Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133312e302f32342d3234203d3e203532383734.roa
File:                     3137372e3132392e3133312e302f32342d3234203d3e203532383734.roa (raw, json)
Hash identifier:          i4dE3LKX4KyLlqlsWcubsV1vRJmaY7NS52N5a8CPVo8=
Subject key identifier:   9C:FA:17:EC:CB:B1:59:36:CE:D6:BB:76:C7:CA:51:0B:11:5A:57:00
Certificate issuer:       /CN=C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324
Certificate serial:       2883C655EC9C067A7FB37914EDD1A5E35DA1334D
Authority key identifier: C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133312e302f32342d3234203d3e203532383734.roa
Signing time:             Mon 12 Sep 2022 21:08:14 +0000
ROA not before:           Mon 12 Sep 2022 21:03:14 +0000
ROA not after:            Mon 11 Sep 2023 21:08:14 +0000
asID:                     52874
IP address blocks:        177.129.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:83:c6:55:ec:9c:06:7a:7f:b3:79:14:ed:d1:a5:e3:5d:a1:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324
        Validity
            Not Before: Sep 12 21:03:14 2022 GMT
            Not After : Sep 11 21:08:14 2023 GMT
        Subject: CN=9CFA17ECCBB15936CED6BB76C7CA510B115A5700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:02:1b:f0:22:f5:3e:a3:e5:92:e8:3a:68:
                    b9:bb:42:d1:55:2b:e9:d6:82:98:e1:84:57:6a:d4:
                    e8:90:48:c7:31:05:91:66:23:5d:e4:86:e3:b7:69:
                    44:44:f8:16:b3:b3:87:18:79:8d:d9:29:72:94:29:
                    57:66:21:33:eb:98:21:7d:5b:38:f6:11:03:3f:c7:
                    7c:22:fb:ab:3d:88:84:7e:fd:cb:4c:23:e3:95:e9:
                    b4:88:c6:dc:d8:6c:91:62:5e:c6:9c:06:c7:62:13:
                    1d:60:28:df:89:e2:3c:24:82:a1:94:e0:ed:83:50:
                    8f:f5:21:ef:23:60:fc:3b:c8:de:85:ef:99:c0:dd:
                    26:e7:e4:dc:ee:cb:51:1a:cf:b5:ea:6d:c9:da:9c:
                    3d:68:a1:6f:4d:05:05:e1:e0:cf:35:9f:b7:26:4d:
                    90:4e:31:9a:28:e5:be:e5:81:41:8d:14:95:fa:91:
                    da:25:af:66:5c:26:96:f9:bc:31:21:de:f2:62:25:
                    fc:7f:f6:d6:5b:41:99:07:4b:6c:4c:03:ed:b9:3f:
                    44:3f:fb:df:9a:5a:a8:97:be:88:0d:8f:63:ed:74:
                    29:22:8f:46:0d:5b:da:f2:1b:63:74:f9:c9:05:54:
                    c9:b5:e5:54:5c:f0:ac:74:45:7d:70:76:48:a7:be:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FA:17:EC:CB:B1:59:36:CE:D6:BB:76:C7:CA:51:0B:11:5A:57:00
            X509v3 Authority Key Identifier:
                keyid:C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133312e302f32342d3234203d3e203532383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:cb:08:55:0e:75:b1:8a:3d:a3:19:25:8a:d3:5c:4e:be:
         8a:18:e7:24:3b:8d:e0:ca:11:c5:d9:21:29:34:20:39:a9:2d:
         17:fb:ca:7f:2d:51:41:e3:4a:bf:31:7a:b6:b3:2a:99:66:4b:
         9f:82:68:31:86:d3:db:36:d3:18:16:6d:b8:2f:d9:cb:02:2e:
         b2:36:1e:dc:bc:46:5b:0d:0c:9a:40:1c:21:62:9f:3a:79:71:
         11:fc:8f:bc:3a:62:f3:83:ca:67:21:37:d3:28:c0:5a:8a:dd:
         6d:a8:0b:9e:07:0b:27:fa:6d:0b:55:b4:90:12:6e:3f:c1:e4:
         e5:53:c0:9d:6c:a5:92:82:e6:0c:37:f3:de:74:e8:1d:fc:9e:
         1d:fd:bc:1f:dd:72:ed:55:ed:53:f8:e8:0b:10:e8:9c:0d:58:
         80:6b:39:16:12:53:b9:69:d3:c1:38:76:df:9f:1b:88:d9:95:
         99:47:5b:79:55:1c:52:8f:e3:a9:4b:be:99:bd:76:d2:9b:c4:
         71:74:25:39:2a:4e:94:2d:dd:85:9e:ba:e7:c2:08:fd:54:9b:
         bd:a5:e4:a3:d6:c0:a0:a8:e5:12:ac:6d:9d:73:96:a1:3a:fb:
         91:9b:2f:5b:d6:ad:c8:c4:73:fb:2b:68:76:40:a6:77:37:c4:
         23:87:4a:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKIPGVeycBnp/s3kU7dGl412hM00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBFNEI4NjY2OUE5MjIzRkQ2RUQzRkVDMEUyREU1OTA1
Rjk3QzMyNDAeFw0yMjA5MTIyMTAzMTRaFw0yMzA5MTEyMTA4MTRaMDMxMTAvBgNV
BAMTKDlDRkExN0VDQ0JCMTU5MzZDRUQ2QkI3NkM3Q0E1MTBCMTE1QTU3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKgIb8CL1PqPlkug6aLm7QtFV
K+nWgpjhhFdq1OiQSMcxBZFmI13khuO3aURE+Bazs4cYeY3ZKXKUKVdmITPrmCF9
Wzj2EQM/x3wi+6s9iIR+/ctMI+OV6bSIxtzYbJFiXsacBsdiEx1gKN+J4jwkgqGU
4O2DUI/1Ie8jYPw7yN6F75nA3Sbn5Nzuy1Eaz7XqbcnanD1ooW9NBQXh4M81n7cm
TZBOMZoo5b7lgUGNFJX6kdolr2ZcJpb5vDEh3vJiJfx/9tZbQZkHS2xMA+25P0Q/
+9+aWqiXvogNj2PtdCkij0YNW9ryG2N0+ckFVMm15VRc8Kx0RX1wdkinvj+TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnPoX7MuxWTbO1rt2x8pRCxFaVwAwHwYDVR0j
BBgwFoAUwOS4ZmmpIj/W7T/sDi3lkF+XwyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFqNUo5NTk3OXM1eFU4alA0UjdUbnBkV0NWREdRQ0dwMkxzbVJjdGQz
V20vMC9DMEU0Qjg2NjY5QTkyMjNGRDZFRDNGRUMwRTJERTU5MDVGOTdDMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwRTRCODY2NjlBOTIyM0ZE
NkVEM0ZFQzBFMkRFNTkwNUY5N0MzMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxajVKOTU5NzlzNXhVOGpQNFI3VG5wZFdDVkRHUUNHcDJMc21SY3RkM1dtLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgYMwDQYJKoZIhvcNAQELBQADggEBAJZbywhV
DnWxij2jGSWK01xOvooY5yQ7jeDKEcXZISk0IDmpLRf7yn8tUUHjSr8xerazKplm
S5+CaDGG09s20xgWbbgv2csCLrI2Hty8RlsNDJpAHCFinzp5cRH8j7w6YvODymch
N9MowFqK3W2oC54HCyf6bQtVtJASbj/B5OVTwJ1spZKC5gw389506B38nh39vB/d
cu1V7VP46AsQ6JwNWIBrORYSU7lp08E4dt+fG4jZlZlHW3lVHFKP46lLvpm9dtKb
xHF0JTkqTpQt3YWeuufCCP1Um72l5KPWwKCo5RKsbZ1zlqE6+5GbL1vWrcjEc/sr
aHZApnc3xCOHSlM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org