Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          VCBqpfUswHOmkeumygFkLtghzy4yV10iIfItGlqxWQQ=
Subject key identifier:   C7:A0:C6:D8:A6:C0:52:8D:00:6B:41:9A:DF:97:E6:7C:E0:B4:38:2D
Certificate issuer:       /CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
Certificate serial:       6232BD166A5CC3468BEB51925D58779397EDEA88
Authority key identifier: C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa
Signing time:             Fri 15 Sep 2023 17:44:53 +0000
ROA not before:           Fri 15 Sep 2023 17:39:53 +0000
ROA not after:            Fri 13 Sep 2024 17:44:53 +0000
asID:                     271179
IP address blocks:        179.51.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:bd:16:6a:5c:c3:46:8b:eb:51:92:5d:58:77:93:97:ed:ea:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Validity
            Not Before: Sep 15 17:39:53 2023 GMT
            Not After : Sep 13 17:44:53 2024 GMT
        Subject: CN=C7A0C6D8A6C0528D006B419ADF97E67CE0B4382D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:44:4d:0e:19:ea:04:54:a5:85:e5:a7:fc:
                    c9:ae:a8:70:f7:3e:65:9c:e9:40:e3:23:51:66:fd:
                    b2:3d:eb:e7:51:ce:c3:83:a2:17:db:a9:89:4a:35:
                    4e:1e:38:ab:e9:38:9c:d8:0e:18:b5:f9:d4:2d:0f:
                    34:a4:23:00:0c:d0:4a:14:82:a0:85:70:75:38:6a:
                    9c:83:6b:84:38:af:20:34:d3:57:f1:94:d6:09:51:
                    55:7e:28:6a:bf:88:73:27:dc:c6:18:e5:3d:cf:30:
                    00:1f:d0:4d:c2:89:ba:54:24:30:cd:f6:4d:26:3a:
                    0e:52:d2:1c:5a:0c:3a:dc:06:6f:65:fa:4f:ca:5c:
                    bb:81:96:6d:53:8e:40:3a:0d:7e:fd:cc:9d:ae:a9:
                    32:38:08:9b:43:30:29:58:fa:8f:03:90:e3:e6:f0:
                    f8:46:37:5a:35:a8:db:09:31:d8:bc:80:07:96:69:
                    b5:69:08:50:64:ce:9d:b6:b5:85:88:a5:7c:23:f0:
                    fc:08:e2:45:e8:a6:4d:83:a0:53:7b:1f:05:61:a1:
                    8f:a0:c7:8b:23:2f:6c:13:93:97:8a:ec:a7:e7:d2:
                    ca:0a:4e:6b:20:32:0f:a9:68:b7:db:8a:55:b2:5e:
                    81:65:17:66:7b:4a:0d:16:0e:e3:bd:01:9b:99:aa:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:C6:D8:A6:C0:52:8D:00:6B:41:9A:DF:97:E6:7C:E0:B4:38:2D
            X509v3 Authority Key Identifier:
                keyid:C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:61:ce:58:09:41:5d:28:1b:4b:9a:b5:a6:51:4e:af:84:
         af:5d:e9:8e:e0:43:67:ab:1e:36:80:8c:ed:bc:f5:b1:5a:81:
         fe:95:4b:06:fe:78:af:b5:48:c1:79:0b:4d:88:fb:d3:6f:cb:
         df:9f:76:1e:66:39:fd:24:2d:16:76:6e:ac:91:ab:c3:34:51:
         fd:54:43:07:be:fb:c3:55:c7:c8:b6:21:c1:37:a2:a4:ad:2b:
         f7:07:48:66:5b:d1:fd:50:90:32:14:2e:c6:95:61:17:09:68:
         51:af:36:29:08:a2:a7:9a:f1:d1:ae:a0:1e:81:30:16:2e:6c:
         15:92:65:62:12:96:1c:eb:73:85:d4:ee:2b:d8:b9:bf:58:6e:
         76:e7:b1:8f:01:b2:a1:12:14:f2:e5:47:bb:c0:99:ba:ee:17:
         05:1d:6a:34:3e:d6:8b:4f:db:2f:8d:5a:90:22:da:ed:68:7e:
         6b:fd:f2:71:8f:b9:d7:56:20:1c:09:40:74:fd:69:e4:d2:91:
         a3:a3:44:4b:4b:dd:41:30:af:d4:26:18:fb:a1:04:8b:f9:d7:
         61:87:f3:c8:06:2b:e7:36:30:37:a2:50:b4:4a:4a:4a:03:4e:
         d3:21:2b:dd:74:bf:97:ae:d6:4d:d0:10:7c:1f:58:41:09:f6:
         0b:60:61:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYjK9Fmpcw0aL61GSXVh3k5ft6ogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRBRTI1REUzNTA2RTFCNEM0M0NCOURFMEU5NjE1N0Qx
Q0NBQ0E1RjAeFw0yMzA5MTUxNzM5NTNaFw0yNDA5MTMxNzQ0NTNaMDMxMTAvBgNV
BAMTKEM3QTBDNkQ4QTZDMDUyOEQwMDZCNDE5QURGOTdFNjdDRTBCNDM4MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj90RNDhnqBFSlheWn/MmuqHD3
PmWc6UDjI1Fm/bI96+dRzsODohfbqYlKNU4eOKvpOJzYDhi1+dQtDzSkIwAM0EoU
gqCFcHU4apyDa4Q4ryA001fxlNYJUVV+KGq/iHMn3MYY5T3PMAAf0E3CibpUJDDN
9k0mOg5S0hxaDDrcBm9l+k/KXLuBlm1TjkA6DX79zJ2uqTI4CJtDMClY+o8DkOPm
8PhGN1o1qNsJMdi8gAeWabVpCFBkzp22tYWIpXwj8PwI4kXopk2DoFN7HwVhoY+g
x4sjL2wTk5eK7Kfn0soKTmsgMg+paLfbilWyXoFlF2Z7Sg0WDuO9AZuZqr51AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx6DG2KbAUo0Aa0Ga35fmfOC0OC0wHwYDVR0j
BBgwFoAUxK4l3jUG4bTEPLneDpYVfRzKyl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx
WkgvMC9DNEFFMjVERTM1MDZFMUI0QzQzQ0I5REUwRTk2MTU3RDFDQ0FDQTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M0QUUyNURFMzUwNkUxQjRD
NDNDQjlERTBFOTYxNTdEMUNDQUNBNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZZ1VDRmpFTmJpTGc0RkxCem9rV0Rnam83VUhOOExLaldKRHpob1N4MVpILzAv
MzEzNzM5MmUzNTMxMmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzM5QwDQYJKoZIhvcNAQELBQADggEBAA4zYc5Y
CUFdKBtLmrWmUU6vhK9d6Y7gQ2erHjaAjO289bFagf6VSwb+eK+1SMF5C02I+9Nv
y9+fdh5mOf0kLRZ2bqyRq8M0Uf1UQwe++8NVx8i2IcE3oqStK/cHSGZb0f1QkDIU
LsaVYRcJaFGvNikIoqea8dGuoB6BMBYubBWSZWISlhzrc4XU7ivYub9YbnbnsY8B
sqESFPLlR7vAmbruFwUdajQ+1otP2y+NWpAi2u1ofmv98nGPuddWIBwJQHT9aeTS
kaOjREtL3UEwr9QmGPuhBIv512GH88gGK+c2MDeiULRKSkoDTtMhK910v5eu1k3Q
EHwfWEEJ9gtgYbo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org