Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32342d3234203d3e20323633303835.roa
File:                     3138362e3233332e3231362e302f32342d3234203d3e20323633303835.roa (raw, json)
Hash identifier:          UX566S2arWjtdPCfqMwqG3uMMoa7uG6zgaYUdeB/Cic=
Subject key identifier:   03:33:E8:F8:45:30:78:60:25:C2:07:45:85:AA:94:1A:52:AC:C4:F6
Certificate issuer:       /CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
Certificate serial:       7A8A1A9D8EAEC2FBDA05F976BFB614E5F5F9567C
Authority key identifier: 58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32342d3234203d3e20323633303835.roa
Signing time:             Wed 04 Oct 2023 14:31:14 +0000
ROA not before:           Wed 04 Oct 2023 14:26:14 +0000
ROA not after:            Wed 02 Oct 2024 14:31:14 +0000
asID:                     263085
IP address blocks:        186.233.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:1a:9d:8e:ae:c2:fb:da:05:f9:76:bf:b6:14:e5:f5:f9:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
        Validity
            Not Before: Oct  4 14:26:14 2023 GMT
            Not After : Oct  2 14:31:14 2024 GMT
        Subject: CN=0333E8F84530786025C2074585AA941A52ACC4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:61:07:1c:19:4e:2f:df:9e:24:44:e8:56:
                    89:58:17:5a:fd:f9:04:6b:1f:c3:ce:24:8c:e2:f8:
                    fa:51:d7:73:83:c7:ee:cc:e6:4e:4a:70:d5:56:df:
                    a6:c7:eb:0d:d9:34:76:34:57:a4:03:b0:7e:75:9d:
                    07:e9:25:67:8e:6c:e3:61:e5:9c:f8:26:9f:09:62:
                    a2:ab:7f:6d:3c:57:95:3a:bf:b4:69:55:e6:33:f0:
                    f5:b6:86:bf:0b:4e:2e:d7:43:f3:93:3f:43:2d:99:
                    42:26:c8:f6:eb:7c:a0:bb:2e:89:e4:ad:90:0e:97:
                    21:1d:1d:0d:af:b1:74:4c:7c:12:e0:71:68:1d:cf:
                    55:8c:81:f1:25:8f:30:94:23:04:99:2e:ba:5d:9b:
                    35:9e:8e:a0:fa:94:04:e0:28:99:e6:c3:f0:aa:81:
                    9b:52:2e:da:de:38:c1:8f:09:27:a6:7c:1f:f2:b9:
                    5b:d0:c4:20:d0:cf:62:e4:98:09:87:1e:7e:1e:ed:
                    22:b9:47:4f:75:5c:ed:a6:9f:1a:33:1e:91:2b:41:
                    72:ee:3d:c0:d0:91:df:a0:f0:e4:6f:c2:9e:42:62:
                    bd:61:a1:c5:b4:35:f0:46:c4:29:6d:bc:d6:df:84:
                    e6:8d:ee:17:96:ee:a0:bf:f4:8b:15:29:37:8c:a2:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:33:E8:F8:45:30:78:60:25:C2:07:45:85:AA:94:1A:52:AC:C4:F6
            X509v3 Authority Key Identifier:
                keyid:58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3138362e3233332e3231362e302f32342d3234203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:04:62:d4:87:3f:83:40:c3:83:79:c1:71:fb:32:8a:d6:
         f9:19:fd:1f:72:d0:5a:04:2a:ae:86:e9:7b:64:62:d1:1a:ff:
         d2:a0:7f:99:eb:36:44:58:c3:c1:ed:c4:d0:e0:f2:81:93:03:
         6a:86:e8:57:02:db:6b:d6:05:56:9e:fb:7a:95:ae:1d:fa:5d:
         41:44:98:b3:12:cd:10:b2:b5:e5:53:28:78:c0:94:97:c2:15:
         9d:cc:d9:f4:24:1e:59:75:eb:db:5f:c7:d9:65:4c:53:28:f2:
         cc:47:5f:13:b2:28:d6:63:d2:0b:3e:22:1e:c9:ba:74:a5:b0:
         58:e9:fd:39:52:cf:8d:96:76:97:04:c8:ea:bc:dd:72:fc:86:
         e1:50:dd:70:df:3a:0a:2e:7d:93:18:77:37:a4:29:9b:6c:9a:
         4a:72:37:94:61:ea:d9:6c:ac:b1:73:9d:a8:ab:ef:a9:81:fe:
         ac:a5:c5:fb:db:5c:3e:19:d8:76:e4:88:b3:58:8c:44:be:8b:
         a7:43:ad:8a:09:7e:24:b2:a8:ce:fb:7e:b5:1d:8c:df:34:d0:
         a1:aa:5a:18:6a:53:a7:61:fc:74:f2:df:93:32:83:89:5b:f7:
         e9:fe:ac:bd:00:51:d8:f1:5e:3b:c0:1c:49:88:65:a7:ca:ee:
         90:be:9f:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeooanY6uwvvaBfl2v7YU5fX5VnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThDODdCMkExRDg3NkFCNDc1QUE0NzdEM0I5REU0RjM1
MEVBQzVGRDAeFw0yMzEwMDQxNDI2MTRaFw0yNDEwMDIxNDMxMTRaMDMxMTAvBgNV
BAMTKDAzMzNFOEY4NDUzMDc4NjAyNUMyMDc0NTg1QUE5NDFBNTJBQ0M0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLWEHHBlOL9+eJEToVolYF1r9
+QRrH8POJIzi+PpR13ODx+7M5k5KcNVW36bH6w3ZNHY0V6QDsH51nQfpJWeObONh
5Zz4Jp8JYqKrf208V5U6v7RpVeYz8PW2hr8LTi7XQ/OTP0MtmUImyPbrfKC7Lonk
rZAOlyEdHQ2vsXRMfBLgcWgdz1WMgfEljzCUIwSZLrpdmzWejqD6lATgKJnmw/Cq
gZtSLtreOMGPCSemfB/yuVvQxCDQz2LkmAmHHn4e7SK5R091XO2mnxozHpErQXLu
PcDQkd+g8ORvwp5CYr1hocW0NfBGxCltvNbfhOaN7heW7qC/9IsVKTeMomx/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAzPo+EUweGAlwgdFhaqUGlKsxPYwHwYDVR0j
BBgwFoAUWMh7Kh2HarR1qkd9O53k81Dqxf0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ
LzAvNThDODdCMkExRDg3NkFCNDc1QUE0NzdEM0I5REU0RjM1MEVBQzVGRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81OEM4N0IyQTFEODc2QUI0NzVB
QTQ3N0QzQjlERTRGMzUwRUFDNUZELmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
U3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZLzAvMzEz
ODM2MmUzMjMzMzMyZTMyMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALrp2DANBgkqhkiG9w0BAQsFAAOCAQEAF/gEYtSH
P4NAw4N5wXH7MorW+Rn9H3LQWgQqrobpe2Ri0Rr/0qB/mes2RFjDwe3E0ODygZMD
aoboVwLba9YFVp77epWuHfpdQUSYsxLNELK15VMoeMCUl8IVnczZ9CQeWXXr21/H
2WVMUyjyzEdfE7Io1mPSCz4iHsm6dKWwWOn9OVLPjZZ2lwTI6rzdcvyG4VDdcN86
Ci59kxh3N6Qpm2yaSnI3lGHq2WyssXOdqKvvqYH+rKXF+9tcPhnYduSIs1iMRL6L
p0Otigl+JLKozvt+tR2M3zTQoapaGGpTp2H8dPLfkzKDiVv36f6svQBR2PFeO8Ac
SYhlp8rukL6f1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org