Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134352e302f32342d3234203d3e20323635313932.roa
File:                     3136372e3234392e3134352e302f32342d3234203d3e20323635313932.roa (raw, json)
Hash identifier:          M1peYpJKRFHieSd4Rqhy4GcF/ZxOVUqYqJC7hB+KBAI=
Subject key identifier:   CC:FF:D4:6A:1C:A1:4B:4C:1C:64:98:12:20:E2:3B:18:73:0D:26:4D
Certificate issuer:       /CN=5300F5DDE4075958E44A38138BA9467A0B30154C
Certificate serial:       07944E0DD0A4C3A0504CBF191C71206FD033BF19
Authority key identifier: 53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134352e302f32342d3234203d3e20323635313932.roa
Signing time:             Sat 23 Mar 2024 13:57:36 +0000
ROA not before:           Sat 23 Mar 2024 13:52:36 +0000
ROA not after:            Sat 22 Mar 2025 13:57:36 +0000
asID:                     265192
IP address blocks:        167.249.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:94:4e:0d:d0:a4:c3:a0:50:4c:bf:19:1c:71:20:6f:d0:33:bf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300F5DDE4075958E44A38138BA9467A0B30154C
        Validity
            Not Before: Mar 23 13:52:36 2024 GMT
            Not After : Mar 22 13:57:36 2025 GMT
        Subject: CN=CCFFD46A1CA14B4C1C64981220E23B18730D264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:14:ef:1d:77:95:fc:bb:01:86:ed:f2:7a:
                    76:83:f5:bd:f9:5e:de:a0:ba:b0:bc:ac:1f:44:a5:
                    51:1c:65:ba:f9:25:3b:f5:34:12:53:fb:f6:cb:23:
                    07:76:b9:9a:c1:36:a4:1d:11:c6:53:11:a7:3b:f9:
                    d4:e7:61:57:8b:6c:19:e8:7b:fd:43:fb:46:8c:6a:
                    7a:e7:9a:a6:02:84:a6:9e:ab:fd:25:42:94:0c:e9:
                    08:e8:4c:af:ef:56:39:b2:92:e3:6b:eb:90:e5:f6:
                    95:2d:cd:96:d7:04:7b:54:df:ce:6b:32:61:de:b5:
                    68:e3:57:e0:1f:39:d2:66:6b:28:4f:0e:ca:3a:6e:
                    23:f6:7d:15:03:0b:02:ec:3c:f3:81:9c:97:d5:04:
                    8d:e1:ed:ef:84:a4:b0:c9:9f:b4:e3:1b:73:02:b8:
                    56:4b:e6:80:cd:fb:d6:6a:76:cd:37:c6:e8:9c:f4:
                    cb:08:6e:e6:fc:7b:52:5c:1c:89:fa:25:e8:26:b0:
                    2b:4a:6e:f7:39:67:6d:94:a0:1d:d2:7a:6e:5d:9c:
                    5e:c6:13:ce:79:dd:f5:e2:90:4b:0d:1a:b0:40:82:
                    36:6b:86:00:36:8f:7e:af:a6:65:86:e2:e0:5e:71:
                    8e:10:cd:70:04:44:39:2f:cc:68:a4:03:78:09:8f:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:D4:6A:1C:A1:4B:4C:1C:64:98:12:20:E2:3B:18:73:0D:26:4D
            X509v3 Authority Key Identifier:
                keyid:53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/5300F5DDE4075958E44A38138BA9467A0B30154C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134352e302f32342d3234203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:57:7f:2f:d2:cd:61:dd:a7:dc:dd:8f:af:41:1e:2f:d6:6a:
