Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/1/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa
File:                     3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa (raw, json)
Hash identifier:          eJPUDp6WZ9gEln+J6YbPDWt07c9AjCoHFvRN62fxMws=
Subject key identifier:   EF:30:FF:48:72:17:49:26:31:C7:83:A0:B3:F6:0C:66:FD:36:3B:34
Certificate issuer:       /CN=7B00BB0B30D729A6A6489655F521EFB74748813E
Certificate serial:       37641055CDEF5B4C359375842C617A07A9F599AB
Authority key identifier: 7B:00:BB:0B:30:D7:29:A6:A6:48:96:55:F5:21:EF:B7:47:48:81:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B00BB0B30D729A6A6489655F521EFB74748813E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/1/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa
Signing time:             Fri 05 Apr 2024 03:16:26 +0000
ROA not before:           Fri 05 Apr 2024 03:11:26 +0000
ROA not after:            Fri 04 Apr 2025 03:16:26 +0000
asID:                     262789
IP address blocks:        177.221.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:64:10:55:cd:ef:5b:4c:35:93:75:84:2c:61:7a:07:a9:f5:99:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B00BB0B30D729A6A6489655F521EFB74748813E
        Validity
            Not Before: Apr  5 03:11:26 2024 GMT
            Not After : Apr  4 03:16:26 2025 GMT
        Subject: CN=EF30FF487217492631C783A0B3F60C66FD363B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:c1:b0:61:a0:4b:2a:c1:5f:ea:07:b0:d9:
                    17:84:66:a5:a1:d0:e8:ff:56:0a:92:63:1e:e9:12:
                    dd:f7:e8:0a:f6:76:c8:a7:7e:81:e7:03:3b:b5:80:
                    96:b0:f9:3e:b6:56:b9:df:4b:8e:c3:b6:96:26:91:
                    01:3b:32:2a:cc:31:4a:75:82:d7:82:8d:a5:03:d6:
                    e1:4e:f3:41:7c:d3:5a:38:da:3b:0b:b3:14:25:54:
                    07:80:74:bb:04:f1:2a:2b:28:fd:98:cb:cb:c5:20:
                    8e:27:a5:6c:7a:90:b5:38:16:61:79:c6:ad:62:7d:
                    51:69:6b:8a:67:64:70:74:63:32:9c:ea:d7:c9:e1:
                    74:a9:31:4f:37:01:3d:17:b8:36:72:d1:11:d6:77:
                    bd:91:29:fb:77:a6:c8:e3:73:2a:9b:eb:7b:76:b8:
                    55:47:6f:72:d8:b9:fc:a5:f2:84:08:e2:74:fa:89:
                    2f:d7:ff:00:89:80:8f:69:a5:b0:9b:c7:50:63:fe:
                    32:9c:c0:e2:04:cc:68:ee:40:0c:3d:cc:cf:a8:ca:
                    8e:13:b0:bb:8f:5d:ba:6f:78:ed:45:6f:9a:48:84:
                    59:da:e7:f5:47:11:9d:66:8d:10:b5:5b:f1:dc:fb:
                    fd:99:44:7c:5b:68:9a:1d:28:5f:79:93:2f:f8:f8:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:FF:48:72:17:49:26:31:C7:83:A0:B3:F6:0C:66:FD:36:3B:34
            X509v3 Authority Key Identifier:
                keyid:7B:00:BB:0B:30:D7:29:A6:A6:48:96:55:F5:21:EF:B7:47:48:81:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/1/7B00BB0B30D729A6A6489655F521EFB74748813E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B00BB0B30D729A6A6489655F521EFB74748813E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/1/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:08:0c:53:ad:af:ac:04:c8:fa:cd:fd:5c:e0:1b:95:c3:
         e4:9c:52:da:8b:0a:83:19:e6:cf:ba:c5:14:38:fc:2f:9c:06:
         45:1e:eb:53:8d:d4:3e:45:c7:fe:8e:27:b6:8a:b5:8c:00:a4:
         a1:11:8b:36:ed:67:e5:34:9d:62:b8:f1:ed:9c:9a:98:73:a3:
         a4:55:76:45:ca:c5:75:b9:b6:c9:1f:2d:79:96:50:70:0b:3f:
         7b:cc:de:36:db:6b:02:ad:c5:1f:63:d2:82:cd:0c:98:79:9f:
         71:e1:04:88:4c:0d:07:35:98:ea:c6:0e:f3:9d:0a:54:5f:6f:
         ca:03:75:77:ce:88:61:68:f0:74:0a:74:3b:6b:2c:74:ce:20:
         de:73:fd:7e:b7:46:dc:98:bc:84:60:07:ec:4b:c4:ac:ce:aa:
         e1:03:95:c9:29:ad:47:c3:c8:60:d1:69:84:01:06:f0:7b:07:
         5b:d3:c2:2a:a9:31:74:f1:d4:9e:c0:60:4d:0f:e7:5a:66:ed:
         db:f8:5d:b2:09:9b:52:58:5b:39:52:79:eb:3d:5a:0f:2e:59:
         07:94:d1:90:af:5c:42:f0:b5:40:e1:63:a8:e0:82:20:bf:5f:
         9d:a5:ac:f7:33:18:08:02:e4:33:f2:37:f0:c4:cc:f3:43:5e:
         df:01:5d:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN2QQVc3vW0w1k3WELGF6B6n1maswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwMEJCMEIzMEQ3MjlBNkE2NDg5NjU1RjUyMUVGQjc0
NzQ4ODEzRTAeFw0yNDA0MDUwMzExMjZaFw0yNTA0MDQwMzE2MjZaMDMxMTAvBgNV
BAMTKEVGMzBGRjQ4NzIxNzQ5MjYzMUM3ODNBMEIzRjYwQzY2RkQzNjNCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQcGwYaBLKsFf6gew2ReEZqWh
0Oj/VgqSYx7pEt336Ar2dsinfoHnAzu1gJaw+T62VrnfS47DtpYmkQE7MirMMUp1
gteCjaUD1uFO80F801o42jsLsxQlVAeAdLsE8SorKP2Yy8vFII4npWx6kLU4FmF5
xq1ifVFpa4pnZHB0YzKc6tfJ4XSpMU83AT0XuDZy0RHWd72RKft3psjjcyqb63t2
uFVHb3LYufyl8oQI4nT6iS/X/wCJgI9ppbCbx1Bj/jKcwOIEzGjuQAw9zM+oyo4T
sLuPXbpveO1Fb5pIhFna5/VHEZ1mjRC1W/Hc+/2ZRHxbaJodKF95ky/4+NltAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7zD/SHIXSSYxx4Ogs/YMZv02OzQwHwYDVR0j
BBgwFoAUewC7CzDXKaamSJZV9SHvt0dIgT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmthWXV4ZUV0VXlWdUN3YWUxM1BhNVVjWTNBVG9BS1VhTXp1eXdWcHRM
TGMvMS83QjAwQkIwQjMwRDcyOUE2QTY0ODk2NTVGNTIxRUZCNzQ3NDg4MTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCMDBCQjBCMzBENzI5QTZB
NjQ4OTY1NUY1MjFFRkI3NDc0ODgxM0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JrYVl1eGVFdFV5VnVDd2FlMTNQYTVVY1kzQVRvQUtVYU16dXl3VnB0TExjLzEv
MzEzNzM3MmUzMjMyMzEyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7HdeDANBgkqhkiG9w0BAQsFAAOCAQEASf8I
DFOtr6wEyPrN/VzgG5XD5JxS2osKgxnmz7rFFDj8L5wGRR7rU43UPkXH/o4ntoq1
jACkoRGLNu1n5TSdYrjx7ZyamHOjpFV2RcrFdbm2yR8teZZQcAs/e8zeNttrAq3F
H2PSgs0MmHmfceEEiEwNBzWY6sYO850KVF9vygN1d86IYWjwdAp0O2ssdM4g3nP9
frdG3Ji8hGAH7EvErM6q4QOVySmtR8PIYNFphAEG8HsHW9PCKqkxdPHUnsBgTQ/n
Wmbt2/hdsgmbUlhbOVJ56z1aDy5ZB5TRkK9cQvC1QOFjqOCCIL9fnaWs9zMYCALk
M/I38MTM80Ne3wFd8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org