Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          t8J8zLsxvZgjqjq9A5MHSa+iZjTDGqWUfaAvPxnH9I8=
Subject key identifier:   B5:55:58:20:1D:B5:B5:ED:DE:27:CB:77:57:9D:8B:71:B9:34:7B:44
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       4FC7D0D33B1A68DA752387F3804A4D4EB597679E
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:24 +0000
ROA not before:           Thu 04 Apr 2024 09:20:24 +0000
ROA not after:            Thu 03 Apr 2025 09:25:24 +0000
asID:                     270544
IP address blocks:        187.95.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c7:d0:d3:3b:1a:68:da:75:23:87:f3:80:4a:4d:4e:b5:97:67:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:24 2024 GMT
            Not After : Apr  3 09:25:24 2025 GMT
        Subject: CN=B55558201DB5B5EDDE27CB77579D8B71B9347B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:65:3f:f7:67:9b:bf:26:b0:ba:03:1c:23:
                    4c:b8:17:5b:76:f5:6f:12:7d:36:ed:56:29:b4:ed:
                    7f:74:a7:41:5c:07:2b:d5:8b:82:f1:74:7f:19:8d:
                    b1:01:e3:82:e4:37:97:5c:67:da:2b:d9:bf:79:49:
                    42:86:e0:f0:d7:83:28:80:44:07:9d:c6:32:4b:6e:
                    ed:59:43:35:da:25:e4:26:5f:d9:1c:9c:b0:60:d9:
                    d6:5e:07:5e:d7:0d:04:73:75:9e:25:cb:bd:82:c9:
                    64:f3:77:e3:dc:3b:f7:42:5c:b2:f2:05:ba:79:4f:
                    3a:61:77:b2:1a:10:64:b8:11:c0:d8:3b:6c:c9:ed:
                    9a:8c:ce:c3:36:2a:81:33:53:3d:74:23:41:7d:d6:
                    98:31:21:b7:07:03:f0:e4:03:7c:67:0d:67:22:df:
                    ef:d9:10:1b:61:37:36:1b:65:0a:3c:87:31:56:be:
                    1d:0d:ca:1f:69:1f:55:c4:61:de:1d:9f:7c:44:ae:
                    af:94:0d:aa:d6:ef:0c:74:71:d5:60:50:71:cf:b6:
                    9b:12:72:3f:8c:27:06:0a:69:9f:b7:b7:69:c7:b3:
                    6e:1a:e0:13:0c:5a:6b:d2:f3:47:ed:30:0d:cd:aa:
                    03:00:60:00:23:83:88:a0:12:0d:c1:41:c3:c5:8d:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:58:20:1D:B5:B5:ED:DE:27:CB:77:57:9D:8B:71:B9:34:7B:44
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:df:19:e0:cf:b5:74:a5:82:3e:82:9a:28:a5:36:c2:61:
         43:83:c5:0d:cf:37:76:70:d9:83:fd:77:ee:e7:ac:ec:2c:78:
         a5:31:d6:16:bc:44:9d:ad:97:51:d1:7a:00:91:3b:ef:a3:fd:
         79:29:61:85:8a:f3:a8:cf:61:f3:2c:ee:2e:46:00:9e:43:aa:
         52:58:03:a4:95:4d:0d:72:d2:98:1c:d3:86:2e:94:d6:ad:e3:
         15:28:d3:a7:15:a9:99:d8:15:b2:70:7b:90:ec:24:e9:11:54:
         a2:f0:cf:ec:4e:ab:6e:33:d6:70:31:9c:26:70:62:5a:5e:0c:
         cd:89:01:4e:1c:a1:9d:74:5e:eb:c1:e9:15:78:64:95:2f:d5:
         a0:29:34:6d:6e:c8:54:af:aa:ab:05:f3:c1:e2:89:60:6d:11:
         0d:fb:aa:bd:72:28:43:98:13:49:0b:fb:a2:b7:0f:97:9d:c4:
         10:2a:40:32:94:22:d3:43:bf:ea:e5:2d:72:f0:6c:0c:21:c0:
         c0:9c:7f:61:23:2f:5a:05:f3:04:19:9d:48:f9:6f:e0:49:aa:
         6a:93:15:a9:d7:8e:32:1e:15:86:5f:3b:c2:e9:1f:0d:75:91:
         e8:5f:49:7e:ef:6c:e6:63:94:9e:16:96:0f:be:08:54:a9:b7:
         0a:0c:1d:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT8fQ0zsaaNp1I4fzgEpNTrWXZ54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE5NjA4MDA4N0NENkRFQTYwNzMyQzRCQjc2NERFRjg2
MTAwQzE4QjAeFw0yNDA0MDQwOTIwMjRaFw0yNTA0MDMwOTI1MjRaMDMxMTAvBgNV
BAMTKEI1NTU1ODIwMURCNUI1RURERTI3Q0I3NzU3OUQ4QjcxQjkzNDdCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRWU/92ebvyawugMcI0y4F1t2
9W8SfTbtVim07X90p0FcByvVi4LxdH8ZjbEB44LkN5dcZ9or2b95SUKG4PDXgyiA
RAedxjJLbu1ZQzXaJeQmX9kcnLBg2dZeB17XDQRzdZ4ly72CyWTzd+PcO/dCXLLy
Bbp5Tzphd7IaEGS4EcDYO2zJ7ZqMzsM2KoEzUz10I0F91pgxIbcHA/DkA3xnDWci
3+/ZEBthNzYbZQo8hzFWvh0Nyh9pH1XEYd4dn3xErq+UDarW7wx0cdVgUHHPtpsS
cj+MJwYKaZ+3t2nHs24a4BMMWmvS80ftMA3NqgMAYAAjg4igEg3BQcPFjRnJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtVVYIB21te3eJ8t3V52Lcbk0e0QwHwYDVR0j
BBgwFoAUWpYIAIfNbepgcyxLt2Te+GEAwYswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMS81QTk2MDgwMDg3Q0Q2REVBNjA3MzJDNEJCNzY0REVGODYxMDBDMThCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBOTYwODAwODdDRDZERUE2
MDczMkM0QkI3NjRERUY4NjEwMEMxOEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzEv
MzEzODM3MmUzOTM1MmUzMjMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7X9IwDQYJKoZIhvcNAQELBQADggEBAB4Q3xng
z7V0pYI+gpoopTbCYUODxQ3PN3Zw2YP9d+7nrOwseKUx1ha8RJ2tl1HRegCRO++j
/XkpYYWK86jPYfMs7i5GAJ5DqlJYA6SVTQ1y0pgc04YulNat4xUo06cVqZnYFbJw
e5DsJOkRVKLwz+xOq24z1nAxnCZwYlpeDM2JAU4coZ10XuvB6RV4ZJUv1aApNG1u
yFSvqqsF88HiiWBtEQ37qr1yKEOYE0kL+6K3D5edxBAqQDKUItNDv+rlLXLwbAwh
wMCcf2EjL1oF8wQZnUj5b+BJqmqTFanXjjIeFYZfO8LpHw11kehfSX7vbOZjlJ4W
lg++CFSptwoMHQQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org