Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3234203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32322d3234203d3e20323633333936.roa (raw, json)
Hash identifier:          76P0uYspLEVDy3MEdjC5+9zlQQZVHeUufUabvLisZMk=
Subject key identifier:   4D:E1:8D:42:58:50:28:21:49:2D:E5:3B:AA:12:98:9A:F1:B9:E6:63
Certificate issuer:       /CN=3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189
Certificate serial:       1AE7DF7841FBC4C512E979D957F2EFE060BFE528
Authority key identifier: 3C:67:64:B5:90:CA:DB:46:BD:3F:31:FC:B0:3F:8A:3C:3C:E6:B1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3234203d3e20323633333936.roa
Signing time:             Wed 08 Jun 2022 14:00:00 +0000
ROA not before:           Wed 08 Jun 2022 13:55:00 +0000
ROA not after:            Wed 07 Jun 2023 14:00:00 +0000
asID:                     263396
IP address blocks:        177.125.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:df:78:41:fb:c4:c5:12:e9:79:d9:57:f2:ef:e0:60:bf:e5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189
        Validity
            Not Before: Jun  8 13:55:00 2022 GMT
            Not After : Jun  7 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:55:ec:37:f7:ac:b6:35:a8:f6:ad:c1:9f:
                    fb:47:53:90:16:f1:c8:83:d2:63:12:75:e0:bd:83:
                    74:ee:6b:29:ec:10:4f:c4:f1:0c:78:b6:c1:37:a2:
                    7e:f5:8f:ee:83:3f:6c:68:46:cb:fb:85:bc:3e:31:
                    f9:4c:96:a1:dd:5c:5e:5b:96:ed:ab:8a:00:f5:c4:
                    b3:cc:71:0d:9d:85:72:88:92:1f:19:75:33:b9:85:
                    6b:94:88:8b:03:f2:99:cc:e2:16:ff:55:02:8a:c4:
                    90:2c:b9:bf:42:5f:3b:35:6e:be:cf:b6:0a:66:e5:
                    b8:54:2a:8a:8e:46:72:2b:b6:a3:b2:b4:62:17:ba:
                    d3:c5:56:f7:58:24:7d:22:d0:79:88:5a:28:b5:f7:
                    a1:be:26:fd:9b:ef:b9:78:d8:92:82:9a:87:8b:60:
                    58:a9:fd:d6:cb:ef:65:7d:7c:88:82:57:58:60:df:
                    a2:27:4a:2b:6d:0e:0a:79:cd:b7:dc:46:be:73:2d:
                    aa:2b:8a:33:c1:3a:bf:67:fe:a8:8e:ab:bc:29:7a:
                    72:b6:5c:f1:70:95:4f:4b:be:de:5d:e4:90:4d:a3:
                    1a:05:78:66:0a:e7:e0:4f:11:1c:0e:1b:e9:bc:cf:
                    28:66:2e:3a:cb:fa:6e:dc:91:ff:0f:f2:30:c8:31:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:8D:42:58:50:28:21:49:2D:E5:3B:AA:12:98:9A:F1:B9:E6:63
            X509v3 Authority Key Identifier:
                keyid:3C:67:64:B5:90:CA:DB:46:BD:3F:31:FC:B0:3F:8A:3C:3C:E6:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6764B590CADB46BD3F31FCB03F8A3C3CE6B189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3234203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:c7:7f:bc:59:a0:18:70:51:f2:c6:62:01:96:e2:6f:f1:
         5f:55:91:b3:38:1f:b0:a3:e2:e5:a8:85:ce:55:2c:77:73:68:
         db:7e:f3:ce:9b:76:dd:28:96:82:5c:ec:28:e3:ca:23:28:0d:
         02:d2:d0:d8:60:08:18:bd:13:49:44:e2:b1:28:04:02:8f:1b:
         b3:f4:ba:8a:fb:4e:fe:0b:ca:9a:51:3d:43:e4:a4:4d:7d:76:
         e5:ff:c8:f4:0a:07:e7:2c:5c:4f:80:63:3f:08:84:fe:53:bc:
         9a:f2:bd:eb:6f:f0:91:71:56:9b:17:97:46:07:18:b9:2d:42:
         e0:b4:f0:33:02:c6:ff:e9:56:22:08:75:c3:66:36:57:ce:da:
         20:83:a3:fc:f2:01:0e:09:96:71:05:9a:22:89:e7:99:82:14:
         96:b2:1b:ab:01:21:a4:34:8d:0e:d6:c1:80:e8:2d:34:74:bc:
         06:f9:7d:c0:23:b8:c8:57:1d:c9:3e:c4:88:d7:d9:c0:6f:68:
         92:b0:85:67:64:69:03:99:fb:e4:00:91:9c:0b:97:9e:26:a8:
         a2:95:58:8a:33:7f:b0:6f:2f:0b:3f:d8:39:49:67:e6:13:68:
         09:81:fa:ed:ca:01:f5:62:8a:8d:10:72:f1:69:42:c3:34:5d:
         6a:e6:b4:ca
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUGuffeEH7xMUS6XnZV/Lv4GC/5SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M2NzY0QjU5MENBREI0NkJEM0YzMUZDQjAzRjhBM0Mz
Q0U2QjE4OTAeFw0yMjA2MDgxMzU1MDBaFw0yMzA2MDcxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRGRTU1RUMzN0Y3QUNCNjM1
QThGNkFEQzE5RkZCNDc1MzkwMTZGMUM4ODNEMjYzMTI3NUUwQkQ4Mzc0RUU2QjI5
RUMxMDRGQzRGMTBDNzhCNkMxMzdBMjdFRjU4RkVFODMzRjZDNjg0NkNCRkI4NUJD
M0UzMUY5NEM5NkExREQ1QzVFNUI5NkVEQUI4QTAwRjVDNEIzQ0M3MTBEOUQ4NTcy
ODg5MjFGMTk3NTMzQjk4NTZCOTQ4ODhCMDNGMjk5Q0NFMjE2RkY1NTAyOEFDNDkw
MkNCOUJGNDI1RjNCMzU2RUJFQ0ZCNjBBNjZFNUI4NTQyQThBOEU0NjcyMkJCNkEz
QjJCNDYyMTdCQUQzQzU1NkY3NTgyNDdEMjJEMDc5ODg1QTI4QjVGN0ExQkUyNkZE
OUJFRkI5NzhEODkyODI5QTg3OEI2MDU4QTlGREQ2Q0JFRjY1N0Q3Qzg4ODI1NzU4
NjBERkEyMjc0QTJCNkQwRTBBNzlDREI3REM0NkJFNzMyREFBMkI4QTMzQzEzQUJG
NjdGRUE4OEVBQkJDMjk3QTcyQjY1Q0YxNzA5NTRGNEJCRURFNURFNDkwNERBMzFB
MDU3ODY2MEFFN0UwNEYxMTFDMEUxQkU5QkNDRjI4NjYyRTNBQ0JGQTZFREM5MUZG
MEZGMjMwQzgzMTU4MTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtP5V7Df3rLY1qPatwZ/7R1OQFvHIg9JjEnXgvYN07msp7BBPxPEM
eLbBN6J+9Y/ugz9saEbL+4W8PjH5TJah3VxeW5btq4oA9cSzzHENnYVyiJIfGXUz
uYVrlIiLA/KZzOIW/1UCisSQLLm/Ql87NW6+z7YKZuW4VCqKjkZyK7ajsrRiF7rT
xVb3WCR9ItB5iFootfehvib9m++5eNiSgpqHi2BYqf3Wy+9lfXyIgldYYN+iJ0or
bQ4Kec233Ea+cy2qK4ozwTq/Z/6ojqu8KXpytlzxcJVPS77eXeSQTaMaBXhmCufg
TxEcDhvpvM8oZi46y/pu3JH/D/IwyDFYFQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FE3hjUJYUCghSS3lO6oSmJrxueZjMB8GA1UdIwQYMBaAFDxnZLWQyttGvT8x/LA/
ijw85rGJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdNSnk4alZFalU2Y2My
U1FFZnBYeHp0VkpSamhrb1Y5RHM2NE1xbWUyU0VSLzAvM0M2NzY0QjU5MENBREI0
NkJEM0YzMUZDQjAzRjhBM0MzQ0U2QjE4OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQzY3NjRCNTkwQ0FEQjQ2QkQzRjMxRkNCMDNGOEEzQzNDRTZC
MTg5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TUp5OGpWRWpVNmNjMlNRRWZw
WHh6dFZKUmpoa29WOURzNjRNcW1lMlNFUi8wLzMxMzczNzJlMzEzMjM1MmUzMjM1
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzMzM5MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKxffwwDQYJKoZIhvcNAQELBQADggEBAD24x3+8WaAYcFHyxmIBluJv8V9VkbM4
H7Cj4uWohc5VLHdzaNt+886bdt0oloJc7CjjyiMoDQLS0NhgCBi9E0lE4rEoBAKP
G7P0uor7Tv4LyppRPUPkpE19duX/yPQKB+csXE+AYz8IhP5TvJryvetv8JFxVpsX
l0YHGLktQuC08DMCxv/pViIIdcNmNlfO2iCDo/zyAQ4JlnEFmiKJ55mCFJayG6sB
IaQ0jQ7WwYDoLTR0vAb5fcAjuMhXHck+xIjX2cBvaJKwhWdkaQOZ++QAkZwLl54m
qKKVWIozf7BvLws/2DlJZ+YTaAmB+u3KAfViio0QcvFpQsM0XWrmtMo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org