Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32302d3230203d3e20323632353138.roa
File:                     3137372e36372e3131322e302f32302d3230203d3e20323632353138.roa (raw, json)
Hash identifier:          1mSVSKG0sadXQk3ylT6AwgeqCKp3iVtzEKoOlTjjkh0=
Subject key identifier:   23:A2:E6:E7:59:4A:8E:50:5F:B9:F3:90:A0:93:0C:CE:F6:98:B0:01
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       24B499E3302C625AA17273613FEB700EF19A3E51
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32302d3230203d3e20323632353138.roa
Signing time:             Tue 11 Jul 2023 11:41:19 +0000
ROA not before:           Tue 11 Jul 2023 11:36:19 +0000
ROA not after:            Tue 09 Jul 2024 11:41:19 +0000
asID:                     262518
IP address blocks:        177.67.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b4:99:e3:30:2c:62:5a:a1:72:73:61:3f:eb:70:0e:f1:9a:3e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Jul 11 11:36:19 2023 GMT
            Not After : Jul  9 11:41:19 2024 GMT
        Subject: CN=23A2E6E7594A8E505FB9F390A0930CCEF698B001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:1f:41:ff:27:fa:b1:d8:e1:43:75:46:47:
                    80:44:8b:f2:db:ad:ea:19:b9:1f:98:2b:3b:97:6d:
                    9c:f4:d4:1a:64:7f:9c:27:91:93:f7:92:d6:79:75:
                    a6:be:19:63:03:88:78:e0:20:72:8a:48:3e:7c:16:
                    e6:a3:62:89:ec:dd:d8:ce:a9:5c:6c:ab:2c:0b:ad:
                    71:84:ff:a1:5e:e6:9e:94:32:51:2a:a6:8c:82:42:
                    de:9e:a8:c2:77:a7:1c:68:e7:20:21:74:c5:94:ce:
                    dd:7f:9d:75:df:9c:32:30:0f:66:fb:a9:6f:d9:7a:
                    bf:ef:32:be:ee:73:32:03:fc:54:3f:5a:d9:d8:89:
                    a1:63:da:13:93:a4:ba:54:d2:f9:3f:f1:23:65:2a:
                    1f:10:e3:82:e7:b3:26:ed:0e:cb:03:12:3f:21:ec:
                    9f:b8:13:56:41:d6:ee:08:8d:5a:71:86:aa:9d:c3:
                    8c:de:ab:ae:b9:fd:f1:44:46:68:05:4f:29:f3:aa:
                    9d:de:4d:c0:52:28:1f:23:04:10:67:c1:fb:6b:f5:
                    85:bc:e3:e6:56:56:39:68:cc:41:96:00:5d:03:b2:
                    45:f0:9f:44:2e:1f:c5:04:aa:e4:40:53:75:6d:64:
                    7c:ad:b9:7d:ad:6f:5b:69:30:1a:ce:47:fa:6e:4d:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:E6:E7:59:4A:8E:50:5F:B9:F3:90:A0:93:0C:CE:F6:98:B0:01
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3131322e302f32302d3230203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:09:e1:51:c4:73:1b:01:59:13:c8:12:bd:9d:d7:20:c2:d9:
         73:db:f1:54:a9:ed:fc:47:bc:f2:26:3f:d3:e7:9d:16:87:d8:
         12:dc:b3:ea:4d:36:e6:64:47:f7:2b:73:49:fb:fa:2c:26:84:
         bc:fd:fb:93:ce:f1:25:6d:12:df:51:b9:6e:07:13:86:9e:05:
         0d:29:07:02:4f:89:ac:d5:82:0a:ad:d9:ec:15:de:62:fe:e4:
         5f:fc:5e:0f:63:13:82:80:5d:08:04:70:75:0a:25:3a:0d:d6:
         03:80:09:51:30:a9:09:72:6f:2a:3b:79:d5:26:c6:ea:76:3b:
         6f:4c:48:99:a0:09:4e:b2:1c:2c:0d:6a:9f:5b:2f:78:8a:4d:
         06:cb:af:74:f7:0f:37:07:1c:0e:68:57:52:d7:84:18:0d:25:
         a8:e9:36:ae:f4:9b:0b:6f:13:64:98:94:66:80:04:8b:5c:ad:
         2e:cc:2d:ba:0e:1c:f4:c3:fd:2b:93:14:b5:2f:e5:df:45:44:
         e4:28:5a:92:15:ae:f3:dd:3b:2e:5c:2d:cb:da:36:07:79:33:
         0b:62:5d:11:0e:0a:45:e9:81:c0:41:51:68:7d:a7:8e:c0:9e:
         de:39:81:72:6d:cc:84:0f:a0:c7:01:50:bd:e9:fd:f1:b6:2c:
         50:10:7d:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJLSZ4zAsYlqhcnNhP+twDvGaPlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFCRTI1QkFBRTkwRjc5MDhFRTU3N0MzQzM3NTJGRTA4
QUYzRUM0NjAeFw0yMzA3MTExMTM2MTlaFw0yNDA3MDkxMTQxMTlaMDMxMTAvBgNV
BAMTKDIzQTJFNkU3NTk0QThFNTA1RkI5RjM5MEEwOTMwQ0NFRjY5OEIwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlB9B/yf6sdjhQ3VGR4BEi/Lb
reoZuR+YKzuXbZz01Bpkf5wnkZP3ktZ5daa+GWMDiHjgIHKKSD58FuajYons3djO
qVxsqywLrXGE/6Fe5p6UMlEqpoyCQt6eqMJ3pxxo5yAhdMWUzt1/nXXfnDIwD2b7
qW/Zer/vMr7uczID/FQ/WtnYiaFj2hOTpLpU0vk/8SNlKh8Q44LnsybtDssDEj8h
7J+4E1ZB1u4IjVpxhqqdw4zeq665/fFERmgFTynzqp3eTcBSKB8jBBBnwftr9YW8
4+ZWVjlozEGWAF0DskXwn0QuH8UEquRAU3VtZHytuX2tb1tpMBrOR/puTYoDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI6Lm51lKjlBfufOQoJMMzvaYsAEwHwYDVR0j
BBgwFoAUob4luq6Q95CO5XfDw3Uv4Irz7EYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMC9BMUJFMjVCQUFFOTBGNzkwOEVFNTc3QzNDMzc1MkZFMDhBRjNFQzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExQkUyNUJBQUU5MEY3OTA4
RUU1NzdDM0MzNzUyRkUwOEFGM0VDNDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzAv
MzEzNzM3MmUzNjM3MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxQ3AwDQYJKoZIhvcNAQELBQADggEBAI0J4VHE
cxsBWRPIEr2d1yDC2XPb8VSp7fxHvPImP9PnnRaH2BLcs+pNNuZkR/crc0n7+iwm
hLz9+5PO8SVtEt9RuW4HE4aeBQ0pBwJPiazVggqt2ewV3mL+5F/8Xg9jE4KAXQgE
cHUKJToN1gOACVEwqQlybyo7edUmxup2O29MSJmgCU6yHCwNap9bL3iKTQbLr3T3
DzcHHA5oV1LXhBgNJajpNq70mwtvE2SYlGaABItcrS7MLboOHPTD/SuTFLUv5d9F
ROQoWpIVrvPdOy5cLcvaNgd5MwtiXREOCkXpgcBBUWh9p47Ant45gXJtzIQPoMcB
UL3p/fG2LFAQfe0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org