Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3234203d3e20323632353339.roa
File:                     3137372e37322e32342e302f32322d3234203d3e20323632353339.roa (raw, json)
Hash identifier:          HkqNABn4cleRrB1cncFxGD/I6BOSFKgU9W5hm8IGfs8=
Subject key identifier:   E4:A5:91:52:26:17:5E:A7:73:E6:63:EB:D7:1F:CA:23:96:27:95:41
Certificate issuer:       /CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
Certificate serial:       30BACD87E9A21694B685B0EE5BD08B5B0101EC0D
Authority key identifier: E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3234203d3e20323632353339.roa
Signing time:             Mon 12 Feb 2024 14:18:00 +0000
ROA not before:           Mon 12 Feb 2024 14:13:00 +0000
ROA not after:            Mon 10 Feb 2025 14:18:00 +0000
asID:                     262539
IP address blocks:        177.72.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:cd:87:e9:a2:16:94:b6:85:b0:ee:5b:d0:8b:5b:01:01:ec:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
        Validity
            Not Before: Feb 12 14:13:00 2024 GMT
            Not After : Feb 10 14:18:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:be:91:0f:71:1b:d5:f6:4e:d2:c2:05:d4:
                    6b:0a:af:e1:a6:66:79:4e:1c:6e:4a:aa:cd:eb:61:
                    fe:0f:48:42:2c:81:c2:9b:ef:dd:d8:ce:85:e6:43:
                    76:95:91:4e:57:96:37:56:27:35:74:72:92:44:72:
                    97:94:3f:02:79:60:0c:90:3e:97:47:37:20:c9:d0:
                    ef:a9:09:30:41:58:40:61:16:7b:88:16:aa:01:fe:
                    5d:86:9f:09:56:c3:25:4c:26:ea:78:cb:3b:61:18:
                    23:39:13:b7:a7:fd:4e:31:ea:fd:6f:87:61:45:0a:
                    65:53:c6:3c:9f:75:0c:fd:f4:13:9c:44:fc:b1:c4:
                    3d:f9:c7:50:5c:15:3d:ee:23:43:9d:d4:52:1c:be:
                    ab:2f:4d:31:ba:45:ef:11:4d:49:31:b6:29:ac:a8:
                    e3:70:bf:39:90:0a:4c:96:ff:d5:f8:2c:dc:ad:9f:
                    82:a7:94:8c:32:3a:56:92:9d:07:de:46:c3:3c:48:
                    cd:67:a0:64:1d:52:04:65:3a:77:49:83:24:97:8a:
                    01:b2:2c:f8:4e:53:d3:d9:b7:b6:2d:2f:12:6b:55:
                    2a:b9:49:08:ff:f2:90:06:ad:6c:5b:0d:59:e1:21:
                    e3:fb:c3:f4:6b:f4:5d:c4:2b:eb:2f:a5:9c:02:35:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:91:52:26:17:5E:A7:73:E6:63:EB:D7:1F:CA:23:96:27:95:41
            X509v3 Authority Key Identifier:
                keyid:E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137372e37322e32342e302f32322d3234203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:5a:57:9a:9d:c1:b8:c8:54:85:de:7f:5e:52:66:59:32:
         ff:31:bd:1e:8f:b4:e2:c8:1f:ce:ac:94:78:7f:61:fe:a2:fc:
         b8:f1:f6:66:70:5d:d1:a0:8a:15:bc:29:47:9e:09:70:aa:cf:
         a9:28:d5:60:3a:39:f1:35:e8:0d:8c:eb:62:a6:23:4c:e6:59:
         c4:9c:bb:3c:5f:7c:27:81:6c:55:13:0a:de:bf:88:b8:85:03:
         c9:86:08:95:61:e5:92:e6:48:d8:37:c3:d7:3b:50:92:af:fd:
         bb:21:cc:d6:04:eb:34:ba:ee:23:f6:fb:b9:eb:e9:fa:8f:03:
         98:a5:a3:a6:35:57:62:38:1b:93:c9:3c:08:4f:11:9c:8d:69:
         93:1d:a2:7c:d1:41:52:98:43:84:2b:a2:e3:6f:04:34:77:96:
         be:18:11:36:ca:92:44:60:9b:78:5e:04:13:4f:fe:e6:a1:54:
         b4:0f:69:3c:4a:6d:e8:f9:32:d8:1d:ba:93:c9:90:e1:34:46:
         b5:bd:13:02:17:a2:0a:f3:c9:71:79:b0:81:4a:90:20:e2:70:
         53:9b:7f:a7:1c:0b:a1:87:ef:37:ab:c8:57:02:5a:44:0b:bc:
         58:87:45:e1:98:7c:f6:c2:0e:7f:e3:34:80:20:89:03:8f:28:
         3b:82:fd:42
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUMLrNh+miFpS2hbDuW9CLWwEB7A0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1NUE2OENGQ0VFQzkyNUYxNDM4MjE5REYzREQ5NTgx
QkUwQjA4NDAeFw0yNDAyMTIxNDEzMDBaFw0yNTAyMTAxNDE4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1MEJFOTEwRjcxMUJENUY2
NEVEMkMyMDVENDZCMEFBRkUxQTY2Njc5NEUxQzZFNEFBQUNERUI2MUZFMEY0ODQy
MkM4MUMyOUJFRkRERDhDRTg1RTY0Mzc2OTU5MTRFNTc5NjM3NTYyNzM1NzQ3Mjky
NDQ3Mjk3OTQzRjAyNzk2MDBDOTAzRTk3NDczNzIwQzlEMEVGQTkwOTMwNDE1ODQw
NjExNjdCODgxNkFBMDFGRTVEODY5RjA5NTZDMzI1NEMyNkVBNzhDQjNCNjExODIz
MzkxM0I3QTdGRDRFMzFFQUZENkY4NzYxNDUwQTY1NTNDNjNDOUY3NTBDRkRGNDEz
OUM0NEZDQjFDNDNERjlDNzUwNUMxNTNERUUyMzQzOURENDUyMUNCRUFCMkY0RDMx
QkE0NUVGMTE0RDQ5MzFCNjI5QUNBOEUzNzBCRjM5OTAwQTRDOTZGRkQ1RjgyQ0RD
QUQ5RjgyQTc5NDhDMzIzQTU2OTI5RDA3REU0NkMzM0M0OENENjdBMDY0MUQ1MjA0
NjUzQTc3NDk4MzI0OTc4QTAxQjIyQ0Y4NEU1M0QzRDlCN0I2MkQyRjEyNkI1NTJB
Qjk0OTA4RkZGMjkwMDZBRDZDNUIwRDU5RTEyMUUzRkJDM0Y0NkJGNDVEQzQyQkVC
MkZBNTlDMDIzNTU1RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlC+kQ9xG9X2TtLCBdRrCq/hpmZ5ThxuSqrN62H+D0hCLIHCm+/d
2M6F5kN2lZFOV5Y3Vic1dHKSRHKXlD8CeWAMkD6XRzcgydDvqQkwQVhAYRZ7iBaq
Af5dhp8JVsMlTCbqeMs7YRgjORO3p/1OMer9b4dhRQplU8Y8n3UM/fQTnET8scQ9
+cdQXBU97iNDndRSHL6rL00xukXvEU1JMbYprKjjcL85kApMlv/V+CzcrZ+Cp5SM
MjpWkp0H3kbDPEjNZ6BkHVIEZTp3SYMkl4oBsiz4TlPT2be2LS8Sa1UquUkI//KQ
Bq1sWw1Z4SHj+8P0a/RdxCvrL6WcAjVV8wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FOSlkVImF16nc+Zj69cfyiOWJ5VBMB8GA1UdIwQYMBaAFORVpoz87skl8UOCGd89
2Vgb4LCEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZjdjd1Nm5Fc0pnZEdi
S1BwQm9jRmNEbzRHem9DemJraVBOd2IyM2NkZmM0LzAvRTQ1NUE2OENGQ0VFQzky
NUYxNDM4MjE5REYzREQ5NTgxQkUwQjA4NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FNDU1QTY4Q0ZDRUVDOTI1RjE0MzgyMTlERjNERDk1ODFCRTBC
MDg0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82Y3Y3dTZuRXNKZ2RHYktQcEJv
Y0ZjRG80R3pvQ3pia2lQTndiMjNjZGZjNC8wLzMxMzczNzJlMzczMjJlMzIzNDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM1MzMzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArFI
GDANBgkqhkiG9w0BAQsFAAOCAQEATKlaV5qdwbjIVIXef15SZlky/zG9Ho+04sgf
zqyUeH9h/qL8uPH2ZnBd0aCKFbwpR54JcKrPqSjVYDo58TXoDYzrYqYjTOZZxJy7
PF98J4FsVRMK3r+IuIUDyYYIlWHlkuZI2DfD1ztQkq/9uyHM1gTrNLruI/b7uevp
+o8DmKWjpjVXYjgbk8k8CE8RnI1pkx2ifNFBUphDhCui428ENHeWvhgRNsqSRGCb
eF4EE0/+5qFUtA9pPEpt6Pky2B26k8mQ4TRGtb0TAheiCvPJcXmwgUqQIOJwU5t/
pxwLoYfvN6vIVwJaRAu8WIdF4Zh89sIOf+M0gCCJA48oO4L9Qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org