Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3139302e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          U8khVwoO/ODduo+mERrn/WTa95G0RaqetOcn1QmzEaY=
Subject key identifier:   85:12:DC:D2:B6:E8:A7:FB:66:3A:E8:A6:D5:05:C7:A5:CD:CA:73:6E
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       66420C0411CFA09BBC47C1A48C9C091AF2AD268C
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:27 +0000
ROA not before:           Tue 12 Mar 2024 18:13:27 +0000
ROA not after:            Tue 11 Mar 2025 18:18:27 +0000
asID:                     52758
IP address blocks:        177.38.190.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:42:0c:04:11:cf:a0:9b:bc:47:c1:a4:8c:9c:09:1a:f2:ad:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:27 2024 GMT
            Not After : Mar 11 18:18:27 2025 GMT
        Subject: CN=8512DCD2B6E8A7FB663AE8A6D505C7A5CDCA736E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:c5:36:0c:d8:1d:4c:f6:ee:e5:a6:13:2e:
                    f1:94:6b:08:70:49:f7:db:31:52:fb:88:6d:cc:e4:
                    57:0e:d2:14:8a:1d:e6:f8:26:ce:66:2b:be:8c:8c:
                    14:93:0f:a0:ed:e4:d6:b0:ad:f4:7f:57:9b:66:95:
                    1e:b6:64:3d:7d:e3:c6:28:e2:b0:74:f1:84:f8:8f:
                    79:ac:4a:2e:bf:f6:03:ec:3f:82:9e:a5:26:c9:7f:
                    36:e6:04:4f:64:39:37:82:b0:10:87:67:84:ac:bb:
                    d2:80:e3:ad:76:51:f9:71:d1:f9:d6:eb:fe:ed:6e:
                    6e:ee:52:09:f8:89:64:05:93:fe:11:c9:0b:1f:9b:
                    b4:a2:70:e7:97:44:eb:8a:1e:bc:c2:a5:83:68:5d:
                    48:c5:48:0e:1c:c6:4a:86:f4:5c:f8:93:90:ee:fc:
                    11:49:17:12:a5:84:cf:8c:27:b9:be:61:b0:34:53:
                    6a:6c:73:2e:26:7e:86:c1:f3:71:f4:27:9f:df:3d:
                    e6:6e:10:04:37:63:42:c0:01:9f:92:f6:4f:e2:ed:
                    0d:c9:ba:7f:77:59:bf:ab:c8:ec:16:a2:67:cf:c6:
                    90:de:56:6a:40:ff:7a:a4:b2:43:75:82:c5:85:c0:
                    05:84:a9:4c:94:25:bc:83:88:b5:09:c8:bb:4d:18:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:DC:D2:B6:E8:A7:FB:66:3A:E8:A6:D5:05:C7:A5:CD:CA:73:6E
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:1c:9c:30:da:28:7d:53:22:51:68:f1:dd:e7:ac:e8:58:
         7d:88:f5:cd:29:34:6b:a8:92:85:6d:71:7e:d9:8d:a9:e1:09:
         e7:28:55:c6:8b:97:1f:f5:f9:e5:5c:04:1e:de:6e:30:25:31:
         0a:6d:95:05:54:c4:d4:1f:af:1b:62:46:dd:37:34:51:79:95:
         2a:63:21:ab:34:2e:f3:81:c3:fe:30:87:38:b4:bc:7d:7b:03:
         5f:36:5e:92:05:13:4e:cb:67:da:43:c8:04:53:25:fe:fc:57:
         c2:9b:96:b3:2e:f3:8a:f8:af:28:92:5d:b6:78:04:0e:30:99:
         5a:fd:6a:5e:47:67:28:d8:ab:76:7e:df:15:2c:b0:71:b8:36:
         de:b5:ee:f7:c9:80:8c:88:72:54:99:9d:00:2f:dc:7d:13:5f:
         45:26:81:90:21:1c:e6:b6:52:b5:b8:0f:1d:b0:92:2b:c4:3d:
         3e:30:b5:58:15:01:64:ef:98:91:18:ca:ae:e1:71:48:f0:67:
         1b:c3:a5:66:f9:d3:a5:c8:c3:22:3f:9e:0f:c9:5d:40:a6:f3:
         ea:20:0c:71:5e:ba:45:cd:4e:59:76:32:76:ad:47:c9:4b:13:
         6b:76:bf:ae:60:cd:d8:ec:0a:ff:ba:c8:2f:35:40:45:85:b9:
         87:d1:5f:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZkIMBBHPoJu8R8GkjJwJGvKtJowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEzMjdaFw0yNTAzMTExODE4MjdaMDMxMTAvBgNV
BAMTKDg1MTJEQ0QyQjZFOEE3RkI2NjNBRThBNkQ1MDVDN0E1Q0RDQTczNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb48U2DNgdTPbu5aYTLvGUawhw
SffbMVL7iG3M5FcO0hSKHeb4Js5mK76MjBSTD6Dt5NawrfR/V5tmlR62ZD1948Yo
4rB08YT4j3msSi6/9gPsP4KepSbJfzbmBE9kOTeCsBCHZ4Ssu9KA4612Uflx0fnW
6/7tbm7uUgn4iWQFk/4RyQsfm7SicOeXROuKHrzCpYNoXUjFSA4cxkqG9Fz4k5Du
/BFJFxKlhM+MJ7m+YbA0U2pscy4mfobB83H0J5/fPeZuEAQ3Y0LAAZ+S9k/i7Q3J
un93Wb+ryOwWomfPxpDeVmpA/3qkskN1gsWFwAWEqUyUJbyDiLUJyLtNGNPpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhRLc0rbop/tmOuim1QXHpc3Kc24wHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzEzNzM3MmUzMzM4MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSa+MA0GCSqGSIb3DQEBCwUAA4IBAQB2TBycMNoo
fVMiUWjx3ees6Fh9iPXNKTRrqJKFbXF+2Y2p4QnnKFXGi5cf9fnlXAQe3m4wJTEK
bZUFVMTUH68bYkbdNzRReZUqYyGrNC7zgcP+MIc4tLx9ewNfNl6SBRNOy2faQ8gE
UyX+/FfCm5azLvOK+K8okl22eAQOMJla/WpeR2co2Kt2ft8VLLBxuDbete73yYCM
iHJUmZ0AL9x9E19FJoGQIRzmtlK1uA8dsJIrxD0+MLVYFQFk75iRGMqu4XFI8Gcb
w6Vm+dOlyMMiP54PyV1ApvPqIAxxXrpFzU5ZdjJ2rUfJSxNrdr+uYM3Y7Ar/usgv
NUBFhbmH0V+q
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org