Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34382e302f32322d3234203d3e20323730373737.roa
File:                     3230312e37312e34382e302f32322d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          by6oqnkmnWpjDGlAF3mFz0HDSbzWi2CLtPyBHP6rYXw=
Subject key identifier:   33:8A:43:AA:BB:52:6F:1F:89:0B:72:F0:EF:05:52:B8:D6:2D:89:EB
Certificate issuer:       /CN=B7747E27E8B41C18923F18D1EFE622EB4DF28BF9
Certificate serial:       2B8D738C69D0E42343D4430B98C7F99C6E8B8626
Authority key identifier: B7:74:7E:27:E8:B4:1C:18:92:3F:18:D1:EF:E6:22:EB:4D:F2:8B:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34382e302f32322d3234203d3e20323730373737.roa
Signing time:             Wed 06 Sep 2023 20:36:34 +0000
ROA not before:           Wed 06 Sep 2023 20:31:34 +0000
ROA not after:            Wed 04 Sep 2024 20:36:34 +0000
asID:                     270777
IP address blocks:        201.71.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8d:73:8c:69:d0:e4:23:43:d4:43:0b:98:c7:f9:9c:6e:8b:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7747E27E8B41C18923F18D1EFE622EB4DF28BF9
        Validity
            Not Before: Sep  6 20:31:34 2023 GMT
            Not After : Sep  4 20:36:34 2024 GMT
        Subject: CN=338A43AABB526F1F890B72F0EF0552B8D62D89EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:c4:5a:7c:c9:6e:69:9f:42:f8:da:30:70:
                    44:5d:a7:c1:33:26:ca:26:a7:6e:ef:59:7c:df:1a:
                    98:b4:09:b1:c5:d9:6b:73:7a:e4:e7:68:20:d8:74:
                    df:f1:57:73:61:40:f5:e7:7b:a1:49:b9:74:f9:95:
                    c4:4b:77:a2:a1:de:79:d5:fe:f3:61:8b:bb:d4:99:
                    25:34:51:2e:76:f7:96:7e:fc:80:33:b2:d8:9d:0e:
                    07:2c:3b:27:a3:81:a3:95:94:cf:a8:e6:a9:8b:33:
                    72:27:dc:9a:ae:6c:6a:4b:b0:ba:2e:dc:13:c5:a8:
                    09:e9:ec:d4:1f:d0:0e:2b:6a:4f:98:b0:2c:3a:75:
                    66:e9:c6:87:26:a9:98:f7:22:a2:45:9b:68:e6:68:
                    0d:8f:48:3e:f0:f9:60:eb:4f:ec:70:02:d0:21:29:
                    bf:89:4e:d3:54:8e:e0:a6:66:7d:58:c7:05:da:12:
                    83:3e:4c:57:26:10:42:a3:e3:68:ad:4c:7c:5e:3f:
                    3c:e6:a2:7d:10:56:0e:f2:30:6e:27:90:56:9a:d9:
                    99:3a:30:7e:77:89:1b:7f:dc:37:bf:8e:a5:9a:6b:
                    22:a7:eb:0a:27:df:15:8b:1c:ac:41:bc:a2:5f:07:
                    8c:8b:82:1d:a3:b2:51:99:d0:40:b2:18:8b:92:5f:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8A:43:AA:BB:52:6F:1F:89:0B:72:F0:EF:05:52:B8:D6:2D:89:EB
            X509v3 Authority Key Identifier:
                keyid:B7:74:7E:27:E8:B4:1C:18:92:3F:18:D1:EF:E6:22:EB:4D:F2:8B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34382e302f32322d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:fe:4a:64:58:89:9e:3c:a2:1f:c4:cc:0a:be:f9:76:9c:cf:
         61:d9:c3:4a:c8:fd:05:fe:5c:bc:b3:50:45:9a:a4:92:72:dd:
         f5:b6:d6:84:27:63:5e:64:ce:28:93:dd:b6:60:6d:46:99:81:
         c3:24:92:09:e4:ea:8c:15:47:35:09:a0:4f:af:ab:ac:e4:9d:
         dd:7b:ad:16:52:2a:b0:b7:15:ee:e2:c4:a5:7a:36:8d:56:fc:
         c4:ff:bf:0d:d5:f8:78:42:38:41:df:fa:20:74:1c:d2:49:a4:
         37:eb:95:ed:3b:79:8e:17:fe:7d:73:ed:51:db:d5:1f:c9:af:
         38:fb:79:06:40:ae:b6:61:f7:27:7a:82:2b:fe:31:eb:23:e1:
         3d:60:15:3f:1e:30:92:1b:fb:ea:b0:e5:6a:52:f3:62:b3:8a:
         52:51:3e:e6:b0:7e:b4:5f:05:23:31:6c:a1:91:07:17:28:51:
         70:12:45:09:4a:2c:c7:43:87:34:2e:31:b0:d3:e4:fc:ad:db:
         2e:f2:ed:d1:b2:61:5f:49:5e:37:8e:16:ce:76:71:db:7d:1a:
         93:13:64:c7:8f:25:5a:8c:49:61:58:b4:a6:6b:c5:e7:e9:7d:
         0e:41:7f:07:8f:02:30:d7:b9:8f:15:70:3b:17:33:7f:0b:b4:
         78:26:a6:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK41zjGnQ5CND1EMLmMf5nG6LhiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3NDdFMjdFOEI0MUMxODkyM0YxOEQxRUZFNjIyRUI0
REYyOEJGOTAeFw0yMzA5MDYyMDMxMzRaFw0yNDA5MDQyMDM2MzRaMDMxMTAvBgNV
BAMTKDMzOEE0M0FBQkI1MjZGMUY4OTBCNzJGMEVGMDU1MkI4RDYyRDg5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQl8RafMluaZ9C+NowcERdp8Ez
Jsomp27vWXzfGpi0CbHF2WtzeuTnaCDYdN/xV3NhQPXne6FJuXT5lcRLd6Kh3nnV
/vNhi7vUmSU0US5295Z+/IAzstidDgcsOyejgaOVlM+o5qmLM3In3JqubGpLsLou
3BPFqAnp7NQf0A4rak+YsCw6dWbpxocmqZj3IqJFm2jmaA2PSD7w+WDrT+xwAtAh
Kb+JTtNUjuCmZn1YxwXaEoM+TFcmEEKj42itTHxePzzmon0QVg7yMG4nkFaa2Zk6
MH53iRt/3De/jqWaayKn6won3xWLHKxBvKJfB4yLgh2jslGZ0ECyGIuSX/vPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUM4pDqrtSbx+JC3Lw7wVSuNYtieswHwYDVR0j
BBgwFoAUt3R+J+i0HBiSPxjR7+Yi603yi/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzU1SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpi
WGsvMC9CNzc0N0UyN0U4QjQxQzE4OTIzRjE4RDFFRkU2MjJFQjRERjI4QkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3NzQ3RTI3RThCNDFDMTg5
MjNGMThEMUVGRTYyMkVCNERGMjhCRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAv
MzIzMDMxMmUzNzMxMmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzczNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyUcwMA0GCSqGSIb3DQEBCwUAA4IBAQAv/kpkWIme
PKIfxMwKvvl2nM9h2cNKyP0F/ly8s1BFmqSSct31ttaEJ2NeZM4ok922YG1GmYHD
JJIJ5OqMFUc1CaBPr6us5J3de60WUiqwtxXu4sSlejaNVvzE/78N1fh4QjhB3/og
dBzSSaQ365XtO3mOF/59c+1R29Ufya84+3kGQK62YfcneoIr/jHrI+E9YBU/HjCS
G/vqsOVqUvNis4pSUT7msH60XwUjMWyhkQcXKFFwEkUJSizHQ4c0LjGw0+T8rdsu
8u3RsmFfSV43jhbOdnHbfRqTE2THjyVajElhWLSma8Xn6X0OQX8HjwIw17mPFXA7
FzN/C7R4JqbF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org