Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
File:                     3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (raw, json)
Hash identifier:          DFRWm4qWWxCywOV4cGISh4nC5vFlgSVjngihca3mMNU=
Subject key identifier:   97:16:BB:C5:64:3B:7F:AF:58:6D:B4:AE:50:EA:A3:15:70:9C:20:4B
Certificate issuer:       /CN=68B54B5C6E66A7A25A9432A41DAB12D98C133C26
Certificate serial:       4A714FAC1F5465D94FBCF216B70EC9D45DB85306
Authority key identifier: 68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa
Signing time:             Sat 22 Jul 2023 14:49:02 +0000
ROA not before:           Sat 22 Jul 2023 14:44:02 +0000
ROA not after:            Sat 20 Jul 2024 14:49:02 +0000
asID:                     262408
IP address blocks:        177.38.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:71:4f:ac:1f:54:65:d9:4f:bc:f2:16:b7:0e:c9:d4:5d:b8:53:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B54B5C6E66A7A25A9432A41DAB12D98C133C26
        Validity
            Not Before: Jul 22 14:44:02 2023 GMT
            Not After : Jul 20 14:49:02 2024 GMT
        Subject: CN=9716BBC5643B7FAF586DB4AE50EAA315709C204B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:6e:e3:8d:fe:72:b5:d4:36:cf:a0:e2:7a:
                    12:fc:8a:84:77:02:c8:28:93:af:ad:05:09:22:15:
                    9d:d7:e0:c4:00:89:d3:9a:70:06:f5:a1:98:1b:ff:
                    b4:bd:1b:a3:0b:c8:8f:71:15:0e:2a:78:a8:c2:fa:
                    58:31:3c:a1:11:02:6c:c5:e1:c4:59:10:ff:fe:ac:
                    08:f4:82:24:a9:e5:cd:d5:49:fe:34:f9:1f:a7:da:
                    e7:3e:e4:0d:fb:7c:b7:27:71:24:b7:9b:70:c7:cf:
                    29:b9:ad:5f:a7:3f:79:f0:dc:05:e4:0f:f6:d4:59:
                    7d:d8:ea:77:2c:65:9d:70:49:90:29:13:c9:0d:c5:
                    55:96:72:f6:45:53:34:79:ae:ac:8c:9f:5f:79:98:
                    6e:9f:47:f2:9f:bd:2d:3c:82:c2:a8:05:8b:9b:e5:
                    9a:a0:b4:31:82:17:08:92:f4:38:d6:5b:3b:96:36:
                    04:f6:0a:9c:b0:14:45:1e:4c:8c:f2:b3:24:ae:ec:
                    d4:0b:51:57:41:8a:49:5a:4e:ce:65:23:1d:70:bd:
                    38:20:28:be:51:74:6e:2b:1e:87:b1:6c:03:ca:66:
                    2f:37:a7:02:65:11:71:37:21:0d:ef:3c:f2:b5:b0:
                    28:95:dc:52:12:3c:39:1b:df:ec:6d:82:c4:15:30:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:BB:C5:64:3B:7F:AF:58:6D:B4:AE:50:EA:A3:15:70:9C:20:4B
            X509v3 Authority Key Identifier:
                keyid:68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:f5:58:5c:98:a8:7d:24:1e:94:0b:8b:47:1f:0f:46:2e:
