Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232382e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232382e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          Y1NzrOzpVFc3cC+9wPuSy3rEmNK+8zIgbDPyBKrPnIA=
Subject key identifier:   E8:F4:2A:BE:FE:3F:EE:7A:4B:CE:66:E2:8F:AD:89:BF:62:30:18:8A
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       67D5E3C8AAD058850D4979BE58E88826B96CF4C6
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232382e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:20:01 +0000
ROA not before:           Wed 18 Oct 2023 20:15:01 +0000
ROA not after:            Wed 16 Oct 2024 20:20:01 +0000
asID:                     262309
IP address blocks:        177.87.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d5:e3:c8:aa:d0:58:85:0d:49:79:be:58:e8:88:26:b9:6c:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:15:01 2023 GMT
            Not After : Oct 16 20:20:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:43:f0:72:d8:0e:15:2d:1d:97:0f:b0:a0:
                    39:81:06:25:ad:52:31:a5:12:b3:d3:a6:8f:1e:da:
                    5e:21:8e:21:14:d4:f5:e5:ef:54:7a:b5:46:c1:fb:
                    72:de:12:0a:1d:a8:c9:f7:08:25:4e:04:ff:52:0e:
                    37:5b:5c:f2:7e:8e:4d:bb:33:6c:0c:8b:7b:ad:ee:
                    1b:0a:32:6d:b7:a2:12:0e:76:9c:d0:5d:87:bd:dc:
                    fa:d2:05:e2:c5:b9:88:f5:1a:f8:de:aa:da:26:cb:
                    94:c8:bc:c4:0b:6e:e3:0a:79:e9:3f:1c:bd:01:5d:
                    f1:e0:e8:56:54:bd:ff:ad:fc:f0:20:60:f8:73:b6:
                    2f:65:5c:9a:7d:f4:2c:2b:b2:35:c5:9d:75:a6:97:
                    aa:ea:2d:8c:e4:b0:7e:ee:75:80:55:b3:fd:cf:2c:
                    6a:5f:7c:5a:b9:eb:91:b0:bc:28:80:5f:c6:4c:42:
                    c8:58:35:c3:d1:e1:44:24:c4:38:34:75:3f:c3:41:
                    3e:4f:b8:a4:aa:64:42:9a:d0:6b:48:72:de:58:49:
                    f3:45:fc:c6:d9:53:8f:5a:29:76:e2:5e:61:73:3f:
                    be:50:35:d1:6f:65:19:bc:e3:f3:40:b6:5e:36:1d:
                    8b:16:84:d8:28:9b:64:2d:7a:82:d6:a4:0d:0e:b8:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:2A:BE:FE:3F:EE:7A:4B:CE:66:E2:8F:AD:89:BF:62:30:18:8A
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232382e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:46:ae:2d:d7:5a:6f:39:f0:4f:24:9e:63:8d:ca:ed:f3:
         01:67:8b:44:e1:e5:6d:0c:19:b0:96:be:ae:96:c6:0d:c2:4a:
         4c:96:b0:b7:6d:bd:44:5f:22:6a:18:7c:03:27:24:bb:a5:7f:
         f9:48:3e:1d:58:3a:cb:3f:6d:da:fd:38:a5:3e:b0:26:26:8c:
         f6:40:4d:73:c8:c3:ea:bb:cd:22:34:cd:f7:bb:27:9c:29:78:
         f2:23:6c:7a:0f:ce:0d:e6:67:3c:c6:a9:56:10:af:09:da:f8:
         ab:b4:87:ce:d4:b2:73:07:49:aa:12:d0:c5:5b:2a:89:82:cd:
         0f:50:90:1b:b6:f1:29:37:e7:1a:87:b9:89:83:3b:c2:81:1b:
