Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa
File:                     3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa (raw, json)
Hash identifier:          fE9RFY2zxxSm30fY62hXsOIDnSfX2N1OWBjuBlyw2do=
Subject key identifier:   89:58:96:2A:31:D0:5C:F7:DD:AA:98:E4:5C:87:CB:45:B3:6B:0E:6B
Certificate issuer:       /CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
Certificate serial:       28223D273023168DDEEEA86548E8B1DB8196FD14
Authority key identifier: B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa
Signing time:             Wed 29 Nov 2023 11:20:05 +0000
ROA not before:           Wed 29 Nov 2023 11:15:05 +0000
ROA not after:            Wed 27 Nov 2024 11:20:05 +0000
asID:                     267448
IP address blocks:        192.141.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:22:3d:27:30:23:16:8d:de:ee:a8:65:48:e8:b1:db:81:96:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
        Validity
            Not Before: Nov 29 11:15:05 2023 GMT
            Not After : Nov 27 11:20:05 2024 GMT
        Subject: CN=8958962A31D05CF7DDAA98E45C87CB45B36B0E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:f0:b2:6f:eb:b7:ab:c8:bc:cb:70:0a:75:
                    97:0f:cd:8b:ed:e9:12:53:83:5c:36:72:2f:55:cf:
                    ef:ca:4c:8b:13:a7:c4:3d:ff:42:1a:03:55:5c:f5:
                    30:17:e8:cf:49:bc:32:65:e9:8e:10:1e:e2:5e:2e:
                    dc:00:c4:13:15:4e:7d:1e:b2:ff:09:07:e2:0e:ea:
                    03:9e:22:c3:38:0d:7e:ce:08:ff:ed:b7:b3:e6:9d:
                    fa:dd:4c:36:90:fb:44:3e:42:6c:cd:50:1d:80:4e:
                    e8:9f:c4:93:55:2d:96:12:58:c5:fa:5f:87:f6:fb:
                    67:03:43:36:c4:82:c2:0b:f0:66:75:94:46:af:d2:
                    75:c4:ff:f1:44:04:6b:78:6f:bc:15:2e:a2:0f:cf:
                    a9:dc:29:d3:db:6e:60:9f:5e:89:78:a9:28:69:20:
                    ea:91:b7:9c:0c:22:af:e2:12:c8:a1:b7:9d:77:32:
                    be:46:81:b6:de:db:b5:d9:9b:b0:d7:82:24:8e:1a:
                    40:8a:6f:c1:d7:a0:e4:b9:1b:a2:e9:d9:8b:b6:74:
                    f9:99:47:ab:17:10:e1:18:b1:f7:5c:66:be:5b:34:
                    89:09:9d:3b:6d:07:08:7c:2a:bd:80:91:e2:ef:31:
                    79:57:c4:1c:e6:27:22:57:99:cc:34:84:cc:20:3b:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:58:96:2A:31:D0:5C:F7:DD:AA:98:E4:5C:87:CB:45:B3:6B:0E:6B
            X509v3 Authority Key Identifier:
                keyid:B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:47:e1:13:7b:b8:25:4d:fb:15:84:ae:e9:e1:63:d3:f7:84:
