Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa
File:                     3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa (raw, json)
Hash identifier:          oF2tvTR0AHadQQU2BiRQPWyUixLdZH+l1I80TvEFzS8=
Subject key identifier:   64:D0:10:AA:1E:92:5B:29:0D:00:83:C7:95:63:C9:B0:F8:72:0C:A1
Certificate issuer:       /CN=BE78E81D49E7625AB24753E446C34EB55D3199D2
Certificate serial:       5A17E138982BE9510F724EE9BB07E104DE4A0D9A
Authority key identifier: BE:78:E8:1D:49:E7:62:5A:B2:47:53:E4:46:C3:4E:B5:5D:31:99:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa
Signing time:             Fri 27 Oct 2023 17:53:29 +0000
ROA not before:           Fri 27 Oct 2023 17:48:29 +0000
ROA not after:            Fri 25 Oct 2024 17:53:29 +0000
asID:                     263025
IP address blocks:        177.10.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:17:e1:38:98:2b:e9:51:0f:72:4e:e9:bb:07:e1:04:de:4a:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE78E81D49E7625AB24753E446C34EB55D3199D2
        Validity
            Not Before: Oct 27 17:48:29 2023 GMT
            Not After : Oct 25 17:53:29 2024 GMT
        Subject: CN=64D010AA1E925B290D0083C79563C9B0F8720CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:68:14:89:93:6e:da:b5:f9:71:31:c5:38:
                    98:b6:93:4c:77:ec:c3:95:84:47:89:2d:cb:09:12:
                    b0:63:06:f8:79:de:4e:6a:68:1b:49:22:e3:4e:3b:
                    f4:5e:bb:a0:91:14:39:6c:aa:03:04:e9:3f:6b:df:
                    48:2e:18:c4:01:93:52:a6:38:95:e0:96:45:df:51:
                    cc:a8:e0:e0:39:0f:e7:90:7a:2d:2b:60:32:16:32:
                    b7:48:f3:4c:d9:db:fe:64:b8:01:79:e2:e6:21:09:
                    87:76:31:ff:d8:72:a7:b4:74:6a:59:2e:06:fa:36:
                    8f:66:c5:72:e5:14:ce:f0:36:74:41:82:f4:48:0a:
                    5d:ff:55:27:e6:3d:8f:58:04:e5:19:2d:c8:5e:41:
                    ea:7f:89:92:d9:6e:f1:f7:47:05:58:55:3c:4a:1d:
                    9b:3a:aa:04:7c:f4:1a:dc:d7:2b:4e:e0:da:c0:e4:
                    32:36:60:2b:d2:c8:6b:9b:00:4a:16:da:09:b6:fb:
                    82:f4:24:52:ca:4f:64:d1:76:27:3f:7f:9e:ac:fd:
                    01:52:de:34:d0:3b:70:ad:23:0d:66:bd:09:4f:6c:
                    7b:54:36:9b:57:99:cd:c0:64:2d:87:62:cf:22:33:
                    46:12:89:d7:e6:d7:48:ef:d6:9e:d7:04:bb:91:c8:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:10:AA:1E:92:5B:29:0D:00:83:C7:95:63:C9:B0:F8:72:0C:A1
            X509v3 Authority Key Identifier:
                keyid:BE:78:E8:1D:49:E7:62:5A:B2:47:53:E4:46:C3:4E:B5:5D:31:99:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230302e302f32322d3232203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:a9:93:20:d7:66:39:88:ad:43:bd:d1:76:c3:91:23:65:
         a7:3e:7e:a9:86:b8:1e:c6:cb:40:39:e5:80:0c:d1:d9:5f:c6:
         ce:a4:99:40:bf:1a:a9:e2:00:86:ca:49:33:0b:8d:fe:c8:ba:
         ac:8d:60:fb:00:81:5d:f7:69:cf:94:81:d5:6a:72:6a:15:a3:
         66:15:ed:44:5b:a9:b0:46:a7:1c:43:6c:0c:cf:2f:a6:c3:20:
         e4:b6:7a:e6:3c:20:75:e2:a7:5d:c2:c7:b9:82:60:f7:c8:3e:
         cd:9c:f5:4d:75:b4:cd:2d:9e:45:a9:83:e8:95:1e:c5:96:42:
         43:7f:53:d4:56:b0:da:fe:8a:40:5b:5b:64:ec:6c:08:6d:bc:
         a3:e7:97:cf:36:f4:ee:68:a3:ab:ec:05:b9:62:f6:f5:89:8d:
         e9:15:16:d0:ba:8e:d2:08:18:1f:9a:cc:52:12:18:b1:20:f2:
         19:08:51:07:db:4b:c9:22:c1:2f:35:00:bc:fa:33:1d:c5:70:
         83:3b:e1:8b:d1:4a:35:82:97:dc:7d:5c:fa:ec:c9:14:d1:28:
         c8:11:9c:f3:33:10:08:75:84:f9:9c:41:b6:40:b5:f2:5b:b1:
         be:9b:7b:86:c0:4d:41:5f:ce:a0:4c:4c:83:55:c3:c2:34:09:
         1b:02:98:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWhfhOJgr6VEPck7puwfhBN5KDZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3OEU4MUQ0OUU3NjI1QUIyNDc1M0U0NDZDMzRFQjU1
RDMxOTlEMjAeFw0yMzEwMjcxNzQ4MjlaFw0yNDEwMjUxNzUzMjlaMDMxMTAvBgNV
BAMTKDY0RDAxMEFBMUU5MjVCMjkwRDAwODNDNzk1NjNDOUIwRjg3MjBDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqmgUiZNu2rX5cTHFOJi2k0x3
7MOVhEeJLcsJErBjBvh53k5qaBtJIuNOO/Reu6CRFDlsqgME6T9r30guGMQBk1Km
OJXglkXfUcyo4OA5D+eQei0rYDIWMrdI80zZ2/5kuAF54uYhCYd2Mf/Ycqe0dGpZ
Lgb6No9mxXLlFM7wNnRBgvRICl3/VSfmPY9YBOUZLcheQep/iZLZbvH3RwVYVTxK
HZs6qgR89Brc1ytO4NrA5DI2YCvSyGubAEoW2gm2+4L0JFLKT2TRdic/f56s/QFS
3jTQO3CtIw1mvQlPbHtUNptXmc3AZC2HYs8iM0YSidfm10jv1p7XBLuRyLW5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZNAQqh6SWykNAIPHlWPJsPhyDKEwHwYDVR0j
BBgwFoAUvnjoHUnnYlqyR1PkRsNOtV0xmdIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VvTkN3Q0pCa1BIS3UyU3lpWTJmdzZITG44dHM0MXh3MldUaWFTcERy
QkovMC9CRTc4RTgxRDQ5RTc2MjVBQjI0NzUzRTQ0NkMzNEVCNTVEMzE5OUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFNzhFODFENDlFNzYyNUFC
MjQ3NTNFNDQ2QzM0RUI1NUQzMTk5RDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1b05Dd0NKQmtQSEt1MlN5aVkyZnc2SExuOHRzNDF4dzJXVGlhU3BEckJKLzAv
MzEzNzM3MmUzMTMwMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxCsgwDQYJKoZIhvcNAQELBQADggEBAHFOqZMg
12Y5iK1DvdF2w5EjZac+fqmGuB7Gy0A55YAM0dlfxs6kmUC/GqniAIbKSTMLjf7I
uqyNYPsAgV33ac+UgdVqcmoVo2YV7URbqbBGpxxDbAzPL6bDIOS2euY8IHXip13C
x7mCYPfIPs2c9U11tM0tnkWpg+iVHsWWQkN/U9RWsNr+ikBbW2TsbAhtvKPnl882
9O5oo6vsBbli9vWJjekVFtC6jtIIGB+azFISGLEg8hkIUQfbS8kiwS81ALz6Mx3F
cIM74YvRSjWCl9x9XPrsyRTRKMgRnPMzEAh1hPmcQbZAtfJbsb6be4bATUFfzqBM
TINVw8I0CRsCmNA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org