Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          10hJeX4yQv7XYCskZ0w5RGfXA+72URdKpXRqifwUuBY=
Subject key identifier:   9B:50:C7:B6:0C:51:F3:07:CD:32:03:78:76:19:0B:E9:E2:6E:BC:78
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       3189BC5EB71418CF853E600DD0818B45FFC5D270
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:57 +0000
ROA not before:           Mon 23 Oct 2023 12:55:57 +0000
ROA not after:            Mon 21 Oct 2024 13:00:57 +0000
asID:                     28598
IP address blocks:        177.104.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:89:bc:5e:b7:14:18:cf:85:3e:60:0d:d0:81:8b:45:ff:c5:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:57 2023 GMT
            Not After : Oct 21 13:00:57 2024 GMT
        Subject: CN=9B50C7B60C51F307CD32037876190BE9E26EBC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:90:cf:71:f2:2f:1c:89:74:a8:84:75:65:
                    b1:20:3a:18:93:87:84:60:72:1f:61:da:e8:13:15:
                    d4:c9:2a:e6:3d:83:fb:ef:b4:3b:34:74:be:bb:36:
                    f2:00:94:5f:a3:f8:fb:66:f5:88:58:b8:b4:ce:9d:
                    18:4b:62:27:f9:e0:a9:e4:86:58:00:b6:d7:35:24:
                    81:8f:59:e3:62:ed:3b:ee:42:c3:4a:e6:ef:e0:f5:
                    1b:38:28:ae:f5:ed:8a:eb:80:65:31:11:8d:ca:19:
                    df:78:4e:d3:e7:5a:68:74:23:c3:f9:18:4e:7e:68:
                    bb:91:ad:f3:a9:a9:e0:35:a2:f2:f3:0d:52:69:21:
                    25:85:ee:75:d8:45:e5:8f:5a:50:e7:5c:05:b8:8b:
                    e4:ee:9c:e1:c2:ef:b0:ea:2b:ec:e9:2f:0a:4c:d3:
                    9d:3e:6f:41:b1:48:d2:48:2d:60:66:80:8a:f9:49:
                    67:21:1a:d2:c0:19:ac:9a:05:61:a9:b1:f5:68:c6:
                    25:6c:56:22:e0:09:b8:13:da:ad:f6:1c:07:02:8b:
                    eb:fb:7b:4e:f8:cf:a5:e7:9e:70:ab:bb:6d:35:bc:
                    b2:4c:84:26:5f:c4:b7:af:18:82:58:43:44:3a:af:
                    2d:42:17:d6:e0:6c:d8:6f:f1:ec:5d:f0:43:0a:06:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:C7:B6:0C:51:F3:07:CD:32:03:78:76:19:0B:E9:E2:6E:BC:78
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:02:fd:ee:4c:49:62:df:1e:c4:33:e2:1e:16:a3:05:e8:62:
         99:cf:1f:94:d1:0a:a8:59:8c:41:37:3a:c3:61:18:1f:86:f1:
         8f:e7:dd:67:d9:f2:6a:50:7f:09:5e:e6:3d:c7:78:69:2f:74:
         4b:3f:ce:80:61:26:c0:e1:8f:f5:56:73:61:22:69:46:9a:6d:
         57:dc:ea:3f:9e:13:dc:c4:6a:60:69:41:19:78:fc:cf:8c:0f:
         b7:79:1d:9f:37:1f:7b:25:84:41:5f:62:78:fb:d4:af:87:34:
         14:36:89:61:1e:1f:9c:39:f8:b0:e2:16:ef:fb:ae:d7:9b:45:
         de:b7:eb:64:a9:77:a5:a6:f0:26:1f:3d:a3:62:6d:46:ad:2b:
         dc:cd:0a:3f:f6:a5:43:0b:f0:92:19:84:9a:f1:fd:57:5a:60:
         3e:09:6c:1c:69:78:e5:42:75:40:a5:f0:18:69:43:7a:bc:b8:
         dc:0c:71:11:c9:1b:9d:05:b8:d4:d3:0c:28:d9:2e:b2:24:80:
         93:af:ad:e6:1c:a4:39:51:3e:d1:1d:59:c8:98:fe:18:59:d4:
         ac:31:52:f7:b9:4e:a8:9d:2d:2a:cb:b7:97:ea:31:09:43:db:
         e6:d8:ef:d6:58:e6:47:58:9f:58:02:9c:55:10:b4:ff:1e:90:
         5c:68:f2:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMYm8XrcUGM+FPmAN0IGLRf/F0nAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU1NTdaFw0yNDEwMjExMzAwNTdaMDMxMTAvBgNV
BAMTKDlCNTBDN0I2MEM1MUYzMDdDRDMyMDM3ODc2MTkwQkU5RTI2RUJDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUn5DPcfIvHIl0qIR1ZbEgOhiT
h4Rgch9h2ugTFdTJKuY9g/vvtDs0dL67NvIAlF+j+Ptm9YhYuLTOnRhLYif54Knk
hlgAttc1JIGPWeNi7TvuQsNK5u/g9Rs4KK717YrrgGUxEY3KGd94TtPnWmh0I8P5
GE5+aLuRrfOpqeA1ovLzDVJpISWF7nXYReWPWlDnXAW4i+TunOHC77DqK+zpLwpM
050+b0GxSNJILWBmgIr5SWchGtLAGayaBWGpsfVoxiVsViLgCbgT2q32HAcCi+v7
e074z6XnnnCru201vLJMhCZfxLevGIJYQ0Q6ry1CF9bgbNhv8exd8EMKBvIzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm1DHtgxR8wfNMgN4dhkL6eJuvHgwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzNzM3MmUzMTMwMzQyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxaHEwDQYJKoZIhvcNAQELBQADggEBAHQC/e5M
SWLfHsQz4h4WowXoYpnPH5TRCqhZjEE3OsNhGB+G8Y/n3WfZ8mpQfwle5j3HeGkv
dEs/zoBhJsDhj/VWc2EiaUaabVfc6j+eE9zEamBpQRl4/M+MD7d5HZ83H3slhEFf
Ynj71K+HNBQ2iWEeH5w5+LDiFu/7rtebRd6362Spd6Wm8CYfPaNibUatK9zNCj/2
pUML8JIZhJrx/VdaYD4JbBxpeOVCdUCl8BhpQ3q8uNwMcRHJG50FuNTTDCjZLrIk
gJOvreYcpDlRPtEdWciY/hhZ1KwxUve5TqidLSrLt5fqMQlD2+bY79ZY5kdYn1gC
nFUQtP8ekFxo8mo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org