Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132332e302f32342d3234203d3e203533323131.roa
File:                     3137372e38372e3132332e302f32342d3234203d3e203533323131.roa (raw, json)
Hash identifier:          0DzdGdunXSzCIrb5boR+w0klKSTSV78ntO8pBjtZQtg=
Subject key identifier:   AC:5D:E5:00:C7:5B:43:4E:28:22:CD:78:2D:F3:88:5F:44:52:BA:15
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       538DB6CAE3D87DF8A9D70FA292F7616EEB6E5305
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132332e302f32342d3234203d3e203533323131.roa
Signing time:             Sat 19 Feb 2022 17:18:34 +0000
ROA not before:           Sat 19 Feb 2022 17:13:34 +0000
ROA not after:            Sat 18 Feb 2023 17:18:34 +0000
asID:                     53211
IP address blocks:        177.87.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8d:b6:ca:e3:d8:7d:f8:a9:d7:0f:a2:92:f7:61:6e:eb:6e:53:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: Feb 19 17:13:34 2022 GMT
            Not After : Feb 18 17:18:34 2023 GMT
        Subject: CN=AC5DE500C75B434E2822CD782DF3885F4452BA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:dd:50:e2:47:0b:7f:4a:53:01:6d:ec:e4:
                    4b:52:99:42:4f:48:f3:ea:41:4a:55:73:a8:93:86:
                    69:96:18:04:30:51:b7:36:ff:d5:66:fe:67:61:30:
                    b2:a6:dc:d6:20:ce:d5:57:07:a8:71:93:11:92:da:
                    4a:f3:44:ce:82:4f:02:34:db:57:eb:60:c5:8f:12:
                    9d:a7:05:2a:95:d3:e2:c5:2e:34:ef:a6:c0:9e:5c:
                    32:8b:56:d6:49:41:d2:54:94:1b:fd:9d:92:7a:2a:
                    ba:57:eb:5d:7c:ab:58:7e:04:8a:34:3f:9b:d0:4f:
                    26:c0:fc:ab:89:f1:57:0f:46:a1:b2:3d:be:26:38:
                    83:68:d4:9c:d4:4e:b2:ba:d3:b5:67:d1:5b:ca:74:
                    74:3f:4d:2e:b7:7c:4f:1f:be:d6:b1:bb:4e:be:67:
                    19:7e:45:82:27:e0:20:54:65:b8:2b:4c:ad:f2:f8:
                    99:e9:1e:7e:98:a9:97:ce:3c:dc:6c:66:4a:a6:e4:
                    d9:6d:4d:c0:e5:64:6f:fd:35:56:f1:67:c5:87:bd:
                    b8:3f:0b:13:db:41:9e:48:d6:7a:6d:37:9c:e9:f9:
                    cc:3b:08:fa:47:4d:e1:9a:be:d0:1d:02:13:4b:3f:
                    f9:4a:4f:2c:e1:34:3d:45:93:df:36:93:1c:eb:3d:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:E5:00:C7:5B:43:4E:28:22:CD:78:2D:F3:88:5F:44:52:BA:15
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132332e302f32342d3234203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:45:ef:3b:3a:28:21:78:6b:c0:b4:87:0f:ef:c8:c2:61:bb:
         c8:26:ff:72:98:09:ea:b4:b8:a6:86:f3:06:62:47:bc:d0:cc:
         59:02:1c:ed:80:26:1f:82:57:a1:d7:4f:55:02:1d:a4:a5:5e:
         96:04:c5:92:16:b2:a2:bb:96:3c:91:c7:b2:84:36:b1:e1:1f:
         86:b0:3c:59:ba:43:c2:01:68:9c:e4:ba:bc:d1:41:c7:9f:89:
         ac:03:2a:9c:96:a5:1c:ff:2b:d6:da:14:2e:4f:a4:ac:6f:02:
         76:43:c8:93:dd:d9:16:43:a3:34:13:29:52:de:95:45:bf:4d:
         ca:57:45:d1:1f:f0:e7:b7:af:8a:68:e7:5f:2c:b7:20:4e:9a:
         c6:db:a8:1f:4c:ba:1f:a0:8d:21:cf:37:58:2d:8d:88:8f:43:
         dc:af:32:e7:9b:e3:8b:93:ed:11:fc:94:aa:ca:f1:94:c5:83:
         42:95:66:50:8f:72:46:5f:97:70:cc:2b:82:72:08:b1:67:17:
         b1:b6:bd:aa:06:67:e4:35:c7:92:d5:2a:83:13:9a:ad:08:51:
         db:07:af:b7:ec:a3:0d:6b:39:48:64:29:ae:37:96:11:89:13:
         97:0c:a5:d3:9d:77:93:ac:8b:6f:4a:d4:a9:75:c2:37:d1:3d:
         83:99:57:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU422yuPYffip1w+ikvdhbutuUwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwOUZGRTdFOTU4RkMyQjI0M0NFOUFCQjFERkZEN0ZF
REZFOTlBNjAeFw0yMjAyMTkxNzEzMzRaFw0yMzAyMTgxNzE4MzRaMDMxMTAvBgNV
BAMTKEFDNURFNTAwQzc1QjQzNEUyODIyQ0Q3ODJERjM4ODVGNDQ1MkJBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sd1Q4kcLf0pTAW3s5EtSmUJP
SPPqQUpVc6iThmmWGAQwUbc2/9Vm/mdhMLKm3NYgztVXB6hxkxGS2krzRM6CTwI0
21frYMWPEp2nBSqV0+LFLjTvpsCeXDKLVtZJQdJUlBv9nZJ6KrpX6118q1h+BIo0
P5vQTybA/KuJ8VcPRqGyPb4mOINo1JzUTrK607Vn0VvKdHQ/TS63fE8fvtaxu06+
Zxl+RYIn4CBUZbgrTK3y+JnpHn6YqZfOPNxsZkqm5NltTcDlZG/9NVbxZ8WHvbg/
CxPbQZ5I1nptN5zp+cw7CPpHTeGavtAdAhNLP/lKTyzhND1Fk982kxzrPaAJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrF3lAMdbQ04oIs14LfOIX0RSuhUwHwYDVR0j
BBgwFoAUuAn/5+lY/CskPOmrsd/9f+3+maYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkVOVG5GQzhLcTltdDV0bVZ4eVI1UlpZd2NVNFpoZDk3S0dRV0pwUmJS
UFMvMC9CODA5RkZFN0U5NThGQzJCMjQzQ0U5QUJCMURGRkQ3RkVERkU5OUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4MDlGRkU3RTk1OEZDMkIy
NDNDRTlBQkIxREZGRDdGRURGRTk5QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFTlRuRkM4S3E5bXQ1dG1WeHlSNVJaWXdjVTRaaGQ5N0tHUVdKcFJiUlBTLzAv
MzEzNzM3MmUzODM3MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVd7MA0GCSqGSIb3DQEBCwUAA4IBAQAlRe87Oigh
eGvAtIcP78jCYbvIJv9ymAnqtLimhvMGYke80MxZAhztgCYfgleh109VAh2kpV6W
BMWSFrKiu5Y8kceyhDax4R+GsDxZukPCAWic5Lq80UHHn4msAyqclqUc/yvW2hQu
T6SsbwJ2Q8iT3dkWQ6M0EylS3pVFv03KV0XRH/Dnt6+KaOdfLLcgTprG26gfTLof
oI0hzzdYLY2Ij0PcrzLnm+OLk+0R/JSqyvGUxYNClWZQj3JGX5dwzCuCcgixZxex
tr2qBmfkNceS1SqDE5qtCFHbB6+37KMNazlIZCmuN5YRiROXDKXTnXeTrItvStSp
dcI30T2DmVc5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org