Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35382e302f32342d3234203d3e20323632393632.roa
File:                     3138372e38352e35382e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier:          ypjO7q03DK+Dfljtfa+CjGLGf8RT7OrTYsFT589lfoI=
Subject key identifier:   4F:08:A0:C2:A0:42:7F:28:CA:CD:C2:14:5E:0E:E3:64:60:4B:EF:15
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       74F537AA23772D2F9D7FE65A6ED2F22C4D724CB7
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35382e302f32342d3234203d3e20323632393632.roa
Signing time:             Fri 13 Oct 2023 17:09:45 +0000
ROA not before:           Fri 13 Oct 2023 17:04:45 +0000
ROA not after:            Fri 11 Oct 2024 17:09:45 +0000
asID:                     262962
IP address blocks:        187.85.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f5:37:aa:23:77:2d:2f:9d:7f:e6:5a:6e:d2:f2:2c:4d:72:4c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:04:45 2023 GMT
            Not After : Oct 11 17:09:45 2024 GMT
        Subject: CN=4F08A0C2A0427F28CACDC2145E0EE364604BEF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:e9:3d:bf:36:39:f3:5d:7e:ab:6c:ae:52:
                    52:7f:92:87:20:73:3c:85:3b:c9:d6:71:3d:c0:08:
                    e0:47:6f:d9:02:fa:a8:12:7f:31:0b:55:c5:ad:de:
                    71:b8:55:00:f5:02:3c:ba:73:d8:c0:1e:16:46:b6:
                    3b:2e:3f:48:7d:5e:bf:10:09:cc:8a:fc:61:25:af:
                    04:d2:ff:25:a7:a4:fe:0f:26:a0:8c:06:82:82:da:
                    a5:fa:a7:00:78:bd:d3:ab:ab:c2:f9:31:af:e3:ef:
                    74:69:72:3f:72:8a:50:f6:11:d7:9b:90:a4:11:06:
                    75:01:19:af:ec:ef:65:06:b9:1b:f5:75:76:1e:bc:
                    7c:c7:c8:ea:8b:70:5d:b0:e3:62:46:18:d5:2f:af:
                    31:a4:6e:0a:bb:47:ce:ea:74:03:eb:80:a4:fd:99:
                    69:8f:4a:b3:05:7e:72:8a:02:72:af:ad:67:25:72:
                    02:77:37:db:11:c2:16:61:93:7f:42:c8:d6:c1:34:
                    54:93:b9:9a:f4:0a:e8:6f:fc:d8:b3:0e:7d:b6:b6:
                    99:6d:99:de:45:f5:37:1d:a0:de:d0:61:31:d4:78:
                    15:fb:bd:27:5f:fe:e1:4d:b4:74:dc:81:5d:bf:85:
                    2a:b0:cc:14:83:3d:19:d1:8b:ce:1c:b5:3f:57:a6:
                    20:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:A0:C2:A0:42:7F:28:CA:CD:C2:14:5E:0E:E3:64:60:4B:EF:15
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35382e302f32342d3234203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:66:a6:09:f8:23:12:9e:66:1f:7e:a8:27:f9:c9:6d:05:5e:
