Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa
File:                     3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          zCeJrkSbPCLwh3oNrVmF+bjKeU0UQXUQCNBbEoujI+g=
Subject key identifier:   75:60:9F:31:85:89:57:04:6F:94:50:AE:18:60:25:8B:9E:80:33:9C
Certificate issuer:       /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial:       72BBDD76CEF79588C424C9D6387DC8E4BCBAAE32
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 11 Jan 2023 18:50:35 +0000
ROA not before:           Wed 11 Jan 2023 18:45:35 +0000
ROA not after:            Wed 10 Jan 2024 18:50:35 +0000
asID:                     262535
IP address blocks:        201.159.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:dd:76:ce:f7:95:88:c4:24:c9:d6:38:7d:c8:e4:bc:ba:ae:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
        Validity
            Not Before: Jan 11 18:45:35 2023 GMT
            Not After : Jan 10 18:50:35 2024 GMT
        Subject: CN=75609F31858957046F9450AE1860258B9E80339C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:40:31:1d:02:9e:53:c4:30:f8:28:1b:e7:
                    69:36:9c:d1:ed:ee:f2:1e:0e:8d:06:7b:42:3c:97:
                    e7:5f:8d:a0:54:b3:18:dc:37:f3:ac:44:84:b5:3c:
                    b5:60:f7:25:62:55:67:b0:b1:8a:f5:02:51:ed:2c:
                    b7:c3:90:ff:d6:df:a0:a0:27:a3:8b:0d:07:18:51:
                    c6:dc:66:8e:65:ef:e0:48:2f:6d:a1:26:09:f9:72:
                    9e:72:40:f1:83:b8:00:d1:e4:c6:c9:ff:40:93:13:
                    0e:84:c5:25:c1:dc:63:50:28:67:7a:f1:16:10:8f:
                    0d:23:6d:bd:a1:7b:70:c3:0d:9d:45:b8:3e:b0:be:
                    12:16:b1:28:d8:eb:9e:63:04:64:ff:39:2b:c3:21:
                    7e:31:4b:26:45:8d:91:64:d3:59:43:4f:74:39:8f:
                    1d:ad:05:94:c6:c2:d5:fd:cb:42:4a:3f:fb:3c:2f:
                    c7:b4:2e:ef:17:42:d6:7d:60:d1:e4:2a:5d:d9:6c:
                    76:db:a1:d9:ef:ea:ad:5c:86:ae:d8:49:c0:51:fb:
                    a4:c8:63:e4:2a:f6:5e:a0:6b:71:6b:7a:68:ad:12:
                    0c:f1:cf:c5:1b:9b:b9:4f:59:93:8b:49:9a:d8:05:
                    f9:6e:d6:d3:e4:70:e9:60:27:cc:b7:66:2b:cc:98:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:9F:31:85:89:57:04:6F:94:50:AE:18:60:25:8B:9E:80:33:9C
            X509v3 Authority Key Identifier:
                keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131372e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:43:e8:87:76:c7:da:79:91:3e:e3:b4:be:38:93:12:12:
         6b:80:f4:f4:db:e0:2c:7d:b1:f6:e0:91:2c:ab:02:69:3c:55:
         e3:b6:fd:f7:27:b6:0f:3b:c3:9c:ab:f7:8e:b4:0d:a5:a6:49:
         2b:c5:a4:83:0e:e5:1a:7a:42:c3:d7:cd:d1:78:72:bf:11:6f:
         e3:70:db:fa:ac:c8:64:3e:f8:09:1e:77:23:7f:e0:bb:2f:11:
         3c:08:0e:64:35:8e:98:64:fb:10:e9:b7:83:c7:68:57:8c:05:
         78:77:6d:d3:79:6f:38:b5:9b:77:2f:48:67:60:3f:72:78:f3:
         58:de:87:13:62:42:ba:fb:30:1c:2f:7d:1f:8d:0d:b8:51:cb:
         e8:b6:cb:44:2e:49:a0:5c:85:32:83:4c:3c:d7:b9:63:25:90:
         ef:49:bf:fa:b0:e4:a2:a8:ae:3d:04:2e:24:f1:7e:1f:d3:4f:
         0f:d6:85:9e:48:e7:63:cd:a4:e3:82:c5:88:0d:73:9a:f7:89:
         e3:52:87:77:2b:dd:18:10:aa:10:97:f0:e6:fe:c1:6c:b7:e3:
         19:fe:bb:d1:7d:d1:c8:46:20:79:38:c7:de:eb:a7:3a:f5:50:
         7b:39:fd:be:e2:3b:bb:fa:c7:f4:7d:f7:be:8e:ee:fe:bd:16:
         fa:73:e8:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcrvdds73lYjEJMnWOH3I5Ly6rjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NDQ2Q0E3NzdFMENFQTI3QzMyRkIxNTE5OUJCQkJF
QjJCQkZGRTAeFw0yMzAxMTExODQ1MzVaFw0yNDAxMTAxODUwMzVaMDMxMTAvBgNV
BAMTKDc1NjA5RjMxODU4OTU3MDQ2Rjk0NTBBRTE4NjAyNThCOUU4MDMzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98EAxHQKeU8Qw+Cgb52k2nNHt
7vIeDo0Ge0I8l+dfjaBUsxjcN/OsRIS1PLVg9yViVWewsYr1AlHtLLfDkP/W36Cg
J6OLDQcYUcbcZo5l7+BIL22hJgn5cp5yQPGDuADR5MbJ/0CTEw6ExSXB3GNQKGd6
8RYQjw0jbb2he3DDDZ1FuD6wvhIWsSjY655jBGT/OSvDIX4xSyZFjZFk01lDT3Q5
jx2tBZTGwtX9y0JKP/s8L8e0Lu8XQtZ9YNHkKl3ZbHbbodnv6q1chq7YScBR+6TI
Y+Qq9l6ga3FremitEgzxz8Ubm7lPWZOLSZrYBflu1tPkcOlgJ8y3ZivMmOUDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdWCfMYWJVwRvlFCuGGAli56AM5wwHwYDVR0j
BBgwFoAUD5RGynd+DOonwy+xUZm7u+srv/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8wRjk0NDZDQTc3N0UwQ0VBMjdDMzJGQjE1MTk5QkJCQkVCMkJCRkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGOTQ0NkNBNzc3RTBDRUEy
N0MzMkZCMTUxOTlCQkJCRUIyQkJGRkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmfdTANBgkqhkiG9w0BAQsFAAOCAQEABjxD
6Id2x9p5kT7jtL44kxISa4D09NvgLH2x9uCRLKsCaTxV47b99ye2DzvDnKv3jrQN
paZJK8Wkgw7lGnpCw9fN0XhyvxFv43Db+qzIZD74CR53I3/guy8RPAgOZDWOmGT7
EOm3g8doV4wFeHdt03lvOLWbdy9IZ2A/cnjzWN6HE2JCuvswHC99H40NuFHL6LbL
RC5JoFyFMoNMPNe5YyWQ70m/+rDkoqiuPQQuJPF+H9NPD9aFnkjnY82k44LFiA1z
mveJ41KHdyvdGBCqEJfw5v7BbLfjGf670X3RyEYgeTjH3uunOvVQezn9vuI7u/rH
9H33vo7u/r0W+nPo3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org