Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3138342e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          ZAOh+I/ZJwDzw4Xz0j578gJTpUersveajxkEPr732xQ=
Subject key identifier:   B0:E6:26:29:17:F5:CC:4E:CA:D5:47:FE:C2:03:AC:05:CE:D4:B0:C3
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       6C9B1E7A75D9093132B5046D116ED3CD702FA3EF
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:17:59 +0000
ROA not before:           Tue 12 Mar 2024 18:12:59 +0000
ROA not after:            Tue 11 Mar 2025 18:17:59 +0000
asID:                     52758
IP address blocks:        177.38.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9b:1e:7a:75:d9:09:31:32:b5:04:6d:11:6e:d3:cd:70:2f:a3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:12:59 2024 GMT
            Not After : Mar 11 18:17:59 2025 GMT
        Subject: CN=B0E6262917F5CC4ECAD547FEC203AC05CED4B0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:61:82:aa:7d:03:80:37:a4:6d:5c:77:f2:
                    c9:e3:6f:be:51:b3:db:58:3b:4b:0a:e9:1f:63:6c:
                    66:fe:45:03:2b:f0:2c:ba:8b:4f:3c:08:af:39:d1:
                    c4:4b:35:f3:6e:cc:b6:5e:47:42:36:ce:e5:43:e1:
                    b4:fd:45:ef:ff:f8:db:54:fb:18:40:39:57:56:88:
                    57:2a:e8:0d:26:5d:89:4e:54:98:dc:97:8e:b7:64:
                    f9:b8:bd:72:ec:04:b2:f9:db:48:0e:78:ac:eb:94:
                    1c:e2:81:81:03:d9:76:90:8b:da:1c:38:87:62:bc:
                    32:08:e8:e3:55:34:60:c9:74:81:1a:38:7c:78:dd:
                    e1:9e:85:57:18:ed:c2:2f:48:14:b6:a8:23:d0:22:
                    33:47:21:95:15:6b:4e:53:63:8f:77:d6:ce:6b:78:
                    e8:60:0f:12:68:0d:a7:cd:65:18:3b:bf:50:b3:9f:
                    5e:2e:d5:f4:12:90:31:31:49:d8:b8:96:18:87:5e:
                    ac:7e:72:97:bb:26:26:96:e0:76:51:21:91:08:b2:
                    6b:f7:db:66:20:2d:ba:3f:96:e6:04:24:9f:a6:6b:
                    e7:5a:85:aa:6d:0a:9f:67:6f:19:23:ff:bf:95:ec:
                    06:4b:09:eb:b0:9f:7c:0e:fa:98:71:35:9f:cf:f9:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:26:29:17:F5:CC:4E:CA:D5:47:FE:C2:03:AC:05:CE:D4:B0:C3
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:2f:64:78:d7:df:eb:1d:d8:b6:b5:a5:5b:4b:b4:49:e2:
         07:af:8d:74:4f:45:0b:eb:99:48:a8:eb:28:e5:28:19:0d:00:
         dd:f7:62:86:32:01:59:5d:04:f9:8b:74:e5:6a:51:ca:e6:a6:
         c3:c2:1b:73:bc:7c:30:af:ef:0b:e3:bf:0b:34:99:ec:88:b9:
         c6:4e:8c:62:9d:33:4c:21:c0:24:96:f0:84:1d:cb:b6:fc:28:
         23:0b:da:05:9f:3b:1b:df:e3:1c:bc:bb:e4:e7:96:ab:a0:76:
         46:a4:9b:e9:ca:fe:d4:b4:09:85:2f:e5:a2:80:c4:85:6f:83:
         1d:cb:75:76:f6:f7:fe:9d:cb:97:be:47:dc:bd:c6:20:69:b6:
         c7:d7:50:b0:94:64:2e:05:08:70:dc:f3:9b:b0:79:25:9e:c3:
         1f:24:dc:53:ad:af:54:30:e0:16:0f:6a:ef:76:dc:47:7e:77:
         7b:41:f9:97:24:b7:d0:4e:ba:bc:b0:ae:2d:d8:86:7b:60:81:
         e9:cc:35:09:a1:48:46:bb:e6:e1:e0:4b:df:76:3b:7b:1e:7c:
         ec:e2:92:74:bf:ca:20:18:1d:91:d2:15:cb:e4:78:d1:fc:ea:
         8d:0b:25:04:e7:74:fa:71:6d:00:bc:11:95:96:38:3e:6e:42:
         fc:ad:5a:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbJseenXZCTEytQRtEW7TzXAvo+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEyNTlaFw0yNTAzMTExODE3NTlaMDMxMTAvBgNV
BAMTKEIwRTYyNjI5MTdGNUNDNEVDQUQ1NDdGRUMyMDNBQzA1Q0VENEIwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FGGCqn0DgDekbVx38snjb75R
s9tYO0sK6R9jbGb+RQMr8Cy6i088CK850cRLNfNuzLZeR0I2zuVD4bT9Re//+NtU
+xhAOVdWiFcq6A0mXYlOVJjcl463ZPm4vXLsBLL520gOeKzrlBzigYED2XaQi9oc
OIdivDII6ONVNGDJdIEaOHx43eGehVcY7cIvSBS2qCPQIjNHIZUVa05TY4931s5r
eOhgDxJoDafNZRg7v1Czn14u1fQSkDExSdi4lhiHXqx+cpe7JiaW4HZRIZEIsmv3
22YgLbo/luYEJJ+ma+dahaptCp9nbxkj/7+V7AZLCeuwn3wO+phxNZ/P+d9HAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsOYmKRf1zE7K1Uf+wgOsBc7UsMMwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzEzNzM3MmUzMzM4MmUzMTM4MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSa4MA0GCSqGSIb3DQEBCwUAA4IBAQCj1i9keNff
6x3YtrWlW0u0SeIHr410T0UL65lIqOso5SgZDQDd92KGMgFZXQT5i3TlalHK5qbD
whtzvHwwr+8L478LNJnsiLnGToxinTNMIcAklvCEHcu2/CgjC9oFnzsb3+McvLvk
55aroHZGpJvpyv7UtAmFL+WigMSFb4Mdy3V29vf+ncuXvkfcvcYgabbH11CwlGQu
BQhw3PObsHklnsMfJNxTra9UMOAWD2rvdtxHfnd7QfmXJLfQTrq8sK4t2IZ7YIHp
zDUJoUhGu+bh4Evfdjt7Hnzs4pJ0v8ogGB2R0hXL5HjR/OqNCyUE53T6cW0AvBGV
ljg+bkL8rVp4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org