Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
File:                     3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (raw, json)
Hash identifier:          IF3C6Qa/5rsWekqXTPUA+UaXtVSU5cLvW9cav7nOpeo=
Subject key identifier:   70:7F:25:2A:2B:06:C4:2F:8F:90:DD:BC:7C:21:AC:01:33:DC:A8:19
Certificate issuer:       /CN=62FBF527B426B909C7FD9ADD14F0F50C00209B6D
Certificate serial:       7C937DBEBC568434FECF53E818ECBE993F027548
Authority key identifier: 62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
Signing time:             Fri 15 Dec 2023 12:12:49 +0000
ROA not before:           Fri 15 Dec 2023 12:07:49 +0000
ROA not after:            Fri 13 Dec 2024 12:12:49 +0000
asID:                     52998
IP address blocks:        177.53.200.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:93:7d:be:bc:56:84:34:fe:cf:53:e8:18:ec:be:99:3f:02:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62FBF527B426B909C7FD9ADD14F0F50C00209B6D
        Validity
            Not Before: Dec 15 12:07:49 2023 GMT
            Not After : Dec 13 12:12:49 2024 GMT
        Subject: CN=707F252A2B06C42F8F90DDBC7C21AC0133DCA819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:16:20:77:ad:88:56:4b:e7:bc:9e:2e:2d:
                    44:97:f5:e3:17:c6:b9:c4:10:cf:02:a2:cb:b7:bd:
                    5e:24:4c:34:7c:6d:a7:94:8f:24:f6:be:8b:e6:9e:
                    34:83:d2:67:6f:c6:8c:3c:a4:6d:a7:e5:4f:06:37:
                    d2:27:49:74:34:f8:be:25:70:de:2f:b7:cd:11:d5:
                    84:79:fb:1d:57:8f:80:2a:28:a7:bf:3b:40:11:af:
                    75:6c:68:6d:db:c2:02:65:44:02:09:4b:9a:56:7c:
                    2d:e6:76:02:0e:1d:1c:22:fb:ca:c8:f6:87:b1:a3:
                    a7:68:89:cf:fb:89:d8:e5:7d:ae:1b:d7:4d:c7:b0:
                    7d:77:88:9a:7e:46:97:6f:fc:0e:08:d6:f3:d9:4e:
                    10:87:ee:39:a1:e8:82:2d:32:20:08:c2:79:e0:2b:
                    06:ab:c5:7a:e9:0d:fd:80:0b:57:86:2c:6f:0b:55:
                    3b:ff:37:b7:7b:c8:32:e5:59:c6:8d:9e:be:6b:8a:
                    8f:14:f9:ea:60:c8:d8:35:77:e7:5f:7f:3e:69:1d:
                    9b:17:86:80:d8:51:69:bc:8d:88:7f:e2:9f:92:4f:
                    5c:07:f4:ee:46:ae:12:40:3f:90:22:c5:49:0c:d8:
                    ff:b8:05:e2:64:83:25:bc:a7:bc:8c:7a:6e:85:c8:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7F:25:2A:2B:06:C4:2F:8F:90:DD:BC:7C:21:AC:01:33:DC:A8:19
            X509v3 Authority Key Identifier:
                keyid:62:FB:F5:27:B4:26:B9:09:C7:FD:9A:DD:14:F0:F5:0C:00:20:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62FBF527B426B909C7FD9ADD14F0F50C00209B6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/0/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:37:06:97:82:a7:92:a3:2b:2d:8f:af:f3:8f:dc:1f:88:
