Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132312e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132312e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          HmmyaR3k6mo/LURA2RF2YPi4k38P4Z7I59jj+PwVj0s=
Subject key identifier:   2C:8E:53:23:6A:D2:06:67:B8:1F:3A:05:7C:C9:B6:CD:D7:3C:F1:04
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       60220847D6FDE60EEC5650D5D4F928D2F0A34F76
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132312e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:00 +0000
ROA not before:           Mon 23 Oct 2023 12:56:00 +0000
ROA not after:            Mon 21 Oct 2024 13:01:00 +0000
asID:                     28598
IP address blocks:        177.104.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:22:08:47:d6:fd:e6:0e:ec:56:50:d5:d4:f9:28:d2:f0:a3:4f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:00 2023 GMT
            Not After : Oct 21 13:01:00 2024 GMT
        Subject: CN=2C8E53236AD20667B81F3A057CC9B6CDD73CF104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:5a:3b:9a:ca:09:0d:b1:e5:52:f7:bd:68:
                    17:7b:f8:90:7f:30:cb:ec:a4:3e:89:af:d3:5b:4d:
                    a7:43:fc:eb:d4:cb:a1:c3:a8:eb:0e:c0:56:27:b8:
                    cb:b4:9c:69:87:0e:05:b7:01:5a:22:31:5c:f2:c3:
                    66:52:d8:40:ab:40:61:ca:a3:b6:61:47:f6:82:03:
                    57:53:4e:73:97:30:76:c6:e1:9d:b8:fa:2d:16:1a:
                    3d:93:0a:29:2e:e0:17:a0:15:24:0f:09:e3:8d:35:
                    d5:0b:1c:3d:9d:16:c8:8e:82:83:97:f9:ff:3b:e0:
                    a0:33:3c:07:3c:20:c9:58:89:2f:b4:50:17:ce:07:
                    a6:90:47:6a:f2:76:d8:f1:be:93:6a:c9:71:25:ca:
                    0a:98:7f:4c:3f:2c:5e:66:92:1c:72:0d:16:a6:16:
                    2c:38:51:17:be:37:e4:43:33:48:98:0d:e5:dc:9c:
                    0e:2f:6f:4e:c8:6e:40:be:b7:41:20:52:b2:75:2f:
                    0d:0c:87:63:e8:c4:08:74:3f:d0:78:03:b5:05:02:
                    74:93:0c:dd:7b:e5:e0:d6:d5:23:5e:25:7e:48:21:
                    f8:db:fb:16:93:63:72:c5:81:96:47:6c:4b:7d:68:
                    28:a0:75:3e:99:49:ca:1e:ef:3f:76:84:4f:04:2b:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:53:23:6A:D2:06:67:B8:1F:3A:05:7C:C9:B6:CD:D7:3C:F1:04
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132312e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:15:73:0c:01:b4:b1:d8:0b:4e:a4:c1:38:40:b3:28:7a:27:
         16:33:d1:18:39:ec:45:02:15:d6:6c:08:50:75:be:f3:f6:1b:
         a8:78:ce:45:56:96:e6:de:e3:ae:dc:4b:20:0a:88:05:00:b1:
         fc:8c:cb:c5:4b:02:c5:c3:61:84:7f:00:e7:99:b2:37:61:b2:
         91:99:8b:94:85:23:b5:db:d8:18:10:d4:36:f9:64:9d:78:9b:
         84:c0:09:8f:74:9f:c5:ae:6e:eb:d2:76:02:67:09:c0:79:18:
         f5:62:8a:46:ae:36:7d:5a:42:22:11:55:33:4e:49:cc:c4:32:
         77:73:49:0a:aa:6d:ab:bc:50:99:fe:f0:20:e9:23:74:79:d1:
         9d:e6:23:e1:7c:23:4d:ce:d8:e0:97:cd:12:e1:67:4b:f0:04:
         72:51:c3:cc:e6:7f:f9:15:8e:0d:bb:db:98:50:40:30:4c:f8:
         21:d0:c4:57:f1:1e:16:cd:83:93:66:ec:6b:8d:95:e7:30:82:
         b3:61:09:68:07:d4:83:4c:a5:40:33:a9:3c:92:48:36:8d:c5:
         57:bb:13:db:77:e7:6f:01:08:e6:b8:e1:d6:1f:a8:54:15:8e:
         d1:1a:f7:ef:27:73:94:01:cc:7e:24:86:18:4a:d9:36:d0:73:
         21:5e:f0:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYCIIR9b95g7sVlDV1Pko0vCjT3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU2MDBaFw0yNDEwMjExMzAxMDBaMDMxMTAvBgNV
BAMTKDJDOEU1MzIzNkFEMjA2NjdCODFGM0EwNTdDQzlCNkNERDczQ0YxMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTFo7msoJDbHlUve9aBd7+JB/
MMvspD6Jr9NbTadD/OvUy6HDqOsOwFYnuMu0nGmHDgW3AVoiMVzyw2ZS2ECrQGHK
o7ZhR/aCA1dTTnOXMHbG4Z24+i0WGj2TCiku4BegFSQPCeONNdULHD2dFsiOgoOX
+f874KAzPAc8IMlYiS+0UBfOB6aQR2rydtjxvpNqyXElygqYf0w/LF5mkhxyDRam
Fiw4URe+N+RDM0iYDeXcnA4vb07IbkC+t0EgUrJ1Lw0Mh2PoxAh0P9B4A7UFAnST
DN175eDW1SNeJX5IIfjb+xaTY3LFgZZHbEt9aCigdT6ZScoe7z92hE8EK8ofAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULI5TI2rSBme4HzoFfMm2zdc88QQwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzNzM3MmUzMTMwMzQyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxaHkwDQYJKoZIhvcNAQELBQADggEBAJsVcwwB
tLHYC06kwThAsyh6JxYz0Rg57EUCFdZsCFB1vvP2G6h4zkVWlube467cSyAKiAUA
sfyMy8VLAsXDYYR/AOeZsjdhspGZi5SFI7Xb2BgQ1Db5ZJ14m4TACY90n8WubuvS
dgJnCcB5GPViikauNn1aQiIRVTNOSczEMndzSQqqbau8UJn+8CDpI3R50Z3mI+F8
I03O2OCXzRLhZ0vwBHJRw8zmf/kVjg2725hQQDBM+CHQxFfxHhbNg5Nm7GuNlecw
grNhCWgH1INMpUAzqTySSDaNxVe7E9t3528BCOa44dYfqFQVjtEa9+8nc5QBzH4k
hhhK2TbQcyFe8O0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org