Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32312d3234203d3e203532373538.roa
File:                     3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (raw, json)
Hash identifier:          Ya2TnTcCkYcRDpmNAuaUeHoLoub9fY3NMX2HWn45haI=
Subject key identifier:   75:16:EC:39:90:51:CE:E1:AD:47:4F:76:56:7C:81:6F:0E:87:D8:74
Certificate issuer:       /CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
Certificate serial:       1FFCB8DF9D4942D012A25E5D5246AD6263762F3E
Authority key identifier: FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32312d3234203d3e203532373538.roa
Signing time:             Thu 09 Nov 2023 21:20:18 +0000
ROA not before:           Thu 09 Nov 2023 21:15:18 +0000
ROA not after:            Thu 07 Nov 2024 21:20:18 +0000
asID:                     52758
IP address blocks:        177.38.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:b8:df:9d:49:42:d0:12:a2:5e:5d:52:46:ad:62:63:76:2f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD031F42D160524993AB5633101C0EA9B24C2A5
        Validity
            Not Before: Nov  9 21:15:18 2023 GMT
            Not After : Nov  7 21:20:18 2024 GMT
        Subject: CN=7516EC399051CEE1AD474F76567C816F0E87D874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:27:0d:2a:40:13:35:f0:c2:3b:4e:08:43:33:
                    9c:65:24:9b:71:ca:7b:96:1a:80:84:b7:cf:81:3e:
                    21:d3:a8:99:bd:9f:5e:59:24:14:30:54:01:1a:84:
                    b0:0f:24:1d:f0:cc:a5:ae:41:93:af:90:9e:f0:03:
                    51:02:14:50:31:43:08:28:ce:37:62:38:ad:2b:1f:
                    3f:fa:02:a2:fd:d6:67:7f:d3:aa:c4:02:8a:8b:b8:
                    dc:8f:0f:c1:1b:19:9a:bd:f0:13:c6:61:e3:41:c7:
                    3a:69:08:e4:a7:7e:9e:4b:af:b2:ad:76:0d:bc:29:
                    9e:dc:78:ce:2e:20:38:9f:24:87:00:4f:89:12:1e:
                    33:eb:53:ef:56:e6:7b:d0:16:77:30:c9:11:2f:0f:
                    43:59:c0:bf:b9:97:06:72:2c:27:aa:56:3f:79:0a:
                    38:45:93:ff:1a:fb:31:34:92:2e:29:06:f9:b6:6a:
                    fc:07:fc:09:c4:20:dd:a4:da:3c:18:ef:cd:04:43:
                    f2:3b:93:20:0b:cd:3d:e5:05:a0:31:e2:71:12:cc:
                    3a:91:15:a5:26:ac:15:62:7e:18:b6:ed:9b:96:0b:
                    be:28:81:c6:b1:18:5a:da:98:ab:b3:f5:a9:b8:df:
                    77:1d:7a:9b:b0:12:1f:aa:55:23:4e:58:4b:2f:bc:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:16:EC:39:90:51:CE:E1:AD:47:4F:76:56:7C:81:6F:0E:87:D8:74
            X509v3 Authority Key Identifier:
                keyid:FF:D0:31:F4:2D:16:05:24:99:3A:B5:63:31:01:C0:EA:9B:24:C2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD031F42D160524993AB5633101C0EA9B24C2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32312d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:ad:7e:f7:f0:28:4b:98:8e:db:22:82:83:a9:d4:b9:c4:66:
         7c:8e:c3:cd:d4:f2:44:4f:30:00:2b:91:1e:40:a3:3c:7b:4b:
         af:8a:1f:09:91:46:9e:2a:9d:6f:bd:74:dd:17:da:8b:29:99:
         bd:80:4d:f0:cf:ac:c6:d9:f2:8b:e6:ff:8f:4c:30:db:d7:55:
         5c:6a:60:09:e3:51:41:97:b5:ce:1d:3d:95:4f:db:67:20:01:
         1b:3a:74:dc:60:83:82:50:f9:49:ba:a6:c2:af:5e:29:65:4f:
         db:8f:97:2d:a7:4b:9d:05:fe:88:32:4c:29:6e:4c:72:1a:d0:
         d4:e7:dc:74:96:ba:0b:7d:a8:b5:fe:f5:29:f4:94:c5:5b:20:
         a0:6c:c1:f3:e0:be:a7:01:9b:63:ea:0a:76:a1:ca:99:46:11:
         55:9e:95:f8:e7:7d:54:1e:fc:1e:8a:73:c2:f4:2c:a9:fa:56:
         af:08:18:96:a1:c2:fd:eb:f3:19:b0:30:fa:22:52:45:70:96:
         fd:71:c7:ec:90:18:f7:48:18:17:cd:a6:16:fd:07:2b:1f:1a:
         c1:74:02:27:20:a8:43:7a:6f:38:9a:da:dd:1c:11:7b:ce:55:
         c9:f5:3d:2b:c6:bc:03:10:02:33:b0:e6:55:57:a6:ec:d6:d5:
         db:16:b8:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH/y4351JQtASol5dUkatYmN2Lz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEMDMxRjQyRDE2MDUyNDk5M0FCNTYzMzEwMUMwRUE5
QjI0QzJBNTAeFw0yMzExMDkyMTE1MThaFw0yNDExMDcyMTIwMThaMDMxMTAvBgNV
BAMTKDc1MTZFQzM5OTA1MUNFRTFBRDQ3NEY3NjU2N0M4MTZGMEU4N0Q4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJw0qQBM18MI7TghDM5xlJJtx
ynuWGoCEt8+BPiHTqJm9n15ZJBQwVAEahLAPJB3wzKWuQZOvkJ7wA1ECFFAxQwgo
zjdiOK0rHz/6AqL91md/06rEAoqLuNyPD8EbGZq98BPGYeNBxzppCOSnfp5Lr7Kt
dg28KZ7ceM4uIDifJIcAT4kSHjPrU+9W5nvQFncwyREvD0NZwL+5lwZyLCeqVj95
CjhFk/8a+zE0ki4pBvm2avwH/AnEIN2k2jwY780EQ/I7kyALzT3lBaAx4nESzDqR
FaUmrBVifhi27ZuWC74ogcaxGFramKuz9am433cdepuwEh+qVSNOWEsvvC+9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdRbsOZBRzuGtR092VnyBbw6H2HQwHwYDVR0j
BBgwFoAU/9Ax9C0WBSSZOrVjMQHA6pskwqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC9GRkQwMzFGNDJEMTYwNTI0OTkzQUI1NjMzMTAxQzBFQTlCMjRDMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGRDAzMUY0MkQxNjA1MjQ5
OTNBQjU2MzMxMDFDMEVBOUIyNEMyQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzEzNzM3MmUzMzM4MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsSa4MA0GCSqGSIb3DQEBCwUAA4IBAQAHrX738ChL
mI7bIoKDqdS5xGZ8jsPN1PJETzAAK5EeQKM8e0uvih8JkUaeKp1vvXTdF9qLKZm9
gE3wz6zG2fKL5v+PTDDb11VcamAJ41FBl7XOHT2VT9tnIAEbOnTcYIOCUPlJuqbC
r14pZU/bj5ctp0udBf6IMkwpbkxyGtDU59x0lroLfai1/vUp9JTFWyCgbMHz4L6n
AZtj6gp2ocqZRhFVnpX4531UHvweinPC9Cyp+lavCBiWocL96/MZsDD6IlJFcJb9
ccfskBj3SBgXzaYW/QcrHxrBdAInIKhDem84mtrdHBF7zlXJ9T0rxrwDEAIzsOZV
V6bs1tXbFrjT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org