Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32322d3232203d3e20323632383732.roa
File:                     3137372e31312e36382e302f32322d3232203d3e20323632383732.roa (raw, json)
Hash identifier:          F2BV+DAHQIFDYCUx4tIPj3bgMcPoM5pWJ4BWX6gl5AI=
Subject key identifier:   F8:B0:45:81:F1:63:86:1B:96:10:9A:88:97:56:25:E7:80:45:51:DB
Certificate issuer:       /CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
Certificate serial:       08E9058BD79B205177C11AF8F600EF805317C10E
Authority key identifier: 58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32322d3232203d3e20323632383732.roa
Signing time:             Sat 07 Jan 2023 11:25:34 +0000
ROA not before:           Sat 07 Jan 2023 11:20:34 +0000
ROA not after:            Sat 06 Jan 2024 11:25:34 +0000
asID:                     262872
IP address blocks:        177.11.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e9:05:8b:d7:9b:20:51:77:c1:1a:f8:f6:00:ef:80:53:17:c1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
        Validity
            Not Before: Jan  7 11:20:34 2023 GMT
            Not After : Jan  6 11:25:34 2024 GMT
        Subject: CN=F8B04581F163861B96109A88975625E7804551DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:34:79:d9:2e:28:d8:12:e2:60:3a:f1:1a:
                    5a:13:53:12:d0:12:5c:b0:8b:77:61:48:a4:26:8f:
                    d5:b1:1d:a7:6f:e7:2e:c5:fe:fb:8b:1a:b9:0d:a2:
                    15:6f:88:b8:f2:6e:6d:6e:95:fb:77:fa:c6:aa:22:
                    f0:8d:50:fe:8c:76:62:b5:fa:ca:3e:a8:12:b3:5b:
                    17:a4:ac:f3:ef:a7:03:22:21:f4:74:d0:9c:59:c0:
                    64:57:a8:31:73:94:ed:96:e3:a4:db:c2:80:92:32:
                    47:73:63:24:96:4d:fa:53:e2:2f:6b:79:69:72:2b:
                    41:76:52:23:48:c4:be:08:3f:1d:fd:4f:22:bb:0b:
                    93:2b:f3:0b:7b:f1:2c:e0:56:b6:6d:48:b8:a2:bf:
                    5e:15:a4:f7:1a:2f:d7:eb:53:f7:cf:9b:0f:1f:57:
                    8e:3c:3b:20:42:f0:5c:d1:36:01:6a:04:eb:01:58:
                    eb:6a:02:17:d2:b0:54:9b:ae:24:89:76:67:31:40:
                    81:32:73:98:54:9c:13:8e:a6:9a:9f:b2:a3:3e:02:
                    28:e2:2e:c7:08:7b:ca:73:c6:49:27:e6:ab:7b:f3:
                    f0:cd:09:18:d3:ef:a7:10:2e:dd:1f:71:43:e7:90:
                    ad:45:7a:f1:c6:fc:b0:43:fe:bb:c0:47:93:22:e4:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:45:81:F1:63:86:1B:96:10:9A:88:97:56:25:E7:80:45:51:DB
            X509v3 Authority Key Identifier:
                keyid:58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32322d3232203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:d0:cd:63:12:f1:b4:8b:b4:de:2c:82:28:7f:42:bc:1e:
         59:e2:2a:fa:0e:7d:ac:c6:2c:90:fd:db:72:94:fe:5a:52:bc:
         73:23:eb:22:3e:12:6e:8f:07:05:47:8c:47:de:db:62:06:fe:
         c4:93:07:31:7a:0f:d6:25:e8:4f:81:17:f6:51:b3:67:6b:06:
         b3:f3:c4:94:46:37:94:3a:7f:99:b8:c3:5b:65:31:f7:4c:32:
         b6:ec:66:8e:3a:ce:7d:54:fb:c5:b7:5e:8c:4c:6d:91:88:eb:
         a8:42:e1:06:f2:33:4d:29:02:85:05:58:27:cb:d6:18:e2:50:
         36:b2:74:e7:ed:eb:2b:b7:4c:0c:56:34:d2:01:d3:88:6a:53:
         4c:5c:5f:1f:3a:b5:74:d5:53:07:1b:67:31:29:95:78:ee:7c:
         dd:5d:5f:6c:71:23:fb:df:a2:06:86:65:58:af:05:e9:a8:3d:
         27:3a:e0:a7:69:95:f6:e5:2b:07:b8:cf:21:fa:a5:64:24:9d:
         43:fd:c1:b3:3b:70:16:ea:c5:89:64:ee:ff:df:17:81:5d:24:
         16:51:57:ee:f1:a5:57:d7:56:af:7b:9f:13:4b:53:9f:95:58:
         fa:81:fc:1d:e9:55:5f:84:e5:e1:00:f6:a9:86:02:d4:79:4d:
         26:87:3a:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCOkFi9ebIFF3wRr49gDvgFMXwQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgzQzUzREZEREFCM0VCMDUxMzEzRTU4RTVCODJFRTg1
NEI5NjFDNzAeFw0yMzAxMDcxMTIwMzRaFw0yNDAxMDYxMTI1MzRaMDMxMTAvBgNV
BAMTKEY4QjA0NTgxRjE2Mzg2MUI5NjEwOUE4ODk3NTYyNUU3ODA0NTUxREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyjR52S4o2BLiYDrxGloTUxLQ
Elywi3dhSKQmj9WxHadv5y7F/vuLGrkNohVviLjybm1ulft3+saqIvCNUP6MdmK1
+so+qBKzWxekrPPvpwMiIfR00JxZwGRXqDFzlO2W46TbwoCSMkdzYySWTfpT4i9r
eWlyK0F2UiNIxL4IPx39TyK7C5Mr8wt78SzgVrZtSLiiv14VpPcaL9frU/fPmw8f
V448OyBC8FzRNgFqBOsBWOtqAhfSsFSbriSJdmcxQIEyc5hUnBOOppqfsqM+Aiji
LscIe8pzxkkn5qt78/DNCRjT76cQLt0fcUPnkK1FevHG/LBD/rvAR5Mi5IQbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+LBFgfFjhhuWEJqIl1Yl54BFUdswHwYDVR0j
BBgwFoAUWDxT392rPrBRMT5Y5bgu6FS5YccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVRc0VyRlU0c050RzZpSnhoWnl4MWRqNDJzMWhrY1VDRzhzZ01rNnN3
UE0vMC81ODNDNTNERkREQUIzRUIwNTEzMTNFNThFNUI4MkVFODU0Qjk2MUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4M0M1M0RGRERBQjNFQjA1
MTMxM0U1OEU1QjgyRUU4NTRCOTYxQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1UXNFckZVNHNOdEc2aUp4aFp5eDFkajQyczFoa2NVQ0c4c2dNazZzd1BNLzAv
MzEzNzM3MmUzMTMxMmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQtEMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9tDNYxLx
tIu03iyCKH9CvB5Z4ir6Dn2sxiyQ/dtylP5aUrxzI+siPhJujwcFR4xH3ttiBv7E
kwcxeg/WJehPgRf2UbNnawaz88SURjeUOn+ZuMNbZTH3TDK27GaOOs59VPvFt16M
TG2RiOuoQuEG8jNNKQKFBVgny9YY4lA2snTn7esrt0wMVjTSAdOIalNMXF8fOrV0
1VMHG2cxKZV47nzdXV9scSP736IGhmVYrwXpqD0nOuCnaZX25SsHuM8h+qVkJJ1D
/cGzO3AW6sWJZO7/3xeBXSQWUVfu8aVX11ave58TS1OflVj6gfwd6VVfhOXhAPap
hgLUeU0mhzrF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org