Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          mxHBYh8OdxS1SfWE/5lzGlvWmppFXkvzWA+Wflz5g50=
Subject key identifier:   CF:3C:59:76:44:93:C1:E0:8F:2C:63:4F:54:43:8F:B6:33:0E:BB:3D
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       574E2ACE603B05CDB8FA5D062B1D9FFD9FA2FEFB
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:59 +0000
ROA not before:           Wed 06 Mar 2024 14:46:59 +0000
ROA not after:            Wed 05 Mar 2025 14:51:59 +0000
asID:                     52613
IP address blocks:        177.125.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:2a:ce:60:3b:05:cd:b8:fa:5d:06:2b:1d:9f:fd:9f:a2:fe:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:59 2024 GMT
            Not After : Mar  5 14:51:59 2025 GMT
        Subject: CN=CF3C59764493C1E08F2C634F54438FB6330EBB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:9e:82:23:b1:d2:b3:ee:dc:2d:e3:4d:44:
                    e8:05:b3:fa:61:1d:95:de:a9:02:b8:e4:8c:e2:1f:
                    24:63:8b:1e:6c:23:81:1f:6e:00:07:7b:9d:dd:3f:
                    0f:a7:ca:a7:8e:fd:03:d6:ad:27:20:06:18:c0:8c:
                    76:e4:3c:c9:2d:25:ca:de:64:ce:ba:6d:b5:9c:9e:
                    d7:36:ee:75:46:3a:30:48:3c:0a:f7:97:2e:5d:72:
                    5f:f3:87:a1:bb:50:ab:f3:ad:53:da:60:f2:68:53:
                    b9:14:fe:d5:4e:c5:2a:f7:b3:b6:c2:91:8f:4e:ff:
                    8b:fa:e0:4b:dc:16:43:67:80:9a:5f:98:be:99:1d:
                    e9:12:c0:99:95:92:b0:8d:79:fe:21:ff:c2:ba:3f:
                    50:96:b3:85:1c:cd:4a:aa:69:2c:b3:4e:17:4b:e7:
                    61:ad:23:52:e9:3a:ef:27:6e:c0:21:6e:30:a1:ea:
                    c3:7b:d7:8b:96:44:35:63:49:a1:f1:66:54:28:c2:
                    f9:26:bd:6a:bb:80:4f:df:3b:13:f0:35:e2:30:3d:
                    c8:6c:a1:97:dd:cf:95:d1:5d:7b:1c:38:e7:61:2b:
                    f8:6e:e1:ef:74:99:cf:46:d8:e3:62:e6:d2:fa:32:
                    39:32:9b:65:ed:ab:e0:61:b4:8b:5f:01:bd:f5:25:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:59:76:44:93:C1:E0:8F:2C:63:4F:54:43:8F:B6:33:0E:BB:3D
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:da:01:cf:b1:d1:d7:99:34:f5:5c:e9:c1:7b:73:58:92:
         38:84:c5:38:1a:bf:7e:fd:16:02:a7:a2:2b:81:dd:c9:8c:14:
         58:ea:9e:30:8c:9f:03:f8:7a:d1:83:9b:75:d2:aa:46:f6:04:
         9e:18:27:ca:7d:c5:1d:12:1c:d6:a9:e5:11:ba:88:d7:c1:c9:
         6d:bf:f7:18:26:51:b5:c1:de:e8:d3:2b:72:f8:a1:85:98:af:
         6a:13:2f:6a:7f:e4:1b:e7:c1:14:f6:26:05:a4:ac:6b:81:4d:
         aa:67:e6:82:f8:05:dc:47:29:7c:33:56:9e:71:14:ef:c3:35:
         1f:c0:70:b5:4c:2e:f1:04:cc:31:d7:d0:61:bd:c4:4e:3a:b0:
         34:04:7c:ce:a9:b0:3d:fd:0a:5e:70:85:88:91:de:da:8c:cc:
         8d:e7:96:8f:aa:50:7d:f6:1c:8d:0d:a9:69:5e:8d:65:c4:1e:
         a3:7c:6e:a3:bd:45:35:31:ed:c7:de:79:48:92:7d:e2:94:98:
         f8:cc:17:7a:96:3e:42:b8:de:dd:1d:d2:9c:37:19:5f:87:95:
         81:6a:4d:f1:d7:36:82:95:d3:56:33:0e:1c:a1:e1:bd:44:cf:
         97:d4:96:ff:e9:40:05:9a:b9:83:e9:fe:7a:b0:27:88:65:29:
         f0:70:31:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV04qzmA7Bc24+l0GKx2f/Z+i/vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU0MTk5NjExMUEwNzBFNUQxODVCMjhFQzc0MUUwQTYw
OEIyNEVEQzAeFw0yNDAzMDYxNDQ2NTlaFw0yNTAzMDUxNDUxNTlaMDMxMTAvBgNV
BAMTKENGM0M1OTc2NDQ5M0MxRTA4RjJDNjM0RjU0NDM4RkI2MzMwRUJCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUJ6CI7HSs+7cLeNNROgFs/ph
HZXeqQK45IziHyRjix5sI4EfbgAHe53dPw+nyqeO/QPWrScgBhjAjHbkPMktJcre
ZM66bbWcntc27nVGOjBIPAr3ly5dcl/zh6G7UKvzrVPaYPJoU7kU/tVOxSr3s7bC
kY9O/4v64EvcFkNngJpfmL6ZHekSwJmVkrCNef4h/8K6P1CWs4UczUqqaSyzThdL
52GtI1LpOu8nbsAhbjCh6sN714uWRDVjSaHxZlQowvkmvWq7gE/fOxPwNeIwPchs
oZfdz5XRXXscOOdhK/hu4e90mc9G2ONi5tL6Mjkym2Xtq+BhtItfAb31JW5PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzzxZdkSTweCPLGNPVEOPtjMOuz0wHwYDVR0j
BBgwFoAU7kGZYRGgcOXRhbKOx0HgpgiyTtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMC9FRTQxOTk2MTExQTA3MEU1RDE4NUIyOEVDNzQxRTBBNjA4QjI0RURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNDE5OTYxMTFBMDcwRTVE
MTg1QjI4RUM3NDFFMEE2MDhCMjRFREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzAv
MzEzNzM3MmUzMTMyMzUyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxfawwDQYJKoZIhvcNAQELBQADggEBAAuf2gHP
sdHXmTT1XOnBe3NYkjiExTgav379FgKnoiuB3cmMFFjqnjCMnwP4etGDm3XSqkb2
BJ4YJ8p9xR0SHNap5RG6iNfByW2/9xgmUbXB3ujTK3L4oYWYr2oTL2p/5BvnwRT2
JgWkrGuBTapn5oL4BdxHKXwzVp5xFO/DNR/AcLVMLvEEzDHX0GG9xE46sDQEfM6p
sD39Cl5whYiR3tqMzI3nlo+qUH32HI0NqWlejWXEHqN8bqO9RTUx7cfeeUiSfeKU
mPjMF3qWPkK43t0d0pw3GV+HlYFqTfHXNoKV01YzDhyh4b1Ez5fUlv/pQAWauYPp
/nqwJ4hlKfBwMRw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org