         da:d8:6a:78:81:a2:1b:52:5e:a2:b4:18:3e:01:37:80:c6:d3:
         89:8c:bc:87:75:56:90:54:32:82:cf:02:59:00:80:b5:32:79:
         89:77:d8:a1:d9:08:87:58:86:34:02:df:97:ee:eb:c2:c1:31:
         d3:fd:bd:28:be:5d:25:9d:4b:a8:1b:3f:c8:13:66:a6:66:dd:
         75:4e:58:37:81:64:87:60:75:54:59:e7:65:ba:18:6a:7e:d9:
         09:0a:67:a1:4a:2f:7d:5e:f9:cc:8d:a1:82:5e:36:30:80:97:
         59:a4:23:78:ed:aa:5b:c3:0a:ce:08:5d:41:95:f7:d4:1c:18:
         23:bb:93:4e:d5:00:6f:42:60:88:99:50:40:4d:92:80:8e:8f:
         fc:ba:19:94:ba:a3:e5:db:37:e1:f6:88:e3:2d:50:52:8f:34:
         97:db:12:ed:6e:b6:83:39:fc:92:0b:2d:bb:90:88:9e:ed:c7:
         b1:68:54:f5:ff:18:2b:06:7d:c3:8b:ea:25:3e:cd:4e:52:79:
         06:1a:7f:0b:89:81:d3:15:f7:42:1f:05:c6:c4:16:f4:a5:83:
         41:6f:c8:4a:3e:e9:75:a5:37:6a:c6:e8:43:f9:d3:da:63:85:
         17:b8:99:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUB5RODdCkw6BQTL8ZHHEgb9AzvxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwMEY1RERFNDA3NTk1OEU0NEEzODEzOEJBOTQ2N0Ew
QjMwMTU0QzAeFw0yNDAzMjMxMzUyMzZaFw0yNTAzMjIxMzU3MzZaMDMxMTAvBgNV
BAMTKENDRkZENDZBMUNBMTRCNEMxQzY0OTgxMjIwRTIzQjE4NzMwRDI2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1BTvHXeV/LsBhu3yenaD9b35
Xt6gurC8rB9EpVEcZbr5JTv1NBJT+/bLIwd2uZrBNqQdEcZTEac7+dTnYVeLbBno
e/1D+0aManrnmqYChKaeq/0lQpQM6QjoTK/vVjmykuNr65Dl9pUtzZbXBHtU385r
MmHetWjjV+AfOdJmayhPDso6biP2fRUDCwLsPPOBnJfVBI3h7e+EpLDJn7TjG3MC
uFZL5oDN+9Zqds03xuic9MsIbub8e1JcHIn6JegmsCtKbvc5Z22UoB3Sem5dnF7G
E8553fXikEsNGrBAgjZrhgA2j36vpmWG4uBecY4QzXAERDkvzGikA3gJj1qpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzP/UahyhS0wcZJgSIOI7GHMNJk0wHwYDVR0j
BBgwFoAUUwD13eQHWVjkSjgTi6lGegswFUwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQThyeThBSm1iMU12Z0pORGRuR3RZRXBBdXJ5ZkdoaVRQVUJ3VFNMUWZr
V24vMC81MzAwRjVEREU0MDc1OTU4RTQ0QTM4MTM4QkE5NDY3QTBCMzAxNTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzMDBGNURERTQwNzU5NThF
NDRBMzgxMzhCQTk0NjdBMEIzMDE1NEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E4cnk4QUptYjFNdmdKTkRkbkd0WUVwQXVyeWZHaGlUUFVCd1RTTFFma1duLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5kTANBgkqhkiG9w0BAQsFAAOCAQEAwFd/
L9LNYd2n3N2Pr0EeL9Zq2thqeIGiG1JeorQYPgE3gMbTiYy8h3VWkFQygs8CWQCA
tTJ5iXfYodkIh1iGNALfl+7rwsEx0/29KL5dJZ1LqBs/yBNmpmbddU5YN4Fkh2B1
VFnnZboYan7ZCQpnoUovfV75zI2hgl42MICXWaQjeO2qW8MKzghdQZX31BwYI7uT
TtUAb0JgiJlQQE2SgI6P/LoZlLqj5ds34faI4y1QUo80l9sS7W62gzn8kgstu5CI
nu3HsWhU9f8YKwZ9w4vqJT7NTlJ5Bhp/C4mB0xX3Qh8FxsQW9KWDQW/ISj7pdaU3
asboQ/nT2mOFF7iZUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org