         c6:35:21:90:3c:18:f3:77:cd:82:71:60:c8:dc:49:0d:5c:46:
         60:d8:33:ec:37:04:e0:e0:e0:87:35:a2:8a:11:ae:30:0e:17:
         a5:b8:42:b7:8b:2e:87:8c:a8:c7:0e:c8:e0:89:fb:27:44:79:
         cb:0d:74:f2:9f:a4:df:89:dc:bf:17:dd:bb:46:78:89:7f:af:
         c8:d5:84:51:8c:a7:e1:ce:a7:0e:93:a0:34:e5:8c:fb:bd:14:
         a8:cf:fd:91:53:20:b3:4f:90:44:3a:19:11:a9:41:5f:65:82:
         43:aa:4d:60:76:16:f8:83:3c:93:e2:be:4f:82:1f:5f:b3:2d:
         08:24:ee:0a:81:77:80:e6:ac:3b:ef:38:40:28:32:40:23:91:
         a8:05:62:64:8a:2d:87:3c:77:60:5a:25:52:78:1b:b0:f0:c0:
         2f:67:b1:17:00:f0:7f:5e:ef:33:1f:93:59:22:12:6a:23:ac:
         69:e0:c3:3b:61:55:45:b6:8b:aa:93:23:35:dd:16:f4:2d:c5:
         bb:cd:b4:34:9d:3a:34:40:5e:24:b4:73:50:a3:b4:f0:14:0c:
         fe:6e:f1:52:06:d1:2c:3e:14:24:51:bb:02:68:58:04:cd:ff:
         b7:90:ef:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfJN9vrxWhDT+z1PoGOy+mT8CdUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJGQkY1MjdCNDI2QjkwOUM3RkQ5QUREMTRGMEY1MEMw
MDIwOUI2RDAeFw0yMzEyMTUxMjA3NDlaFw0yNDEyMTMxMjEyNDlaMDMxMTAvBgNV
BAMTKDcwN0YyNTJBMkIwNkM0MkY4RjkwRERCQzdDMjFBQzAxMzNEQ0E4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUxYgd62IVkvnvJ4uLUSX9eMX
xrnEEM8Cosu3vV4kTDR8baeUjyT2vovmnjSD0mdvxow8pG2n5U8GN9InSXQ0+L4l
cN4vt80R1YR5+x1Xj4AqKKe/O0ARr3VsaG3bwgJlRAIJS5pWfC3mdgIOHRwi+8rI
9oexo6doic/7idjlfa4b103HsH13iJp+Rpdv/A4I1vPZThCH7jmh6IItMiAIwnng
KwarxXrpDf2AC1eGLG8LVTv/N7d7yDLlWcaNnr5rio8U+epgyNg1d+dffz5pHZsX
hoDYUWm8jYh/4p+ST1wH9O5GrhJAP5AixUkM2P+4BeJkgyW8p7yMem6FyJnXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcH8lKisGxC+PkN28fCGsATPcqBkwHwYDVR0j
BBgwFoAUYvv1J7QmuQnH/ZrdFPD1DAAgm20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdZN2pXZXJOWHdEdWdxRWlBS1lqWldWb1pDbzdQam5pYW1YTG9YMUJ6
dVYvMC82MkZCRjUyN0I0MjZCOTA5QzdGRDlBREQxNEYwRjUwQzAwMjA5QjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyRkJGNTI3QjQyNkI5MDlD
N0ZEOUFERDE0RjBGNTBDMDAyMDlCNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3WTdqV2VyTlh3RHVncUVpQUtZalpXVm9aQ283UGpuaWFtWExvWDFCenVWLzAv
MzEzNzM3MmUzNTMzMmUzMjMwMzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMy
MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTXIMA0GCSqGSIb3DQEBCwUAA4IBAQBNCzcGl4Kn
kqMrLY+v84/cH4jGNSGQPBjzd82CcWDI3EkNXEZg2DPsNwTg4OCHNaKKEa4wDhel
uEK3iy6HjKjHDsjgifsnRHnLDXTyn6Tfidy/F927RniJf6/I1YRRjKfhzqcOk6A0
5Yz7vRSoz/2RUyCzT5BEOhkRqUFfZYJDqk1gdhb4gzyT4r5Pgh9fsy0IJO4KgXeA
5qw77zhAKDJAI5GoBWJkii2HPHdgWiVSeBuw8MAvZ7EXAPB/Xu8zH5NZIhJqI6xp
4MM7YVVFtouqkyM13Rb0LcW7zbQ0nTo0QF4ktHNQo7TwFAz+bvFSBtEsPhQkUbsC
aFgEzf+3kO/r
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org