Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3332203d3e203631353838.roa
File:                     3137302e38312e38342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          rncaJd6ABkdQ9XUpBCihUUbgAvoatNY5UTqy2h0CZiY=
Subject key identifier:   3D:F4:E0:C8:77:6D:E5:20:25:D0:F9:15:2E:FD:E0:DF:CD:09:32:2E
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       5EF80E56CB9C8758D3719C83969D43C11269DEA4
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:03:17 +0000
ROA not before:           Wed 27 Sep 2023 19:58:17 +0000
ROA not after:            Wed 25 Sep 2024 20:03:17 +0000
asID:                     61588
IP address blocks:        170.81.84.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f8:0e:56:cb:9c:87:58:d3:71:9c:83:96:9d:43:c1:12:69:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:58:17 2023 GMT
            Not After : Sep 25 20:03:17 2024 GMT
        Subject: CN=3DF4E0C8776DE52025D0F9152EFDE0DFCD09322E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:32:b9:08:58:3d:15:af:4e:27:29:d8:01:
                    75:72:3b:18:8a:0e:88:0b:1e:b0:ca:a1:0c:53:14:
                    78:a6:98:f2:2c:57:8e:90:d6:26:e0:69:70:a3:9c:
                    4d:91:34:d8:b3:0b:fb:f9:ba:6e:f8:18:8c:78:b2:
                    f2:e5:1d:3c:99:98:35:fb:88:93:e7:5a:20:ce:9f:
                    0e:d1:81:39:ca:58:4a:b9:c4:33:b4:d8:29:f7:cd:
                    45:54:71:37:26:a1:cb:94:8b:be:83:99:4e:7d:d8:
                    cc:9a:93:57:08:02:01:f4:bc:02:49:5b:10:0e:cc:
                    53:53:02:62:f6:6d:55:8f:dd:6f:2f:8a:6e:47:05:
                    49:00:9c:a8:d7:5e:a3:7b:b8:e9:18:91:d8:9e:b7:
                    56:02:8d:9f:36:b0:ff:60:11:53:d4:77:12:e4:56:
                    6d:8d:be:83:33:42:09:3a:a8:d7:30:36:ff:9f:3c:
                    bd:de:78:cb:15:38:99:e0:60:65:10:5c:bd:2a:c4:
                    c4:bb:fd:1f:da:6f:5d:ea:67:60:39:80:38:c6:fc:
                    72:af:82:95:2f:ad:33:3d:a4:93:ba:82:01:d6:97:
                    e8:19:ce:99:59:1b:ea:69:04:96:9d:67:2c:45:da:
                    ea:f5:f4:3b:64:39:77:28:c5:a2:ee:2a:9b:94:e6:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F4:E0:C8:77:6D:E5:20:25:D0:F9:15:2E:FD:E0:DF:CD:09:32:2E
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e38312e38342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:55:af:08:76:02:62:5a:6a:cf:65:b5:b4:fd:96:0c:ae:
         6c:16:28:65:f7:83:78:82:de:11:be:92:82:4b:9d:c8:9d:ea:
         1f:8e:7c:96:c4:31:e9:f0:0e:57:0e:3f:31:c8:cf:75:a9:96:
         2b:2f:8f:9e:48:34:b0:bc:34:4e:b5:b0:18:45:84:1c:1b:c2:
         f1:4f:7d:4e:88:90:82:5b:1c:a4:c7:1d:4a:89:8d:ee:e2:6e:
         4f:1e:0e:09:d5:4d:7b:d9:53:b1:b8:0c:1a:9e:0f:c6:4d:97:
         a9:c8:e1:20:b5:2d:a9:a6:c8:8b:8c:61:be:3a:56:b4:03:f5:
         6d:ae:9f:37:fb:05:bc:18:df:2f:ff:3b:de:d7:dc:23:42:1f:
         be:ad:d7:d1:99:1a:8c:29:ca:7c:53:ce:75:64:90:8d:52:63:
         f0:4f:46:0c:b3:94:63:76:04:8b:5c:1c:69:73:de:27:d9:c5:
         a4:b0:5d:c7:db:ec:db:86:22:d4:d9:44:79:07:37:e4:46:76:
         6f:10:95:bd:66:1b:10:c2:cb:42:79:0a:16:a2:97:c7:58:47:
         5b:5c:82:fd:83:73:5e:a1:8c:e1:d6:ce:85:71:14:67:d6:e6:
         87:98:b8:b7:ae:56:16:05:23:3a:7e:9e:09:a2:57:bb:92:d2:
         c1:74:9f:82
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXvgOVsuch1jTcZyDlp1DwRJp3qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVENjA2QkE4MkRDODVFNUFBNTdBQzBFNUYyREEzNzBC
MzdBNjcyQTAeFw0yMzA5MjcxOTU4MTdaFw0yNDA5MjUyMDAzMTdaMDMxMTAvBgNV
BAMTKDNERjRFMEM4Nzc2REU1MjAyNUQwRjkxNTJFRkRFMERGQ0QwOTMyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UTK5CFg9Fa9OJynYAXVyOxiK
DogLHrDKoQxTFHimmPIsV46Q1ibgaXCjnE2RNNizC/v5um74GIx4svLlHTyZmDX7
iJPnWiDOnw7RgTnKWEq5xDO02Cn3zUVUcTcmocuUi76DmU592Myak1cIAgH0vAJJ
WxAOzFNTAmL2bVWP3W8vim5HBUkAnKjXXqN7uOkYkdiet1YCjZ82sP9gEVPUdxLk
Vm2NvoMzQgk6qNcwNv+fPL3eeMsVOJngYGUQXL0qxMS7/R/ab13qZ2A5gDjG/HKv
gpUvrTM9pJO6ggHWl+gZzplZG+ppBJadZyxF2ur19DtkOXcoxaLuKpuU5kCDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPfTgyHdt5SAl0PkVLv3g380JMi4wHwYDVR0j
BBgwFoAUddYGuoLcheWqV6wOXy2jcLN6ZyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMC83NUQ2MDZCQTgyREM4NUU1QUE1N0FDMEU1RjJEQTM3MEIzN0E2NzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1RDYwNkJBODJEQzg1RTVB
QTU3QUMwRTVGMkRBMzcwQjM3QTY3MkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzAv
MzEzNzMwMmUzODMxMmUzODM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM1
MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpRVDANBgkqhkiG9w0BAQsFAAOCAQEANG9Vrwh2AmJa
as9ltbT9lgyubBYoZfeDeILeEb6SgkudyJ3qH458lsQx6fAOVw4/McjPdamWKy+P
nkg0sLw0TrWwGEWEHBvC8U99ToiQglscpMcdSomN7uJuTx4OCdVNe9lTsbgMGp4P
xk2XqcjhILUtqabIi4xhvjpWtAP1ba6fN/sFvBjfL/873tfcI0Ifvq3X0ZkajCnK
fFPOdWSQjVJj8E9GDLOUY3YEi1wcaXPeJ9nFpLBdx9vs24Yi1NlEeQc35EZ2bxCV
vWYbEMLLQnkKFqKXx1hHW1yC/YNzXqGM4dbOhXEUZ9bmh5i4t65WFgUjOn6eCaJX
u5LSwXSfgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org