Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
File:                     3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          fZ8iAuDMipRdfQZQr0hAM/yG1/jCcdzP7wikSHqmxKA=
Subject key identifier:   86:EC:F8:C4:B7:D6:0D:B4:8A:87:88:8E:51:DF:5F:BA:E7:7C:19:0F
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       4F3A2F28D947ADC380B994C23A5B24918332E988
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
Signing time:             Wed 21 Dec 2022 17:16:50 +0000
ROA not before:           Wed 21 Dec 2022 17:11:50 +0000
ROA not after:            Wed 20 Dec 2023 17:16:50 +0000
asID:                     262688
IP address blocks:        177.154.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3a:2f:28:d9:47:ad:c3:80:b9:94:c2:3a:5b:24:91:83:32:e9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:50 2022 GMT
            Not After : Dec 20 17:16:50 2023 GMT
        Subject: CN=86ECF8C4B7D60DB48A87888E51DF5FBAE77C190F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8a:ed:9f:ba:36:7d:ec:7c:71:87:ad:77:fd:
                    b6:a1:f1:54:8c:29:c3:b0:7e:90:06:0b:ac:40:58:
                    69:ce:0e:b5:34:a0:64:f9:5a:d4:d8:12:44:7f:18:
                    dc:95:11:97:36:5c:d4:e4:90:97:99:6a:88:2d:1b:
                    a6:32:d3:ae:ec:2e:e7:44:33:c6:ec:a1:8f:34:c0:
                    cf:3b:08:17:33:8f:81:55:f3:ac:ff:c7:49:8d:3d:
                    41:61:1e:d5:2e:5e:11:aa:1f:d8:e1:57:09:5c:81:
                    82:a8:35:f1:b9:9b:f1:9e:86:3c:19:72:ea:3d:6b:
                    9f:aa:11:21:3d:f6:8b:f2:1e:ef:93:d4:82:1c:e5:
                    da:27:a0:7d:33:08:e5:74:63:9f:a5:65:5f:9e:b8:
                    6f:34:11:0b:21:1e:ae:6a:ca:7a:df:14:2b:46:72:
                    4c:72:2a:01:44:8a:a9:35:c7:67:4e:13:af:d6:1b:
                    6f:79:af:16:63:72:c9:42:55:08:2e:da:38:a4:3e:
                    cf:de:d8:9b:c3:e5:60:0c:b1:83:83:00:4f:c4:0f:
                    60:7d:ca:36:f1:a5:d4:cd:82:25:4c:99:25:75:fa:
                    2b:72:71:55:e1:ed:4c:12:1c:d3:03:91:62:f1:32:
                    26:08:10:a2:b0:f1:21:f3:05:a7:67:0b:af:fa:dd:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EC:F8:C4:B7:D6:0D:B4:8A:87:88:8E:51:DF:5F:BA:E7:7C:19:0F
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:61:c4:c2:a9:a6:f1:25:5b:92:de:07:38:23:26:22:7f:a6:
         9c:1f:fc:a9:36:6f:e5:d8:94:70:ae:8a:80:83:3f:cb:eb:64:
         af:51:a9:b6:51:26:8e:53:cf:7e:ef:d1:5e:06:fb:41:a6:2c:
         f9:2c:d9:be:77:de:48:da:78:b8:ac:e7:35:17:53:11:60:49:
         f8:0b:07:de:bd:b3:74:30:e8:72:72:19:fc:c7:4c:0b:0f:86:
         60:6b:3f:b9:a0:e6:0b:49:a4:ff:00:67:55:f6:a8:0a:8e:83:
         f6:30:9a:8d:5f:3f:c5:a7:cf:2f:87:64:a6:f3:34:bd:80:5c:
         aa:fe:70:b4:5e:94:6d:47:9e:a9:96:e1:25:23:c5:0a:a1:32:
         d4:07:9a:59:7f:e9:ba:ac:8d:22:c4:c9:64:4a:01:08:ca:00:
         4f:20:54:8d:9d:a9:eb:a5:ab:3e:76:4d:3f:8b:f9:d7:4e:0d:
         ff:77:5b:82:fb:7f:8d:1f:f0:61:d4:52:f0:12:d2:95:13:41:
         63:da:34:e9:23:bd:3f:fa:cd:34:7e:8d:ef:01:35:3a:d6:2f:
         99:fa:c8:b0:a1:11:9e:2c:b0:27:18:c0:69:8c:0a:39:4a:e5:
         7c:bd:71:fa:09:f4:87:8a:4e:7d:82:8b:e3:03:aa:5a:a0:24:
         ce:8d:5e:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTzovKNlHrcOAuZTCOlskkYMy6YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFODQxRUFFNTg4MEY2Nzg3M0RCODg0NzI2OTk2OTI5
NDUwNzc4OTAeFw0yMjEyMjExNzExNTBaFw0yMzEyMjAxNzE2NTBaMDMxMTAvBgNV
BAMTKDg2RUNGOEM0QjdENjBEQjQ4QTg3ODg4RTUxREY1RkJBRTc3QzE5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4iu2fujZ97Hxxh613/bah8VSM
KcOwfpAGC6xAWGnODrU0oGT5WtTYEkR/GNyVEZc2XNTkkJeZaogtG6Yy067sLudE
M8bsoY80wM87CBczj4FV86z/x0mNPUFhHtUuXhGqH9jhVwlcgYKoNfG5m/GehjwZ
cuo9a5+qESE99ovyHu+T1IIc5donoH0zCOV0Y5+lZV+euG80EQshHq5qynrfFCtG
ckxyKgFEiqk1x2dOE6/WG295rxZjcslCVQgu2jikPs/e2JvD5WAMsYODAE/ED2B9
yjbxpdTNgiVMmSV1+itycVXh7UwSHNMDkWLxMiYIEKKw8SHzBadnC6/63VCTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhuz4xLfWDbSKh4iOUd9fuud8GQ8wHwYDVR0j
BBgwFoAUuOhB6uWID2eHPbiEcmmWkpRQd4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMS9COEU4NDFFQUU1ODgwRjY3ODczREI4ODQ3MjY5OTY5Mjk0NTA3Nzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4RTg0MUVBRTU4ODBGNjc4
NzNEQjg4NDcyNjk5NjkyOTQ1MDc3ODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzEv
MzEzNzM3MmUzMTM1MzQyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxmmAwDQYJKoZIhvcNAQELBQADggEBADBhxMKp
pvElW5LeBzgjJiJ/ppwf/Kk2b+XYlHCuioCDP8vrZK9RqbZRJo5Tz37v0V4G+0Gm
LPks2b533kjaeLis5zUXUxFgSfgLB969s3Qw6HJyGfzHTAsPhmBrP7mg5gtJpP8A
Z1X2qAqOg/Ywmo1fP8Wnzy+HZKbzNL2AXKr+cLRelG1HnqmW4SUjxQqhMtQHmll/
6bqsjSLEyWRKAQjKAE8gVI2dqeulqz52TT+L+ddODf93W4L7f40f8GHUUvAS0pUT
QWPaNOkjvT/6zTR+je8BNTrWL5n6yLChEZ4ssCcYwGmMCjlK5Xy9cfoJ9IeKTn2C
i+MDqlqgJM6NXpg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org