Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138372e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138372e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          TMtrr/dB43oNtoaICF2ffVOekrkxSKljN1Lksez1hxo=
Subject key identifier:   1F:DD:3C:92:5B:6B:D8:73:C2:55:EF:D9:DE:05:B8:87:FA:6A:41:B1
Certificate issuer:       /CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
Certificate serial:       6B0BF6C3A010543ED30B041953A8B0A2DE484DEE
Authority key identifier: 0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138372e302f32342d3234203d3e20323633323731.roa
Signing time:             Fri 24 Mar 2023 01:38:06 +0000
ROA not before:           Fri 24 Mar 2023 01:33:06 +0000
ROA not after:            Fri 22 Mar 2024 01:38:06 +0000
asID:                     263271
IP address blocks:        179.108.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0b:f6:c3:a0:10:54:3e:d3:0b:04:19:53:a8:b0:a2:de:48:4d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Validity
            Not Before: Mar 24 01:33:06 2023 GMT
            Not After : Mar 22 01:38:06 2024 GMT
        Subject: CN=1FDD3C925B6BD873C255EFD9DE05B887FA6A41B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:32:92:4c:f3:57:28:27:7c:29:2c:7a:83:
                    0b:78:ab:51:d9:80:b1:0e:20:b6:34:1d:3f:6b:d0:
                    fb:ec:fa:71:7b:2f:ba:71:cb:74:d9:2d:50:ad:97:
                    cf:8e:2a:e6:00:0e:da:24:54:76:f5:20:b2:fe:2e:
                    ff:ad:f2:ac:93:40:cd:f6:e2:a3:8b:b4:1f:88:37:
                    46:58:29:9e:fa:f2:c1:e4:5c:c0:fd:29:47:94:72:
                    d9:a6:89:a2:9d:3b:b2:58:e6:1e:88:6c:62:b6:90:
                    58:7f:dc:10:37:f5:46:d3:fb:3b:4a:2e:91:05:d5:
                    12:3f:4d:48:93:65:b4:ed:05:92:f6:2a:e2:68:db:
                    1a:af:6e:3d:46:0e:c5:a7:42:d4:d5:e6:81:69:11:
                    d3:f9:e7:ae:06:1f:8a:6c:f7:23:ab:9d:e1:a1:f3:
                    7b:5d:57:a6:0c:a5:f7:95:e7:12:1a:bd:c1:20:34:
                    4a:17:b3:3d:13:d5:ca:24:f3:92:f9:84:4c:57:fd:
                    67:db:9f:d1:26:2e:e5:02:9e:2f:0b:18:05:a4:d3:
                    d0:9e:2d:41:53:1f:d6:6e:e1:4c:54:fc:f6:0f:b2:
                    a5:24:7c:d5:ef:6e:3f:fd:49:5f:53:53:79:85:b5:
                    ba:70:78:eb:4b:00:c7:2e:87:27:cd:78:88:64:48:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:3C:92:5B:6B:D8:73:C2:55:EF:D9:DE:05:B8:87:FA:6A:41:B1
            X509v3 Authority Key Identifier:
                keyid:0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138372e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:61:d0:a7:14:b0:a9:87:ad:c9:20:07:8a:cf:24:02:2d:4e:
         22:fe:2e:4d:76:26:72:3c:ea:f1:cc:27:68:99:01:c0:39:de:
         4b:1c:bb:1a:5c:74:81:30:66:20:65:b1:54:64:72:f4:0d:3d:
         dd:4f:63:13:da:16:d5:96:52:fa:5d:ab:f9:81:d3:a2:79:4e:
         2b:95:2b:ca:39:dd:79:46:c1:85:11:2a:0d:08:dd:61:3f:f9:
         80:98:99:a3:a7:98:69:38:8d:18:b2:f2:72:59:d9:a1:fb:38:
         30:f2:c3:33:ef:9b:60:15:f0:90:3d:f3:fb:d0:4d:30:da:af:
         49:b1:62:37:cb:cf:b0:bc:66:19:78:7b:92:08:b3:65:0e:86:
         af:2a:fe:cc:3e:90:63:a2:96:fa:0d:0d:37:69:22:66:08:eb:
         f4:55:67:f2:ae:cd:ae:ba:be:5e:c9:8b:00:0a:9a:6e:ac:87:
         7f:92:73:31:95:7c:98:70:58:27:33:df:11:6d:b7:bd:24:e1:
         fa:18:53:2c:cc:5c:7f:31:03:50:0b:af:5e:9d:da:e7:8c:28:
         84:9e:47:81:44:86:27:be:a6:7d:70:44:92:64:5d:80:ee:3a:
         72:d5:82:3e:57:54:21:44:be:46:15:b7:5e:b5:2b:81:63:0e:
         63:8c:5a:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUawv2w6AQVD7TCwQZU6iwot5ITe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENERDUxODg5NjVGRkZFNDNDMDA4QTQxRDAwMzNDNEU3
REI0NDdGMTAeFw0yMzAzMjQwMTMzMDZaFw0yNDAzMjIwMTM4MDZaMDMxMTAvBgNV
BAMTKDFGREQzQzkyNUI2QkQ4NzNDMjU1RUZEOURFMDVCODg3RkE2QTQxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQTKSTPNXKCd8KSx6gwt4q1HZ
gLEOILY0HT9r0Pvs+nF7L7pxy3TZLVCtl8+OKuYADtokVHb1ILL+Lv+t8qyTQM32
4qOLtB+IN0ZYKZ768sHkXMD9KUeUctmmiaKdO7JY5h6IbGK2kFh/3BA39UbT+ztK
LpEF1RI/TUiTZbTtBZL2KuJo2xqvbj1GDsWnQtTV5oFpEdP5564GH4ps9yOrneGh
83tdV6YMpfeV5xIavcEgNEoXsz0T1cok85L5hExX/Wfbn9EmLuUCni8LGAWk09Ce
LUFTH9Zu4UxU/PYPsqUkfNXvbj/9SV9TU3mFtbpweOtLAMcuhyfNeIhkSGMxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH908kltr2HPCVe/Z3gW4h/pqQbEwHwYDVR0j
BBgwFoAUDN1RiJZf/+Q8AIpB0AM8Tn20R/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1U5d0FpVm91aU1WdVdvYURwNWZFdmRMUFRyS3RWYk53QWcycktwd2FR
QUEvMC8wQ0RENTE4ODk2NUZGRkU0M0MwMDhBNDFEMDAzM0M0RTdEQjQ0N0YxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDREQ1MTg4OTY1RkZGRTQz
QzAwOEE0MUQwMDMzQzRFN0RCNDQ3RjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVOXdBaVZvdWlNVnVXb2FEcDVmRXZkTFBUckt0VmJOd0FnMnJLcHdhUUFBLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNsuzANBgkqhkiG9w0BAQsFAAOCAQEAeGHQ
pxSwqYetySAHis8kAi1OIv4uTXYmcjzq8cwnaJkBwDneSxy7Glx0gTBmIGWxVGRy
9A093U9jE9oW1ZZS+l2r+YHTonlOK5UryjndeUbBhREqDQjdYT/5gJiZo6eYaTiN
GLLyclnZofs4MPLDM++bYBXwkD3z+9BNMNqvSbFiN8vPsLxmGXh7kgizZQ6Gryr+
zD6QY6KW+g0NN2kiZgjr9FVn8q7Nrrq+XsmLAAqabqyHf5JzMZV8mHBYJzPfEW23
vSTh+hhTLMxcfzEDUAuvXp3a54wohJ5HgUSGJ76mfXBEkmRdgO46ctWCPldUIUS+
RhW3XrUrgWMOY4xaFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org