Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3234203d3e203238323736.roa
File:                     3138372e3130322e3130342e302f32322d3234203d3e203238323736.roa (raw, json)
Hash identifier:          iV5t817rnJVCOgbkEqQSNL/5JlsEZwK/ALQE8bQh7gI=
Subject key identifier:   24:A9:74:89:5E:B6:3B:5D:20:06:81:BD:2A:C9:B6:9A:58:3D:64:B6
Certificate issuer:       /CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
Certificate serial:       746ACB0C2FC808A402D888F01CDB3F7A3A01A3AB
Authority key identifier: FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3234203d3e203238323736.roa
Signing time:             Thu 15 Feb 2024 13:21:04 +0000
ROA not before:           Thu 15 Feb 2024 13:16:04 +0000
ROA not after:            Thu 13 Feb 2025 13:21:04 +0000
asID:                     28276
IP address blocks:        187.102.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6a:cb:0c:2f:c8:08:a4:02:d8:88:f0:1c:db:3f:7a:3a:01:a3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0
        Validity
            Not Before: Feb 15 13:16:04 2024 GMT
            Not After : Feb 13 13:21:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:9e:2e:b6:97:35:38:4e:06:7c:56:c6:d5:
                    f4:c3:37:16:82:6a:56:1b:39:c7:7a:0e:f0:32:55:
                    f0:0e:31:ed:8b:3a:2b:84:99:eb:ad:27:b9:10:54:
                    1d:4e:df:9b:13:be:b3:99:8b:f6:32:03:79:5c:61:
                    af:67:2b:87:8d:37:6a:26:ac:90:24:de:27:6f:dc:
                    0b:cf:d6:ef:5f:f9:a8:6e:04:fe:8e:bd:c5:b9:e5:
                    c2:25:c1:7d:bb:b5:46:29:55:a6:d1:b2:58:47:01:
                    f3:92:48:44:3e:6b:6d:70:76:57:0f:49:c8:5c:af:
                    15:0b:fc:e4:00:65:eb:21:94:27:a3:fb:7c:bd:00:
                    16:7b:67:c1:4a:73:f2:c6:c5:ab:62:db:8a:c9:16:
                    b3:04:b9:98:9d:0e:d5:c1:8c:ec:10:59:9c:33:c1:
                    90:6b:8a:36:f9:5d:f4:af:16:2b:f3:3a:7f:01:f0:
                    9a:83:32:84:96:b6:37:05:c1:c4:25:a4:7a:05:1b:
                    f6:54:66:da:82:f5:a5:6c:60:3a:46:02:8f:11:10:
                    2a:a6:f9:43:ea:08:c9:b8:e9:1e:51:d5:1b:cb:20:
                    ae:15:ba:05:10:bb:ad:8d:7c:22:a6:24:88:81:b7:
                    91:c1:9e:79:dc:92:bf:17:38:b0:bc:6e:75:61:53:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:74:89:5E:B6:3B:5D:20:06:81:BD:2A:C9:B6:9A:58:3D:64:B6
            X509v3 Authority Key Identifier:
                keyid:FE:E7:20:07:61:D5:0C:B7:C0:46:DE:EA:62:DE:B6:84:FD:FF:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEE7200761D50CB7C046DEEA62DEB684FDFF3FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130342e302f32322d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:cf:aa:68:3f:8c:bb:42:7f:3f:84:48:c0:44:b5:9a:fe:a7:
         41:98:d7:2d:c0:40:ae:cd:a1:45:f8:c6:29:61:d3:2c:07:28:
         9d:4e:28:2d:7f:c2:e6:cf:58:8e:5b:da:54:a2:62:16:dd:96:
         7e:e0:a0:aa:3b:2f:9a:27:1f:5b:41:cf:c6:47:60:31:98:f2:
         5a:83:fa:6f:38:4c:eb:78:0e:98:9e:8d:54:aa:38:17:76:91:
         c1:90:3c:7a:b2:a3:53:2c:c4:5e:95:ce:3c:c4:c8:f9:d3:ef:
