Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137372e38352e3131322e302f32312d3235203d3e20323632363037.roa
File:                     3137372e38352e3131322e302f32312d3235203d3e20323632363037.roa (raw, json)
Hash identifier:          0p2LJJhLnN8AOFMFsiUCzN5jS9sxP5nQfC4mC6uT5x8=
Subject key identifier:   E8:80:D3:BA:8A:B1:1C:88:92:DB:2B:6A:0B:E6:E7:4C:D1:06:C5:EA
Certificate issuer:       /CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Certificate serial:       154DA0F9CC595414FD5D47238AD8027669FB567B
Authority key identifier: 70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137372e38352e3131322e302f32312d3235203d3e20323632363037.roa
Signing time:             Mon 21 Nov 2022 16:41:49 +0000
ROA not before:           Mon 21 Nov 2022 16:36:49 +0000
ROA not after:            Mon 20 Nov 2023 16:41:49 +0000
asID:                     262607
IP address blocks:        177.85.112.0/21 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4d:a0:f9:cc:59:54:14:fd:5d:47:23:8a:d8:02:76:69:fb:56:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
        Validity
            Not Before: Nov 21 16:36:49 2022 GMT
            Not After : Nov 20 16:41:49 2023 GMT
        Subject: CN=E880D3BA8AB11C8892DB2B6A0BE6E74CD106C5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:69:0c:62:50:49:d6:b1:02:7e:b8:b8:98:
                    17:b4:a7:00:9e:be:b3:cf:fe:13:a5:2e:ea:50:32:
                    2f:f8:21:10:ed:c0:26:da:6d:ab:6e:5c:8e:41:18:
                    b9:9f:06:a4:42:2c:08:7b:30:3a:19:b4:44:2b:e0:
                    12:ee:bc:2c:13:c2:38:af:6c:4a:83:bf:0e:55:a4:
                    16:17:83:4a:ec:3e:dc:94:c9:0b:cf:a7:08:4d:8f:
                    ee:fe:55:d3:a8:0a:6a:71:86:76:a9:69:f5:75:0e:
                    ac:a2:9b:c4:70:26:fb:be:fc:4c:c7:6c:c2:6c:14:
                    f1:e4:39:ac:75:3a:21:00:21:d8:b9:8a:69:46:3e:
                    07:0d:64:c8:11:7f:a4:d7:bf:ce:da:7f:ac:a5:4b:
                    93:e9:11:ef:14:ec:5b:76:b3:b6:66:8f:56:d2:d5:
                    3c:e8:86:42:bf:c3:f7:88:0f:48:24:e9:47:8c:e9:
                    ba:7e:c5:47:d0:bd:29:9f:4c:ff:7f:da:26:3d:2d:
                    d9:f0:44:c9:01:8c:45:95:96:55:4e:c2:56:7f:59:
                    08:11:b5:8c:8e:c9:c8:b4:e6:8f:4c:b8:cc:4f:a0:
                    98:fa:d2:0e:56:00:1b:b3:fe:69:ac:da:0a:ae:a6:
                    43:97:71:c4:30:78:46:93:f9:c7:f5:de:41:37:be:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:80:D3:BA:8A:B1:1C:88:92:DB:2B:6A:0B:E6:E7:4C:D1:06:C5:EA
            X509v3 Authority Key Identifier:
                keyid:70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137372e38352e3131322e302f32312d3235203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:58:40:1a:05:a4:87:f1:1c:81:67:41:c7:fc:24:52:ca:
         45:4a:fe:25:11:c4:3d:57:ee:e3:04:18:53:e1:95:79:09:d2:
         15:42:3f:0c:2c:31:a1:62:1c:bd:a4:2b:ce:8b:c9:46:17:5f:
         fa:b9:30:3a:af:f4:51:9c:10:10:db:05:b5:b0:f3:08:73:d0:
         aa:28:ac:ce:24:2d:44:47:df:c2:c6:21:8a:db:13:8e:8c:7f:
         c4:1d:d6:46:08:23:05:5c:d3:8e:f4:33:39:6c:55:d0:90:e0:
         29:61:6d:d5:f5:8c:53:c5:45:0d:e0:77:eb:e1:5f:d5:a5:82:
         fe:b3:35:c3:1d:f9:eb:10:cc:95:13:70:35:73:39:68:04:9d:
         7c:6b:14:42:48:13:a6:fe:5a:98:31:eb:77:66:c3:42:90:ac:
         37:59:1d:85:b3:0b:02:fc:05:a1:92:76:c9:71:dc:07:21:4c:
         24:cf:8a:13:78:9d:67:ac:ad:10:57:e5:78:ac:7f:32:82:9c:
         12:74:82:ce:27:ca:23:3c:4d:69:dc:ff:4d:91:d4:fc:13:96:
         bb:4a:3b:c9:7e:87:0f:46:de:d8:b3:02:ea:3d:45:2c:46:de:
         7f:16:77:6d:b7:eb:50:b1:98:13:70:7d:c3:ce:a6:99:13:98:
         6b:1e:92:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFU2g+cxZVBT9XUcjitgCdmn7VnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCM0NBQkM5NEU4NjdGN0I3MkE5Qzk5Nzc0ODEzQ0FD
NkE0Nzg0RDAeFw0yMjExMjExNjM2NDlaFw0yMzExMjAxNjQxNDlaMDMxMTAvBgNV
BAMTKEU4ODBEM0JBOEFCMTFDODg5MkRCMkI2QTBCRTZFNzRDRDEwNkM1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnb2kMYlBJ1rECfri4mBe0pwCe
vrPP/hOlLupQMi/4IRDtwCbabatuXI5BGLmfBqRCLAh7MDoZtEQr4BLuvCwTwjiv
bEqDvw5VpBYXg0rsPtyUyQvPpwhNj+7+VdOoCmpxhnapafV1Dqyim8RwJvu+/EzH
bMJsFPHkOax1OiEAIdi5imlGPgcNZMgRf6TXv87af6ylS5PpEe8U7Ft2s7Zmj1bS
1TzohkK/w/eID0gk6UeM6bp+xUfQvSmfTP9/2iY9LdnwRMkBjEWVllVOwlZ/WQgR
tYyOyci05o9MuMxPoJj60g5WABuz/mms2gqupkOXccQweEaT+cf13kE3vrPXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6IDTuoqxHIiS2ytqC+bnTNEGxeowHwYDVR0j
BBgwFoAUcLPKvJToZ/e3KpyZd0gTysakeE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZa
MXYvMS83MEIzQ0FCQzk0RTg2N0Y3QjcyQTlDOTk3NzQ4MTNDQUM2QTQ3ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwQjNDQUJDOTRFODY3RjdC
NzJBOUM5OTc3NDgxM0NBQzZBNDc4NEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrbnNKbXNmTG9nS0ZVZ2tNbmtCeVhrbnFxZnM3akFCbVdFZENuMjV2WjF2LzEv
MzEzNzM3MmUzODM1MmUzMTMxMzIyZTMwMmYzMjMxMmQzMjM1MjAzZDNlMjAzMjM2
MzIzNjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVXAwDQYJKoZIhvcNAQELBQADggEBAI49WEAa
BaSH8RyBZ0HH/CRSykVK/iURxD1X7uMEGFPhlXkJ0hVCPwwsMaFiHL2kK86LyUYX
X/q5MDqv9FGcEBDbBbWw8whz0KoorM4kLURH38LGIYrbE46Mf8Qd1kYIIwVc0470
MzlsVdCQ4ClhbdX1jFPFRQ3gd+vhX9Wlgv6zNcMd+esQzJUTcDVzOWgEnXxrFEJI
E6b+Wpgx63dmw0KQrDdZHYWzCwL8BaGSdslx3AchTCTPihN4nWesrRBX5XisfzKC
nBJ0gs4nyiM8TWnc/02R1PwTlrtKO8l+hw9G3tizAuo9RSxG3n8Wd22361CxmBNw
fcPOppkTmGsekv0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org