Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa
File:                     3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          IEH9g8USq+RllQnTE1pkxDdqhMsrZchTkRnDPNchL0s=
Subject key identifier:   52:F0:62:05:F6:57:3D:62:B8:A6:50:C4:AE:63:78:17:88:6C:A3:10
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       69B557C3E79C1FDB617B06424BE52B1A370906B2
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa
Signing time:             Thu 19 Aug 2021 19:20:00 +0000
ROA not before:           Thu 19 Aug 2021 19:15:00 +0000
ROA not after:            Thu 18 Aug 2022 19:20:00 +0000
asID:                     262481
IP address blocks:        143.137.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b5:57:c3:e7:9c:1f:db:61:7b:06:42:4b:e5:2b:1a:37:09:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Aug 19 19:15:00 2021 GMT
            Not After : Aug 18 19:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:73:c4:8f:31:2c:25:c4:cb:20:2f:fc:aa:
                    88:7d:0d:33:d9:0c:b6:61:3c:ac:34:dd:18:12:61:
                    ad:15:1e:7c:62:3e:82:c3:ef:aa:99:40:69:21:6f:
                    10:80:8c:6e:fc:d6:ed:90:c2:85:e0:5f:72:d6:57:
                    9d:54:96:7f:30:10:b8:65:b5:b8:ed:0f:c0:49:00:
                    b4:e3:38:4e:94:47:36:3c:7e:84:36:36:6d:0d:01:
                    c8:9c:14:cb:76:f4:ff:a0:c3:e9:ba:ce:bf:2c:17:
                    13:93:6d:18:de:9d:93:da:2f:8b:08:f7:3a:dd:57:
                    8e:88:74:4d:ae:ed:9e:89:43:97:5f:42:12:07:4a:
                    ff:a3:93:0b:7c:f1:6f:33:e6:92:0d:66:4f:c5:d5:
                    b0:24:58:c3:cf:b0:8e:1f:95:97:3c:6a:30:a2:03:
                    80:16:48:6b:f8:6e:88:1a:f8:9a:02:a3:ee:a7:be:
                    aa:19:17:17:ff:80:04:50:f9:00:68:7c:34:c0:2c:
                    80:a1:6e:17:aa:a6:20:1d:e5:8a:7f:dd:b9:a6:c5:
                    47:07:3e:14:70:8b:c5:2e:19:a4:ce:84:d8:95:c9:
                    a1:ce:05:11:31:ad:3e:71:63:cf:21:0f:e4:64:b4:
                    c7:bd:23:52:d4:e0:c4:3d:ff:2e:4f:7e:ea:1e:54:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:62:05:F6:57:3D:62:B8:A6:50:C4:AE:63:78:17:88:6C:A3:10
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3134332e3133372e37322e302f32322d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:6d:39:7b:79:28:d6:de:17:2e:b9:ae:5a:b9:94:3c:d6:
         db:df:ce:a6:16:76:3b:8f:57:67:0a:86:80:6e:9d:74:18:9f:
         a7:3c:2b:dd:c3:02:0d:01:09:7d:11:d8:e3:8c:2f:e9:f6:7e:
         75:f5:20:54:1f:48:7e:db:99:78:82:f2:79:92:2a:b4:70:9c:
         80:0c:8d:a0:85:bf:b1:ed:92:ff:12:e8:e4:89:58:51:b3:81:
         06:34:3d:da:73:45:02:6a:0d:58:e6:e8:28:33:99:f0:37:d2:
         e4:de:10:cd:be:a4:73:da:d2:f3:9e:b8:9d:61:27:d6:73:67:
         b5:cf:3c:40:4e:e4:8c:ab:64:d5:85:66:95:c1:ff:56:a3:2f:
         e0:00:d5:60:ba:15:23:52:19:79:fb:19:c2:6e:ec:dd:4b:1a:
