Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          cHdu7fPbWv/E+siVt2YsVPAKUNF43HwNZCBBnoInEiA=
Subject key identifier:   17:DB:76:67:75:3F:B8:C2:61:D9:0B:C8:76:5F:29:E1:6D:B6:3B:D1
Certificate issuer:       /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial:       57660BC2D7074D057696EA4E93C6E2A74F507210
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa
Signing time:             Mon 04 Sep 2023 19:54:55 +0000
ROA not before:           Mon 04 Sep 2023 19:49:55 +0000
ROA not after:            Mon 02 Sep 2024 19:54:55 +0000
asID:                     52873
IP address blocks:        177.128.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:0b:c2:d7:07:4d:05:76:96:ea:4e:93:c6:e2:a7:4f:50:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Validity
            Not Before: Sep  4 19:49:55 2023 GMT
            Not After : Sep  2 19:54:55 2024 GMT
        Subject: CN=17DB7667753FB8C261D90BC8765F29E16DB63BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:11:a9:ca:ed:d6:fb:f6:08:b2:93:a1:9f:
                    6e:91:16:d0:f4:57:69:dc:6a:52:33:45:e7:81:43:
                    da:1c:2a:e5:b2:54:3b:7e:9d:38:be:14:c1:a3:04:
                    e8:ae:45:a2:f7:b1:b8:20:62:08:2e:98:69:a1:bf:
                    3d:a6:39:8c:ca:86:be:bc:6e:d5:57:aa:9e:50:04:
                    59:01:69:ca:18:51:84:d7:b6:a6:2f:c1:5c:e8:64:
                    b9:30:13:8d:aa:1f:28:c1:7b:8c:ee:52:90:79:99:
                    05:76:f8:b4:0a:5f:9d:7b:88:24:56:bb:73:66:f2:
                    89:07:2a:d5:05:1d:c3:d2:31:ba:15:b4:52:4c:5d:
                    fe:43:75:f5:27:c1:a5:65:2f:bb:da:14:fd:dc:8a:
                    6b:f3:ea:39:6b:69:23:fe:47:3e:10:7e:ee:d6:d8:
                    51:fb:86:a5:97:48:dc:11:7f:be:d9:ab:09:de:de:
                    30:dc:d0:5b:99:31:18:ca:f3:c6:a5:54:20:d7:05:
                    7d:2b:c9:bb:71:4a:a1:e4:ab:21:cf:20:af:1e:1a:
                    f6:94:9c:10:df:94:64:d7:c4:a5:4d:bf:43:ac:aa:
                    ce:2b:65:58:fa:c5:13:be:11:35:44:d7:94:12:6c:
                    a3:74:5f:59:10:8c:c8:fb:2b:81:61:3e:bc:b8:9f:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:76:67:75:3F:B8:C2:61:D9:0B:C8:76:5F:29:E1:6D:B6:3B:D1
            X509v3 Authority Key Identifier:
                keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:29:79:4e:7a:78:9e:d4:68:3f:e1:3c:6b:ff:e6:df:87:
         14:c4:a4:25:88:0a:9e:79:fb:5a:75:cc:b9:a4:3f:72:eb:79:
         18:a7:16:e8:9b:90:fb:a7:24:89:93:8a:0c:4c:ee:9d:cb:0f:
         97:cc:d5:7e:08:ba:03:cf:c5:9b:97:6d:92:80:a0:c5:7a:71:
         d4:33:ab:42:33:31:47:04:b4:72:08:a1:1a:bf:c2:1a:ba:82:
         4c:be:0b:c8:2a:38:a6:23:9c:2d:22:57:72:12:0d:1c:cd:67:
         f2:d2:ea:78:d5:f2:f6:13:d5:43:a6:16:f6:e2:e7:16:a1:d7:
         eb:39:8c:f0:94:f7:55:d2:1b:04:65:a6:ed:7f:c4:de:d5:2d:
         49:69:24:e6:ec:cc:d6:6c:6b:03:b8:3b:20:c5:10:4e:dc:2d:
         89:63:4f:27:51:e2:50:60:6d:fe:ed:6f:ca:a7:ca:1e:f9:60:
         1f:bc:5b:85:f5:7e:4b:e4:2d:6a:d2:c5:dc:e4:b6:7e:32:f7:
         ff:ce:7c:63:41:b8:d0:e0:5d:20:3f:14:ae:81:4c:9e:9e:01:
         c8:b7:38:36:b2:6c:2f:b0:fb:69:0f:54:2a:db:5e:8c:00:3d:
         54:a8:3a:6e:84:f1:20:f6:11:f0:74:b8:b2:53:80:b5:16:26:
         25:2e:77:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV2YLwtcHTQV2lupOk8bip09QchAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGNUEzMUNDOEFCRDYwNDNEMzUwMzRGNEQyNzE5NDE1
NDg3RUJBMjAeFw0yMzA5MDQxOTQ5NTVaFw0yNDA5MDIxOTU0NTVaMDMxMTAvBgNV
BAMTKDE3REI3NjY3NzUzRkI4QzI2MUQ5MEJDODc2NUYyOUUxNkRCNjNCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhaxGpyu3W+/YIspOhn26RFtD0
V2ncalIzReeBQ9ocKuWyVDt+nTi+FMGjBOiuRaL3sbggYggumGmhvz2mOYzKhr68
btVXqp5QBFkBacoYUYTXtqYvwVzoZLkwE42qHyjBe4zuUpB5mQV2+LQKX517iCRW
u3Nm8okHKtUFHcPSMboVtFJMXf5DdfUnwaVlL7vaFP3cimvz6jlraSP+Rz4Qfu7W
2FH7hqWXSNwRf77Zqwne3jDc0FuZMRjK88alVCDXBX0rybtxSqHkqyHPIK8eGvaU
nBDflGTXxKVNv0Osqs4rZVj6xRO+ETVE15QSbKN0X1kQjMj7K4FhPry4n6ztAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUF9t2Z3U/uMJh2QvIdl8p4W22O9EwHwYDVR0j
BBgwFoAUvfWjHMir1gQ9NQNPTScZQVSH66IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC9CREY1QTMxQ0M4QUJENjA0M0QzNTAzNEY0RDI3MTk0MTU0ODdFQkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERjVBMzFDQzhBQkQ2MDQz
RDM1MDM0RjREMjcxOTQxNTQ4N0VCQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgNAwDQYJKoZIhvcNAQELBQADggEBAA/AKXlO
enie1Gg/4Txr/+bfhxTEpCWICp55+1p1zLmkP3LreRinFuibkPunJImTigxM7p3L
D5fM1X4IugPPxZuXbZKAoMV6cdQzq0IzMUcEtHIIoRq/whq6gky+C8gqOKYjnC0i
V3ISDRzNZ/LS6njV8vYT1UOmFvbi5xah1+s5jPCU91XSGwRlpu1/xN7VLUlpJObs
zNZsawO4OyDFEE7cLYljTydR4lBgbf7tb8qnyh75YB+8W4X1fkvkLWrSxdzktn4y
9//OfGNBuNDgXSA/FK6BTJ6eAci3ODaybC+w+2kPVCrbXowAPVSoOm6E8SD2EfB0
uLJTgLUWJiUud/A=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net