Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232352e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232352e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          ENbFEuJlhHC+8RLavxhZYIIGpCfHx9yw17f4wPqt50o=
Subject key identifier:   EB:81:CC:94:B5:34:89:2C:35:60:86:02:0A:31:8A:CD:FD:B2:86:8B
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       4194243B82093A874C06D4AAC4E515F29143D697
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232352e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:20:01 +0000
ROA not before:           Wed 18 Oct 2023 20:15:01 +0000
ROA not after:            Wed 16 Oct 2024 20:20:01 +0000
asID:                     262309
IP address blocks:        177.87.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:94:24:3b:82:09:3a:87:4c:06:d4:aa:c4:e5:15:f2:91:43:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:15:01 2023 GMT
            Not After : Oct 16 20:20:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:14:ff:3c:0b:7a:01:36:14:21:f6:2d:f3:
                    41:a7:77:0e:54:8d:98:be:4e:5b:a7:e4:00:e4:42:
                    fd:30:df:81:29:ad:4c:be:7d:a0:1c:11:fd:ef:ca:
                    73:08:ba:27:3f:5c:cf:d3:50:9a:2b:4c:6b:36:7e:
                    73:00:4a:d4:5f:1e:81:1f:f8:52:e3:90:5c:40:5c:
                    16:21:56:53:21:ad:53:cd:36:d8:30:5d:49:fe:c0:
                    d8:89:2b:d5:5d:d2:97:af:d4:66:06:40:2d:87:c3:
                    2f:2b:16:25:0e:55:65:b1:49:06:94:d7:0c:37:98:
                    b8:d5:9e:1e:42:87:1f:4a:ef:12:fc:a1:0a:8c:1a:
                    0a:04:a0:77:a0:3d:49:ac:8b:b0:ce:92:9b:00:2d:
                    42:4e:04:44:c3:97:92:60:e9:6b:34:f8:a9:10:02:
                    58:08:f8:37:ce:33:61:a2:24:f5:b7:bf:45:de:0b:
                    8d:e1:ff:61:99:3c:fa:1b:c1:22:a6:38:8e:df:be:
                    71:43:f8:50:cd:6e:6c:8b:a3:04:ec:ce:bc:bd:a1:
                    1c:60:8d:10:3d:60:01:4f:38:2c:99:87:e6:81:c8:
                    bb:fd:1e:ae:7f:45:a3:38:be:a6:1b:69:31:fd:b7:
                    f7:48:2a:55:96:8c:b4:45:ac:7d:4a:c6:c5:78:c9:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:CC:94:B5:34:89:2C:35:60:86:02:0A:31:8A:CD:FD:B2:86:8B
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232352e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:f0:49:ff:aa:00:18:c8:c7:dd:54:f4:9a:f3:62:e7:a4:
         27:d8:60:b5:55:b8:e0:0d:20:57:b7:ad:a7:8a:73:f3:d9:50:
         63:38:38:aa:0b:65:3e:3d:ce:a9:9f:81:c8:97:47:48:ce:3b:
         93:a3:f8:55:6f:36:e1:fc:82:00:41:c3:04:a1:01:8f:b5:50:
         4e:84:4b:48:57:9a:e5:1a:81:17:4d:d1:71:e1:23:92:b5:7f:
         2e:bd:df:48:c2:97:b5:87:4d:03:5d:97:82:d0:f4:4b:d8:49:
         a2:01:ea:c9:f6:d8:90:39:8e:c9:2b:e6:2d:32:6e:ae:f2:c3:
         e4:f7:4c:65:e2:0a:8f:ba:26:f6:05:6b:53:a7:93:4e:8a:89:
