Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134352e302f32342d3234203d3e20323632343638.roa
File:                     3137372e35332e3134352e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          cP9BM6IL9tghWq0YMPK3GHIEP9oKzI9WlyZ8Dj6Xa9w=
Subject key identifier:   3B:68:DB:20:9E:43:8D:DC:59:2E:C4:F4:6A:44:A8:BD:1D:6E:46:8A
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       7A33910A91BD4FAACF67A885D3215ABCB11DCF76
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134352e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:49 +0000
ROA not before:           Tue 20 Dec 2022 15:04:49 +0000
ROA not after:            Tue 19 Dec 2023 15:09:49 +0000
asID:                     262468
IP address blocks:        177.53.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:33:91:0a:91:bd:4f:aa:cf:67:a8:85:d3:21:5a:bc:b1:1d:cf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:49 2022 GMT
            Not After : Dec 19 15:09:49 2023 GMT
        Subject: CN=3B68DB209E438DDC592EC4F46A44A8BD1D6E468A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:4e:ef:7d:90:1a:3a:ef:4a:ea:73:c4:dd:
                    26:85:5b:d5:a4:be:f9:56:15:eb:9e:bd:be:7e:43:
                    4d:ce:5d:43:08:a6:05:9d:ef:51:eb:08:9e:a7:58:
                    be:49:41:47:22:7f:16:41:98:f8:48:71:da:8f:15:
                    03:2d:34:9e:4f:e0:59:92:a6:e0:ea:9c:93:af:78:
                    a5:fa:95:c7:db:42:8a:19:83:b5:17:b9:5c:19:15:
                    e3:66:86:b7:8e:54:78:b4:1b:8d:1a:19:5e:10:4d:
                    37:ca:c1:d7:d4:94:1d:06:e8:13:ae:d4:01:87:7d:
                    ea:86:db:44:f7:2f:d3:74:53:68:db:48:02:5d:da:
                    44:69:f9:d8:1e:0c:a0:d3:81:02:e3:c6:9e:18:1e:
                    44:d4:d6:20:65:fb:db:55:ac:06:0c:c6:a1:fd:11:
                    06:56:1d:53:28:71:d6:dc:f0:65:4b:c6:75:c5:31:
                    f5:c9:10:ac:a6:14:20:40:ad:f7:df:40:a7:26:6b:
                    1c:f7:ca:8e:f0:28:71:87:8e:8c:8d:5a:62:80:cd:
                    33:0a:63:39:57:0b:ea:23:05:e6:d9:d2:ab:09:3c:
                    8c:47:25:d9:4f:70:52:00:f9:16:1e:bb:7c:08:d0:
                    43:40:d4:f6:65:0b:c6:4c:3d:63:67:a6:e3:68:3a:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:DB:20:9E:43:8D:DC:59:2E:C4:F4:6A:44:A8:BD:1D:6E:46:8A
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134352e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:29:f6:a5:d8:83:28:e4:10:59:5d:e6:a2:a3:14:56:e5:
         a2:45:ff:b0:32:05:15:48:2c:51:c6:02:ae:05:68:ca:21:73:
         f3:3f:6f:b0:f0:7e:9e:11:74:da:7c:2b:8c:f5:70:be:43:61:
         5d:97:e4:f4:1d:8c:51:d9:d5:09:83:d7:e2:87:ff:64:79:a2:
         ff:a0:14:56:db:41:ac:44:72:73:6c:d6:d6:7f:47:9c:2b:24:
         f3:1a:92:ab:17:57:c4:2b:54:e0:6f:11:4a:b9:b1:e3:d4:db:
         d2:30:6a:ca:1e:b2:db:2c:f1:a4:17:7e:5b:10:d3:32:32:48:
         07:d1:46:a2:e2:c6:9e:56:33:05:de:22:12:e0:ce:5d:2f:71:
         50:2e:c2:4e:d1:6e:b6:e1:27:5a:eb:ac:02:14:1a:64:e1:d8:
         dc:a9:8b:fc:e4:fb:12:a6:f8:bd:7d:9d:40:44:4a:08:ed:b2:
         0e:a7:6d:bf:d6:fc:f4:08:3a:ca:b9:29:00:47:60:9f:32:76:
         a3:a6:07:23:fc:de:b8:51:da:48:5c:ca:55:cb:08:a1:6d:12:
         8f:fb:02:84:ad:ad:78:a3:ad:8c:7e:3e:dd:d6:47:0d:b3:5a:
         f9:7a:0a:bf:ec:eb:df:59:ce:f2:60:96:b7:ea:b4:62:60:43:
         a0:f3:c3:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUejORCpG9T6rPZ6iF0yFavLEdz3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDlaFw0yMzEyMTkxNTA5NDlaMDMxMTAvBgNV
BAMTKDNCNjhEQjIwOUU0MzhEREM1OTJFQzRGNDZBNDRBOEJEMUQ2RTQ2OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsk7vfZAaOu9K6nPE3SaFW9Wk
vvlWFeuevb5+Q03OXUMIpgWd71HrCJ6nWL5JQUcifxZBmPhIcdqPFQMtNJ5P4FmS
puDqnJOveKX6lcfbQooZg7UXuVwZFeNmhreOVHi0G40aGV4QTTfKwdfUlB0G6BOu
1AGHfeqG20T3L9N0U2jbSAJd2kRp+dgeDKDTgQLjxp4YHkTU1iBl+9tVrAYMxqH9
EQZWHVMocdbc8GVLxnXFMfXJEKymFCBArfffQKcmaxz3yo7wKHGHjoyNWmKAzTMK
YzlXC+ojBebZ0qsJPIxHJdlPcFIA+RYeu3wI0ENA1PZlC8ZMPWNnpuNoOrHDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO2jbIJ5DjdxZLsT0akSovR1uRoowHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzEzNzM3MmUzNTMzMmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxNZEwDQYJKoZIhvcNAQELBQADggEBABCiKfal
2IMo5BBZXeaioxRW5aJF/7AyBRVILFHGAq4FaMohc/M/b7Dwfp4RdNp8K4z1cL5D
YV2X5PQdjFHZ1QmD1+KH/2R5ov+gFFbbQaxEcnNs1tZ/R5wrJPMakqsXV8QrVOBv
EUq5sePU29Iwasoestss8aQXflsQ0zIySAfRRqLixp5WMwXeIhLgzl0vcVAuwk7R
brbhJ1rrrAIUGmTh2Nypi/zk+xKm+L19nUBESgjtsg6nbb/W/PQIOsq5KQBHYJ8y
dqOmByP83rhR2khcylXLCKFtEo/7AoStrXijrYx+Pt3WRw2zWvl6Cr/s699ZzvJg
lrfqtGJgQ6Dzw2s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org