Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33332e302f32342d3234203d3e20323635303836.roa
File:                     3137302e3233332e33332e302f32342d3234203d3e20323635303836.roa (raw, json)
Hash identifier:          bh5HNMVkWuVg3LhAMPMvCWUblo+mZ5kmouyucFCoG+I=
Subject key identifier:   15:B8:65:7D:F9:3E:32:26:02:F4:6C:B1:12:93:12:A3:3E:A7:B3:87
Certificate issuer:       /CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Certificate serial:       15B5B58D9429F6C13A944CF7CA59E0B6FBF735B7
Authority key identifier: 89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33332e302f32342d3234203d3e20323635303836.roa
Signing time:             Mon 18 Dec 2023 14:32:41 +0000
ROA not before:           Mon 18 Dec 2023 14:27:41 +0000
ROA not after:            Mon 16 Dec 2024 14:32:41 +0000
asID:                     265086
IP address blocks:        170.233.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b5:b5:8d:94:29:f6:c1:3a:94:4c:f7:ca:59:e0:b6:fb:f7:35:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
        Validity
            Not Before: Dec 18 14:27:41 2023 GMT
            Not After : Dec 16 14:32:41 2024 GMT
        Subject: CN=15B8657DF93E322602F46CB1129312A33EA7B387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:9c:bc:c3:56:fd:e8:31:92:26:63:0f:a0:
                    92:e5:12:4a:c4:79:ab:ab:eb:19:98:22:15:6f:6b:
                    2e:11:6e:68:73:cb:1f:d5:ba:4c:3f:23:c6:31:89:
                    7b:b8:09:cc:9f:9d:69:fb:d5:f8:d3:f7:c0:ee:19:
                    b4:04:9a:bc:1d:8e:cb:59:16:08:9b:b9:e8:a5:8a:
                    36:54:20:5c:e5:14:ec:2f:8f:86:b0:93:16:4e:7e:
                    56:86:ee:9b:ff:b6:fb:5d:d9:cf:65:9b:a0:10:af:
                    d6:40:8c:a0:82:2a:7f:16:ef:f0:b7:c6:b9:12:8f:
                    59:0f:43:ed:1e:8e:85:6a:36:f5:90:e1:53:d6:32:
                    9a:f8:83:66:be:96:ef:00:37:07:f9:8d:a4:1e:d7:
                    52:9b:de:98:e0:72:9f:c9:03:ed:fb:1f:4f:f2:a7:
                    a5:8e:9b:28:8b:36:93:1e:6d:2f:ed:25:fc:8d:3a:
                    6d:6f:75:d8:49:28:a2:00:67:35:2e:cc:e1:93:69:
                    bb:5d:c0:84:af:53:12:23:d3:51:23:41:f8:92:33:
                    49:55:43:e2:11:6f:37:f3:85:50:86:66:b2:c2:10:
                    cf:07:ba:d7:fc:0b:a9:12:46:a3:28:ca:2e:01:a6:
                    4a:0c:be:46:3f:1a:6c:5b:f0:f1:70:6c:c6:0b:12:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:65:7D:F9:3E:32:26:02:F4:6C:B1:12:93:12:A3:3E:A7:B3:87
            X509v3 Authority Key Identifier:
                keyid:89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33332e302f32342d3234203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:91:81:c8:b9:c2:eb:36:b3:a9:f9:b1:61:a6:0c:a2:01:
         2e:91:c1:08:f3:c1:8a:18:48:20:75:f2:e3:2c:2f:91:1d:94:
         28:7a:65:a1:ba:ae:0d:a3:6e:ca:0b:0d:44:25:19:62:40:d5:
         5c:b4:7e:bb:49:78:35:68:09:5b:79:3f:3e:6f:47:56:d7:69:
         12:ea:4c:67:42:3a:9d:80:a4:4e:0a:06:db:82:e1:30:65:f6:
         6f:47:a7:ee:6e:2b:7f:c9:2b:f4:ca:e2:18:71:72:ba:79:7e:
         af:34:20:81:79:cd:5e:93:ec:7a:20:68:cb:cf:12:6a:08:f4:
         73:6f:66:2d:7c:9e:9b:9d:58:3b:58:b6:b5:7b:59:ff:f3:f8:
         68:30:ac:5b:96:eb:b7:eb:1d:e1:8f:26:4c:69:0e:94:ad:a7:
         48:b3:05:14:cb:d5:5d:e5:fc:1b:a6:d1:3e:56:67:83:77:4f:
         4f:6d:e2:0d:a5:4a:b5:fb:79:7d:05:c4:7b:cc:95:32:e0:19:
         5f:76:bb:ca:31:ab:af:b8:af:af:4b:e6:bb:57:5b:71:e1:75:
         0c:c7:14:ac:ed:e9:83:1e:92:ad:d4:22:1e:17:4d:cf:de:e9:
         4b:74:ec:75:50:d6:e8:d9:a3:44:f3:0d:59:31:aa:a3:d6:17:
         71:76:f3:41
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFbW1jZQp9sE6lEz3ylngtvv3NbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2MzY2RDU3NkFBNTcwQzlGQkQzQkU4N0I2MzAwQ0JE
RjU3MzRBOTAeFw0yMzEyMTgxNDI3NDFaFw0yNDEyMTYxNDMyNDFaMDMxMTAvBgNV
BAMTKDE1Qjg2NTdERjkzRTMyMjYwMkY0NkNCMTEyOTMxMkEzM0VBN0IzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0py8w1b96DGSJmMPoJLlEkrE
eaur6xmYIhVvay4Rbmhzyx/Vukw/I8YxiXu4CcyfnWn71fjT98DuGbQEmrwdjstZ
FgibueilijZUIFzlFOwvj4awkxZOflaG7pv/tvtd2c9lm6AQr9ZAjKCCKn8W7/C3
xrkSj1kPQ+0ejoVqNvWQ4VPWMpr4g2a+lu8ANwf5jaQe11Kb3pjgcp/JA+37H0/y
p6WOmyiLNpMebS/tJfyNOm1vddhJKKIAZzUuzOGTabtdwISvUxIj01EjQfiSM0lV
Q+IRbzfzhVCGZrLCEM8Hutf8C6kSRqMoyi4BpkoMvkY/Gmxb8PFwbMYLEpP/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFbhlffk+MiYC9GyxEpMSoz6ns4cwHwYDVR0j
BBgwFoAUiWNm1XaqVwyfvTvoe2MAy99XNKkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HZ2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJE
LzAvODk2MzY2RDU3NkFBNTcwQzlGQkQzQkU4N0I2MzAwQ0JERjU3MzRBOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84OTYzNjZENTc2QUE1NzBDOUZC
RDNCRTg3QjYzMDBDQkRGNTczNEE5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9H
Z2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJELzAvMzEz
NzMwMmUzMjMzMzMyZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUz
MDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACq6SEwDQYJKoZIhvcNAQELBQADggEBALs/kYHIucLr
NrOp+bFhpgyiAS6RwQjzwYoYSCB18uMsL5EdlCh6ZaG6rg2jbsoLDUQlGWJA1Vy0
frtJeDVoCVt5Pz5vR1bXaRLqTGdCOp2ApE4KBtuC4TBl9m9Hp+5uK3/JK/TK4hhx
crp5fq80IIF5zV6T7HogaMvPEmoI9HNvZi18npudWDtYtrV7Wf/z+GgwrFuW67fr
HeGPJkxpDpStp0izBRTL1V3l/Bum0T5WZ4N3T09t4g2lSrX7eX0FxHvMlTLgGV92
u8oxq6+4r69L5rtXW3HhdQzHFKzt6YMekq3UIh4XTc/e6Ut07HVQ1ujZo0TzDVkx
qqPWF3F280E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org