         35:93:d4:68:74:f3:a4:53:4b:d7:88:96:89:c1:a9:33:ce:09:
         3a:a9:87:0a:18:74:76:c0:fb:82:43:f7:49:f9:8a:c2:91:b6:
         b7:74:2d:92:b5:82:33:3b:e0:59:e5:4f:4f:d3:74:c4:a2:e3:
         c8:fc:71:d7:f2:b9:18:06:0a:8e:62:c6:1c:7c:a5:a5:00:bf:
         6a:cc:e6:69:cd:bc:f3:ac:ef:49:96:17:d3:98:b5:f2:4b:31:
         32:f0:b1:ab:4a:78:69:6a:e2:eb:4c:24:03:82:53:59:2f:15:
         b0:b8:00:8c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQZQkO4IJOodMBtSqxOUV8pFD1pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc1MDEzMjVGMEFBMzBCOERDRkYwNjlDQjExODEwNDc3
NkU3ODhBODAeFw0yMzEwMTgyMDE1MDFaFw0yNDEwMTYyMDIwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM0NzE0RkYzQzBCN0EwMTM2
MTQyMUY2MkRGMzQxQTc3NzBFNTQ4RDk4QkU0RTVCQTdFNDAwRTQ0MkZEMzBERjgx
MjlBRDRDQkU3REEwMUMxMUZERUZDQTczMDhCQTI3M0Y1Q0NGRDM1MDlBMkI0QzZC
MzY3RTczMDA0QUQ0NUYxRTgxMUZGODUyRTM5MDVDNDA1QzE2MjE1NjUzMjFBRDUz
Q0QzNkQ4MzA1RDQ5RkVDMEQ4ODkyQkQ1NUREMjk3QUZENDY2MDY0MDJEODdDMzJG
MkIxNjI1MEU1NTY1QjE0OTA2OTRENzBDMzc5OEI4RDU5RTFFNDI4NzFGNEFFRjEy
RkNBMTBBOEMxQTBBMDRBMDc3QTAzRDQ5QUM4QkIwQ0U5MjlCMDAyRDQyNEUwNDQ0
QzM5NzkyNjBFOTZCMzRGOEE5MTAwMjU4MDhGODM3Q0UzMzYxQTIyNEY1QjdCRjQ1
REUwQjhERTFGRjYxOTkzQ0ZBMUJDMTIyQTYzODhFREZCRTcxNDNGODUwQ0Q2RTZD
OEJBMzA0RUNDRUJDQkRBMTFDNjA4RDEwM0Q2MDAxNEYzODJDOTk4N0U2ODFDOEJC
RkQxRUFFN0Y0NUEzMzhCRUE2MUI2OTMxRkRCN0Y3NDgyQTU1OTY4Q0I0NDVBQzdE
NEFDNkM1NzhDOUY3QTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArEcU/zwLegE2FCH2LfNBp3cOVI2Yvk5bp+QA5EL9MN+BKa1Mvn2g
HBH978pzCLonP1zP01CaK0xrNn5zAErUXx6BH/hS45BcQFwWIVZTIa1TzTbYMF1J
/sDYiSvVXdKXr9RmBkAth8MvKxYlDlVlsUkGlNcMN5i41Z4eQocfSu8S/KEKjBoK
BKB3oD1JrIuwzpKbAC1CTgREw5eSYOlrNPipEAJYCPg3zjNhoiT1t79F3guN4f9h
mTz6G8EipjiO375xQ/hQzW5si6ME7M68vaEcYI0QPWABTzgsmYfmgci7/R6uf0Wj
OL6mG2kx/bf3SCpVloy0Rax9SsbFeMn3pQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOuBzJS1NIksNWCGAgoxis39soaLMB8GA1UdIwQYMBaAFAdQEyXwqjC43P8GnLEY
EEd254ioMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzAvMDc1MDEzMjVGMEFBMzBC
OERDRkYwNjlDQjExODEwNDc3NkU3ODhBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wNzUwMTMyNUYwQUEzMEI4RENGRjA2OUNCMTE4MTA0Nzc2RTc4
OEE4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aGdyV3NrWXBVemdZa1NURlRo
WUF3SjZ1cHZZQmJOWHlkNVRKWlR4MWFTWC8wLzMxMzczNzJlMzgzNzJlMzIzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sVfhMA0GCSqGSIb3DQEBCwUAA4IBAQBj+PBJ/6oAGMjH3VT0mvNi56Qn2GC1Vbjg
DSBXt62ninPz2VBjODiqC2U+Pc6pn4HIl0dIzjuTo/hVbzbh/IIAQcMEoQGPtVBO
hEtIV5rlGoEXTdFx4SOStX8uvd9Iwpe1h00DXZeC0PRL2EmiAerJ9tiQOY7JK+Yt
Mm6u8sPk90xl4gqPuib2BWtTp5NOiok1k9RodPOkU0vXiJaJwakzzgk6qYcKGHR2
wPuCQ/dJ+YrCkba3dC2StYIzO+BZ5U9P03TEouPI/HHX8rkYBgqOYsYcfKWlAL9q
zOZpzbzzrO9JlhfTmLXySzEy8LGrSnhpauLrTCQDglNZLxWwuACM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org