         95:ba:d1:ed:5c:69:9b:f5:b4:b7:22:93:c5:bd:04:73:dc:58:
         1e:9c:ac:25:af:8a:19:fa:b3:35:1e:20:70:9f:de:03:ab:37:
         71:d0:c3:ee:06:c1:5a:33:b9:5e:fc:aa:b8:aa:fd:5b:32:51:
         e0:13:73:ff:20:09:02:28:76:f6:a5:a6:77:6b:0d:4d:74:ac:
         d7:9b:ee:6a:a9:76:29:91:f1:cd:c9:8f:12:4f:e6:ef:fc:1c:
         64:55:76:5a:5b:ae:1f:fb:b9:90:19:bd:a1:12:5f:74:f5:54:
         e8:62:52:b0:0c:32:f6:74:43:4d:f7:be:c7:06:12:59:e4:f7:
         8e:7d:a4:58:43:e0:a7:46:c3:b9:5c:ee:a0:90:ec:5a:cb:24:
         19:e0:7a:67
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdGrLDC/ICKQC2IjwHNs/ejoBo6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVFNzIwMDc2MUQ1MENCN0MwNDZERUVBNjJERUI2ODRG
REZGM0ZDMDAeFw0yNDAyMTUxMzE2MDRaFw0yNTAyMTMxMzIxMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE5QzlFMkVCNjk3MzUzODRF
MDY3QzU2QzZENUY0QzMzNzE2ODI2QTU2MUIzOUM3N0EwRUYwMzI1NUYwMEUzMUVE
OEIzQTJCODQ5OUVCQUQyN0I5MTA1NDFENEVERjlCMTNCRUIzOTk4QkY2MzIwMzc5
NUM2MUFGNjcyQjg3OEQzNzZBMjZBQzkwMjRERTI3NkZEQzBCQ0ZENkVGNUZGOUE4
NkUwNEZFOEVCREM1QjlFNUMyMjVDMTdEQkJCNTQ2Mjk1NUE2RDFCMjU4NDcwMUYz
OTI0ODQ0M0U2QjZENzA3NjU3MEY0OUM4NUNBRjE1MEJGQ0U0MDA2NUVCMjE5NDI3
QTNGQjdDQkQwMDE2N0I2N0MxNEE3M0YyQzZDNUFCNjJEQjhBQzkxNkIzMDRCOTk4
OUQwRUQ1QzE4Q0VDMTA1OTlDMzNDMTkwNkI4QTM2Rjk1REY0QUYxNjJCRjMzQTdG
MDFGMDlBODMzMjg0OTZCNjM3MDVDMUM0MjVBNDdBMDUxQkY2NTQ2NkRBODJGNUE1
NkM2MDNBNDYwMjhGMTExMDJBQTZGOTQzRUEwOEM5QjhFOTFFNTFENTFCQ0IyMEFF
MTVCQTA1MTBCQkFEOEQ3QzIyQTYyNDg4ODFCNzkxQzE5RTc5REM5MkJGMTczOEIw
QkM2RTc1NjE1M0FDQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0ZyeLraXNThOBnxWxtX0wzcWgmpWGznHeg7wMlXwDjHtizorhJnr
rSe5EFQdTt+bE76zmYv2MgN5XGGvZyuHjTdqJqyQJN4nb9wLz9bvX/mobgT+jr3F
ueXCJcF9u7VGKVWm0bJYRwHzkkhEPmttcHZXD0nIXK8VC/zkAGXrIZQno/t8vQAW
e2fBSnPyxsWrYtuKyRazBLmYnQ7VwYzsEFmcM8GQa4o2+V30rxYr8zp/AfCagzKE
lrY3BcHEJaR6BRv2VGbagvWlbGA6RgKPERAqpvlD6gjJuOkeUdUbyyCuFboFELut
jXwipiSIgbeRwZ553JK/FziwvG51YVOsswIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCSpdIletjtdIAaBvSrJtppYPWS2MB8GA1UdIwQYMBaAFP7nIAdh1Qy3wEbe6mLe
toT9/z/AMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gxZ0xyZVdMZmNMczJQ
NHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAvRkVFNzIwMDc2MUQ1MENC
N0MwNDZERUVBNjJERUI2ODRGREZGM0ZDMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRUU3MjAwNzYxRDUwQ0I3QzA0NkRFRUE2MkRFQjY4NEZERkYz
RkMwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IMWdMcmVXTGZjTHMyUDR4aWRS
TEsxNGt0Q2pXMUtVbjdoREI0QUxUcUhuOC8wLzMxMzgzNzJlMzEzMDMyMmUzMTMw
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzIzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
u2ZoMA0GCSqGSIb3DQEBCwUAA4IBAQBAz6poP4y7Qn8/hEjARLWa/qdBmNctwECu
zaFF+MYpYdMsByidTigtf8Lmz1iOW9pUomIW3ZZ+4KCqOy+aJx9bQc/GR2AxmPJa
g/pvOEzreA6Yno1UqjgXdpHBkDx6sqNTLMRelc48xMj50++VutHtXGmb9bS3IpPF
vQRz3FgenKwlr4oZ+rM1HiBwn94Dqzdx0MPuBsFaM7le/Kq4qv1bMlHgE3P/IAkC
KHb2paZ3aw1NdKzXm+5qqXYpkfHNyY8ST+bv/BxkVXZaW64f+7mQGb2hEl909VTo
YlKwDDL2dENN977HBhJZ5PeOfaRYQ+CnRsO5XO6gkOxayyQZ4Hpn
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org