         7a:d4:04:24:f5:d5:20:28:f0:3d:d8:42:2d:21:5c:3c:8c:b0:
         27:cd:36:62:91:35:1f:65:70:0b:dc:5e:44:c7:28:f6:4c:ba:
         d1:0c:2c:c5:61:95:75:21:e1:45:90:19:05:f7:d9:a8:73:57:
         73:ed:89:39:07:cc:30:97:52:01:d8:3b:17:85:75:7a:58:fd:
         d9:39:3c:00:2a:5f:c2:30:e7:39:e7:47:b3:87:44:f2:b0:74:
         ff:15:36:00:c0:d6:0e:af:42:20:81:21:62:a1:0c:2d:23:4a:
         5a:ea:cc:7e:40:09:66:94:da:03:12:4c:cb:e6:ea:7f:28:64:
         1a:9e:26:b0:36:69:65:3c:c7:df:2f:0d:7e:b1:19:b1:75:16:
         41:56:d2:29:0a:cb:cd:58:6f:f8:aa:0d:30:64:c6:eb:6a:e1:
         15:eb:d2:ca:13:85:01:ef:b8:f9:3a:32:b5:3b:61:c9:d8:ac:
         47:7d:d8:d5:7b:84:95:8e:52:16:c3:a3:0b:d2:bb:d8:6e:ba:
         73:01:93:b5:2c:ad:19:b3:01:f5:62:c4:b6:85:d7:13:b0:ce:
         c4:4a:f6:12:94:b3:52:7a:4f:4e:17:e2:5d:7f:20:1b:a9:61:
         0e:59:4a:4c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdPU3qiN3LS+df+ZabtLyLE1yTLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxQ0VBNTQyQTcwRDExQUFBRjREOUFDQzVDMTRBMjIz
N0I4QzA0MDAeFw0yMzEwMTMxNzA0NDVaFw0yNDEwMTExNzA5NDVaMDMxMTAvBgNV
BAMTKDRGMDhBMEMyQTA0MjdGMjhDQUNEQzIxNDVFMEVFMzY0NjA0QkVGMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1p+k9vzY5811+q2yuUlJ/kocg
czyFO8nWcT3ACOBHb9kC+qgSfzELVcWt3nG4VQD1Ajy6c9jAHhZGtjsuP0h9Xr8Q
CcyK/GElrwTS/yWnpP4PJqCMBoKC2qX6pwB4vdOrq8L5Ma/j73Rpcj9yilD2Edeb
kKQRBnUBGa/s72UGuRv1dXYevHzHyOqLcF2w42JGGNUvrzGkbgq7R87qdAPrgKT9
mWmPSrMFfnKKAnKvrWclcgJ3N9sRwhZhk39CyNbBNFSTuZr0Cuhv/NizDn22tplt
md5F9TcdoN7QYTHUeBX7vSdf/uFNtHTcgV2/hSqwzBSDPRnRi84ctT9XpiDBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTwigwqBCfyjKzcIUXg7jZGBL7xUwHwYDVR0j
BBgwFoAUORzqVCpw0Rqq9NmsxcFKIje4wEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF5SkxKV2U1MmJadXNMUjlHdWpucXhUQmNvUlVMcURKOHl2Yjg1Q2Z1
Y1gvMC8zOTFDRUE1NDJBNzBEMTFBQUFGNEQ5QUNDNUMxNEEyMjM3QjhDMDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MUNFQTU0MkE3MEQxMUFB
QUY0RDlBQ0M1QzE0QTIyMzdCOEMwNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YxeUpMSldlNTJiWnVzTFI5R3VqbnF4VEJjb1JVTHFESjh5dmI4NUNmdWNYLzAv
MzEzODM3MmUzODM1MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu1U6MA0GCSqGSIb3DQEBCwUAA4IBAQAxZqYJ+CMS
nmYffqgn+cltBV561AQk9dUgKPA92EItIVw8jLAnzTZikTUfZXAL3F5Exyj2TLrR
DCzFYZV1IeFFkBkF99moc1dz7Yk5B8wwl1IB2DsXhXV6WP3ZOTwAKl/CMOc550ez
h0TysHT/FTYAwNYOr0IggSFioQwtI0pa6sx+QAlmlNoDEkzL5up/KGQaniawNmll
PMffLw1+sRmxdRZBVtIpCsvNWG/4qg0wZMbrauEV69LKE4UB77j5OjK1O2HJ2KxH
fdjVe4SVjlIWw6ML0rvYbrpzAZO1LK0ZswH1YsS2hdcTsM7ESvYSlLNSek9OF+Jd
fyAbqWEOWUpM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org