FDMXJiMkI1OVh2
UE4vMC9BREMyMTlDNjlEQ0JDNERFOTkwN0ZBNzk4NERCMkQwODFEN0JENzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQzIxOUM2OURDQkM0REU5
OTA3RkE3OTg0REIyRDA4MUQ3QkQ3NjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNY01pMkd0SmlmNkppQ1RjaHMzRHcyd3pEclF2Q2NBQzFyYjJCNTlYdlBOLzAv
MzEzNzM3MmUzODM2MmUzMTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzgzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBFdkiAlTpG
v5teEQm3e8WX0vlWj9ZZ0FCj0U0/Va78V+SMdIo4tXVXwXNislPiRWD6v+fOvBjy
1p387zlinxpBljwmeMxXOJA9ZKtpYueO3JtdFr7e49PdYWybM8jChcNe29e4+YS+
RyRXNi7xccZEcsxAnDDjLlgwwWqeoCxfeYJUG76dvsjitj6XLzvX8yQYuOVKl7HF
+YNBDccN4D3ceYU0klDF8UQCEMRjrRwtednxWnxH3fMF+bQ/JG1ghkN3Cn/lwMXh
s97vs1ejN7yMvqM8pVo/5GDq7H+0eufCcscsFf3qCWeB55A3TrlPPcfIbZg21Ukh
gzEoZPOYwQZL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org