Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139342e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3139342e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          f7dQW3XR+NJ0Nl6ud8wF5RvWulKFnFqOfIpMEO3pYEI=
Subject key identifier:   CF:A3:2F:B5:F5:33:44:42:18:45:76:3F:0B:83:7B:AD:AE:7D:66:BE
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       4666610481027C651910A20EAD8B41D96D818424
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139342e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:32 +0000
ROA not before:           Thu 29 Jun 2023 14:08:32 +0000
ROA not after:            Thu 27 Jun 2024 14:13:32 +0000
asID:                     53086
IP address blocks:        187.33.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:61:04:81:02:7c:65:19:10:a2:0e:ad:8b:41:d9:6d:81:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:32 2023 GMT
            Not After : Jun 27 14:13:32 2024 GMT
        Subject: CN=CFA32FB5F53344421845763F0B837BADAE7D66BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:a6:31:c7:88:3d:7c:4e:63:ab:9d:26:d8:
                    e9:ae:5b:64:48:9e:f0:66:b6:e5:00:be:cc:ea:6e:
                    c0:bc:90:a7:41:da:f6:36:9e:3f:9f:81:56:a2:8c:
                    66:49:dc:5a:47:fa:ac:0f:e3:af:b9:16:26:9e:53:
                    ca:23:71:ff:b8:2f:10:6c:62:c8:76:01:65:62:a3:
                    83:fb:f0:d5:a6:0f:c3:23:cd:9e:9f:44:e3:ee:9c:
                    41:d3:bc:67:e7:f2:70:29:27:09:27:d3:af:7b:43:
                    c9:c4:a1:e0:ba:e4:32:e2:73:52:26:27:3e:68:4e:
                    3a:73:a4:45:ad:ba:69:08:ae:aa:70:b9:03:b9:fb:
                    1f:37:76:f6:a4:b6:bf:a4:18:24:13:8b:f7:dc:4c:
                    25:1d:48:28:03:6f:ac:27:b5:de:11:8b:c7:2c:9b:
                    03:ca:b3:1b:26:73:d9:80:45:ec:92:be:8f:96:e2:
                    48:4e:f5:5e:03:6b:b6:a6:92:75:65:02:45:d7:58:
                    83:0e:26:b8:e9:7d:8e:00:0f:32:62:a4:67:d9:88:
                    90:e7:2d:77:60:c8:96:25:b8:52:72:a8:03:49:36:
                    f1:14:c7:1f:e4:26:aa:84:63:61:b9:9c:70:93:1c:
                    27:a7:ce:5d:33:67:98:42:e3:20:67:27:a7:8e:d5:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:2F:B5:F5:33:44:42:18:45:76:3F:0B:83:7B:AD:AE:7D:66:BE
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139342e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:97:89:4d:c4:06:c8:83:63:92:99:bf:41:16:fc:6a:42:
         b1:7f:1a:37:e2:44:3f:f2:0a:cb:a3:a2:ba:ee:7c:a4:b5:97:
         b1:d2:d5:1a:2d:12:e3:46:86:fe:1f:2a:c8:7c:53:3e:34:c6:
         e6:67:ac:9f:c7:ca:cb:90:c7:f4:42:dd:b0:84:4a:25:21:7d:
         be:8d:35:34:1e:c0:33:a9:20:0f:b0:ea:2b:ff:b3:77:e6:1e:
         2a:95:8a:5d:01:09:1f:e4:f8:d7:a4:06:5d:c0:3a:62:9f:08:
         5b:6e:53:3f:a9:8c:67:5f:3e:32:90:0d:a7:ec:72:ae:f1:70:
         10:df:3b:fe:65:cb:74:5d:eb:b5:cf:4e:21:cb:c2:75:f9:cd:
         5f:d0:ab:13:f9:cc:4f:88:18:22:d5:e4:7c:1a:c0:7e:d3:65:
         c0:b8:68:ff:12:f4:67:24:87:cc:d8:a3:44:fa:3b:60:71:b2:
         a1:d0:e4:3c:57:3a:00:de:f9:d5:a2:a8:b4:6c:0a:3b:ac:b1:
         95:96:6e:0d:1e:05:d7:b4:9e:f8:0d:f5:ce:00:90:bb:81:e0:
         75:33:50:72:9c:a2:8a:0e:5a:8b:8f:87:91:c3:53:4f:c6:5b:
         7e:2b:ff:cf:94:37:34:3f:09:e9:18:97:d3:12:17:fa:f2:30:
         65:4e:5d:c6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURmZhBIECfGUZEKIOrYtB2W2BhCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NjcxQ0QwQkJENjdDQzYwMEQzQTNERkQ5N0QxMjlB
MDUwQ0EwODAeFw0yMzA2MjkxNDA4MzJaFw0yNDA2MjcxNDEzMzJaMDMxMTAvBgNV
BAMTKENGQTMyRkI1RjUzMzQ0NDIxODQ1NzYzRjBCODM3QkFEQUU3RDY2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+6Yxx4g9fE5jq50m2OmuW2RI
nvBmtuUAvszqbsC8kKdB2vY2nj+fgVaijGZJ3FpH+qwP46+5FiaeU8ojcf+4LxBs
Ysh2AWVio4P78NWmD8MjzZ6fROPunEHTvGfn8nApJwkn0697Q8nEoeC65DLic1Im
Jz5oTjpzpEWtumkIrqpwuQO5+x83dvaktr+kGCQTi/fcTCUdSCgDb6wntd4Ri8cs
mwPKsxsmc9mAReySvo+W4khO9V4Da7amknVlAkXXWIMOJrjpfY4ADzJipGfZiJDn
LXdgyJYluFJyqANJNvEUxx/kJqqEY2G5nHCTHCenzl0zZ5hC4yBnJ6eO1etFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz6MvtfUzREIYRXY/C4N7ra59Zr4wHwYDVR0j
BBgwFoAUbmZxzQu9Z8xgDTo9/ZfRKaBQyggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMC82RTY2NzFDRDBCQkQ2N0NDNjAwRDNBM0RGRDk3RDEyOUEwNTBDQTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFNjY3MUNEMEJCRDY3Q0M2
MDBEM0EzREZEOTdEMTI5QTA1MENBMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzAv
MzEzODM3MmUzMzMzMmUzMTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuyHCMA0GCSqGSIb3DQEBCwUAA4IBAQA+T5eJTcQG
yINjkpm/QRb8akKxfxo34kQ/8grLo6K67nyktZex0tUaLRLjRob+HyrIfFM+NMbm
Z6yfx8rLkMf0Qt2whEolIX2+jTU0HsAzqSAPsOor/7N35h4qlYpdAQkf5PjXpAZd
wDpinwhbblM/qYxnXz4ykA2n7HKu8XAQ3zv+Zct0Xeu1z04hy8J1+c1f0KsT+cxP
iBgi1eR8GsB+02XAuGj/EvRnJIfM2KNE+jtgcbKh0OQ8VzoA3vnVoqi0bAo7rLGV
lm4NHgXXtJ74DfXOAJC7geB1M1BynKKKDlqLj4eRw1NPxlt+K//PlDc0PwnpGJfT
Ehf68jBlTl3G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org