Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234382e302f32332d3233203d3e20323633343231.roa
File:                     3137392e3139312e3234382e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          z+nZGGR+cnt7vLkdaSgr6PoJcYRELg3BF3YlJfA8Ybc=
Subject key identifier:   A8:EC:6E:11:59:23:3F:44:B9:C0:2E:A0:CC:CC:CE:82:23:2A:C1:66
Certificate issuer:       /CN=0931D1331755640A551FE80CB1D2F42DAB8BDFB4
Certificate serial:       54BB4A89C9DB92D6F1831FAACD031757748679A0
Authority key identifier: 09:31:D1:33:17:55:64:0A:55:1F:E8:0C:B1:D2:F4:2D:AB:8B:DF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234382e302f32332d3233203d3e20323633343231.roa
Signing time:             Wed 25 Aug 2021 13:32:27 +0000
ROA not before:           Wed 25 Aug 2021 13:27:27 +0000
ROA not after:            Wed 24 Aug 2022 13:32:27 +0000
asID:                     263421
IP address blocks:        179.191.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bb:4a:89:c9:db:92:d6:f1:83:1f:aa:cd:03:17:57:74:86:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0931D1331755640A551FE80CB1D2F42DAB8BDFB4
        Validity
            Not Before: Aug 25 13:27:27 2021 GMT
            Not After : Aug 24 13:32:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:2c:94:92:40:45:29:18:0e:84:25:d7:c4:
                    50:00:4b:ca:8a:91:38:2b:1c:9e:7d:7a:4a:d2:91:
                    42:4c:e5:2f:d1:21:20:56:67:22:ff:1c:d4:99:80:
                    86:75:72:e2:8c:bc:9d:00:83:20:0e:c2:97:f1:a2:
                    39:24:88:6c:90:f1:74:06:e0:5d:c0:a1:bc:50:ec:
                    5d:61:90:bc:9d:05:e3:d5:d6:8f:d2:c7:e2:83:92:
                    21:d3:bc:fe:2e:bc:d9:ff:2b:2d:2e:ef:2b:c8:b0:
                    35:81:07:d5:09:b1:ba:77:1b:b0:0a:10:29:0b:45:
                    73:0c:66:1a:2f:ac:de:45:a3:83:f3:b1:78:fb:d3:
                    5a:de:7b:16:67:7c:4c:b3:55:45:95:6c:18:ec:22:
                    8f:78:9e:a7:06:3a:83:4c:65:36:14:3f:1b:34:a3:
                    b9:f5:79:54:88:cd:22:d5:e6:40:8f:77:de:cf:50:
                    cb:91:ee:75:80:60:78:93:f2:14:f8:5b:8f:7d:34:
                    10:03:fb:f1:31:4b:58:ba:a9:4c:0a:ac:b8:3a:af:
                    96:35:ba:8d:be:89:7b:bc:83:86:e2:a6:c7:38:50:
                    31:30:a6:48:fd:df:f0:f1:fa:8e:de:32:54:38:05:
                    3f:f1:ae:9b:d3:9b:af:48:46:a7:9e:7f:a5:e0:5d:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:6E:11:59:23:3F:44:B9:C0:2E:A0:CC:CC:CE:82:23:2A:C1:66
            X509v3 Authority Key Identifier:
                keyid:09:31:D1:33:17:55:64:0A:55:1F:E8:0C:B1:D2:F4:2D:AB:8B:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234382e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:83:47:09:17:0c:b5:7e:d1:1d:ca:2e:a2:f8:2b:e7:82:
         8a:2d:d9:94:94:7b:b5:93:c9:d9:90:38:3a:ba:59:cb:1a:1f:
         f9:a9:c3:b7:79:9e:63:70:db:c6:e7:6b:e5:08:81:c7:7d:42:
         b7:95:48:c1:09:de:73:84:07:a9:44:c2:ec:68:29:81:6c:01:
         7f:89:13:9a:6e:1b:de:6d:ee:88:b5:75:f2:44:98:65:d5:29:
         59:8f:ff:89:5d:d4:12:19:02:1d:9a:76:0a:f5:01:dd:0b:99:
         63:1e:6a:54:6d:f1:0c:f4:8e:06:a5:f9:86:0f:5b:f5:5d:3f:
         84:db:d4:16:1a:b2:c2:a7:03:f5:1e:10:e3:53:29:57:eb:cb:
         34:48:df:67:58:1a:8c:c7:47:0d:ae:1d:db:a8:da:e6:40:34:
         f1:5d:4c:6c:ea:ab:7c:16:3f:fe:e0:4d:af:bb:34:b6:d6:9e:
         16:4d:ae:44:ad:ae:0b:a7:1e:fd:dd:e5:80:71:7f:3d:1a:5b:
         ec:85:b9:ff:a2:59:39:92:7f:45:ac:5a:ba:76:74:84:fd:91:
         71:2e:65:fa:b0:24:27:57:34:54:4e:39:32:4d:1c:7b:41:8d:
         95:0d:31:25:02:fe:42:b7:09:03:4e:48:12:ac:66:96:48:37:
         48:26:68:51
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUVLtKicnbktbxgx+qzQMXV3SGeaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkzMUQxMzMxNzU1NjQwQTU1MUZFODBDQjFEMkY0MkRB
QjhCREZCNDAeFw0yMTA4MjUxMzI3MjdaFw0yMjA4MjQxMzMyMjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJENTJDOTQ5MjQwNDUyOTE4
MEU4NDI1RDdDNDUwMDA0QkNBOEE5MTM4MkIxQzlFN0Q3QTRBRDI5MTQyNENFNTJG
RDEyMTIwNTY2NzIyRkYxQ0Q0OTk4MDg2NzU3MkUyOENCQzlEMDA4MzIwMEVDMjk3
RjFBMjM5MjQ4ODZDOTBGMTc0MDZFMDVEQzBBMUJDNTBFQzVENjE5MEJDOUQwNUUz
RDVENjhGRDJDN0UyODM5MjIxRDNCQ0ZFMkVCQ0Q5RkYyQjJEMkVFRjJCQzhCMDM1
ODEwN0Q1MDlCMUJBNzcxQkIwMEExMDI5MEI0NTczMEM2NjFBMkZBQ0RFNDVBMzgz
RjNCMTc4RkJEMzVBREU3QjE2Njc3QzRDQjM1NTQ1OTU2QzE4RUMyMjhGNzg5RUE3
MDYzQTgzNEM2NTM2MTQzRjFCMzRBM0I5RjU3OTU0ODhDRDIyRDVFNjQwOEY3N0RF
Q0Y1MENCOTFFRTc1ODA2MDc4OTNGMjE0Rjg1QjhGN0QzNDEwMDNGQkYxMzE0QjU4
QkFBOTRDMEFBQ0I4M0FBRjk2MzVCQThEQkU4OTdCQkM4Mzg2RTJBNkM3Mzg1MDMx
MzBBNjQ4RkRERkYwRjFGQThFREUzMjU0MzgwNTNGRjFBRTlCRDM5QkFGNDg0NkE3
OUU3RkE1RTA1RDlGNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwtUslJJARSkYDoQl18RQAEvKipE4KxyefXpK0pFCTOUv0SEgVmci
/xzUmYCGdXLijLydAIMgDsKX8aI5JIhskPF0BuBdwKG8UOxdYZC8nQXj1daP0sfi
g5Ih07z+LrzZ/ystLu8ryLA1gQfVCbG6dxuwChApC0VzDGYaL6zeRaOD87F4+9Na
3nsWZ3xMs1VFlWwY7CKPeJ6nBjqDTGU2FD8bNKO59XlUiM0i1eZAj3fez1DLke51
gGB4k/IU+FuPfTQQA/vxMUtYuqlMCqy4Oq+WNbqNvol7vIOG4qbHOFAxMKZI/d/w
8fqO3jJUOAU/8a6b05uvSEannn+l4F2feQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKjsbhFZIz9EucAuoMzMzoIjKsFmMB8GA1UdIwQYMBaAFAkx0TMXVWQKVR/oDLHS
9C2ri9+0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jud1VIcHU2cldMQnFw
emRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAvMDkzMUQxMzMxNzU1NjQw
QTU1MUZFODBDQjFEMkY0MkRBQjhCREZCNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wOTMxRDEzMzE3NTU2NDBBNTUxRkU4MENCMUQyRjQyREFCOEJE
RkI0LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CbndVSHB1NnJXTEJxcHpkRldY
VnZVQUVtRllYdng3YW5TTHRXaHFqZ0x5Ri8wLzMxMzczOTJlMzEzOTMxMmUzMjM0
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzMzNDMyMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzv/gwDQYJKoZIhvcNAQELBQADggEBACCPg0cJFwy1ftEdyi6i+Cvngoot2ZSU
e7WTydmQODq6WcsaH/mpw7d5nmNw28bna+UIgcd9QreVSMEJ3nOEB6lEwuxoKYFs
AX+JE5puG95t7oi1dfJEmGXVKVmP/4ld1BIZAh2adgr1Ad0LmWMealRt8Qz0jgal
+YYPW/VdP4Tb1BYassKnA/UeEONTKVfryzRI32dYGozHRw2uHduo2uZANPFdTGzq
q3wWP/7gTa+7NLbWnhZNrkStrgunHv3d5YBxfz0aW+yFuf+iWTmSf0WsWrp2dIT9
kXEuZfqwJCdXNFROOTJNHHtBjZUNMSUC/kK3CQNOSBKsZpZIN0gmaFE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org