Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32342d3234203d3e20323730393137.roa
File:                     3137372e3230302e3133382e302f32342d3234203d3e20323730393137.roa (raw, json)
Hash identifier:          9W23+qGCreEK29aIVmw627+KSIyqNgx3H/93zfOcgI8=
Subject key identifier:   C4:41:40:0B:65:3E:F2:FC:D2:DB:E5:44:DB:5F:B0:FC:CE:61:7F:F3
Certificate issuer:       /CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
Certificate serial:       3C5CC509BF0E07DF4C9493738899DFFF7D70A237
Authority key identifier: CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32342d3234203d3e20323730393137.roa
Signing time:             Fri 10 Mar 2023 17:19:40 +0000
ROA not before:           Fri 10 Mar 2023 17:14:40 +0000
ROA not after:            Fri 08 Mar 2024 17:19:40 +0000
asID:                     270917
IP address blocks:        177.200.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5c:c5:09:bf:0e:07:df:4c:94:93:73:88:99:df:ff:7d:70:a2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
        Validity
            Not Before: Mar 10 17:14:40 2023 GMT
            Not After : Mar  8 17:19:40 2024 GMT
        Subject: CN=C441400B653EF2FCD2DBE544DB5FB0FCCE617FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:a2:5c:50:eb:06:b2:b8:85:33:10:a5:e3:
                    2e:0e:ff:89:28:7f:4e:1c:dc:1e:0f:c3:b8:f6:5f:
                    1d:3d:b4:3e:2a:31:dd:5a:0e:57:26:76:23:17:b8:
                    e7:0d:8e:62:17:78:fe:65:33:39:6f:c3:04:78:4f:
                    ec:8b:c7:c1:81:56:92:74:f6:c5:f4:e9:13:fb:4b:
                    d7:81:0d:7c:1c:96:65:d3:b7:ad:aa:56:88:d7:1c:
                    69:d9:3a:33:08:8e:94:de:0c:da:cb:73:ae:6c:05:
                    2d:e0:38:bf:d2:55:ef:0b:ce:9a:26:e3:ed:36:c8:
                    f9:9b:07:11:11:8a:0f:cf:eb:9b:da:df:f7:55:3b:
                    59:a4:ee:be:be:d7:b2:55:7e:ce:8b:4e:e0:62:4f:
                    bf:57:5c:31:7f:a0:96:89:fc:91:0d:af:b2:7f:c3:
                    05:1c:b1:45:32:25:dc:01:fe:e1:49:d7:25:f0:ea:
                    dd:c1:a6:b0:45:42:cb:78:f4:93:c8:ce:ae:1b:e3:
                    a1:7b:ab:14:8d:f9:57:83:6a:d1:d6:b0:8e:6a:82:
                    bb:b9:cf:e1:a7:6a:d4:15:e1:ed:84:73:c3:e1:e1:
                    ad:82:3f:59:b9:48:d8:84:05:fb:8c:40:c2:30:33:
                    ca:21:86:65:dc:3e:84:59:1f:1d:79:36:a0:78:30:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:41:40:0B:65:3E:F2:FC:D2:DB:E5:44:DB:5F:B0:FC:CE:61:7F:F3
            X509v3 Authority Key Identifier:
                keyid:CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32342d3234203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:98:d7:d2:9d:2d:03:c5:ec:65:4d:8b:a4:f2:88:f2:38:cd:
         dd:93:f6:4d:7e:b8:19:96:47:8a:02:36:ed:c8:bd:aa:ec:65:
         be:ec:8e:b3:64:e9:6b:72:99:97:a6:13:c4:ff:59:61:7c:68:
         e4:a4:bd:b7:e0:f2:da:c2:bd:5c:a6:2d:7a:f8:7e:d7:81:5d:
         55:23:2c:c9:81:15:d0:84:60:19:53:6b:e1:00:e1:a6:bd:29:
         f9:d2:bb:83:da:9f:1a:50:99:6f:70:d1:da:11:da:2c:f4:f2:
         70:0e:3d:b7:53:62:dc:96:e2:83:6b:8e:15:71:d9:d7:a7:f7:
         15:ac:e5:d2:d9:cd:74:77:db:0e:8f:c3:ff:1f:b2:5f:a9:24:
         86:26:4f:4a:ef:09:cc:31:97:8b:ed:97:b6:13:9b:b3:78:95:
         11:f0:46:2a:ae:53:f7:8b:6a:4d:df:ed:a5:54:c5:72:dc:a1:
         c0:33:d3:b2:4a:28:da:5a:54:0b:78:cf:7a:28:fb:3b:8d:22:
         6d:70:7a:43:3a:69:9a:a7:bd:bb:94:a7:b5:f5:cd:e5:ba:af:
         04:5c:46:a8:fb:d5:c6:e8:27:ca:e5:07:95:52:ce:8d:9a:a7:
         fd:c0:68:7a:b9:01:11:b3:ac:3a:e7:52:e5:f9:cd:62:9e:05:
         de:b3:9d:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPFzFCb8OB99MlJNziJnf/31wojcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5RTM0NUE1NDQzRTU0NzE2QjgyNEVCNzlGMUE1RjYw
NjAzMDJDMDAeFw0yMzAzMTAxNzE0NDBaFw0yNDAzMDgxNzE5NDBaMDMxMTAvBgNV
BAMTKEM0NDE0MDBCNjUzRUYyRkNEMkRCRTU0NERCNUZCMEZDQ0U2MTdGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKKJcUOsGsriFMxCl4y4O/4ko
f04c3B4Pw7j2Xx09tD4qMd1aDlcmdiMXuOcNjmIXeP5lMzlvwwR4T+yLx8GBVpJ0
9sX06RP7S9eBDXwclmXTt62qVojXHGnZOjMIjpTeDNrLc65sBS3gOL/SVe8Lzpom
4+02yPmbBxERig/P65va3/dVO1mk7r6+17JVfs6LTuBiT79XXDF/oJaJ/JENr7J/
wwUcsUUyJdwB/uFJ1yXw6t3BprBFQst49JPIzq4b46F7qxSN+VeDatHWsI5qgru5
z+GnatQV4e2Ec8Ph4a2CP1m5SNiEBfuMQMIwM8ohhmXcPoRZHx15NqB4MPUHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxEFAC2U+8vzS2+VE21+w/M5hf/MwHwYDVR0j
BBgwFoAUzJ40WlRD5UcWuCTrefGl9gYDAsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW10dldwVGluVlVvR3paY0Nud2dpMUp2aHBoeDRMdDJSanV6Wmg2SlNX
QlkvMC9DQzlFMzQ1QTU0NDNFNTQ3MTZCODI0RUI3OUYxQTVGNjA2MDMwMkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDOUUzNDVBNTQ0M0U1NDcx
NkI4MjRFQjc5RjFBNUY2MDYwMzAyQzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtdHZXcFRpblZVb0d6WmNDbndnaTFKdmhwaHg0THQyUmp1elpoNkpTV0JZLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALHIijANBgkqhkiG9w0BAQsFAAOCAQEAvZjX
0p0tA8XsZU2LpPKI8jjN3ZP2TX64GZZHigI27ci9quxlvuyOs2Tpa3KZl6YTxP9Z
YXxo5KS9t+Dy2sK9XKYtevh+14FdVSMsyYEV0IRgGVNr4QDhpr0p+dK7g9qfGlCZ
b3DR2hHaLPTycA49t1Ni3Jbig2uOFXHZ16f3Fazl0tnNdHfbDo/D/x+yX6kkhiZP
Su8JzDGXi+2XthObs3iVEfBGKq5T94tqTd/tpVTFctyhwDPTskoo2lpUC3jPeij7
O40ibXB6Qzppmqe9u5SntfXN5bqvBFxGqPvVxugnyuUHlVLOjZqn/cBoerkBEbOs
OudS5fnNYp4F3rOdlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org