Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa (raw, json)
Hash identifier:          a7f74PT1T29BI8csZ3VqW7tVRAZ8Uf2uCGj2opsgeP4=
Subject key identifier:   76:C3:25:20:23:18:9E:E3:30:5E:73:B1:86:D9:4D:2E:26:A0:5F:09
Certificate issuer:       /CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
Certificate serial:       2C8F7F9E36BD84C197FB3620F8A7A11966320464
Authority key identifier: B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
Signing time:             Sat 04 Sep 2021 17:40:00 +0000
ROA not before:           Sat 04 Sep 2021 17:35:00 +0000
ROA not after:            Sat 03 Sep 2022 17:40:00 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8f:7f:9e:36:bd:84:c1:97:fb:36:20:f8:a7:a1:19:66:32:04:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D59FAAE8519CF77C8C40B65815F04384ACE81B
        Validity
            Not Before: Sep  4 17:35:00 2021 GMT
            Not After : Sep  3 17:40:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:b5:ca:82:b5:3e:00:c8:73:f1:2d:b7:c4:
                    c5:3f:eb:d3:04:c6:74:60:d0:9e:75:a9:4f:e2:85:
                    de:52:f2:54:da:1d:14:71:b3:78:27:11:84:e1:33:
                    d7:73:72:74:f9:b9:89:2a:35:88:ec:7c:c8:ac:71:
                    64:77:2c:ca:49:79:e9:0e:4e:d4:ef:e9:d3:71:38:
                    1b:ec:b8:32:b2:d7:c3:42:f6:bc:ef:98:b7:c4:6f:
                    ce:4b:eb:57:5c:a9:ec:92:f5:c5:06:e5:a1:fa:65:
                    52:18:86:d3:75:b8:fd:4a:1b:b3:a0:07:f6:48:3e:
                    dc:78:3b:7b:27:46:12:c5:f4:db:36:ae:72:02:cc:
                    2c:7f:41:ea:c4:31:d8:fc:c4:b7:93:13:35:79:45:
                    39:36:3b:ec:9e:4a:15:9e:d4:77:47:8f:54:0d:84:
                    93:ce:1d:dd:2a:b7:27:5d:05:94:5f:b8:36:05:67:
                    db:73:cd:86:92:06:36:ff:32:5d:03:78:b7:10:64:
                    08:d7:a1:97:ae:9e:97:d0:82:5d:40:00:68:4c:8d:
                    82:34:fe:1d:3d:da:11:4c:fe:ef:2d:80:86:7b:01:
                    7d:76:f1:cc:82:9e:3b:63:0c:83:2f:5c:6d:04:45:
                    0c:0a:4e:86:68:41:d2:10:8e:da:2f:ed:73:7c:89:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:25:20:23:18:9E:E3:30:5E:73:B1:86:D9:4D:2E:26:A0:5F:09
            X509v3 Authority Key Identifier:
                keyid:B5:D5:9F:AA:E8:51:9C:F7:7C:8C:40:B6:58:15:F0:43:84:AC:E8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5D59FAAE8519CF77C8C40B65815F04384ACE81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NSsj5PwbcvjYBCnXP9ffQS472T9dtWC6qusfpBd9sVi/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:fa:05:0f:b1:82:dd:79:2e:f7:07:74:ba:5a:9f:2a:d8:
         e2:dd:e9:05:6d:22:39:05:37:71:03:71:9b:58:4d:90:76:0e:
         da:76:c5:ed:9b:12:40:00:1f:b8:2f:4a:6f:ad:82:ab:ec:74:
         93:ec:ee:66:9e:19:2b:eb:fe:e3:69:dd:28:57:74:7b:3d:17:
         fc:fe:07:53:69:a3:46:36:8f:dd:ab:74:75:23:12:b1:33:f0:
         23:6b:e5:26:f4:e3:85:b9:18:df:d2:90:bc:8e:63:23:e1:fc:
         9e:a3:07:28:2a:31:80:38:a0:a1:3f:c5:07:13:4e:a2:f7:47:
         ed:ac:e2:70:e6:be:d1:39:b3:fc:11:27:27:2f:e0:6d:43:6c:
         9e:e1:aa:6f:a8:4d:82:93:d0:ec:cc:5c:cd:57:e1:6d:a0:03:
         a2:8a:6e:52:f2:05:99:8a:9a:58:df:0e:fb:74:66:d2:54:66:
         de:d2:fa:a6:71:c0:9a:e3:ae:72:8e:27:b7:36:87:6f:a4:92:
         81:7d:9a:9d:48:a9:d6:b7:2c:3a:c8:ac:37:07:af:b3:e4:a1:
         97:ac:d3:f9:d4:18:4f:b4:de:eb:b0:c4:03:1c:dc:b6:e7:e1:
         01:8f:0d:c7:3d:8c:e4:d5:64:79:0a:69:13:cf:b1:c1:94:e1:
         3c:37:23:de
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIULI9/nja9hMGX+zYg+KehGWYyBGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVENTlGQUFFODUxOUNGNzdDOEM0MEI2NTgxNUYwNDM4
NEFDRTgxQjAeFw0yMTA5MDQxNzM1MDBaFw0yMjA5MDMxNzQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM5Q0I1Q0E4MkI1M0UwMEM4
NzNGMTJEQjdDNEM1M0ZFQkQzMDRDNjc0NjBEMDlFNzVBOTRGRTI4NURFNTJGMjU0
REExRDE0NzFCMzc4MjcxMTg0RTEzM0Q3NzM3Mjc0RjlCOTg5MkEzNTg4RUM3Q0M4
QUM3MTY0NzcyQ0NBNDk3OUU5MEU0RUQ0RUZFOUQzNzEzODFCRUNCODMyQjJEN0Mz
NDJGNkJDRUY5OEI3QzQ2RkNFNEJFQjU3NUNBOUVDOTJGNUM1MDZFNUExRkE2NTUy
MTg4NkQzNzVCOEZENEExQkIzQTAwN0Y2NDgzRURDNzgzQjdCMjc0NjEyQzVGNERC
MzZBRTcyMDJDQzJDN0Y0MUVBQzQzMUQ4RkNDNEI3OTMxMzM1Nzk0NTM5MzYzQkVD
OUU0QTE1OUVENDc3NDc4RjU0MEQ4NDkzQ0UxREREMkFCNzI3NUQwNTk0NUZCODM2
MDU2N0RCNzNDRDg2OTIwNjM2RkYzMjVEMDM3OEI3MTA2NDA4RDdBMTk3QUU5RTk3
RDA4MjVENDAwMDY4NEM4RDgyMzRGRTFEM0REQTExNENGRUVGMkQ4MDg2N0IwMTdE
NzZGMUNDODI5RTNCNjMwQzgzMkY1QzZEMDQ0NTBDMEE0RTg2Njg0MUQyMTA4RURB
MkZFRDczN0M4OTg2NjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw5y1yoK1PgDIc/Ett8TFP+vTBMZ0YNCedalP4oXeUvJU2h0UcbN4
JxGE4TPXc3J0+bmJKjWI7HzIrHFkdyzKSXnpDk7U7+nTcTgb7LgystfDQva875i3
xG/OS+tXXKnskvXFBuWh+mVSGIbTdbj9ShuzoAf2SD7ceDt7J0YSxfTbNq5yAsws
f0HqxDHY/MS3kxM1eUU5NjvsnkoVntR3R49UDYSTzh3dKrcnXQWUX7g2BWfbc82G
kgY2/zJdA3i3EGQI16GXrp6X0IJdQABoTI2CNP4dPdoRTP7vLYCGewF9dvHMgp47
YwyDL1xtBEUMCk6GaEHSEI7aL+1zfImGZwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FHbDJSAjGJ7jMF5zsYbZTS4moF8JMB8GA1UdIwQYMBaAFLXVn6roUZz3fIxAtlgV
8EOErOgbMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTlNzajVQd2JjdmpZQkNu
WFA5ZmZRUzQ3MlQ5ZHRXQzZxdXNmcEJkOXNWaS8wL0I1RDU5RkFBRTg1MTlDRjc3
QzhDNDBCNjU4MTVGMDQzODRBQ0U4MUIuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvQjVENTlGQUFFODUxOUNGNzdDOEM0MEI2NTgxNUYwNDM4NEFDRTgx
Qi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTlNzajVQd2JjdmpZQkNuWFA5ZmZR
UzQ3MlQ5ZHRXQzZxdXNmcEJkOXNWaS8wLzMxMzQzMzJlMzIzMDM4MmUzMTMzMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzczNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj9CI
MA0GCSqGSIb3DQEBCwUAA4IBAQBYHfoFD7GC3Xku9wd0ulqfKtji3ekFbSI5BTdx
A3GbWE2Qdg7adsXtmxJAAB+4L0pvrYKr7HST7O5mnhkr6/7jad0oV3R7PRf8/gdT
aaNGNo/dq3R1IxKxM/Aja+Um9OOFuRjf0pC8jmMj4fyeowcoKjGAOKChP8UHE06i
90ftrOJw5r7RObP8EScnL+BtQ2ye4apvqE2Ck9DszFzNV+FtoAOiim5S8gWZippY
3w77dGbSVGbe0vqmccCa465yjie3NodvpJKBfZqdSKnWtyw6yKw3B6+z5KGXrNP5
1BhPtN7rsMQDHNy25+EBjw3HPYzk1WR5CmkTz7HBlOE8NyPe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org