Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32332d3233203d3e20323633313436.roa
File:                     3138372e38362e3230322e302f32332d3233203d3e20323633313436.roa (raw, json)
Hash identifier:          oFQWlBzWXWEsBiQoD8GzPScrzJifhYZSldvv7bz6ROw=
Subject key identifier:   2E:E2:CF:F2:D8:44:D3:DD:E0:A3:16:7E:2E:FD:8C:04:46:6A:6D:24
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       1AE914AAD7F45DE4174C798E06FE21E87FCF3282
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32332d3233203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:43 +0000
ROA not before:           Tue 27 Feb 2024 17:25:43 +0000
ROA not after:            Tue 25 Feb 2025 17:30:43 +0000
asID:                     263146
IP address blocks:        187.86.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:14:aa:d7:f4:5d:e4:17:4c:79:8e:06:fe:21:e8:7f:cf:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:43 2024 GMT
            Not After : Feb 25 17:30:43 2025 GMT
        Subject: CN=2EE2CFF2D844D3DDE0A3167E2EFD8C04466A6D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:1d:8e:7e:78:2e:93:a2:d3:56:a1:a2:0a:
                    e7:75:b2:ed:d0:46:db:5a:23:92:ae:92:a9:09:6c:
                    59:8c:0d:b9:9a:ad:ad:98:80:72:d3:c0:5a:de:47:
                    a1:21:69:1a:47:dd:65:0d:02:f1:bb:d6:0a:38:13:
                    1a:44:7b:35:d9:39:de:06:50:87:3a:ad:e3:67:e8:
                    d2:a1:77:42:ab:bc:6d:5b:85:13:ca:a6:93:21:8f:
                    4b:02:30:38:59:5c:a3:33:a1:f4:4f:f6:95:bb:a1:
                    43:26:03:ca:01:85:fb:ae:1b:13:3a:7a:7d:0a:f9:
                    d8:05:20:49:ba:b5:9a:a8:2f:f7:6f:32:2d:20:62:
                    b9:a3:82:bd:9f:21:99:1a:ae:8d:44:43:d3:93:d4:
                    72:ff:09:2a:e0:45:60:db:56:98:58:2b:91:21:33:
                    97:5d:5c:ad:03:71:88:84:b3:2b:2c:98:14:cc:f3:
                    1e:e9:ee:74:e5:72:8a:24:cd:eb:0f:67:1a:5c:db:
                    89:2d:55:be:bd:e2:54:19:fa:4b:2e:da:be:9e:e8:
                    2a:80:8c:69:b6:2f:18:06:f8:1c:7d:4d:28:8b:32:
                    a6:58:41:17:e9:ca:40:72:85:ea:4b:f4:18:70:5f:
                    67:4c:10:06:9a:6c:7a:6d:e7:ea:0e:24:5f:02:b7:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:CF:F2:D8:44:D3:DD:E0:A3:16:7E:2E:FD:8C:04:46:6A:6D:24
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32332d3233203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ae:53:6e:cd:b8:6c:c0:64:f4:3a:b1:f9:ad:22:73:18:6d:
         7c:a0:ea:4e:b2:a6:ad:47:7d:6b:37:b0:fe:e2:0b:28:ba:00:
         4b:b4:fd:2c:79:a4:81:50:c1:f1:be:56:3f:d8:6e:60:6a:2b:
         67:d8:11:0c:91:6b:98:b2:b9:41:4b:6c:80:0d:a1:52:39:fd:
         16:6a:a1:ef:b0:a2:f9:bd:9a:b1:b0:c0:27:1e:75:50:51:82:
         68:c6:98:18:16:93:07:99:50:b4:be:83:91:f5:8a:3a:e3:ee:
         e3:a1:7e:06:55:1b:39:df:40:28:1c:10:96:80:66:88:8a:fe:
         21:ca:ed:5f:2e:f0:9d:6b:dd:25:b6:ef:52:60:bc:1e:f5:39:
         74:bb:e5:1e:14:59:3d:c6:c1:d7:4e:92:16:f6:31:a2:4a:2c:
         70:2d:99:2f:7e:27:fc:a0:14:27:12:06:2c:99:f5:c7:19:e0:
         ef:6b:04:4d:cd:e0:fe:e9:c9:c4:e1:88:a0:5d:0b:70:f9:4b:
         ed:53:0e:89:ec:e4:19:2a:14:42:b7:aa:a6:ca:de:6c:e8:9c:
         56:94:0c:72:35:5c:1d:77:b1:5d:f8:52:0e:ab:06:78:75:8c:
         5c:a8:18:50:3a:51:77:6d:eb:c0:f7:7a:12:75:81:1c:b4:92:
         dd:7d:8b:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGukUqtf0XeQXTHmOBv4h6H/PMoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNzMwMzFGNEQ0MjVERjA5REI3MzFFNEY3QUMxMDEx
REU2NkYxOTAeFw0yNDAyMjcxNzI1NDNaFw0yNTAyMjUxNzMwNDNaMDMxMTAvBgNV
BAMTKDJFRTJDRkYyRDg0NEQzRERFMEEzMTY3RTJFRkQ4QzA0NDY2QTZEMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIsh2Ofnguk6LTVqGiCud1su3Q
RttaI5KukqkJbFmMDbmara2YgHLTwFreR6EhaRpH3WUNAvG71go4ExpEezXZOd4G
UIc6reNn6NKhd0KrvG1bhRPKppMhj0sCMDhZXKMzofRP9pW7oUMmA8oBhfuuGxM6
en0K+dgFIEm6tZqoL/dvMi0gYrmjgr2fIZkaro1EQ9OT1HL/CSrgRWDbVphYK5Eh
M5ddXK0DcYiEsyssmBTM8x7p7nTlcookzesPZxpc24ktVb694lQZ+ksu2r6e6CqA
jGm2LxgG+Bx9TSiLMqZYQRfpykByhepL9BhwX2dMEAaabHpt5+oOJF8Ct8IvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULuLP8thE093goxZ+Lv2MBEZqbSQwHwYDVR0j
BBgwFoAUQhcwMfTUJd8J23MeT3rBAR3mbxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMC80MjE3MzAzMUY0RDQyNURGMDlEQjczMUU0RjdBQzEwMTFERTY2RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMTczMDMxRjRENDI1REYw
OURCNzMxRTRGN0FDMTAxMURFNjZGMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzAv
MzEzODM3MmUzODM2MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7VsowDQYJKoZIhvcNAQELBQADggEBAKeuU27N
uGzAZPQ6sfmtInMYbXyg6k6ypq1HfWs3sP7iCyi6AEu0/Sx5pIFQwfG+Vj/YbmBq
K2fYEQyRa5iyuUFLbIANoVI5/RZqoe+wovm9mrGwwCcedVBRgmjGmBgWkweZULS+
g5H1ijrj7uOhfgZVGznfQCgcEJaAZoiK/iHK7V8u8J1r3SW271JgvB71OXS75R4U
WT3GwddOkhb2MaJKLHAtmS9+J/ygFCcSBiyZ9ccZ4O9rBE3N4P7pycThiKBdC3D5
S+1TDons5BkqFEK3qqbK3mzonFaUDHI1XB13sV34Ug6rBnh1jFyoGFA6UXdt68D3
ehJ1gRy0kt19i2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org