Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          IYxq6xPkvrcn5WdLXLZxt9YqIKEgs2OcVoznQKGDv2Q=
Subject key identifier:   2A:09:7D:DB:23:03:78:59:39:C8:D4:51:42:73:08:F0:8F:7A:9B:61
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       210F7B48E2DBD610C8F3E73B9CCFBCB810222E7B
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:13 +0000
ROA not before:           Tue 30 Aug 2022 17:05:13 +0000
ROA not after:            Tue 29 Aug 2023 17:10:13 +0000
asID:                     28598
IP address blocks:        177.104.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:7b:48:e2:db:d6:10:c8:f3:e7:3b:9c:cf:bc:b8:10:22:2e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:13 2022 GMT
            Not After : Aug 29 17:10:13 2023 GMT
        Subject: CN=2A097DDB2303785939C8D451427308F08F7A9B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:16:ab:cc:68:04:a2:6e:da:2d:04:be:85:
                    aa:52:12:e5:1b:5b:69:f4:64:b3:48:c4:48:f1:b6:
                    b7:ff:d6:fa:7b:e5:2c:e2:35:dd:2e:50:66:06:38:
                    c9:5b:da:aa:4b:f0:e2:cb:dd:f6:40:0a:be:43:71:
                    80:a9:e9:10:e9:78:68:e1:ca:1a:a8:4c:ff:52:22:
                    fd:44:d0:02:ac:80:9d:6f:45:cf:cd:77:fd:cf:73:
                    4f:54:bc:8b:39:32:13:e7:18:f1:93:c2:ea:9b:c8:
                    c5:c9:bf:99:45:24:15:7c:27:67:d8:90:c2:a1:34:
                    e7:79:f2:47:df:ef:8e:75:dc:6b:99:06:1a:08:eb:
                    07:0c:c2:f8:f8:db:c8:e3:10:c2:ec:23:1c:ad:12:
                    60:77:8f:ad:bf:aa:89:3c:95:b0:98:b4:3e:79:69:
                    19:d6:88:95:17:af:10:e4:06:f0:6f:e6:0e:c2:f3:
                    d3:04:c6:f2:7c:71:0a:aa:a8:45:02:58:7e:73:38:
                    a5:36:0c:b1:8c:44:f8:a0:80:57:fb:a2:ae:ad:80:
                    90:38:fd:ab:d6:14:f2:a5:0f:1b:e7:c6:e6:e7:c9:
                    9d:cf:de:96:d6:eb:05:92:b2:6a:b0:24:c3:1f:b5:
                    03:0e:cf:df:73:73:3f:00:18:81:28:03:be:fb:11:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:7D:DB:23:03:78:59:39:C8:D4:51:42:73:08:F0:8F:7A:9B:61
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:9e:7c:3f:5e:e3:04:b0:64:08:0d:0a:8e:9e:56:46:ca:
         56:f8:23:bd:cb:ea:ef:2d:cd:8b:18:39:fc:cb:4d:3b:b8:51:
         fd:0b:1d:d5:a8:46:8b:f8:1d:54:5f:2f:54:58:77:f7:0c:78:
         fa:b4:8a:f4:94:06:e4:3f:01:3e:50:ad:cf:62:8f:c4:26:80:
         3d:7a:91:a5:52:88:c5:ca:18:9d:00:00:b3:a8:95:1e:38:12:
         10:53:6b:3a:33:2a:b9:81:1d:db:e7:d8:52:3d:dd:51:42:02:
         24:49:4a:6f:b1:77:1c:41:bf:f9:87:d6:a9:80:fc:d8:59:8a:
         2e:f4:73:6d:d4:69:08:62:2e:1f:31:45:9c:84:33:04:b0:f3:
         e3:bc:31:e2:b7:ee:64:2f:a8:72:30:93:da:2a:97:ab:94:f3:
         0e:d7:dd:86:fe:3d:35:5e:d3:ca:e7:6b:7f:ba:cb:87:ff:92:
         ce:72:98:af:d2:b9:cf:8a:65:6d:1c:90:a4:c0:7a:f1:79:07:
         a5:54:36:cd:97:2f:cb:ea:78:f6:5f:e0:ed:ae:a2:5b:76:12:
         dc:90:26:9f:7c:61:c5:ad:73:85:9f:9c:16:38:a0:4b:cb:f8:
         52:e3:d2:73:44:7b:40:56:9e:8b:39:c0:d4:7b:16:32:fc:04:
         21:b1:2d:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIQ97SOLb1hDI8+c7nM+8uBAiLnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEODhCNjI4NUUzMUI3NTBCNjJFMjE5MUMwQTZGMTY0
NUY3NTBEMTAeFw0yMjA4MzAxNzA1MTNaFw0yMzA4MjkxNzEwMTNaMDMxMTAvBgNV
BAMTKDJBMDk3RERCMjMwMzc4NTkzOUM4RDQ1MTQyNzMwOEYwOEY3QTlCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3BarzGgEom7aLQS+hapSEuUb
W2n0ZLNIxEjxtrf/1vp75SziNd0uUGYGOMlb2qpL8OLL3fZACr5DcYCp6RDpeGjh
yhqoTP9SIv1E0AKsgJ1vRc/Nd/3Pc09UvIs5MhPnGPGTwuqbyMXJv5lFJBV8J2fY
kMKhNOd58kff74513GuZBhoI6wcMwvj428jjEMLsIxytEmB3j62/qok8lbCYtD55
aRnWiJUXrxDkBvBv5g7C89MExvJ8cQqqqEUCWH5zOKU2DLGMRPiggFf7oq6tgJA4
/avWFPKlDxvnxubnyZ3P3pbW6wWSsmqwJMMftQMOz99zcz8AGIEoA777EbkvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKgl92yMDeFk5yNRRQnMI8I96m2EwHwYDVR0j
BBgwFoAUP9iLYoXjG3ULYuIZHApvFkX3UNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMC8zRkQ4OEI2Mjg1RTMxQjc1MEI2MkUyMTkxQzBBNkYxNjQ1Rjc1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRDg4QjYyODVFMzFCNzUw
QjYyRTIxOTFDMEE2RjE2NDVGNzUwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzAv
MzEzNzM3MmUzMTMwMzQyZTMxMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxaH4wDQYJKoZIhvcNAQELBQADggEBAAOtnnw/
XuMEsGQIDQqOnlZGylb4I73L6u8tzYsYOfzLTTu4Uf0LHdWoRov4HVRfL1RYd/cM
ePq0ivSUBuQ/AT5Qrc9ij8QmgD16kaVSiMXKGJ0AALOolR44EhBTazozKrmBHdvn
2FI93VFCAiRJSm+xdxxBv/mH1qmA/NhZii70c23UaQhiLh8xRZyEMwSw8+O8MeK3
7mQvqHIwk9oql6uU8w7X3Yb+PTVe08rna3+6y4f/ks5ymK/Suc+KZW0ckKTAevF5
B6VUNs2XL8vqePZf4O2uolt2EtyQJp98YcWtc4WfnBY4oEvL+FLj0nNEe0BWnos5
wNR7FjL8BCGxLUA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org