Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa
File:                     3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa (raw, json)
Hash identifier:          xXmy7mDqmsNM0asOPw2zhX8WKmOvVKVThdYePfdhs/c=
Subject key identifier:   72:8C:3E:91:41:1A:89:06:2D:D4:46:DD:70:15:2C:85:69:9D:22:DD
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       0D68D506B6D6E235F46A662C7D4F3AEE0AFC46F2
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa
Signing time:             Wed 03 Jan 2024 17:01:15 +0000
ROA not before:           Wed 03 Jan 2024 16:56:15 +0000
ROA not after:            Wed 01 Jan 2025 17:01:15 +0000
asID:                     265896
IP address blocks:        128.201.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:68:d5:06:b6:d6:e2:35:f4:6a:66:2c:7d:4f:3a:ee:0a:fc:46:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Jan  3 16:56:15 2024 GMT
            Not After : Jan  1 17:01:15 2025 GMT
        Subject: CN=728C3E91411A89062DD446DD70152C85699D22DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:3c:d1:d0:19:66:5c:8d:b4:b0:ea:2e:03:
                    8c:83:ce:d6:3f:66:2d:4b:3e:1f:10:13:7f:51:b9:
                    67:81:27:18:3b:82:19:51:4e:7e:2b:a1:f7:68:e1:
                    18:5b:0a:fe:08:87:c3:2e:6d:01:5b:16:a8:cb:74:
                    78:4f:ac:50:03:d0:7c:50:ca:ee:c6:8a:5d:97:44:
                    de:46:c2:2e:fb:d3:80:a3:36:60:23:ef:c8:3f:29:
                    fa:b2:ac:59:42:3d:b9:9c:c6:50:23:99:fd:60:1d:
                    5c:ca:34:fc:16:78:06:78:c7:a5:0a:da:68:ba:7c:
                    89:c7:48:4b:5f:dc:bd:ba:db:08:dd:93:29:52:c3:
                    ce:69:67:2b:16:a2:5e:d7:17:a9:a6:ee:4e:3d:33:
                    13:94:04:c0:49:07:39:9f:42:23:92:d8:49:31:0a:
                    66:cb:30:e3:3b:9f:d0:90:0f:ef:c3:ba:e4:a7:32:
                    fe:93:77:76:a6:db:29:13:2d:85:6b:25:2f:38:af:
                    8d:83:91:52:6a:65:3e:12:23:7d:ef:60:4e:f3:7c:
                    dc:3a:ab:49:9e:68:0b:7b:f8:65:87:10:52:d6:96:
                    43:15:b8:a2:b0:39:17:51:84:2a:e1:53:3b:64:ce:
                    fd:7c:60:89:c8:40:71:24:5e:1d:c9:7b:3b:1b:ee:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:3E:91:41:1A:89:06:2D:D4:46:DD:70:15:2C:85:69:9D:22:DD
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3139312e302f32342d3234203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:ab:62:87:ab:f6:4b:7e:e4:53:a8:02:2f:69:dc:de:cf:
         37:7d:f5:d0:1e:63:12:40:db:17:ab:99:54:d4:70:a5:fd:82:
         1f:e9:df:12:c2:b0:cb:92:d4:f5:cd:7b:e6:42:69:30:1d:5e:
         d4:34:e6:59:be:68:4a:a1:65:38:90:8e:41:da:e8:9c:fb:79:
         ab:93:47:93:cf:77:10:2a:93:50:9a:82:41:a5:1a:22:80:d9:
         07:90:d8:50:6f:05:d7:e4:44:86:e7:32:0a:3c:e5:97:3b:a3:
         42:67:1d:75:a4:ae:fd:9f:22:a7:a7:26:bd:1a:12:4b:ba:cc:
         86:4f:15:df:b3:24:41:a9:f7:c6:d6:ca:d3:95:90:7f:b7:51:
         ad:61:b4:71:71:1d:6d:7e:6b:01:e9:21:cf:9c:67:ef:57:b8:
         57:14:ff:5a:59:94:b7:4f:09:94:a0:91:38:b5:d1:7b:70:2b:
         f9:82:37:e1:59:47:07:93:94:7f:d9:1b:fa:43:58:62:82:be:
         ae:eb:28:fb:66:5e:ea:d4:5f:69:90:b7:bd:d1:e0:c1:10:c8:
         ef:ed:ab:4a:03:ba:fb:2a:57:68:fb:96:20:ed:a7:bc:d1:94:
         a5:02:07:9b:b5:e6:ae:c3:12:3a:45:6b:ec:5d:9c:ba:33:c2:
         56:79:91:6c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDWjVBrbW4jX0amYsfU867gr8RvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdDNEE1REE0REQwODVCRDc5RkNBQTEwMUM1RDhFNTcz
RkM5RjU4NDAeFw0yNDAxMDMxNjU2MTVaFw0yNTAxMDExNzAxMTVaMDMxMTAvBgNV
BAMTKDcyOEMzRTkxNDExQTg5MDYyREQ0NDZERDcwMTUyQzg1Njk5RDIyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+jzR0BlmXI20sOouA4yDztY/
Zi1LPh8QE39RuWeBJxg7ghlRTn4rofdo4RhbCv4Ih8MubQFbFqjLdHhPrFAD0HxQ
yu7Gil2XRN5Gwi7704CjNmAj78g/KfqyrFlCPbmcxlAjmf1gHVzKNPwWeAZ4x6UK
2mi6fInHSEtf3L262wjdkylSw85pZysWol7XF6mm7k49MxOUBMBJBzmfQiOS2Ekx
CmbLMOM7n9CQD+/DuuSnMv6Td3am2ykTLYVrJS84r42DkVJqZT4SI33vYE7zfNw6
q0meaAt7+GWHEFLWlkMVuKKwORdRhCrhUztkzv18YInIQHEkXh3Jezsb7r6PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcow+kUEaiQYt1EbdcBUshWmdIt0wHwYDVR0j
BBgwFoAUd8Sl2k3Qhb15/KoQHF2OVz/J9YQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR2dnNjanYxak1VTHNRWUNhcjNLVzVDcXJVcjNCZ3Zidkx5Zmg1WlY5
ckYvMC83N0M0QTVEQTRERDA4NUJENzlGQ0FBMTAxQzVEOEU1NzNGQzlGNTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QzRBNURBNEREMDg1QkQ3
OUZDQUExMDFDNUQ4RTU3M0ZDOUY1ODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0dnZzY2p2MWpNVUxzUVlDYXIzS1c1Q3FyVXIzQmd2YnZMeWZoNVpWOXJGLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM4MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJvzANBgkqhkiG9w0BAQsFAAOCAQEAPz6r
Yoer9kt+5FOoAi9p3N7PN3310B5jEkDbF6uZVNRwpf2CH+nfEsKwy5LU9c175kJp
MB1e1DTmWb5oSqFlOJCOQdronPt5q5NHk893ECqTUJqCQaUaIoDZB5DYUG8F1+RE
hucyCjzllzujQmcddaSu/Z8ip6cmvRoSS7rMhk8V37MkQan3xtbK05WQf7dRrWG0
cXEdbX5rAekhz5xn71e4VxT/WlmUt08JlKCROLXRe3Ar+YI34VlHB5OUf9kb+kNY
YoK+ruso+2Ze6tRfaZC3vdHgwRDI7+2rSgO6+ypXaPuWIO2nvNGUpQIHm7XmrsMS
OkVr7F2cujPCVnmRbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org