Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32322d3232203d3e203532353537.roa
File:                     3137372e38362e31322e302f32322d3232203d3e203532353537.roa (raw, json)
Hash identifier:          RZydNM1VdjDo+tPYipc9CExGUf1MoT6mv2HB9EPvFSA=
Subject key identifier:   31:52:19:89:52:8A:FB:64:86:3C:7C:2A:95:5A:C0:7C:EB:FB:BC:82
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       40A0A3DA061199A34C58BD2A632715460BE13F7C
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32322d3232203d3e203532353537.roa
Signing time:             Sat 08 Apr 2023 22:32:45 +0000
ROA not before:           Sat 08 Apr 2023 22:27:45 +0000
ROA not after:            Sat 06 Apr 2024 22:32:45 +0000
asID:                     52557
IP address blocks:        177.86.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:a3:da:06:11:99:a3:4c:58:bd:2a:63:27:15:46:0b:e1:3f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Apr  8 22:27:45 2023 GMT
            Not After : Apr  6 22:32:45 2024 GMT
        Subject: CN=31521989528AFB64863C7C2A955AC07CEBFBBC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:5b:e5:27:57:c8:39:a8:0d:96:41:5a:70:
                    37:ca:a0:5f:bc:57:5b:21:d7:dc:85:bc:c7:a4:16:
                    d9:be:4f:42:8a:19:b0:f4:26:ee:46:9f:3c:1c:8a:
                    4d:87:8c:b4:2d:46:5c:79:3c:bf:a7:c1:52:a3:9c:
                    ce:11:a0:31:5f:b6:f0:2d:a3:d4:5e:fb:4a:12:af:
                    0c:05:b4:c2:1b:32:c9:5c:6d:88:db:49:76:12:02:
                    37:7a:4b:94:f5:07:c0:b6:a0:ba:d4:1e:47:bb:9b:
                    d7:eb:83:94:e8:d4:b6:1a:d7:dd:27:d6:83:ae:f6:
                    01:04:6e:30:e9:23:53:8b:df:d7:6e:12:c2:06:37:
                    7a:f0:67:9c:c1:39:df:c5:e8:c6:1e:e6:d9:74:ea:
                    b1:d0:9c:6b:91:f8:88:a5:5f:1d:02:81:ce:7b:30:
                    c8:cc:8f:e7:67:88:38:fd:e8:69:49:27:f7:ea:b9:
                    34:82:be:ea:8d:ec:29:67:5d:09:fe:b2:96:21:0a:
                    06:61:ca:6d:9b:5f:c3:85:6e:57:7f:ac:3b:03:b2:
                    36:b6:49:05:b8:c8:b1:45:3f:9c:a9:fa:77:78:63:
                    50:cb:52:70:c5:21:90:c2:6e:d7:0b:d7:93:cf:2d:
                    d9:51:aa:52:6a:a4:8c:52:58:10:dc:c9:d2:e9:13:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:19:89:52:8A:FB:64:86:3C:7C:2A:95:5A:C0:7C:EB:FB:BC:82
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32322d3232203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:92:ab:ab:97:de:d0:c1:08:2f:eb:12:2e:ce:89:e1:1b:
         09:6a:84:ca:f7:29:35:04:67:a3:54:07:ac:ce:54:65:13:44:
         80:c3:2b:e5:7f:73:a7:97:11:58:bf:8a:87:5a:24:fb:c3:6d:
         23:bd:2a:4f:54:cb:70:ac:11:d5:ac:2a:60:46:11:40:52:b1:
         93:1d:f4:1c:fc:8f:29:23:e5:ad:15:15:e7:01:2a:7f:90:ee:
         a2:25:77:a7:ca:3f:23:12:60:89:e4:0b:4c:6b:e4:d9:a4:9a:
         8e:9d:26:45:bb:9a:d3:bf:85:3b:87:1e:94:bc:cb:c6:77:1d:
         99:9f:d8:b8:f6:3c:68:d6:7a:da:85:99:8f:da:a2:4a:08:59:
         51:04:3a:76:8f:9d:4b:1a:77:42:59:d3:f8:02:7b:f1:ec:71:
         5a:4e:a0:7c:e4:5c:f5:4e:97:e8:74:15:38:c9:66:88:76:68:
         0c:2a:6b:db:95:18:1d:c2:9a:f8:68:d3:d2:81:d7:df:af:b7:
         f2:a5:c0:b0:5d:df:d7:6a:88:fc:5a:09:33:8c:e6:74:c2:d1:
         d7:d8:a7:75:55:68:74:e7:cd:e2:ea:98:31:27:81:fb:21:f8:
         70:42:a7:af:40:94:32:70:95:24:2f:88:a9:7c:51:b5:fb:5f:
         92:b8:b6:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQKCj2gYRmaNMWL0qYycVRgvhP3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ2MkQ0MDI5OUY4ODY4MzcxRjQ2Qzc3QjI5MDI4OTFB
NkIyMEVDQTAeFw0yMzA0MDgyMjI3NDVaFw0yNDA0MDYyMjMyNDVaMDMxMTAvBgNV
BAMTKDMxNTIxOTg5NTI4QUZCNjQ4NjNDN0MyQTk1NUFDMDdDRUJGQkJDODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbB1vlJ1fIOagNlkFacDfKoF+8
V1sh19yFvMekFtm+T0KKGbD0Ju5Gnzwcik2HjLQtRlx5PL+nwVKjnM4RoDFftvAt
o9Re+0oSrwwFtMIbMslcbYjbSXYSAjd6S5T1B8C2oLrUHke7m9frg5To1LYa190n
1oOu9gEEbjDpI1OL39duEsIGN3rwZ5zBOd/F6MYe5tl06rHQnGuR+IilXx0Cgc57
MMjMj+dniDj96GlJJ/fquTSCvuqN7ClnXQn+spYhCgZhym2bX8OFbld/rDsDsja2
SQW4yLFFP5yp+nd4Y1DLUnDFIZDCbtcL15PPLdlRqlJqpIxSWBDcydLpEwjVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMVIZiVKK+2SGPHwqlVrAfOv7vIIwHwYDVR0j
BBgwFoAU3WLUApn4hoNx9Gx3spAokaayDsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlLNjFzazVTNUE1MUVGZWt6M2JIY05oOWZVZG1EZnhBODlramt6UERX
THEvMC9ERDYyRDQwMjk5Rjg4NjgzNzFGNDZDNzdCMjkwMjg5MUE2QjIwRUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RENjJENDAyOTlGODg2ODM3
MUY0NkM3N0IyOTAyODkxQTZCMjBFQ0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5SzYxc2s1UzVBNTFFRmVrejNiSGNOaDlmVWRtRGZ4QTg5a2prelBEV0xxLzAv
MzEzNzM3MmUzODM2MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1
MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFWDDANBgkqhkiG9w0BAQsFAAOCAQEATLeSq6uX3tDB
CC/rEi7OieEbCWqEyvcpNQRno1QHrM5UZRNEgMMr5X9zp5cRWL+Kh1ok+8NtI70q
T1TLcKwR1awqYEYRQFKxkx30HPyPKSPlrRUV5wEqf5DuoiV3p8o/IxJgieQLTGvk
2aSajp0mRbua07+FO4celLzLxncdmZ/YuPY8aNZ62oWZj9qiSghZUQQ6do+dSxp3
QlnT+AJ78exxWk6gfORc9U6X6HQVOMlmiHZoDCpr25UYHcKa+GjT0oHX36+38qXA
sF3f12qI/FoJM4zmdMLR19indVVodOfN4uqYMSeB+yH4cEKnr0CUMnCVJC+IqXxR
tftfkri2kA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org