         90:4e:30:8c:1d:91:af:d2:d6:a6:52:f8:33:e3:24:87:05:96:
         42:08:49:9f:01:31:d2:6d:4c:20:81:27:3a:06:b1:ee:f9:66:
         ad:3a:f9:f2:e5:54:ed:8c:fe:13:4d:8d:d5:1e:04:fa:f5:7e:
         13:c9:2f:88:46:63:73:f1:0b:60:93:63:b5:27:0a:86:9a:73:
         df:e6:7a:1b:a5:6c:a4:2d:a9:17:16:88:6e:43:a2:00:b3:68:
         f6:71:b2:f6:1d:59:36:3b:79:fd:40:b9:a3:4e:58:01:c3:51:
         e4:9f:25:6b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZ9XjyKrQWIUNSXm+WOiIJrls9MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc1MDEzMjVGMEFBMzBCOERDRkYwNjlDQjExODEwNDc3
NkU3ODhBODAeFw0yMzEwMTgyMDE1MDFaFw0yNDEwMTYyMDIwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY0NjQzRjA3MkQ4MEUxNTJE
MUQ5NzBGQjBBMDM5ODEwNjI1QUQ1MjMxQTUxMkIzRDNBNjhGMUVEQTVFMjE4RTIx
MTRENEY1RTVFRjU0N0FCNTQ2QzFGQjcyREUxMjBBMURBOEM5RjcwODI1NEUwNEZG
NTIwRTM3NUI1Q0YyN0U4RTREQkIzMzZDMEM4QjdCQURFRTFCMEEzMjZEQjdBMjEy
MEU3NjlDRDA1RDg3QkREQ0ZBRDIwNUUyQzVCOTg4RjUxQUY4REVBQURBMjZDQjk0
QzhCQ0M0MEI2RUUzMEE3OUU5M0YxQ0JEMDE1REYxRTBFODU2NTRCREZGQURGQ0Yw
MjA2MEY4NzNCNjJGNjU1QzlBN0RGNDJDMkJCMjM1QzU5RDc1QTY5N0FBRUEyRDhD
RTRCMDdFRUU3NTgwNTVCM0ZEQ0YyQzZBNUY3QzVBQjlFQjkxQjBCQzI4ODA1RkM2
NEM0MkM4NTgzNUMzRDFFMTQ0MjRDNDM4MzQ3NTNGQzM0MTNFNEZCOEE0QUE2NDQy
OUFEMDZCNDg3MkRFNTg0OUYzNDVGQ0M2RDk1MzhGNUEyOTc2RTI1RTYxNzMzRkJF
NTAzNUQxNkY2NTE5QkNFM0YzNDBCNjVFMzYxRDhCMTY4NEQ4Mjg5QjY0MkQ3QTgy
RDZBNDBEMEVCODNCOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA30ZD8HLYDhUtHZcPsKA5gQYlrVIxpRKz06aPHtpeIY4hFNT15e9U
erVGwfty3hIKHajJ9wglTgT/Ug43W1zyfo5NuzNsDIt7re4bCjJtt6ISDnac0F2H
vdz60gXixbmI9Rr43qraJsuUyLzEC27jCnnpPxy9AV3x4OhWVL3/rfzwIGD4c7Yv
ZVyaffQsK7I1xZ11ppeq6i2M5LB+7nWAVbP9zyxqX3xaueuRsLwogF/GTELIWDXD
0eFEJMQ4NHU/w0E+T7ikqmRCmtBrSHLeWEnzRfzG2VOPWil24l5hcz++UDXRb2UZ
vOPzQLZeNh2LFoTYKJtkLXqC1qQNDrg7jwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOj0Kr7+P+56S85m4o+tib9iMBiKMB8GA1UdIwQYMBaAFAdQEyXwqjC43P8GnLEY
EEd254ioMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzAvMDc1MDEzMjVGMEFBMzBC
OERDRkYwNjlDQjExODEwNDc3NkU3ODhBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wNzUwMTMyNUYwQUEzMEI4RENGRjA2OUNCMTE4MTA0Nzc2RTc4
OEE4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aGdyV3NrWXBVemdZa1NURlRo
WUF3SjZ1cHZZQmJOWHlkNVRKWlR4MWFTWC8wLzMxMzczNzJlMzgzNzJlMzIzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sVfkMA0GCSqGSIb3DQEBCwUAA4IBAQAcY0auLddabznwTySeY43K7fMBZ4tE4eVt
DBmwlr6ulsYNwkpMlrC3bb1EXyJqGHwDJyS7pX/5SD4dWDrLP23a/TilPrAmJoz2
QE1zyMPqu80iNM33uyecKXjyI2x6D84N5mc8xqlWEK8J2virtIfO1LJzB0mqEtDF
WyqJgs0PUJAbtvEpN+cah7mJgzvCgRuQTjCMHZGv0tamUvgz4ySHBZZCCEmfATHS
bUwggSc6BrHu+WatOvny5VTtjP4TTY3VHgT69X4TyS+IRmNz8Qtgk2O1JwqGmnPf
5nobpWykLakXFohuQ6IAs2j2cbL2HVk2O3n9QLmjTlgBw1HknyVr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org