         de:f7:15:7b:b8:ea:49:c0:75:6a:f5:4e:f4:5e:d1:85:66:33:
         8c:64:3d:cf:a1:7d:f4:6b:a0:aa:26:26:54:e3:68:19:c0:c5:
         74:c4:8b:3a:4e:b3:f7:4d:27:fd:26:15:75:35:94:57:04:09:
         8b:7b:bb:b9:7f:fb:b9:85:76:b7:07:4c:b1:10:7c:e7:50:25:
         a7:a3:42:cb:b0:66:51:45:db:44:81:79:23:b7:08:b3:32:93:
         ce:40:7d:df
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUabVXw+ecH9thewZCS+UrGjcJBrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBQTY1QTUyNzFEMzFCMTQ4NjAyNDM3QUM2Mzg1RkU5
NkI0QUM2MDAeFw0yMTA4MTkxOTE1MDBaFw0yMjA4MTgxOTIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTVDMzczQzQ4RjMxMkMyNUM0
Q0IyMDJGRkNBQTg4N0QwRDMzRDkwQ0I2NjEzQ0FDMzRERDE4MTI2MUFEMTUxRTdD
NjIzRTgyQzNFRkFBOTk0MDY5MjE2RjEwODA4QzZFRkNENkVEOTBDMjg1RTA1Rjcy
RDY1NzlENTQ5NjdGMzAxMEI4NjVCNUI4RUQwRkMwNDkwMEI0RTMzODRFOTQ0NzM2
M0M3RTg0MzYzNjZEMEQwMUM4OUMxNENCNzZGNEZGQTBDM0U5QkFDRUJGMkMxNzEz
OTM2RDE4REU5RDkzREEyRjhCMDhGNzNBREQ1NzhFODg3NDREQUVFRDlFODk0Mzk3
NUY0MjEyMDc0QUZGQTM5MzBCN0NGMTZGMzNFNjkyMEQ2NjRGQzVENUIwMjQ1OEMz
Q0ZCMDhFMUY5NTk3M0M2QTMwQTIwMzgwMTY0ODZCRjg2RTg4MUFGODlBMDJBM0VF
QTdCRUFBMTkxNzE3RkY4MDA0NTBGOTAwNjg3QzM0QzAyQzgwQTE2RTE3QUFBNjIw
MURFNThBN0ZEREI5QTZDNTQ3MDczRTE0NzA4QkM1MkUxOUE0Q0U4NEQ4OTVDOUEx
Q0UwNTExMzFBRDNFNzE2M0NGMjEwRkU0NjRCNEM3QkQyMzUyRDRFMEM0M0RGRjJF
NEY3RUVBMUU1NEEwNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5cNzxI8xLCXEyyAv/KqIfQ0z2Qy2YTysNN0YEmGtFR58Yj6Cw++q
mUBpIW8QgIxu/NbtkMKF4F9y1ledVJZ/MBC4ZbW47Q/ASQC04zhOlEc2PH6ENjZt
DQHInBTLdvT/oMPpus6/LBcTk20Y3p2T2i+LCPc63VeOiHRNru2eiUOXX0ISB0r/
o5MLfPFvM+aSDWZPxdWwJFjDz7COH5WXPGowogOAFkhr+G6IGviaAqPup76qGRcX
/4AEUPkAaHw0wCyAoW4XqqYgHeWKf925psVHBz4UcIvFLhmkzoTYlcmhzgURMa0+
cWPPIQ/kZLTHvSNS1ODEPf8uT37qHlSgaQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFLwYgX2Vz1iuKZQxK5jeBeIbKMQMB8GA1UdIwQYMBaAFOGqZaUnHTGxSGAkN6xj
hf6WtKxgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdTYkNYajlpN3RRMUZj
WEdtNjVvRlRHMWt1ZUpqUkR3ZEtOczlrUHE4eU1OLzAvRTFBQTY1QTUyNzFEMzFC
MTQ4NjAyNDM3QUM2Mzg1RkU5NkI0QUM2MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMUFBNjVBNTI3MUQzMUIxNDg2MDI0MzdBQzYzODVGRTk2QjRB
QzYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83U2JDWGo5aTd0UTFGY1hHbTY1
b0ZURzFrdWVKalJEd2RLTnM5a1BxOHlNTi8wLzMxMzQzMzJlMzEzMzM3MmUzNzMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzQzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
j4lIMA0GCSqGSIb3DQEBCwUAA4IBAQAjxW05e3ko1t4XLrmuWrmUPNbb386mFnY7
j1dnCoaAbp10GJ+nPCvdwwINAQl9EdjjjC/p9n519SBUH0h+25l4gvJ5kiq0cJyA
DI2ghb+x7ZL/EujkiVhRs4EGND3ac0UCag1Y5ugoM5nwN9Lk3hDNvqRz2tLznrid
YSfWc2e1zzxATuSMq2TVhWaVwf9Woy/gANVguhUjUhl5+xnCbuzdSxre9xV7uOpJ
wHVq9U70XtGFZjOMZD3PoX30a6CqJiZU42gZwMV0xIs6TrP3TSf9JhV1NZRXBAmL
e7u5f/u5hXa3B0yxEHznUCWno0LLsGZRRdtEgXkjtwizMpPOQH3f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org