         bf:ba:ec:68:69:a4:68:e9:cb:49:8e:82:6f:50:0f:57:92:ad:
         b7:d6:80:a1:07:63:80:b4:ea:c0:1f:44:ec:87:4d:80:6b:27:
         fe:82:6d:79:f2:82:8d:e3:8c:16:a0:52:ac:ba:0e:88:52:aa:
         53:f1:9f:3d:09:ec:4f:74:93:62:9e:15:4b:dc:fd:70:c4:3e:
         46:eb:d9:14:93:e8:b0:ba:83:48:46:67:85:09:75:6a:62:fb:
         2b:69:b9:f1:1c:3f:f5:54:a5:7f:76:b0:96:90:b0:63:cc:c4:
         d3:ad:a2:54:12:1c:28:ef:9c:02:9f:5d:5e:71:f1:9f:62:5b:
         3b:36:52:4c:70:5f:4b:1c:4e:f4:92:90:e2:bc:db:86:91:a8:
         be:03:37:ed:60:e9:94:27:2b:6f:7d:24:94:2b:4d:de:70:c3:
         d4:33:20:a7:08:33:0d:ce:dd:09:c7:71:96:8b:05:93:c4:83:
         cc:2c:2a:ff:1e:f0:bd:7a:66:36:a6:13:cd:f6:b4:2d:52:07:
         6b:59:5b:b3:39:36:f7:d9:44:dd:e0:40:af:13:66:f1:75:eb:
         6e:80:de:e0:9c:51:91:3a:93:b6:ee:10:b6:ae:b8:b7:99:cc:
         a9:9a:bc:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKCI9JzAjFo3e7qhlSOix24GW/RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE3RDhEQTQ1OTlCNUZENTkyREU0NEI2QUI5NDI3MTEw
RjFGRTBCMjAeFw0yMzExMjkxMTE1MDVaFw0yNDExMjcxMTIwMDVaMDMxMTAvBgNV
BAMTKDg5NTg5NjJBMzFEMDVDRjdEREFBOThFNDVDODdDQjQ1QjM2QjBFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtA/Cyb+u3q8i8y3AKdZcPzYvt
6RJTg1w2ci9Vz+/KTIsTp8Q9/0IaA1Vc9TAX6M9JvDJl6Y4QHuJeLtwAxBMVTn0e
sv8JB+IO6gOeIsM4DX7OCP/tt7PmnfrdTDaQ+0Q+QmzNUB2ATuifxJNVLZYSWMX6
X4f2+2cDQzbEgsIL8GZ1lEav0nXE//FEBGt4b7wVLqIPz6ncKdPbbmCfXol4qShp
IOqRt5wMIq/iEsiht513Mr5Ggbbe27XZm7DXgiSOGkCKb8HXoOS5G6Lp2Yu2dPmZ
R6sXEOEYsfdcZr5bNIkJnTttBwh8Kr2AkeLvMXlXxBzmJyJXmcw0hMwgO/XXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiViWKjHQXPfdqpjkXIfLRbNrDmswHwYDVR0j
BBgwFoAUsX2NpFmbX9WS3kS2q5QnEQ8f4LIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFvNzhYM1A0VWJtajdjZlBRV1JMYnRUQWJLN0RHdGNCVjlnQUNIRTJr
Y0ovMC9CMTdEOERBNDU5OUI1RkQ1OTJERTQ0QjZBQjk0MjcxMTBGMUZFMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxN0Q4REE0NTk5QjVGRDU5
MkRFNDRCNkFCOTQyNzExMEYxRkUwQjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zxbzc4WDNQNFVibWo3Y2ZQUVdSTGJ0VEFiSzdER3RjQlY5Z0FDSEUya2NKLzAv
MzEzOTMyMmUzMTM0MzEyZTM2MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHAjTwwDQYJKoZIhvcNAQELBQADggEBAClH4RN7
uCVN+xWErunhY9P3hL+67GhppGjpy0mOgm9QD1eSrbfWgKEHY4C06sAfROyHTYBr
J/6CbXnygo3jjBagUqy6DohSqlPxnz0J7E90k2KeFUvc/XDEPkbr2RST6LC6g0hG
Z4UJdWpi+ytpufEcP/VUpX92sJaQsGPMxNOtolQSHCjvnAKfXV5x8Z9iWzs2Ukxw
X0scTvSSkOK824aRqL4DN+1g6ZQnK299JJQrTd5ww9QzIKcIMw3O3QnHcZaLBZPE
g8wsKv8e8L16ZjamE832tC1SB2tZW7M5NvfZRN3gQK8TZvF1626A3uCcUZE6k7bu
ELauuLeZzKmavJQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org