Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
File:                     3230312e35342e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          CkHyRSMvSbeqagRSSpQ3TOGKMJwJCsJtRfpl4uM9ON4=
Subject key identifier:   E3:9D:F0:D8:8E:42:F5:B2:71:E3:BF:ED:61:D2:BC:A2:AC:46:F5:FC
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       6EBE6E594A1F71A96830762EC79B52CBA1A784E5
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:03 +0000
ROA not before:           Tue 20 Feb 2024 16:52:03 +0000
ROA not after:            Tue 18 Feb 2025 16:57:03 +0000
asID:                     22689
IP address blocks:        201.54.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:be:6e:59:4a:1f:71:a9:68:30:76:2e:c7:9b:52:cb:a1:a7:84:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:03 2024 GMT
            Not After : Feb 18 16:57:03 2025 GMT
        Subject: CN=E39DF0D88E42F5B271E3BFED61D2BCA2AC46F5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:8e:1e:54:6a:dc:cb:90:7d:66:d7:6f:6e:
                    04:74:f9:66:42:ff:a6:45:f1:b9:bb:64:2e:06:dd:
                    3a:89:42:83:3a:49:4c:39:25:6c:7b:96:be:53:fd:
                    52:3b:e6:70:98:35:88:e2:a4:33:f1:79:5c:dc:d3:
                    f9:9b:db:36:06:e7:88:1c:d0:10:42:c6:64:2d:f4:
                    1f:5b:da:0f:7d:be:ae:17:ce:7c:52:0f:70:f1:4c:
                    e4:4d:81:a8:56:9b:eb:50:43:6b:b7:11:0e:c8:fd:
                    80:f7:a9:2e:52:ab:6c:5d:3f:5e:1e:85:a7:9b:25:
                    95:62:90:f7:c9:5b:7c:68:b2:19:ce:05:42:a5:82:
                    74:8b:30:26:83:36:09:ad:40:ad:da:23:c8:51:bf:
                    8d:c5:f9:65:6b:3a:9d:b3:c9:10:de:83:2f:3d:8a:
                    d2:c4:c6:70:72:32:fd:3d:78:4c:d1:65:14:9d:dd:
                    32:14:f8:9f:96:2b:00:d5:e0:01:8f:d6:46:ee:78:
                    7a:4e:93:77:3d:6b:0a:c9:11:d5:2c:98:f9:56:70:
                    53:19:c9:54:f6:42:f0:07:21:c8:c9:81:31:d5:8c:
                    01:2e:91:45:7d:84:cc:1d:d3:dd:98:9e:a9:c6:a6:
                    ca:9a:f7:cd:9c:a7:59:aa:80:dc:8f:0a:08:36:d3:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:F0:D8:8E:42:F5:B2:71:E3:BF:ED:61:D2:BC:A2:AC:46:F5:FC
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:c0:92:ee:84:84:fd:ea:0e:e2:c8:4f:81:eb:42:41:1f:
         c0:cc:18:16:25:ea:be:1b:e4:17:33:0a:1e:1e:1d:f0:a9:02:
         ee:21:29:f6:c4:00:e2:df:5d:af:52:8b:41:08:4d:13:40:3f:
         e9:da:c1:ec:73:98:8d:93:34:db:f1:b4:c8:b3:eb:5c:0e:14:
         ac:32:d9:b0:eb:6a:8e:2f:c7:40:e6:b6:ed:a8:80:b5:4b:55:
         45:bf:20:07:70:ad:7c:95:1d:87:44:b9:d7:67:38:03:71:ea:
         db:f7:02:e6:6a:7e:97:a1:88:31:cd:a3:8c:23:0c:36:bd:2f:
         34:7e:46:15:07:76:8b:8e:81:63:22:8e:44:5d:bf:b4:39:e7:
         1c:17:76:57:9a:3f:ed:39:46:e6:a5:39:51:bb:f3:6b:51:61:
         bd:b5:a8:c9:df:ab:99:c8:cb:df:f6:ac:f7:0b:79:89:e2:70:
         a5:38:a8:f8:7a:12:d8:29:54:aa:da:58:c6:df:ad:7d:a3:f3:
         27:97:f0:e8:29:40:f9:8e:16:03:64:a4:74:50:11:8b:d7:09:
         98:5f:6c:2f:1b:be:94:21:5e:5d:3c:05:53:df:60:b3:da:53:
         30:d9:17:e0:15:f7:ed:dd:bf:70:86:70:f2:7a:05:ae:f1:7b:
         fe:76:54:47
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbr5uWUofcaloMHYux5tSy6GnhOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBOUQ4MTBCQkRBODFBRjhFQURDODBDNDRBOTM2RkE1
QUQ2MzAzRTAeFw0yNDAyMjAxNjUyMDNaFw0yNTAyMTgxNjU3MDNaMDMxMTAvBgNV
BAMTKEUzOURGMEQ4OEU0MkY1QjI3MUUzQkZFRDYxRDJCQ0EyQUM0NkY1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwY4eVGrcy5B9ZtdvbgR0+WZC
/6ZF8bm7ZC4G3TqJQoM6SUw5JWx7lr5T/VI75nCYNYjipDPxeVzc0/mb2zYG54gc
0BBCxmQt9B9b2g99vq4XznxSD3DxTORNgahWm+tQQ2u3EQ7I/YD3qS5Sq2xdP14e
haebJZVikPfJW3xoshnOBUKlgnSLMCaDNgmtQK3aI8hRv43F+WVrOp2zyRDegy89
itLExnByMv09eEzRZRSd3TIU+J+WKwDV4AGP1kbueHpOk3c9awrJEdUsmPlWcFMZ
yVT2QvAHIcjJgTHVjAEukUV9hMwd092YnqnGpsqa982cp1mqgNyPCgg20ypvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU453w2I5C9bJx47/tYdK8oqxG9fwwHwYDVR0j
BBgwFoAUYKnYELvaga+OrcgMRKk2+lrWMD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VtRFBqeWR2YTdlNHVkZHhMdDlhY21ONjJ4UjE1ZVYzVU1zZ3hWVWs3
NlMvMC82MEE5RDgxMEJCREE4MUFGOEVBREM4MEM0NEE5MzZGQTVBRDYzMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYwQTlEODEwQkJEQTgxQUY4
RUFEQzgwQzQ0QTkzNkZBNUFENjMwM0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFbURQanlkdmE3ZTR1ZGR4THQ5YWNtTjYyeFIxNWVWM1VNc2d4VlVrNzZTLzAv
MzIzMDMxMmUzNTM0MmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzMjM2
MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBsk2QDANBgkqhkiG9w0BAQsFAAOCAQEAAOfAku6EhP3q
DuLIT4HrQkEfwMwYFiXqvhvkFzMKHh4d8KkC7iEp9sQA4t9dr1KLQQhNE0A/6drB
7HOYjZM02/G0yLPrXA4UrDLZsOtqji/HQOa27aiAtUtVRb8gB3CtfJUdh0S512c4
A3Hq2/cC5mp+l6GIMc2jjCMMNr0vNH5GFQd2i46BYyKORF2/tDnnHBd2V5o/7TlG
5qU5Ubvza1FhvbWoyd+rmcjL3/as9wt5ieJwpTio+HoS2ClUqtpYxt+tfaPzJ5fw
6ClA+Y4WA2SkdFARi9cJmF9sLxu+lCFeXTwFU99gs9pTMNkX4BX37d2/cIZw8noF
rvF7/nZURw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org