         1d:5d:7a:f4:4b:6e:73:43:2f:7c:4d:e5:73:37:ce:19:88:8a:
         94:2b:f6:01:72:33:e9:b2:c3:7a:c9:be:2e:d3:59:f2:eb:9c:
         24:de:bf:3b:a9:2a:af:51:9b:be:f6:d0:1f:1d:0c:81:d3:82:
         f3:bc:82:ef:30:61:fc:ee:10:76:a9:cb:9e:e4:c2:0c:46:6f:
         b6:2e:e5:1f:53:f3:c3:a2:04:d2:06:61:42:1f:30:af:ef:b4:
         4c:c9:a5:03:46:2f:13:4f:56:d0:4d:e9:99:71:de:9d:49:94:
         6c:65:52:66:1c:0e:81:74:b7:45:32:c6:72:4e:88:e2:e3:ed:
         f5:86:90:30:20:2f:b7:33:f6:55:16:17:77:9c:c5:d7:55:6a:
         a5:08:65:54:23:a0:25:d4:cd:35:de:4d:9a:fe:3b:61:f7:99:
         d1:11:9c:02:ef:2b:1e:09:fd:c6:97:7b:be:26:52:15:72:95:
         32:6a:50:00:79:af:ec:4a:da:23:fb:cf:ba:e2:da:c8:81:21:
         6e:a9:71:3c:e1:ee:03:fb:32:31:3a:a0:42:14:8f:69:cd:12:
         7a:e9:79:b4:87:d9:6e:23:78:24:ec:7f:f8:84:55:70:c7:69:
         f9:7f:ff:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSnFPrB9UZdlPvPIWtw7J1F24UwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCNTRCNUM2RTY2QTdBMjVBOTQzMkE0MURBQjEyRDk4
QzEzM0MyNjAeFw0yMzA3MjIxNDQ0MDJaFw0yNDA3MjAxNDQ5MDJaMDMxMTAvBgNV
BAMTKDk3MTZCQkM1NjQzQjdGQUY1ODZEQjRBRTUwRUFBMzE1NzA5QzIwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUm7jjf5ytdQ2z6DiehL8ioR3
Asgok6+tBQkiFZ3X4MQAidOacAb1oZgb/7S9G6MLyI9xFQ4qeKjC+lgxPKERAmzF
4cRZEP/+rAj0giSp5c3VSf40+R+n2uc+5A37fLcncSS3m3DHzym5rV+nP3nw3AXk
D/bUWX3Y6ncsZZ1wSZApE8kNxVWWcvZFUzR5rqyMn195mG6fR/KfvS08gsKoBYub
5ZqgtDGCFwiS9DjWWzuWNgT2CpywFEUeTIzysySu7NQLUVdBiklaTs5lIx1wvTgg
KL5RdG4rHoexbAPKZi83pwJlEXE3IQ3vPPK1sCiV3FISPDkb3+xtgsQVMGJpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlxa7xWQ7f69YbbSuUOqjFXCcIEswHwYDVR0j
BBgwFoAUaLVLXG5mp6JalDKkHasS2YwTPCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx
c0MvMC82OEI1NEI1QzZFNjZBN0EyNUE5NDMyQTQxREFCMTJEOThDMTMzQzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4QjU0QjVDNkU2NkE3QTI1
QTk0MzJBNDFEQUIxMkQ5OEMxMzNDMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkM1NaeXF4ZXNqTE1ENUE3eUd3WGZQNFhwYjQ4dEJqUXBGcGtjYkVkMXNDLzAv
MzEzNzM3MmUzMzM4MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxJqAwDQYJKoZIhvcNAQELBQADggEBAJ1O9Vhc
mKh9JB6UC4tHHw9GLh1devRLbnNDL3xN5XM3zhmIipQr9gFyM+myw3rJvi7TWfLr
nCTevzupKq9Rm7720B8dDIHTgvO8gu8wYfzuEHapy57kwgxGb7Yu5R9T88OiBNIG
YUIfMK/vtEzJpQNGLxNPVtBN6Zlx3p1JlGxlUmYcDoF0t0UyxnJOiOLj7fWGkDAg
L7cz9lUWF3ecxddVaqUIZVQjoCXUzTXeTZr+O2H3mdERnALvKx4J/caXe74mUhVy
lTJqUAB5r+xK2iP7z7ri2siBIW6pcTzh7gP7MjE6oEIUj2nNEnrpebSH2W4jeCTs
f/iEVXDHafl//5k=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org