Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/3137372e39332e3136302e302f32312d3234203d3e20323633313539.roa
File:                     3137372e39332e3136302e302f32312d3234203d3e20323633313539.roa (raw, json)
Hash identifier:          0BUlKi5TkcHV30sqXGwekIrerj0S2DrtAhnsiXTwjrY=
Subject key identifier:   AF:D1:45:47:99:2E:6E:92:16:5F:B8:F8:3D:B2:2A:C1:F5:18:B1:62
Certificate issuer:       /CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
Certificate serial:       377DDEA7896EEAB2DDD994FC5A2A2AA78EAB4609
Authority key identifier: C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/3137372e39332e3136302e302f32312d3234203d3e20323633313539.roa
Signing time:             Sat 23 Jul 2022 00:00:00 +0000
ROA not before:           Fri 22 Jul 2022 23:55:00 +0000
ROA not after:            Sun 23 Jul 2023 00:00:00 +0000
asID:                     263159
IP address blocks:        177.93.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:de:a7:89:6e:ea:b2:dd:d9:94:fc:5a:2a:2a:a7:8e:ab:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
        Validity
            Not Before: Jul 22 23:55:00 2022 GMT
            Not After : Jul 23 00:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:64:39:24:af:62:1d:51:15:ab:f2:55:6f:
                    5a:d6:c8:9c:3e:77:ab:1a:39:69:23:69:93:a9:aa:
                    d9:d3:bf:01:75:c3:93:b4:68:bc:81:2a:b9:c6:c8:
                    96:98:4b:7b:3a:f2:8a:0b:8e:db:4a:df:03:23:bb:
                    6f:0a:2d:e8:2a:1d:da:a6:87:06:7e:70:28:ba:d2:
                    30:de:6e:68:58:0b:d4:a9:05:af:f7:41:da:e4:2d:
                    1e:49:8a:e5:91:2e:0c:7f:e0:68:39:40:7b:94:26:
                    99:55:ff:ee:ae:3f:49:f4:78:a8:f5:34:4b:37:f4:
                    dd:7a:5a:c5:fa:ed:32:9e:6f:39:eb:d9:a0:3c:73:
                    d2:f7:67:39:29:bc:2a:f2:3f:45:a2:95:3c:d1:b6:
                    c7:4d:d0:cb:9c:b4:68:87:53:62:2e:81:60:46:9b:
                    5b:d8:06:49:7a:ef:85:e9:75:b4:ca:9a:e8:d6:84:
                    5c:69:43:3b:75:b7:95:7e:3c:a7:be:76:a5:57:e2:
                    e8:ad:fc:4c:54:ad:dc:31:a6:79:3c:94:6b:ad:ec:
                    15:2e:a7:ee:a0:97:45:ba:47:4b:55:ed:c9:f0:68:
                    d1:2b:84:4d:0f:7c:4f:b8:ea:8f:78:87:50:de:15:
                    89:b1:36:d2:cf:a7:94:e2:f2:6a:0f:f4:6b:02:1f:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D1:45:47:99:2E:6E:92:16:5F:B8:F8:3D:B2:2A:C1:F5:18:B1:62
            X509v3 Authority Key Identifier:
                keyid:C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/3137372e39332e3136302e302f32312d3234203d3e20323633313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:1d:2d:89:39:05:b3:3f:af:1b:9d:5a:64:92:4c:f6:b0:
         ff:8e:56:69:3b:f9:0d:8f:f4:3f:3c:6c:71:6a:47:cb:c2:8a:
         3b:16:4a:60:69:33:d3:25:cb:3d:91:57:3c:7a:32:a2:5e:ea:
         17:87:44:52:42:4e:f7:e2:10:2b:81:4e:15:6f:61:58:78:a8:
         0d:a2:69:54:da:9e:4b:6d:3f:4b:68:3a:f2:eb:41:05:2a:d7:
         48:fc:a4:0a:8c:06:0c:df:9f:89:88:36:92:48:60:fb:62:79:
         1f:7c:f0:0a:b4:e2:e4:95:98:57:8e:73:e9:65:ea:76:52:08:
         f5:82:fb:1b:4e:ee:4a:3e:82:6c:f1:b3:da:ff:1e:ab:d8:ab:
         a0:b5:af:ec:54:50:1e:9d:59:2d:b7:62:54:ff:2c:6c:a5:9f:
         d2:e6:04:d4:47:af:18:58:dd:e4:b6:f8:19:a4:f8:1f:f1:09:
         29:52:fb:bd:e9:1d:58:3a:10:64:ad:47:88:69:dd:34:1d:8e:
         0f:f5:c6:08:be:fe:e2:a7:25:da:93:45:d9:19:96:c3:a8:97:
         8c:7a:8b:db:6a:c2:5a:e0:29:e1:37:53:d9:d4:47:b2:fe:0b:
         2f:ce:56:a7:fc:9c:0d:24:e3:e9:03:1e:69:b8:78:8e:6b:65:
         41:62:e2:81
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUN33ep4lu6rLd2ZT8Wioqp46rRgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMyQzRDRjUzMDZGQTE3NzdGOEIxMjIyMzdEMDk4OTIy
RkNGREVCOTAeFw0yMjA3MjIyMzU1MDBaFw0yMzA3MjMwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzBGRDY0MzkyNEFGNjIxRDUx
MTVBQkYyNTU2RjVBRDZDODlDM0U3N0FCMUEzOTY5MjM2OTkzQTlBQUQ5RDNCRjAx
NzVDMzkzQjQ2OEJDODEyQUI5QzZDODk2OTg0QjdCM0FGMjhBMEI4RURCNEFERjAz
MjNCQjZGMEEyREU4MkExRERBQTY4NzA2N0U3MDI4QkFEMjMwREU2RTY4NTgwQkQ0
QTkwNUFGRjc0MURBRTQyRDFFNDk4QUU1OTEyRTBDN0ZFMDY4Mzk0MDdCOTQyNjk5
NTVGRkVFQUUzRjQ5RjQ3OEE4RjUzNDRCMzdGNEREN0E1QUM1RkFFRDMyOUU2RjM5
RUJEOUEwM0M3M0QyRjc2NzM5MjlCQzJBRjIzRjQ1QTI5NTNDRDFCNkM3NEREMENC
OUNCNDY4ODc1MzYyMkU4MTYwNDY5QjVCRDgwNjQ5N0FFRjg1RTk3NUI0Q0E5QUU4
RDY4NDVDNjk0MzNCNzVCNzk1N0UzQ0E3QkU3NkE1NTdFMkU4QURGQzRDNTRBRERD
MzFBNjc5M0M5NDZCQURFQzE1MkVBN0VFQTA5NzQ1QkE0NzRCNTVFREM5RjA2OEQx
MkI4NDREMEY3QzRGQjhFQThGNzg4NzUwREUxNTg5QjEzNkQyQ0ZBNzk0RTJGMjZB
MEZGNDZCMDIxRjcyQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwP1kOSSvYh1RFavyVW9a1sicPnerGjlpI2mTqarZ078BdcOTtGi8
gSq5xsiWmEt7OvKKC47bSt8DI7tvCi3oKh3apocGfnAoutIw3m5oWAvUqQWv90Ha
5C0eSYrlkS4Mf+BoOUB7lCaZVf/urj9J9Hio9TRLN/TdelrF+u0ynm8569mgPHPS
92c5Kbwq8j9FopU80bbHTdDLnLRoh1NiLoFgRptb2AZJeu+F6XW0ypro1oRcaUM7
dbeVfjynvnalV+LorfxMVK3cMaZ5PJRrrewVLqfuoJdFukdLVe3J8GjRK4RND3xP
uOqPeIdQ3hWJsTbSz6eU4vJqD/RrAh9yxwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FK/RRUeZLm6SFl+4+D2yKsH1GLFiMB8GA1UdIwQYMBaAFMMsTPUwb6F3f4sSIjfQ
mJIvz965MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EzMWtQZWlaTGtMdTVL
ZHFFZTZGRWpZWmYxSkZnajZuaGNQdGQ2eTFTQ3VVLzAvQzMyQzRDRjUzMDZGQTE3
NzdGOEIxMjIyMzdEMDk4OTIyRkNGREVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DMzJDNENGNTMwNkZBMTc3N0Y4QjEyMjIzN0QwOTg5MjJGQ0ZE
RUI5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMzFrUGVpWkxrTHU1S2RxRWU2
RkVqWVpmMUpGZ2o2bmhjUHRkNnkxU0N1VS8wLzMxMzczNzJlMzkzMzJlMzEzNjMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sV2gMA0GCSqGSIb3DQEBCwUAA4IBAQA/Oh0tiTkFsz+vG51aZJJM9rD/jlZpO/kN
j/Q/PGxxakfLwoo7FkpgaTPTJcs9kVc8ejKiXuoXh0RSQk734hArgU4Vb2FYeKgN
omlU2p5LbT9LaDry60EFKtdI/KQKjAYM35+JiDaSSGD7YnkffPAKtOLklZhXjnPp
Zep2Ugj1gvsbTu5KPoJs8bPa/x6r2Kugta/sVFAenVktt2JU/yxspZ/S5gTUR68Y
WN3ktvgZpPgf8QkpUvu96R1YOhBkrUeIad00HY4P9cYIvv7ipyXak0XZGZbDqJeM
eovbasJa4CnhN1PZ1Eey/gsvzlan/JwNJOPpAx5puHiOa2VBYuKB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org